# CVEs published 2014-11-13 9 CVEs were published on November 13, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2014-3602](https://cve.now/CVE-2014-3602.md): Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /p (no CVSS) - [CVE-2014-3674](https://cve.now/CVE-2014-3674.md): Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network reso (no CVSS) - [CVE-2014-7823](https://cve.now/CVE-2014-7823.md): The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR\_DOMAIN\_XML\_MI (no CVSS) - [CVE-2014-8359](https://cve.now/CVE-2014-8359.md): Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and (no CVSS) - [CVE-2014-8476](https://cve.now/CVE-2014-8476.md): The setlogin function in FreeBSD 8.4 through 10.1-RC4 does not initialize the buffer used to store the login name, which allows local users (no CVSS) - [CVE-2014-8554](https://cve.now/CVE-2014-8554.md): SQL injection vulnerability in the mc\_project\_get\_attachments function in api/soap/mc\_project\_api.php in MantisBT before 1.2.18 allows remot (no CVSS) - [CVE-2014-8557](https://cve.now/CVE-2014-8557.md): Multiple cross-site scripting (XSS) vulnerabilities in JExperts Channel Platform 5.0.33\_CCB allow remote attackers to inject arbitrary web s (no CVSS) - [CVE-2014-8564](https://cve.now/CVE-2014-8564.md): The \_gnutls\_ecc\_ansi\_x963\_export function in gnutls\_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows r (no CVSS) - [CVE-2014-8770](https://cve.now/CVE-2014-8770.md): Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a and earlier for Magent (no CVSS, dweeves/magmi) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-11-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.