# CVEs published 2014-08-19

20 CVEs were published on August 19, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-5345](https://cve.now/CVE-2014-5345.md): Cross-site scripting (XSS) vulnerability in upgrade.php in the Disqus Comment System plugin before 2.76 for WordPress allows remote attacker (no CVSS)
- [CVE-2014-5346](https://cve.now/CVE-2014-5346.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin 2.77 for WordPress allow remote attackers to (no CVSS)
- [CVE-2014-5347](https://cve.now/CVE-2014-5347.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress allow remote attack (no CVSS)
- [CVE-2014-5348](https://cve.now/CVE-2014-5348.md): Cross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka SteelApp) Traffic Manager Virtual Appliance 9.6 (no CVSS)
- [CVE-2014-5349](https://cve.now/CVE-2014-5349.md): Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service (application crash) v (no CVSS)
- [CVE-2014-5350](https://cve.now/CVE-2014-5350.md): Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via (no CVSS)
- [CVE-2014-3464](https://cve.now/CVE-2014-3464.md): The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) 6.2.0 and 6.3.0, does n (no CVSS)
- [CVE-2014-3472](https://cve.now/CVE-2014-3472.md): The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used in Red Hat JBoss Enterprise Application Pla (no CVSS)
- [CVE-2014-3490](https://cve.now/CVE-2014-3490.md): RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable (no CVSS, org.jboss.resteasy:resteasy-client)
- [CVE-2014-3504](https://cve.now/CVE-2014-3504.md): The (1) serf\_ssl\_cert\_issuer, (2) serf\_ssl\_cert\_subject, and (3) serf\_ssl\_cert\_certificate functions in Serf 0.2.0 through 1.3.x before 1.3. (no CVSS)
- [CVE-2014-3522](https://cve.now/CVE-2014-3522.md): The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the C (no CVSS)
- [CVE-2014-3528](https://cve.now/CVE-2014-3528.md): Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store ca (no CVSS)
- [CVE-2014-4615](https://cve.now/CVE-2014-4615.md): The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neu (no CVSS)
- [CVE-2014-5033](https://cve.now/CVE-2014-5033.md): KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users (no CVSS)
- [CVE-2014-5343](https://cve.now/CVE-2014-5343.md): Cross-site scripting (XSS) vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name fie (no CVSS)
- [CVE-2014-5344](https://cve.now/CVE-2014-5344.md): Multiple cross-site scripting (XSS) vulnerabilities in the Mobiloud (mobiloud-mobile-app-plugin) plugin before 2.3.8 for WordPress allow rem (no CVSS)
- [CVE-2014-3341](https://cve.now/CVE-2014-3341.md): The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests (no CVSS)
- [CVE-2014-3903](https://cve.now/CVE-2014-3903.md): Cross-site scripting (XSS) vulnerability in the Cakifo theme 1.x before 1.6.2 for WordPress allows remote authenticated users to inject arbi (no CVSS)
- [CVE-2014-3906](https://cve.now/CVE-2014-3906.md): SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and earlier allows remote attackers to execute (no CVSS)
- [CVE-2014-5333](https://cve.now/CVE-2014-5333.md): Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-08-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.