# CVEs published 2014-04-16

97 CVEs were published on April 16, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-4694](https://cve.now/CVE-2013-4694.md): Stack-based buffer overflow in gen\_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) (no CVSS)
- [CVE-2011-0460](https://cve.now/CVE-2011-0460.md): The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkey (no CVSS)
- [CVE-2011-0993](https://cve.now/CVE-2011-0993.md): SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive informati (no CVSS)
- [CVE-2011-3180](https://cve.now/CVE-2011-3180.md): kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attacker (no CVSS)
- [CVE-2011-4089](https://cve.now/CVE-2011-4089.md): The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, (no CVSS)
- [CVE-2011-4192](https://cve.now/CVE-2011-4192.md): kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers (no CVSS)
- [CVE-2011-4193](https://cve.now/CVE-2011-4193.md): Cross-site scripting (XSS) vulnerability in the overlay files tab in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for Syste (no CVSS)
- [CVE-2011-4195](https://cve.now/CVE-2011-4195.md): kiwi before 4.98.05, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attacker (no CVSS)
- [CVE-2011-4406](https://cve.now/CVE-2011-4406.md): The Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges when changing language settings, which all (no CVSS)
- [CVE-2013-1764](https://cve.now/CVE-2013-1764.md): The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method. (no CVSS)
- [CVE-2014-1453](https://cve.now/CVE-2014-1453.md): The NFS server (nfsserver) in FreeBSD 8.3 through 10.0 does not acquire locks in the proper order when converting a directory file handle to (no CVSS)
- [CVE-2014-2338](https://cve.now/CVE-2014-2338.md): IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE\_SA during (1) initiation or (2) r (no CVSS)
- [CVE-2014-2410](https://cve.now/CVE-2014-2410.md): Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vec (no CVSS)
- [CVE-2014-2411](https://cve.now/CVE-2014-2411.md): Unspecified vulnerability in the Oracle Identity Analytics component in Oracle Fusion Middleware Oracle Identity Analytics 11.1.1.5 and Sun (no CVSS)
- [CVE-2014-2412](https://cve.now/CVE-2014-2412.md): Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confi (no CVSS)
- [CVE-2014-2413](https://cve.now/CVE-2014-2413.md): Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown v (no CVSS)
- [CVE-2014-2414](https://cve.now/CVE-2014-2414.md): Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, (no CVSS)
- [CVE-2014-2415](https://cve.now/CVE-2014-2415.md): Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect c (no CVSS)
- [CVE-2014-2416](https://cve.now/CVE-2014-2416.md): Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect c (no CVSS)
- [CVE-2014-2417](https://cve.now/CVE-2014-2417.md): Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect c (no CVSS)
- [CVE-2014-2418](https://cve.now/CVE-2014-2418.md): Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect c (no CVSS)
- [CVE-2014-2419](https://cve.now/CVE-2014-2419.md): Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect avail (no CVSS)
- [CVE-2014-2420](https://cve.now/CVE-2014-2420.md): Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via un (no CVSS)
- [CVE-2014-2421](https://cve.now/CVE-2014-2421.md): Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to a (no CVSS)
- [CVE-2014-2422](https://cve.now/CVE-2014-2422.md): Unspecified vulnerability in Oracle Java SE 7u51 and 8, and JavaFX 2.2.51, allows remote attackers to affect confidentiality, integrity, and (no CVSS)
- [CVE-2014-2423](https://cve.now/CVE-2014-2423.md): Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, (no CVSS)
- [CVE-2014-2424](https://cve.now/CVE-2014-2424.md): Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users (no CVSS)
- [CVE-2014-2425](https://cve.now/CVE-2014-2425.md): Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users (no CVSS)
- [CVE-2014-2426](https://cve.now/CVE-2014-2426.md): Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users (no CVSS)
- [CVE-2014-2427](https://cve.now/CVE-2014-2427.md): Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confiden (no CVSS)
