CVEs published August 28, 2014
13 CVEs were published on August 28, 2014: 0 critical, 0 high.
- Published
- 13
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Schneider Electric Wonderware Information Server Portal
- 5
- CG Automation ePAQ-9410 Substation Gateway
- 2
Medium, low and unrated 13
- CVE-2014-3345The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0 does not proper
- CVE-2014-3347Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of s
- CVE-2014-4199vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to ar
- CVE-2014-4200vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-
- CVE-2014-0761CG Automation ePAQ-9410 Substation Gateway Improper Input ValidationCG Automation ePAQ-9410 Substation Gateway
- CVE-2014-0762CG Automation ePAQ-9410 Substation Gateway Improper Input ValidationCG Automation ePAQ-9410 Substation Gateway
- CVE-2014-2380Schneider Electric Wonderware Inadequate Encryption StrengthSchneider Electric Wonderware Information Server Portal
- CVE-2014-2381Schneider Electric Wonderware Inadequate Encryption StrengthSchneider Electric Wonderware Information Server Portal
- CVE-2014-3344Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Trans
- CVE-2014-4619EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Ident
- CVE-2014-5397Schneider Electric Wonderware Cross-site ScriptingSchneider Electric Wonderware Information Server Portal
- CVE-2014-5398Schneider Electric Wonderware Input ValidationSchneider Electric Wonderware Information Server Portal
- CVE-2014-5399Schneider Electric Wonderware SQL InjectionSchneider Electric Wonderware Information Server Portal