# CVEs published 2014-07-26

16 CVEs were published on July 26, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-2625](https://cve.now/CVE-2014-2625.md): Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows (no CVSS)
- [CVE-2014-2626](https://cve.now/CVE-2014-2626.md): Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows (no CVSS)
- [CVE-2014-2966](https://cve.now/CVE-2014-2966.md): The ISO-8859-1 encoder in Resin Pro before 4.0.40 does not properly perform Unicode transformations, which allows remote attackers to bypass (no CVSS)
- [CVE-2014-4747](https://cve.now/CVE-2014-4747.md): The Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows physically proximate attackers to discover a meeting password hash by (no CVSS)
- [CVE-2014-4748](https://cve.now/CVE-2014-4748.md): Cross-site scripting (XSS) vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject (no CVSS)
- [CVE-2014-4857](https://cve.now/CVE-2014-4857.md): Cross-site scripting (XSS) vulnerability in Gurock TestRail before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2014-4971](https://cve.now/CVE-2014-4971.md): Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary me (no CVSS)
- [CVE-2014-2363](https://cve.now/CVE-2014-2363.md): Morpho Itemiser 3 Hard-Coded Credential (no CVSS, Morpho Itemiser)
- [CVE-2014-3071](https://cve.now/CVE-2014-3071.md): Cross-site scripting (XSS) vulnerability in the Data Quality Console in IBM InfoSphere Information Server 11.3 allows remote attackers to in (no CVSS)
- [CVE-2014-3301](https://cve.now/CVE-2014-3301.md): The ProfileAction controller in Cisco WebEx Meetings Server (CWMS) 1.5(.1.131) and earlier allows remote attackers to obtain sensitive infor (no CVSS)
- [CVE-2014-3305](https://cve.now/CVE-2014-3305.md): Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote at (no CVSS)
- [CVE-2014-3324](https://cve.now/CVE-2014-3324.md): Multiple cross-site scripting (XSS) vulnerabilities in the login page in the administrative web interface in Cisco TelePresence Server Softw (no CVSS)
- [CVE-2014-3326](https://cve.now/CVE-2014-3326.md): SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows remote authenticated users to execute arbitrar (no CVSS)
- [CVE-2014-3328](https://cve.now/CVE-2014-3328.md): The Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to cause a denial of service via a TCP SYN floo (no CVSS)
- [CVE-2014-4858](https://cve.now/CVE-2014-4858.md): Multiple SQL injection vulnerabilities in CWPLogin.aspx in Sabre AirCentre Crew products 2010.2.12.20008 and earlier allow remote attackers (no CVSS)
- [CVE-2014-4979](https://cve.now/CVE-2014-4979.md): Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed version n (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-07-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.