# CVEs published 2014-08-20

18 CVEs were published on August 20, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-2524](https://cve.now/CVE-2014-2524.md): The \_rl\_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink (no CVSS)
- [CVE-2014-4929](https://cve.now/CVE-2014-4929.md): Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6.0.x before 6.0.4 allows remote attackers t (no CVSS)
- [CVE-2014-5382](https://cve.now/CVE-2014-5382.md): Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Schrack Technik microControl with firmware 1.7.0 (937) allow rem (no CVSS)
- [CVE-2014-0640](https://cve.now/CVE-2014-0640.md): EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to bypass intended restrictions on resource access via unsp (no CVSS)
- [CVE-2014-0641](https://cve.now/CVE-2014-0641.md): Cross-site request forgery (CSRF) vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to hijack the auth (no CVSS)
- [CVE-2014-2505](https://cve.now/CVE-2014-2505.md): EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change th (no CVSS)
- [CVE-2014-2511](https://cve.now/CVE-2014-2511.md): Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop before 6.7 SP1 P28 and 6.7 SP2 before P14 allow remote attacker (no CVSS)
- [CVE-2014-2515](https://cve.now/CVE-2014-2515.md): EMC Documentum D2 3.1 before P24, 3.1SP1 before P02, 4.0 before P11, 4.1 before P16, and 4.2 before P05 does not properly restrict tickets p (no CVSS)
- [CVE-2014-2517](https://cve.now/CVE-2014-2517.md): Unspecified vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to gain privileges via unknown (no CVSS)
- [CVE-2014-2518](https://cve.now/CVE-2014-2518.md): Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attack (no CVSS)
- [CVE-2014-2520](https://cve.now/CVE-2014-2520.md): EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL hints, (no CVSS)
- [CVE-2014-2521](https://cve.now/CVE-2014-2521.md): EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to read sensitive object metadata (no CVSS)
- [CVE-2014-3331](https://cve.now/CVE-2014-3331.md): The Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series Software 11.0, 12.0, 12.1, 12.2, 14.0, 15.0, (no CVSS)
- [CVE-2014-3340](https://cve.now/CVE-2014-3340.md): Directory traversal vulnerability in an unspecified PHP script in the server in Cisco WebEx MeetMeNow allows remote authenticated users to r (no CVSS)
- [CVE-2014-3514](https://cve.now/CVE-2014-3514.md): activerecord/lib/active\_record/relation/query\_methods.rb in Active Record in Ruby on Rails 4.0.x before 4.0.9 and 4.1.x before 4.1.5 allows (no CVSS, activerecord)
- [CVE-2014-4618](https://cve.now/CVE-2014-4618.md): EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to gain privileges via a user-crea (no CVSS)
- [CVE-2014-4749](https://cve.now/CVE-2014-4749.md): IBM PowerVC 1.2.0 before FixPack3 does not properly use the known\_hosts file, which allows man-in-the-middle attackers to spoof SSH servers (no CVSS)
- [CVE-2014-4750](https://cve.now/CVE-2014-4750.md): IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring files to a managed IVM, which allows remote at (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-08-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.