# CVEs published 2014-04-09

17 CVEs were published on April 9, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0165](https://cve.now/CVE-2014-0165.md): WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role… (no CVSS)
- [CVE-2014-0166](https://cve.now/CVE-2014-0166.md): The wp\_validate\_auth\_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly… (no CVSS)
- [CVE-2014-2544](https://cve.now/CVE-2014-2544.md): Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire… (no CVSS)
- [CVE-2014-1716](https://cve.now/CVE-2014-1716.md): Cross-site scripting (XSS) vulnerability in the Runtime\_SetPrototype function in runtime.cc in Google V8, as used in Google Chrome before… (no CVSS)
- [CVE-2014-1717](https://cve.now/CVE-2014-1717.md): Google V8, as used in Google Chrome before 34.0.1847.116, does not properly use numeric casts during handling of typed arrays, which… (no CVSS)
- [CVE-2014-1718](https://cve.now/CVE-2014-1718.md): Integer overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser/renderer\_host/software\_frame\_manager.cc in the… (no CVSS)
- [CVE-2014-1719](https://cve.now/CVE-2014-1719.md): Use-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in content/worker/websharedworker\_stub.cc in… (no CVSS)
- [CVE-2014-1720](https://cve.now/CVE-2014-1720.md): Use-after-free vulnerability in the HTMLBodyElement::insertedInto function in core/html/HTMLBodyElement.cpp in Blink, as used in Google… (no CVSS)
- [CVE-2014-1721](https://cve.now/CVE-2014-1721.md): Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers… (no CVSS)
- [CVE-2014-1722](https://cve.now/CVE-2014-1722.md): Use-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in core/rendering/RenderBlock.cpp in… (no CVSS)
- [CVE-2014-1723](https://cve.now/CVE-2014-1723.md): The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional… (no CVSS)
- [CVE-2014-1724](https://cve.now/CVE-2014-1724.md): Use-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows… (no CVSS)
- [CVE-2014-1725](https://cve.now/CVE-2014-1725.md): The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle… (no CVSS)
- [CVE-2014-1726](https://cve.now/CVE-2014-1726.md): The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same Origin Policy and… (no CVSS)
- [CVE-2014-1727](https://cve.now/CVE-2014-1727.md): Use-after-free vulnerability in content/renderer/renderer\_webcolorchooser\_impl.h in Google Chrome before 34.0.1847.116 allows remote… (no CVSS)
- [CVE-2014-1728](https://cve.now/CVE-2014-1728.md): Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.116 allow attackers to cause a denial of service or possibly have… (no CVSS)
- [CVE-2014-1729](https://cve.now/CVE-2014-1729.md): Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, allow attackers to… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-04-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.