- [CVE-2014-2428](https://cve.now/CVE-2014-2428.md): Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, (no CVSS)
- [CVE-2014-2429](https://cve.now/CVE-2014-2429.md): Unspecified vulnerability in the PeopleSoft Enterprise CS Campus Self Service component in Oracle PeopleSoft Products 9.0 allows remote auth (no CVSS)
- [CVE-2014-2430](https://cve.now/CVE-2014-2430.md): Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect avail (no CVSS)
- [CVE-2014-2431](https://cve.now/CVE-2014-2431.md): Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability vi (no CVSS)
- [CVE-2014-2432](https://cve.now/CVE-2014-2432.md): Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to a (no CVSS)
- [CVE-2014-2433](https://cve.now/CVE-2014-2433.md): Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.53 allows remote attackers t (no CVSS)
- [CVE-2014-2434](https://cve.now/CVE-2014-2434.md): Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via vectors rel (no CVSS)
- [CVE-2014-2435](https://cve.now/CVE-2014-2435.md): Unspecified vulnerability in Oracle MySQL Server 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2014-2436](https://cve.now/CVE-2014-2436.md): Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confi (no CVSS)
- [CVE-2014-2437](https://cve.now/CVE-2014-2437.md): Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote at (no CVSS)
- [CVE-2014-2438](https://cve.now/CVE-2014-2438.md): Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect avail (no CVSS)
- [CVE-2014-2439](https://cve.now/CVE-2014-2439.md): Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization 5.0 and 5.1 allows remote attackers t (no CVSS)
- [CVE-2014-2440](https://cve.now/CVE-2014-2440.md): Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to (no CVSS)
- [CVE-2014-2441](https://cve.now/CVE-2014-2441.md): Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.32, 4.2.24, and 4.3.10 allows (no CVSS)
- [CVE-2014-2442](https://cve.now/CVE-2014-2442.md): Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via vectors rel (no CVSS)
- [CVE-2014-2443](https://cve.now/CVE-2014-2443.md): Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote at (no CVSS)
- [CVE-2014-2444](https://cve.now/CVE-2014-2444.md): Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect confidentiality, integrity, (no CVSS)
- [CVE-2014-2445](https://cve.now/CVE-2014-2445.md): Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticate (no CVSS)
- [CVE-2014-2446](https://cve.now/CVE-2014-2446.md): Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote au (no CVSS)
- [CVE-2014-2447](https://cve.now/CVE-2014-2447.md): Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote at (no CVSS)
- [CVE-2014-2448](https://cve.now/CVE-2014-2448.md): Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote at (no CVSS)
- [CVE-2014-2449](https://cve.now/CVE-2014-2449.md): Unspecified vulnerability in the PeopleSoft Enterprise HRMS Talent Acquisition Manager component in Oracle PeopleSoft Products 9.0, 9.1, and (no CVSS)
- [CVE-2014-2450](https://cve.now/CVE-2014-2450.md): Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2014-2451](https://cve.now/CVE-2014-2451.md): Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2014-2452](https://cve.now/CVE-2014-2452.md): Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 allows remote authenticated users to a (no CVSS)
- [CVE-2014-2453](https://cve.now/CVE-2014-2453.md): Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect (no CVSS)
- [CVE-2014-2454](https://cve.now/CVE-2014-2454.md): Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect (no CVSS)
- [CVE-2014-2455](https://cve.now/CVE-2014-2455.md): Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users (no CVSS)
- [CVE-2014-2457](https://cve.now/CVE-2014-2457.md): Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.0 and 6.1.0 allows remote (no CVSS)
- [CVE-2014-2458](https://cve.now/CVE-2014-2458.md): Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.1.0.3 and 6.1.1.3 allows r (no CVSS)
- [CVE-2014-2459](https://cve.now/CVE-2014-2459.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.3.2 and 6.3.3 allows loc (no CVSS)
- [CVE-2014-2460](https://cve.now/CVE-2014-2460.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3 (no CVSS)
