# CVEs published 2014-02-10 19 CVEs were published on February 10, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2011-4610](https://cve.now/CVE-2011-4610.md): JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platf (no CVSS) - [CVE-2012-0064](https://cve.now/CVE-2012-0064.md): xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attack (no CVSS) - [CVE-2013-2055](https://cve.now/CVE-2013-2055.md): Unspecified vulnerability in Apache Wicket 1.4.x before 1.4.23, 1.5.x before 1.5.11, and 6.x before 6.8.0 allows remote attackers to obtain (no CVSS) - [CVE-2013-2214](https://cve.now/CVE-2013-2214.md): status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a s (no CVSS) - [CVE-2014-1213](https://cve.now/CVE-2014-1213.md): Sophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does (no CVSS) - [CVE-2014-1876](https://cve.now/CVE-2014-1876.md): The unpacker::redirect\_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R (no CVSS) - [CVE-2014-1930](https://cve.now/CVE-2014-1930.md): Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to preven (no CVSS) - [CVE-2014-1931](https://cve.now/CVE-2014-1931.md): The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attemp (no CVSS) - [CVE-2010-4777](https://cve.now/CVE-2010-4777.md): The Perl\_reg\_numbered\_buff\_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows co (no CVSS) - [CVE-2011-4091](https://cve.now/CVE-2011-4091.md): The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checking the user name, whic (no CVSS) - [CVE-2011-4092](https://cve.now/CVE-2011-4092.md): obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate. (no CVSS) - [CVE-2011-4093](https://cve.now/CVE-2011-4093.md): Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privilege (no CVSS) - [CVE-2011-4930](https://cve.now/CVE-2011-4930.md): Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and p (no CVSS) - [CVE-2012-2328](https://cve.now/CVE-2012-2328.md): internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Clien (no CVSS) - [CVE-2012-3404](https://cve.now/CVE-2012-3404.md): The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and other versions does not properly calculate a (no CVSS) - [CVE-2012-3405](https://cve.now/CVE-2012-3405.md): The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a (no CVSS) - [CVE-2012-3406](https://cve.now/CVE-2012-3406.md): The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly rest (no CVSS) - [CVE-2013-4736](https://cve.now/CVE-2013-4736.md): Multiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innov (no CVSS) - [CVE-2013-6024](https://cve.now/CVE-2013-6024.md): The Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway 10.x and 11.x, and FirePass 7.0.0 allow at (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-02-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.