# CVEs published 2014-02-08

10 CVEs were published on February 8, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1773](https://cve.now/CVE-2011-1773.md): virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VN (no CVSS)
- [CVE-2011-4099](https://cve.now/CVE-2011-4099.md): The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows lo (no CVSS)
- [CVE-2012-5524](https://cve.now/CVE-2012-5524.md): The \_ssl\_verify\_callback function in tls\_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attacke (no CVSS)
- [CVE-2013-1904](https://cve.now/CVE-2013-1904.md): Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote atta (no CVSS)
- [CVE-2013-2191](https://cve.now/CVE-2013-2191.md): python-bugzilla before 0.9.0 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof Bugzilla servers via a (no CVSS, python-bugzilla)
- [CVE-2014-0039](https://cve.now/CVE-2014-0039.md): Untrusted search path vulnerability in fwsnort before 1.6.4, when not running as root, allows local users to execute arbitrary code via a Tr (no CVSS)
- [CVE-2014-0044](https://cve.now/CVE-2014-0044.md): The opus\_packet\_get\_samples\_per\_frame function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows remote attackers to caus (no CVSS)
- [CVE-2014-0045](https://cve.now/CVE-2014-0045.md): The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots, Mumble for iOS 1.1 throug (no CVSS)
- [CVE-2014-1869](https://cve.now/CVE-2014-1869.md): Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained by Jon Rohan and James (no CVSS)
- [CVE-2014-1916](https://cve.now/CVE-2014-1916.md): The (1) opus\_packet\_get\_nb\_frames and (2) opus\_packet\_get\_samples\_per\_frame functions in the client in MumbleKit before commit fd190328a9b24 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-02-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.