# CVEs published 2014-08-18

10 CVEs were published on August 18, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-1469](https://cve.now/CVE-2014-1469.md): BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception handl (no CVSS)
- [CVE-2014-2388](https://cve.now/CVE-2014-2388.md): The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requi (no CVSS)
- [CVE-2014-5203](https://cve.now/CVE-2014-5203.md): wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to exec (no CVSS)
- [CVE-2014-5204](https://cve.now/CVE-2014-5204.md): wp-includes/pluggable.php in WordPress before 3.9.2 rejects invalid CSRF nonces with a different timing depending on which characters in the (no CVSS)
- [CVE-2014-5205](https://cve.now/CVE-2014-5205.md): wp-includes/pluggable.php in WordPress before 3.9.2 does not use delimiters during concatenation of action values and uid values in CSRF tok (no CVSS)
- [CVE-2014-5206](https://cve.now/CVE-2014-5206.md): The do\_remount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain the MNT\_LOCK\_READONLY bit across a remount of (no CVSS)
- [CVE-2014-5207](https://cve.now/CVE-2014-5207.md): fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT\_NODEV, MNT\_NOSUID, and MNT\_NOEXEC and changing MNT (no CVSS)
- [CVE-2014-5240](https://cve.now/CVE-2014-5240.md): Cross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote au (no CVSS)
- [CVE-2014-5265](https://cve.now/CVE-2014-5265.md): The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarat (no CVSS)
- [CVE-2014-5266](https://cve.now/CVE-2014-5266.md): The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the numb (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-08-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.