# CVEs published 2014-11-08

7 CVEs were published on November 8, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-6097](https://cve.now/CVE-2014-6097.md): IBM DB2 9.7 before FP10 and 9.8 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daem (no CVSS)
- [CVE-2014-6146](https://cve.now/CVE-2014-6146.md): IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging (no CVSS)
- [CVE-2014-6159](https://cve.now/CVE-2014-6159.md): IBM DB2 9.7 before FP10, 9.8 through FP5, 10.1 through FT4, and 10.5 through FP4 on Linux, UNIX, and Windows, when immediate AUTO\_REVAL is e (no CVSS)
- [CVE-2014-6161](https://cve.now/CVE-2014-6161.md): Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool/Impact 6.1.1 before 6.1.1.1-TIV-NCI-IF0001 allows remote authenticated users (no CVSS)
- [CVE-2014-6300](https://cve.now/CVE-2014-6300.md): Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2014-7818](https://cve.now/CVE-2014-7818.md): Directory traversal vulnerability in actionpack/lib/action\_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.20, (no CVSS, actionpack)
- [CVE-2014-7819](https://cve.now/CVE-2014-7819.md): Multiple directory traversal vulnerabilities in server.rb in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2. (no CVSS, sprockets)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-11-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.