# CVEs published 2014-07-24

22 CVEs were published on July 24, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0607](https://cve.now/CVE-2014-0607.md): Unrestricted file upload vulnerability in Attachmate Verastream Process Designer (VPD) before R6 SP1 Hotfix 1 allows remote attackers to exe (no CVSS)
- [CVE-2014-1419](https://cve.now/CVE-2014-1419.md): Race condition in the power policy functions in policy-funcs in acpi-support before 0.142 allows local users to gain privileges via unspecif (no CVSS)
- [CVE-2014-2360](https://cve.now/CVE-2014-2360.md): OleumTech WIO Family Improper Input Validation (no CVSS, OleumTech WIO DH2 Wireless Gateway · OleumTech Sensor Wirel…)
- [CVE-2014-2361](https://cve.now/CVE-2014-2361.md): OleumTech WIO Family Key Management Errors (no CVSS, OleumTech WIO DH2 Wireless Gateway · OleumTech Sensor Wirel…)
- [CVE-2014-2362](https://cve.now/CVE-2014-2362.md): OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator (no CVSS, OleumTech WIO DH2 Wireless Gateway · OleumTech Sensor Wirel…)
- [CVE-2014-2369](https://cve.now/CVE-2014-2369.md): Omron NS Series HMI Cross-Site Request Forgery (no CVSS, Omron NS15 · Omron NS12 +3)
- [CVE-2014-2370](https://cve.now/CVE-2014-2370.md): Omron NS Series HMI Improper Neutralization of Input During Web Page Generation (no CVSS, Omron NS15 · Omron NS12 +3)
- [CVE-2014-2717](https://cve.now/CVE-2014-2717.md): Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow r (no CVSS)
- [CVE-2014-2968](https://cve.now/CVE-2014-2968.md): Cross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.37.01.910 and Web UI 1 (no CVSS)
- [CVE-2014-2971](https://cve.now/CVE-2014-2971.md): Cross-site scripting (XSS) vulnerability in AddStdLetter.jsp in MicroPact iComplaints before 8.0.2.1.8.8014 allows remote authenticated user (no CVSS)
- [CVE-2014-3110](https://cve.now/CVE-2014-3110.md): Multiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb (no CVSS)
- [CVE-2014-3322](https://cve.now/CVE-2014-3322.md): Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers (no CVSS)
- [CVE-2014-4682](https://cve.now/CVE-2014-4682.md): The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote attackers to obtain sensitive (no CVSS)
- [CVE-2014-4683](https://cve.now/CVE-2014-4683.md): The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain p (no CVSS)
- [CVE-2014-4684](https://cve.now/CVE-2014-4684.md): The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privi (no CVSS)
- [CVE-2014-4685](https://cve.now/CVE-2014-4685.md): Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object (no CVSS)
- [CVE-2014-4686](https://cve.now/CVE-2014-4686.md): The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption k (no CVSS)
- [CVE-2014-4736](https://cve.now/CVE-2014-4736.md): SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to execute arbitrary SQL commands via the note-id parameter to @ (no CVSS)
- [CVE-2014-4910](https://cve.now/CVE-2014-4910.md): Directory traversal vulnerability in tools/backlight\_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwr (no CVSS)
- [CVE-2014-4927](https://cve.now/CVE-2014-4927.md): Buffer overflow in ACME micro\_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote atta (no CVSS)
- [CVE-2014-5015](https://cve.now/CVE-2014-5015.md): bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows r (no CVSS)
- [CVE-2014-5024](https://cve.now/CVE-2014-5024.md): Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attacker (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-07-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.