# CVEs published 2014-07-19

20 CVEs were published on July 19, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-4331](https://cve.now/CVE-2014-4331.md): Cross-site scripting (XSS) vulnerability in admin/viewer.php in OctavoCMS allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2012-2682](https://cve.now/CVE-2012-2682.md): Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a deni (no CVSS)
- [CVE-2014-2519](https://cve.now/CVE-2014-2519.md): The default configuration of EMC RecoverPoint Appliance (RPA) 4.1 before 4.1.0.1 does not enable a firewall, which allows remote attackers t (no CVSS)
- [CVE-2014-3325](https://cve.now/CVE-2014-3325.md): Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Customer Voice Portal (CVP) allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2014-3532](https://cve.now/CVE-2014-3532.md): dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (no CVSS)
- [CVE-2014-3533](https://cve.now/CVE-2014-3533.md): dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of craft (no CVSS)
- [CVE-2014-4943](https://cve.now/CVE-2014-4943.md): The PPPoL2TP feature in net/l2tp/l2tp\_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-stru (no CVSS)
- [CVE-2013-4273](https://cve.now/CVE-2013-4273.md): The Entity API module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to node comments, which allows remote authenticate (no CVSS)
- [CVE-2013-7391](https://cve.now/CVE-2013-7391.md): The Entity API module 7.x-1.x before 7.x-1.2 for Drupal, when using the (a) Views field or (b) area plugins, allows remote attackers to read (no CVSS)
- [CVE-2014-0967](https://cve.now/CVE-2014-0967.md): Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x (no CVSS)
- [CVE-2014-0968](https://cve.now/CVE-2014-0968.md): Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x (no CVSS)
- [CVE-2014-0970](https://cve.now/CVE-2014-0970.md): The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data (no CVSS)
- [CVE-2014-2364](https://cve.now/CVE-2014-2364.md): Advantech WebAccess Stack-Based Buffer Overflow (no CVSS, Advantech WebAccess)
- [CVE-2014-2365](https://cve.now/CVE-2014-2365.md): Advantech WebAccess Improper Access Control (no CVSS, Advantech WebAccess)
- [CVE-2014-2366](https://cve.now/CVE-2014-2366.md): Advantech WebAccess Cleartext Storage of Sensitive Information in Memory (no CVSS, Advantech WebAccess)
- [CVE-2014-2367](https://cve.now/CVE-2014-2367.md): Advantech WebAccess Authentication Bypass Issues (no CVSS, Advantech WebAccess)
- [CVE-2014-2368](https://cve.now/CVE-2014-2368.md): Advantech WebAccess Unsafe ActiveX Control Marked Safe For Scripting (no CVSS, Advantech WebAccess)
- [CVE-2014-3043](https://cve.now/CVE-2014-3043.md): IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.3 allows remote authenticated users to gain privileges by leveraging access to the s (no CVSS)
- [CVE-2014-3045](https://cve.now/CVE-2014-3045.md): IBM Scale Out Network Attached Storage (SONAS) 1.3.x and 1.4.x before 1.4.3.3 places an administrative password in the shell history upon us (no CVSS)
- [CVE-2014-3064](https://cve.now/CVE-2014-3064.md): The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-07-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.