- [CVE-2014-2461](https://cve.now/CVE-2014-2461.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3 (no CVSS)
- [CVE-2014-2463](https://cve.now/CVE-2014-2463.md): Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remot (no CVSS)
- [CVE-2014-2464](https://cve.now/CVE-2014-2464.md): Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3.0 allows remote authentica (no CVSS)
- [CVE-2014-2465](https://cve.now/CVE-2014-2465.md): Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote attackers to (no CVSS)
- [CVE-2014-2466](https://cve.now/CVE-2014-2466.md): Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticate (no CVSS)
- [CVE-2014-2467](https://cve.now/CVE-2014-2467.md): Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticate (no CVSS)
- [CVE-2014-2468](https://cve.now/CVE-2014-2468.md): Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integr (no CVSS)
- [CVE-2014-2470](https://cve.now/CVE-2014-2470.md): Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 all (no CVSS)
- [CVE-2014-2471](https://cve.now/CVE-2014-2471.md): Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via (no CVSS)
- [CVE-2014-0451](https://cve.now/CVE-2014-0451.md): Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confiden (no CVSS)
- [CVE-2014-0452](https://cve.now/CVE-2014-0452.md): Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, (no CVSS)
- [CVE-2014-0453](https://cve.now/CVE-2014-0453.md): Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote (no CVSS)
- [CVE-2014-0454](https://cve.now/CVE-2014-0454.md): Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integr (no CVSS)
- [CVE-2014-0455](https://cve.now/CVE-2014-0455.md): Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integr (no CVSS)
- [CVE-2014-0456](https://cve.now/CVE-2014-0456.md): Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, (no CVSS)
- [CVE-2014-0457](https://cve.now/CVE-2014-0457.md): Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remo (no CVSS)
- [CVE-2014-0458](https://cve.now/CVE-2014-0458.md): Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, (no CVSS)
- [CVE-2014-0459](https://cve.now/CVE-2014-0459.md): Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknow (no CVSS)
- [CVE-2014-0460](https://cve.now/CVE-2014-0460.md): Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote (no CVSS)
- [CVE-2014-0461](https://cve.now/CVE-2014-0461.md): Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, (no CVSS)
- [CVE-2014-0463](https://cve.now/CVE-2014-0463.md): Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a (no CVSS)
- [CVE-2014-0464](https://cve.now/CVE-2014-0464.md): Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a (no CVSS)
- [CVE-2014-0465](https://cve.now/CVE-2014-0465.md): Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users (no CVSS)
- [CVE-2014-2397](https://cve.now/CVE-2014-2397.md): Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integr (no CVSS)
- [CVE-2014-2398](https://cve.now/CVE-2014-2398.md): Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenti (no CVSS)
- [CVE-2014-2399](https://cve.now/CVE-2014-2399.md): Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrit (no CVSS)
- [CVE-2014-2400](https://cve.now/CVE-2014-2400.md): Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrit (no CVSS)
- [CVE-2014-2401](https://cve.now/CVE-2014-2401.md): Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to a (no CVSS)
- [CVE-2014-2402](https://cve.now/CVE-2014-2402.md): Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integr (no CVSS)
- [CVE-2014-2403](https://cve.now/CVE-2014-2403.md): Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality (no CVSS)
- [CVE-2014-2404](https://cve.now/CVE-2014-2404.md): Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3, 11.1.1.3.0, 11.1.1.5.0, 11.1.1.7.0, 1 (no CVSS)
- [CVE-2014-2406](https://cve.now/CVE-2014-2406.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote aut (no CVSS)
- [CVE-2014-2407](https://cve.now/CVE-2014-2407.md): Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect c (no CVSS)
- [CVE-2014-2408](https://cve.now/CVE-2014-2408.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote aut (no CVSS)
- [CVE-2014-2409](https://cve.now/CVE-2014-2409.md): Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-04-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.