# CVEs published 2014-08-29 24 CVEs were published on August 29, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2010-5110](https://cve.now/CVE-2010-5110.md): DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash) via a crafted PDF file. (no CVSS) - [CVE-2014-2390](https://cve.now/CVE-2014-2390.md): Cross-site request forgery (CSRF) vulnerability in the User Management module in McAfee Network Security Manager (NSM) before 6.1.15.39 7.1. (no CVSS) - [CVE-2014-5073](https://cve.now/CVE-2014-5073.md): vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharac (no CVSS) - [CVE-2014-5119](https://cve.now/CVE-2014-5119.md): Off-by-one error in the \_\_gconv\_translit\_find function in gconv\_trans.c in GNU C Library (aka glibc) allows context-dependent attackers to c (no CVSS) - [CVE-2014-5147](https://cve.now/CVE-2014-5147.md): Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the guest domain that use a different address (no CVSS) - [CVE-2014-5247](https://cve.now/CVE-2014-5247.md): The \_UpgradeBeforeConfigurationChange function in lib/client/gnt\_cluster.py in Ganeti 2.10.0 before 2.10.7 and 2.11.0 before 2.11.5 uses wor (no CVSS) - [CVE-2012-1503](https://cve.now/CVE-2012-1503.md): Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote attackers to inject a (no CVSS) - [CVE-2014-2593](https://cve.now/CVE-2014-2593.md): The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell met (no CVSS) - [CVE-2014-4930](https://cve.now/CVE-2014-4930.md): Multiple cross-site scripting (XSS) vulnerabilities in event/index2.do in ManageEngine EventLog Analyzer before 9.0 build 9002 allow remote (no CVSS) - [CVE-2014-5127](https://cve.now/CVE-2014-5127.md): Open redirect vulnerability in Innovative Interfaces Encore Discovery Solution 4.3 allows remote attackers to redirect users to arbitrary we (no CVSS) - [CVE-2014-5128](https://cve.now/CVE-2014-5128.md): Innovative Interfaces Encore Discovery Solution 4.3 places a session token in the URI, which might allow remote attackers to obtain sensitiv (no CVSS) - [CVE-2014-5337](https://cve.now/CVE-2014-5337.md): The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remo (no CVSS) - [CVE-2013-5467](https://cve.now/CVE-2013-5467.md): Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and Monitoring Server (ms) (no CVSS) - [CVE-2014-0600](https://cve.now/CVE-2014-0600.md): FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or write to arbitrary fi (no CVSS) - [CVE-2014-0888](https://cve.now/CVE-2014-0888.md): IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenticated users to bypass (no CVSS) - [CVE-2014-0897](https://cve.now/CVE-2014-0897.md): The Configuration Patterns component in IBM Flex System Manager (FSM) 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an enc (no CVSS) - [CVE-2014-3024](https://cve.now/CVE-2014-3024.md): Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 through 7.5.0.6 and Maximo Asset (no CVSS) - [CVE-2014-3084](https://cve.now/CVE-2014-3084.md): IBM Maximo Asset Management 6.1 through 6.5, 7.1 through 7.1.1.13, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5.0 through 7.5.0.3 an (no CVSS) - [CVE-2014-3093](https://cve.now/CVE-2014-3093.md): IBM PowerVC 1.2.0 before FP3 and 1.2.1 before FP2 uses cleartext passwords in (1) api-paste.ini, (2) debug logs, (3) the installation proces (no CVSS) - [CVE-2014-3346](https://cve.now/CVE-2014-3346.md): The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) does not validate a (no CVSS) - [CVE-2014-3349](https://cve.now/CVE-2014-3349.md): Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not validate file types during the handling of file submission, which a (no CVSS) - [CVE-2014-3350](https://cve.now/CVE-2014-3350.md): Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly implement URL redirection, which allows remote authenticat (no CVSS) - [CVE-2014-3351](https://cve.now/CVE-2014-3351.md): Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly consider whether a session is a problematic NULL session, (no CVSS) - [CVE-2014-4806](https://cve.now/CVE-2014-4806.md): The installation process in IBM Security AppScan Enterprise 8.x before 8.6.0.2 iFix 003, 8.7.x before 8.7.0.1 iFix 003, 8.8.x before 8.8.0.1 (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-08-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.