# CVEs published 2014-04-03

3 CVEs were published on April 3, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0093](https://cve.now/CVE-2014-0093.md): Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager (JSM), does not properly apply permissions d (no CVSS)
- [CVE-2014-0466](https://cve.now/CVE-2014-0466.md): The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrar (no CVSS)
- [CVE-2014-2340](https://cve.now/CVE-2014-2340.md): Cross-site request forgery (CSRF) vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers to hijack the authe (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-04-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.