# CVEs published 2014-11-12

5 CVEs were published on November 12, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-1635](https://cve.now/CVE-2014-1635.md): Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103\_WW\_1.10.17m allows remote attackers to execute (no CVSS)
- [CVE-2014-8555](https://cve.now/CVE-2014-8555.md): Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attackers to read arbitrar (no CVSS)
- [CVE-2014-8734](https://cve.now/CVE-2014-8734.md): The Organic Groups Menu (aka OG Menu) module before 7.x-2.2 for Drupal allows remote authenticated users with the "access administration pag (no CVSS)
- [CVE-2014-8735](https://cve.now/CVE-2014-8735.md): The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote (no CVSS)
- [CVE-2014-8736](https://cve.now/CVE-2014-8736.md): The Open Atrium Core module for Drupal before 7.x-2.22 allows remote attackers to bypass access restrictions and read file attachments that (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-11-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.