# CVEs published 2014-08-11

7 CVEs were published on August 11, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-2357](https://cve.now/CVE-2014-2357.md): SUBNET SubSTATION Server 2 Telegyr 8979 Master Protocol Improper Input Validation (no CVSS, SUBNET SubSTATION Server 2 Telegyr 8979 Master Protocol)
- [CVE-2014-3076](https://cve.now/CVE-2014-3076.md): IBM Business Process Manager (BPM) 8.5 through 8.5.5 allows remote attackers to obtain potentially sensitive information by visiting an unsp (no CVSS)
- [CVE-2014-3327](https://cve.now/CVE-2014-3327.md): The EnergyWise module in Cisco IOS 12.2, 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.2.xXO, 3.3.xSG, 3.4.xSG, and 3.5.xE before 3.5.3E allows re (no CVSS)
- [CVE-2014-3330](https://cve.now/CVE-2014-3330.md): Cisco NX-OS 6.1(2)I2(1) on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote a (no CVSS)
- [CVE-2014-3332](https://cve.now/CVE-2014-3332.md): Cisco Unified Communications Manager (CM) 8.6(.2) and earlier has an incorrect CLI restrictions setting, which allows remote authenticated u (no CVSS)
- [CVE-2014-3333](https://cve.now/CVE-2014-3333.md): The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP (no CVSS)
- [CVE-2014-3336](https://cve.now/CVE-2014-3336.md): SQL injection vulnerability in the web framework in Cisco Unity Connection 9.1(2) and earlier allows remote authenticated users to execute a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-08-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.