# CVEs published 2014-07-31 9 CVEs were published on July 31, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2012-6651](https://cve.now/CVE-2012-6651.md): Multiple directory traversal vulnerabilities in the Vitamin plugin before 1.1.0 for WordPress allow remote attackers to access arbitrary fil (no CVSS) - [CVE-2014-3488](https://cve.now/CVE-2014-3488.md): The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted (no CVSS, io.netty:netty-handler) - [CVE-2014-3554](https://cve.now/CVE-2014-3554.md): Buffer overflow in the ndp\_msg\_opt\_dnssl\_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly e (no CVSS) - [CVE-2014-5171](https://cve.now/CVE-2014-5171.md): SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, w (no CVSS) - [CVE-2014-5172](https://cve.now/CVE-2014-5172.md): Multiple cross-site scripting (XSS) vulnerabilities in the XS Administration Tools in SAP HANA allow remote attackers to inject arbitrary we (no CVSS) - [CVE-2014-5173](https://cve.now/CVE-2014-5173.md): SAP HANA Extend Application Services (XS) allows remote attackers to bypass access restrictions via a request to a private IU5 SDK applicati (no CVSS) - [CVE-2014-5174](https://cve.now/CVE-2014-5174.md): The SAP Netweaver Business Warehouse component does not properly restrict access to the functions in the BW-SYS-DB-DB4 function group, which (no CVSS) - [CVE-2014-5175](https://cve.now/CVE-2014-5175.md): The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors, relate (no CVSS) - [CVE-2014-5176](https://cve.now/CVE-2014-5176.md): SAP FI Manager Self-Service has a hard-coded user name, which makes it easier for remote attackers to obtain access via unspecified vectors. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-07-31 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.