# CVEs published 2014-04-18

18 CVEs were published on April 18, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-4279](https://cve.now/CVE-2013-4279.md): imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl… (no CVSS)
- [CVE-2013-7195](https://cve.now/CVE-2013-7195.md): PHPFox 3.7.3 and 3.7.4 allows remote authenticated users to bypass intended "Only Me" restrictions and "like" a publication via a request… (no CVSS)
- [CVE-2013-7196](https://cve.now/CVE-2013-7196.md): static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment… (no CVSS)
- [CVE-2014-2014](https://cve.now/CVE-2014-2014.md): imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs… (no CVSS)
- [CVE-2014-2286](https://cve.now/CVE-2014-2286.md): main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x… (no CVSS)
- [CVE-2014-2287](https://cve.now/CVE-2014-2287.md): channels/chan\_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk… (no CVSS)
- [CVE-2014-2288](https://cve.now/CVE-2014-2288.md): The PJSIP channel driver in Asterisk Open Source 12.x before 12.1.1, when qualify\_frequency "is enabled on an AOR and the remote SIP… (no CVSS)
- [CVE-2014-2289](https://cve.now/CVE-2014-2289.md): res/res\_pjsip\_exten\_state.c in the PJSIP channel driver in Asterisk Open Source 12.x before 12.1.0 allows remote authenticated users to… (no CVSS)
- [CVE-2014-2522](https://cve.now/CVE-2014-2522.md): curl and libcurl 7.27.0 through 7.35.0, when running on Windows and using the SChannel/Winssl TLS backend, does not verify that the server… (no CVSS)
- [CVE-2014-2597](https://cve.now/CVE-2014-2597.md): PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service (disabled keyboard or crash) via a large input… (no CVSS)
- [CVE-2012-0871](https://cve.now/CVE-2012-0871.md): The session\_link\_x11\_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users… (no CVSS)
- [CVE-2012-6646](https://cve.now/CVE-2012-6646.md): F-Secure Anti-Virus, Safe Anywhere, and PSB Workstation Security before 11500 for Mac OS X allows local users to disable the Mac OS X… (no CVSS)
- [CVE-2013-4289](https://cve.now/CVE-2013-4289.md): Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors… (no CVSS)
- [CVE-2013-4290](https://cve.now/CVE-2013-4290.md): Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1)… (no CVSS)
- [CVE-2013-7369](https://cve.now/CVE-2013-7369.md): SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server… (no CVSS)
- [CVE-2014-0150](https://cve.now/CVE-2014-0150.md): Integer overflow in the virtio\_net\_handle\_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute… (no CVSS)
- [CVE-2014-2844](https://cve.now/CVE-2014-2844.md): Cross-site scripting (XSS) vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated… (no CVSS)
- [CVE-2014-2856](https://cve.now/CVE-2014-2856.md): Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-04-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.