# CVEs published 2014-08-06 20 CVEs were published on August 6, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2012-6653](https://cve.now/CVE-2012-6653.md): Unspecified vulnerability in the All Video Gallery (all-video-gallery) plugin before 1.2.0 for WordPress has unspecified impact and attack v (no CVSS) - [CVE-2014-0479](https://cve.now/CVE-2014-0479.md): reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compa (no CVSS) - [CVE-2014-3434](https://cve.now/CVE-2014-3434.md): Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business E (no CVSS) - [CVE-2014-3559](https://cve.now/CVE-2014-3559.md): The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots when deleting a VM, even when wipe-after-d (no CVSS) - [CVE-2014-5180](https://cve.now/CVE-2014-5180.md): SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows r (no CVSS) - [CVE-2014-5181](https://cve.now/CVE-2014-5181.md): Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation (lastfm-rotation) plugin 1.0 for WordPress allows remote attac (no CVSS) - [CVE-2014-5182](https://cve.now/CVE-2014-5182.md): Multiple SQL injection vulnerabilities in the yawpp plugin 1.2 for WordPress allow remote authenticated users with Contributor privileges to (no CVSS) - [CVE-2014-5183](https://cve.now/CVE-2014-5183.md): SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus (simple-retail-menus) plugin before 4.1 for WordPress allow (no CVSS) - [CVE-2014-5184](https://cve.now/CVE-2014-5184.md): SQL injection vulnerability in the stripshow-storylines page in the stripShow plugin 2.5.2 for WordPress allows remote authenticated adminis (no CVSS) - [CVE-2014-5185](https://cve.now/CVE-2014-5185.md): SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributor privileges to execu (no CVSS) - [CVE-2014-5186](https://cve.now/CVE-2014-5186.md): SQL injection vulnerability in the All Video Gallery (all-video-gallery) plugin 1.2 for WordPress allows remote authenticated administrators (no CVSS) - [CVE-2014-5187](https://cve.now/CVE-2014-5187.md): Directory traversal vulnerability in the Tom M8te (tom-m8te) plugin 1.5.3 for WordPress allows remote attackers to read arbitrary files via (no CVSS) - [CVE-2013-4159](https://cve.now/CVE-2013-4159.md): ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp fi (no CVSS) - [CVE-2014-3560](https://cve.now/CVE-2014-3560.md): NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code v (no CVSS) - [CVE-2014-5082](https://cve.now/CVE-2014-5082.md): Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus allow remote attackers (no CVSS) - [CVE-2014-5088](https://cve.now/CVE-2014-5088.md): Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via the username to logi (no CVSS) - [CVE-2014-5089](https://cve.now/CVE-2014-5089.md): SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary SQL comman (no CVSS) - [CVE-2014-5090](https://cve.now/CVE-2014-5090.md): admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the (no CVSS) - [CVE-2014-5178](https://cve.now/CVE-2014-5178.md): Multiple cross-site scripting (XSS) vulnerabilities in Easy File Sharing (EFS) Web Server 6.8 allow remote authenticated users to inject arb (no CVSS) - [CVE-2014-5179](https://cve.now/CVE-2014-5179.md): The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for (1) no (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-08-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.