# CVEs published 2014-04-08

24 CVEs were published on April 8, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0315](https://cve.now/CVE-2014-0315.md): Untrusted search path vulnerability in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008… (no CVSS)
- [CVE-2014-0507](https://cve.now/CVE-2014-0507.md): Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before… (no CVSS)
- [CVE-2014-0508](https://cve.now/CVE-2014-0508.md): Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux… (no CVSS)
- [CVE-2014-0509](https://cve.now/CVE-2014-0509.md): Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows… (no CVSS)
- [CVE-2014-1751](https://cve.now/CVE-2014-1751.md): Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… (no CVSS)
- [CVE-2014-1752](https://cve.now/CVE-2014-1752.md): Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… (no CVSS)
- [CVE-2014-1753](https://cve.now/CVE-2014-1753.md): Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)… (no CVSS)
- [CVE-2014-1755](https://cve.now/CVE-2014-1755.md): Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… (no CVSS)
- [CVE-2014-1757](https://cve.now/CVE-2014-1757.md): Microsoft Word 2007 SP3 and 2010 SP1 and SP2, and Office Compatibility Pack SP3, allocates memory incorrectly for file conversions from a… (no CVSS)
- [CVE-2014-1758](https://cve.now/CVE-2014-1758.md): Stack-based buffer overflow in Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka… (no CVSS)
- [CVE-2014-1759](https://cve.now/CVE-2014-1759.md): pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service… (no CVSS)
- [CVE-2014-1760](https://cve.now/CVE-2014-1760.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… (no CVSS)
- [CVE-2014-2541](https://cve.now/CVE-2014-2541.md): The Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon… (no CVSS)
- [CVE-2014-2542](https://cve.now/CVE-2014-2542.md): Cross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon… (no CVSS)
- [CVE-2014-2543](https://cve.now/CVE-2014-2543.md): Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure… (no CVSS)
- [CVE-2011-4958](https://cve.now/CVE-2011-4958.md): Cross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6… (no CVSS)
- [CVE-2011-5277](https://cve.now/CVE-2011-5277.md): Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures (aka afsignatures) plugin 2.0.4 for MyBB allow… (no CVSS)
- [CVE-2011-5278](https://cve.now/CVE-2011-5278.md): SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allows remote attackers… (no CVSS)
- [CVE-2012-0033](https://cve.now/CVE-2012-0033.md): The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a… (no CVSS)
- [CVE-2012-1561](https://cve.now/CVE-2012-1561.md): Cross-site scripting (XSS) vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for… (no CVSS)
- [CVE-2012-6642](https://cve.now/CVE-2012-6642.md): Cross-site scripting (XSS) vulnerability in ClipBucket 2.6 allows remote attackers to inject arbitrary web script or HTML via the type… (no CVSS)
- [CVE-2012-6643](https://cve.now/CVE-2012-6643.md): Multiple SQL injection vulnerabilities in the update\_counter function in includes/functions.php in ClipBucket 2.6 allow remote attackers… (no CVSS)
- [CVE-2012-6644](https://cve.now/CVE-2012-6644.md): Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2012-6645](https://cve.now/CVE-2012-6645.md): Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-04-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.