# CVEs published 2014-08-28

13 CVEs were published on August 28, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3345](https://cve.now/CVE-2014-3345.md): The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0 does not proper (no CVSS)
- [CVE-2014-3347](https://cve.now/CVE-2014-3347.md): Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2014-4199](https://cve.now/CVE-2014-4199.md): vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to ar (no CVSS)
- [CVE-2014-4200](https://cve.now/CVE-2014-4200.md): vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm- (no CVSS)
- [CVE-2014-0761](https://cve.now/CVE-2014-0761.md): CG Automation ePAQ-9410 Substation Gateway Improper Input Validation (no CVSS, CG Automation ePAQ-9410 Substation Gateway)
- [CVE-2014-0762](https://cve.now/CVE-2014-0762.md): CG Automation ePAQ-9410 Substation Gateway Improper Input Validation (no CVSS, CG Automation ePAQ-9410 Substation Gateway)
- [CVE-2014-2380](https://cve.now/CVE-2014-2380.md): Schneider Electric Wonderware Inadequate Encryption Strength (no CVSS, Schneider Electric Wonderware Information Server Portal)
- [CVE-2014-2381](https://cve.now/CVE-2014-2381.md): Schneider Electric Wonderware Inadequate Encryption Strength (no CVSS, Schneider Electric Wonderware Information Server Portal)
- [CVE-2014-3344](https://cve.now/CVE-2014-3344.md): Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Trans (no CVSS)
- [CVE-2014-4619](https://cve.now/CVE-2014-4619.md): EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Ident (no CVSS)
- [CVE-2014-5397](https://cve.now/CVE-2014-5397.md): Schneider Electric Wonderware Cross-site Scripting (no CVSS, Schneider Electric Wonderware Information Server Portal)
- [CVE-2014-5398](https://cve.now/CVE-2014-5398.md): Schneider Electric Wonderware Input Validation (no CVSS, Schneider Electric Wonderware Information Server Portal)
- [CVE-2014-5399](https://cve.now/CVE-2014-5399.md): Schneider Electric Wonderware SQL Injection (no CVSS, Schneider Electric Wonderware Information Server Portal)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-08-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.