# CVEs published 2014-08-17

17 CVEs were published on August 17, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0326](https://cve.now/CVE-2014-0326.md): The Pilot Below Deck Equipment (BDE) and OpenPort implementations on Iridium satellite terminals allow remote attackers to read hardcoded cr (no CVSS)
- [CVE-2014-0327](https://cve.now/CVE-2014-0327.md): The Terminal Upgrade Tool in the Pilot Below Deck Equipment (BDE) and OpenPort implementations on Iridium satellite terminals allows remote (no CVSS)
- [CVE-2014-0876](https://cve.now/CVE-2014-0876.md): Buffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive client in IBM Tivoli Storage Manager (TSM) (no CVSS)
- [CVE-2014-0905](https://cve.now/CVE-2014-0905.md): IBM InfoSphere BigInsights 2.0 through 2.1.2 does not set the secure flag for the LTPA cookie in an https session, which makes it easier for (no CVSS)
- [CVE-2014-0966](https://cve.now/CVE-2014-0966.md): SQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0- (no CVSS)
- [CVE-2014-0969](https://cve.now/CVE-2014-0969.md): Cross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x a (no CVSS)
- [CVE-2014-3063](https://cve.now/CVE-2014-3063.md): IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Mana (no CVSS)
- [CVE-2014-3080](https://cve.now/CVE-2014-3080.md): Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.2344 (no CVSS)
- [CVE-2014-3081](https://cve.now/CVE-2014-3081.md): prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to (no CVSS)
- [CVE-2014-3085](https://cve.now/CVE-2014-3085.md): systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to e (no CVSS)
- [CVE-2014-3087](https://cve.now/CVE-2014-3087.md): callService.do in IBM Business Process Manager (BPM) 7.5 through 8.5.5 and WebSphere Lombardi Edition 7.2 through 7.2.0.5 allows remote auth (no CVSS)
- [CVE-2014-4775](https://cve.now/CVE-2014-4775.md): IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Mana (no CVSS)
- [CVE-2014-5074](https://cve.now/CVE-2014-5074.md): Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device restart and STOP tr (no CVSS)
- [CVE-2014-0609](https://cve.now/CVE-2014-0609.md): Unspecified vulnerability in Novell Open Enterprise Server (OES) 11 SP1 before Scheduled Maintenance Update 9415 and 11 SP2 before Scheduled (no CVSS)
- [CVE-2014-3900](https://cve.now/CVE-2014-3900.md): Cross-site scripting (XSS) vulnerability in admin/picture\_modify.php in the photo-edit subsystem in Piwigo 2.6.3 and earlier allows remote a (no CVSS)
- [CVE-2014-3904](https://cve.now/CVE-2014-3904.md): SQL injection vulnerability in lib/admin.php in tenfourzero Shutter 0.1.4 allows remote attackers to execute arbitrary SQL commands via unsp (no CVSS)
- [CVE-2014-3905](https://cve.now/CVE-2014-3905.md): Cross-site scripting (XSS) vulnerability in tenfourzero Shutter 0.1.4 allows remote attackers to inject arbitrary web script or HTML via uns (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-08-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.