# CVEs published 2014-08-22 30 CVEs were published on August 22, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2013-6306](https://cve.now/CVE-2013-6306.md): Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740\_121, 760 before 760.40 Ax760\_078, and 770 before 770.30 01Ax770\_0 (no CVSS) - [CVE-2014-3563](https://cve.now/CVE-2014-3563.md): Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors re (no CVSS, salt) - [CVE-2014-5241](https://cve.now/CVE-2014-5241.md): The JSONP endpoint in includes/api/ApiFormatJson.php in MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.2 (no CVSS) - [CVE-2014-5242](https://cve.now/CVE-2014-5242.md): Cross-site scripting (XSS) vulnerability in mediawiki.page.image.pagination.js in MediaWiki 1.22.x before 1.22.9 and 1.23.x before 1.23.2 al (no CVSS) - [CVE-2014-5243](https://cve.now/CVE-2014-5243.md): MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME protection mechanism for (no CVSS) - [CVE-2014-0232](https://cve.now/CVE-2014-0232.md): Multiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes/messages.ftl in Apache OFBiz 11.04.01 before 11.0 (no CVSS) - [CVE-2014-3525](https://cve.now/CVE-2014-3525.md): Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack (no CVSS) - [CVE-2014-3594](https://cve.now/CVE-2014-3594.md): Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 20 (no CVSS, horizon) - [CVE-2014-4197](https://cve.now/CVE-2014-4197.md): Multiple SQL injection vulnerabilities in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL comma (no CVSS) - [CVE-2014-5097](https://cve.now/CVE-2014-5097.md): Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL comm (no CVSS) - [CVE-2014-5121](https://cve.now/CVE-2014-5121.md): Multiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Server 10.1.1 allow remote attackers to inject arbitrary web script o (no CVSS) - [CVE-2014-5122](https://cve.now/CVE-2014-5122.md): Open redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct ph (no CVSS) - [CVE-2014-5146](https://cve.now/CVE-2014-5146.md): Certain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when using Hardware Assisted Paging (HAP), are (no CVSS) - [CVE-2014-5149](https://cve.now/CVE-2014-5149.md): Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, which allows local HVM (no CVSS) - [CVE-2014-5246](https://cve.now/CVE-2014-5246.md): The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05\_CN allows remote attackers to bypass authentication and gain administra (no CVSS) - [CVE-2014-5261](https://cve.now/CVE-2014-5261.md): The graph settings script (graph\_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell m (no CVSS) - [CVE-2014-5262](https://cve.now/CVE-2014-5262.md): SQL injection vulnerability in the graph settings script (graph\_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute (no CVSS) - [CVE-2014-5338](https://cve.now/CVE-2014-5338.md): Multiple cross-site scripting (XSS) vulnerabilities in the multisite component in Check\_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allow rem (no CVSS) - [CVE-2014-5368](https://cve.now/CVE-2014-5368.md): Directory traversal vulnerability in the file\_get\_contents function in downloadfiles/download.php in the WP Content Source Control (wp-sourc (no CVSS) - [CVE-2014-5396](https://cve.now/CVE-2014-5396.md): The web interface in Schrack Technik microControl with firmware before 1.7.0 (937) has a hardcoded password of not for the "user" account, w (no CVSS) - [CVE-2014-0965](https://cve.now/CVE-2014-0965.md): IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obta (no CVSS) - [CVE-2014-3022](https://cve.now/CVE-2014-3022.md): IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obta (no CVSS) - [CVE-2014-3070](https://cve.now/CVE-2014-3070.md): The addFileRegistryAccount Virtual Member Manager (VMM) SPI Admin Task in IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8 (no CVSS) - [CVE-2014-3083](https://cve.now/CVE-2014-3083.md): IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.35, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.3 does not properly restrict res (no CVSS) - [CVE-2014-3089](https://cve.now/CVE-2014-3089.md): The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Ration (no CVSS) - [CVE-2014-3436](https://cve.now/CVE-2014-3436.md): Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a den (no CVSS) - [CVE-2014-4764](https://cve.now/CVE-2014-4764.md): IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, al (no CVSS) - [CVE-2014-4767](https://cve.now/CVE-2014-4767.md): IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repository for feature install (no CVSS) - [CVE-2014-5273](https://cve.now/CVE-2014-5273.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 all (no CVSS) - [CVE-2014-5274](https://cve.now/CVE-2014-5274.md): Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows rem (no CVSS, phpmyadmin/phpmyadmin) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-08-22 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.