# CVEs published 2014-02-18

12 CVEs were published on February 18, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-6396](https://cve.now/CVE-2013-6396.md): The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, wh (no CVSS, python-swiftclient)
- [CVE-2014-1943](https://cve.now/CVE-2014-1943.md): Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) (no CVSS)
- [CVE-2013-7226](https://cve.now/CVE-2013-7226.md): Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2013-7327](https://cve.now/CVE-2013-7327.md): The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a den (no CVSS)
- [CVE-2013-7328](https://cve.now/CVE-2013-7328.md): Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a de (no CVSS)
- [CVE-2014-1861](https://cve.now/CVE-2014-1861.md): The client in Jetro COCKPIT Secure Browsing (JCSB) 4.3.1 and 4.3.3 does not validate the FileName element in an RDP\_FILE\_TRANSFER document, (no CVSS)
- [CVE-2014-1903](https://cve.now/CVE-2014-1903.md): admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22 (no CVSS)
- [CVE-2014-2019](https://cve.now/CVE-2014-2019.md): The iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an intended password requirement, and turn off (no CVSS)
- [CVE-2014-2020](https://cve.now/CVE-2014-2020.md): ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote attackers to obtain sensitive information by using (no CVSS)
- [CVE-2014-0625](https://cve.now/CVE-2014-0625.md): The SSLSocket implementation in the (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote a (no CVSS)
- [CVE-2014-0626](https://cve.now/CVE-2014-0626.md): The (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 make it easier for remote attackers to bypass i (no CVSS)
- [CVE-2014-0627](https://cve.now/CVE-2014-0627.md): The SSLEngine API implementation in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to trigger the selecti (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-02-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.