# CVEs published 2014-07-29

36 CVEs were published on July 29, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0889](https://cve.now/CVE-2014-0889.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM Atlas Suite (aka Atlas Policy Suite), as used in Atlas eDiscovery Process Managem (no CVSS)
- [CVE-2014-3020](https://cve.now/CVE-2014-3020.md): install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integrated Portal (TIP) 2.1 and 2.2 sets world- (no CVSS)
- [CVE-2014-3026](https://cve.now/CVE-2014-3026.md): CRLF injection vulnerability in IBM Maximo Asset Management 7.5 through 7.5.0.6, and 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for Smart (no CVSS)
- [CVE-2014-3050](https://cve.now/CVE-2014-3050.md): IBM Rational Team Concert (RTC) 3.x before 3.0.1.6 IF3 and 4.x before 4.0.7 does not properly integrate with build engines, which allows rem (no CVSS)
- [CVE-2014-3054](https://cve.now/CVE-2014-3054.md): Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allo (no CVSS)
- [CVE-2014-3055](https://cve.now/CVE-2014-3055.md): SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote a (no CVSS)
- [CVE-2014-3056](https://cve.now/CVE-2014-3056.md): The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially (no CVSS)
- [CVE-2014-3057](https://cve.now/CVE-2014-3057.md): Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 al (no CVSS)
- [CVE-2014-3329](https://cve.now/CVE-2014-3329.md): Cross-site scripting (XSS) vulnerability in the web-server component in Cisco Prime Data Center Network Manager (DCNM) 6.3(2) and earlier al (no CVSS)
- [CVE-2014-3895](https://cve.now/CVE-2014-3895.md): The I-O DATA TS-WLCAM camera with firmware 1.06 and earlier, TS-WLCAM/V camera with firmware 1.06 and earlier, TS-WPTCAM camera with firmwar (no CVSS)
- [CVE-2014-3896](https://cve.now/CVE-2014-3896.md): Multiple cross-site request forgery (CSRF) vulnerabilities in CGI programs in Seeds acmailer before 3.8.17 and 3.9.x before 3.9.10 Beta allo (no CVSS)
- [CVE-2014-3897](https://cve.now/CVE-2014-3897.md): Cross-site scripting (XSS) vulnerability in Homepage Decorator PerlMailer 3.10 and earlier allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2014-0103](https://cve.now/CVE-2014-0103.md): WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive (no CVSS)
- [CVE-2014-0475](https://cve.now/CVE-2014-0475.md): Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass F (no CVSS)
- [CVE-2014-2226](https://cve.now/CVE-2014-2226.md): Ubiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages, which allows man-in-the-middle attackers to (no CVSS)
- [CVE-2014-4710](https://cve.now/CVE-2014-4710.md): Cross-site scripting (XSS) vulnerability in zero\_user\_account.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2014-4909](https://cve.now/CVE-2014-4909.md): Integer overflow in the tr\_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a (no CVSS)
- [CVE-2014-5029](https://cve.now/CVE-2014-5029.md): The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups (no CVSS)
- [CVE-2014-5030](https://cve.now/CVE-2014-5030.md): CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index. (no CVSS)
- [CVE-2014-5031](https://cve.now/CVE-2014-5031.md): The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sen (no CVSS)
- [CVE-2014-5114](https://cve.now/CVE-2014-5114.md): WeBid 1.1.1 allows remote attackers to conduct an LDAP injection attack via the (1) js or (2) cat parameter. (no CVSS)
- [CVE-2014-5115](https://cve.now/CVE-2014-5115.md): Absolute path traversal vulnerability in DirPHP 1.0 allows remote attackers to read arbitrary files via a full pathname in the phpfile param (no CVSS)
- [CVE-2014-5116](https://cve.now/CVE-2014-5116.md): The cairo\_image\_surface\_get\_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a deni (no CVSS)
- [CVE-2014-3541](https://cve.now/CVE-2014-3541.md): The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 all (no CVSS, moodle/moodle)
- [CVE-2014-3542](https://cve.now/CVE-2014-3542.md): mod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows rem (no CVSS, moodle/moodle)
- [CVE-2014-3543](https://cve.now/CVE-2014-3543.md): mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows (no CVSS, moodle/moodle)
- [CVE-2014-3544](https://cve.now/CVE-2014-3544.md): Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before (no CVSS, moodle/moodle)
- [CVE-2014-3545](https://cve.now/CVE-2014-3545.md): Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users (no CVSS, moodle/moodle)
- [CVE-2014-3546](https://cve.now/CVE-2014-3546.md): Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capabili (no CVSS, moodle/moodle)
- [CVE-2014-3547](https://cve.now/CVE-2014-3547.md): Multiple cross-site scripting (XSS) vulnerabilities in badges/renderer.php in Moodle 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x befor (no CVSS, moodle/moodle)
- [CVE-2014-3548](https://cve.now/CVE-2014-3548.md): Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, a (no CVSS, moodle/moodle)
- [CVE-2014-3549](https://cve.now/CVE-2014-3549.md): Cross-site scripting (XSS) vulnerability in the get\_description function in lib/classes/event/user\_login\_failed.php in Moodle 2.7.x before 2 (no CVSS)
- [CVE-2014-3550](https://cve.now/CVE-2014-3550.md): Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in Moodle 2.7.x before 2.7.1 allow remote attacker (no CVSS)
- [CVE-2014-3551](https://cve.now/CVE-2014-3551.md): Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2. (no CVSS, moodle/moodle)
- [CVE-2014-3552](https://cve.now/CVE-2014-3552.md): The Shibboleth authentication plugin in auth/shibboleth/index.php in Moodle through 2.3.11, 2.4.x before 2.4.11, and 2.5.x before 2.5.7 does (no CVSS)
- [CVE-2014-3553](https://cve.now/CVE-2014-3553.md): mod/forum/classes/post\_form.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7. (no CVSS, moodle/moodle)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-07-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.