# CVEs published 2014-10-30

7 CVEs were published on October 30, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-7409](https://cve.now/CVE-2013-7409.md): Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary (no CVSS)
- [CVE-2013-3304](https://cve.now/CVE-2013-3304.md): Directory traversal vulnerability in Dell EqualLogic PS4000 with firmware 6.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2014-3446](https://cve.now/CVE-2014-3446.md): SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbi (no CVSS)
- [CVE-2014-3584](https://cve.now/CVE-2014-3584.md): The SamlHeaderInHandler in Apache CXF before 2.6.11, 2.7.x before 2.7.8, and 3.0.x before 3.0.1 allows remote attackers to cause a denial of (no CVSS, org.apache.cxf:cxf-rt-frontend-jaxrs)
- [CVE-2014-3623](https://cve.now/CVE-2014-3623.md): Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBindi (no CVSS, org.apache.ws.security:wss4j · org.apache.wss4j:wss4j-ws-se…)
- [CVE-2014-3684](https://cve.now/CVE-2014-3684.md): The tm\_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 5.0.x, 4.5.x, 4.2 (no CVSS)
- [CVE-2014-7877](https://cve.now/CVE-2014-7877.md): Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-10-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.