# CVEs published 2014-10-23

10 CVEs were published on October 23, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0619](https://cve.now/CVE-2014-0619.md): Untrusted search path vulnerability in Hamster Free ZIP Archiver 2.0.1.7 allows local users to execute arbitrary code and conduct DLL hijack (no CVSS)
- [CVE-2014-2230](https://cve.now/CVE-2014-2230.md): Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to a (no CVSS)
- [CVE-2014-7281](https://cve.now/CVE-2014-7281.md): Cross-site request forgery (CSRF) vulnerability in Shenzhen Tenda Technology Tenda A32 Router with firmware 5.07.53\_CN allows remote attacke (no CVSS)
- [CVE-2014-7292](https://cve.now/CVE-2014-7292.md): Open redirect vulnerability in the Click-Through feature in Newtelligence dasBlog 2.1 (2.1.8102.813), 2.2 (2.2.8279.16125), and 2.3 (2.3.907 (no CVSS)
- [CVE-2014-8071](https://cve.now/CVE-2014-8071.md): Multiple cross-site scripting (XSS) vulnerabilities in OpenMRS 2.1 Standalone Edition allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2014-8072](https://cve.now/CVE-2014-8072.md): The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to (no CVSS)
- [CVE-2014-8073](https://cve.now/CVE-2014-8073.md): Cross-site request forgery (CSRF) vulnerability in OpenMRS 2.1 Standalone Edition allows remote attackers to hijack the authentication of ad (no CVSS)
- [CVE-2014-3828](https://cve.now/CVE-2014-3828.md): Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attac (no CVSS)
- [CVE-2014-3829](https://cve.now/CVE-2014-3829.md): displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execu (no CVSS)
- [CVE-2014-4766](https://cve.now/CVE-2014-4766.md): IBM Sametime Classic Meeting Server 8.0.x and 8.5.x allows remote attackers to obtain sensitive information by reading an exported Record an (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-10-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.