# CVEs published 2014-02-18

12 CVEs were published on February 18, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-6396](https://cve.now/CVE-2013-6396.md): The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers… (no CVSS, python-swiftclient)
- [CVE-2014-1943](https://cve.now/CVE-2014-1943.md): Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and… (no CVSS)
- [CVE-2013-7226](https://cve.now/CVE-2013-7226.md): Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2013-7327](https://cve.now/CVE-2013-7327.md): The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a… (no CVSS)
- [CVE-2013-7328](https://cve.now/CVE-2013-7328.md): Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a… (no CVSS)
- [CVE-2014-1861](https://cve.now/CVE-2014-1861.md): The client in Jetro COCKPIT Secure Browsing (JCSB) 4.3.1 and 4.3.3 does not validate the FileName element in an RDP\_FILE\_TRANSFER… (no CVSS)
- [CVE-2014-1903](https://cve.now/CVE-2014-1903.md): admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before… (no CVSS)
- [CVE-2014-2019](https://cve.now/CVE-2014-2019.md): The iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an intended password requirement, and turn… (no CVSS)
- [CVE-2014-2020](https://cve.now/CVE-2014-2020.md): ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote attackers to obtain sensitive information by… (no CVSS)
- [CVE-2014-0625](https://cve.now/CVE-2014-0625.md): The SSLSocket implementation in the (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote… (no CVSS)
- [CVE-2014-0626](https://cve.now/CVE-2014-0626.md): The (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 make it easier for remote attackers to bypass… (no CVSS)
- [CVE-2014-0627](https://cve.now/CVE-2014-0627.md): The SSLEngine API implementation in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to trigger the… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-02-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.