# CVEs published 2014-04-09

17 CVEs were published on April 9, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0165](https://cve.now/CVE-2014-0165.md): WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related (no CVSS)
- [CVE-2014-0166](https://cve.now/CVE-2014-0166.md): The wp\_validate\_auth\_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determi (no CVSS)
- [CVE-2014-2544](https://cve.now/CVE-2014-2544.md): Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Serve (no CVSS)
- [CVE-2014-1716](https://cve.now/CVE-2014-1716.md): Cross-site scripting (XSS) vulnerability in the Runtime\_SetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34 (no CVSS)
- [CVE-2014-1717](https://cve.now/CVE-2014-1717.md): Google V8, as used in Google Chrome before 34.0.1847.116, does not properly use numeric casts during handling of typed arrays, which allows (no CVSS)
- [CVE-2014-1718](https://cve.now/CVE-2014-1718.md): Integer overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser/renderer\_host/software\_frame\_manager.cc in the soft (no CVSS)
- [CVE-2014-1719](https://cve.now/CVE-2014-1719.md): Use-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in content/worker/websharedworker\_stub.cc in the (no CVSS)
- [CVE-2014-1720](https://cve.now/CVE-2014-1720.md): Use-after-free vulnerability in the HTMLBodyElement::insertedInto function in core/html/HTMLBodyElement.cpp in Blink, as used in Google Chro (no CVSS)
- [CVE-2014-1721](https://cve.now/CVE-2014-1721.md): Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers to (no CVSS)
- [CVE-2014-1722](https://cve.now/CVE-2014-1722.md): Use-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in core/rendering/RenderBlock.cpp in Blink, (no CVSS)
- [CVE-2014-1723](https://cve.now/CVE-2014-1723.md): The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional I (no CVSS)
- [CVE-2014-1724](https://cve.now/CVE-2014-1724.md): Use-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote (no CVSS)
- [CVE-2014-1725](https://cve.now/CVE-2014-1725.md): The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle s (no CVSS)
- [CVE-2014-1726](https://cve.now/CVE-2014-1726.md): The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same Origin Policy and for (no CVSS)
- [CVE-2014-1727](https://cve.now/CVE-2014-1727.md): Use-after-free vulnerability in content/renderer/renderer\_webcolorchooser\_impl.h in Google Chrome before 34.0.1847.116 allows remote attacke (no CVSS)
- [CVE-2014-1728](https://cve.now/CVE-2014-1728.md): Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.116 allow attackers to cause a denial of service or possibly have oth (no CVSS)
- [CVE-2014-1729](https://cve.now/CVE-2014-1729.md): Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, allow attackers to cause (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-04-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.