CVEs published July 19, 2014
20 CVEs were published on July 19, 2014: 0 critical, 0 high.
- Published
- 20
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 20
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Advantech WebAccess
- 5
Medium, low and unrated 20
- CVE-2014-4331Cross-site scripting (XSS) vulnerability in admin/viewer.php in OctavoCMS allows remote attackers to inject arbitrary web script or HTML via
- CVE-2012-2682Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a deni
- CVE-2014-2519The default configuration of EMC RecoverPoint Appliance (RPA) 4.1 before 4.1.0.1 does not enable a firewall, which allows remote attackers t
- CVE-2014-3325Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Customer Voice Portal (CVP) allow remote attackers to inject arbitrary
- CVE-2014-3532dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service
- CVE-2014-3533dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of craft
- CVE-2014-4943The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-stru
- CVE-2013-4273The Entity API module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to node comments, which allows remote authenticate
- CVE-2013-7391The Entity API module 7.x-1.x before 7.x-1.2 for Drupal, when using the (a) Views field or (b) area plugins, allows remote attackers to read
- CVE-2014-0967Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x
- CVE-2014-0968Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x
- CVE-2014-0970The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data
- CVE-2014-2364Advantech WebAccess Stack-Based Buffer OverflowAdvantech WebAccess
- CVE-2014-2365Advantech WebAccess Improper Access ControlAdvantech WebAccess
- CVE-2014-2366Advantech WebAccess Cleartext Storage of Sensitive Information in MemoryAdvantech WebAccess
- CVE-2014-2367Advantech WebAccess Authentication Bypass IssuesAdvantech WebAccess
- CVE-2014-2368Advantech WebAccess Unsafe ActiveX Control Marked Safe For ScriptingAdvantech WebAccess
- CVE-2014-3043IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.3 allows remote authenticated users to gain privileges by leveraging access to the s
- CVE-2014-3045IBM Scale Out Network Attached Storage (SONAS) 1.3.x and 1.4.x before 1.4.3.3 places an administrative password in the shell history upon us
- CVE-2014-3064The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data