# CVEs published 2014-04-18

18 CVEs were published on April 18, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-4279](https://cve.now/CVE-2013-4279.md): imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl vers (no CVSS)
- [CVE-2013-7195](https://cve.now/CVE-2013-7195.md): PHPFox 3.7.3 and 3.7.4 allows remote authenticated users to bypass intended "Only Me" restrictions and "like" a publication via a request th (no CVSS)
- [CVE-2013-7196](https://cve.now/CVE-2013-7196.md): static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment on (no CVSS)
- [CVE-2014-2014](https://cve.now/CVE-2014-2014.md): imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which (no CVSS)
- [CVE-2014-2286](https://cve.now/CVE-2014-2286.md): main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x befo (no CVSS)
- [CVE-2014-2287](https://cve.now/CVE-2014-2287.md): channels/chan\_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1. (no CVSS)
- [CVE-2014-2288](https://cve.now/CVE-2014-2288.md): The PJSIP channel driver in Asterisk Open Source 12.x before 12.1.1, when qualify\_frequency "is enabled on an AOR and the remote SIP server (no CVSS)
- [CVE-2014-2289](https://cve.now/CVE-2014-2289.md): res/res\_pjsip\_exten\_state.c in the PJSIP channel driver in Asterisk Open Source 12.x before 12.1.0 allows remote authenticated users to caus (no CVSS)
- [CVE-2014-2522](https://cve.now/CVE-2014-2522.md): curl and libcurl 7.27.0 through 7.35.0, when running on Windows and using the SChannel/Winssl TLS backend, does not verify that the server h (no CVSS)
- [CVE-2014-2597](https://cve.now/CVE-2014-2597.md): PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service (disabled keyboard or crash) via a large input buff (no CVSS)
- [CVE-2012-0871](https://cve.now/CVE-2012-0871.md): The session\_link\_x11\_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to (no CVSS)
- [CVE-2012-6646](https://cve.now/CVE-2012-6646.md): F-Secure Anti-Virus, Safe Anywhere, and PSB Workstation Security before 11500 for Mac OS X allows local users to disable the Mac OS X firewa (no CVSS)
- [CVE-2013-4289](https://cve.now/CVE-2013-4289.md): Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, wh (no CVSS)
- [CVE-2013-4290](https://cve.now/CVE-2013-4290.md): Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openj (no CVSS)
- [CVE-2013-7369](https://cve.now/CVE-2013-7369.md): SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before (no CVSS)
- [CVE-2014-0150](https://cve.now/CVE-2014-0150.md): Integer overflow in the virtio\_net\_handle\_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute ar (no CVSS)
- [CVE-2014-2844](https://cve.now/CVE-2014-2844.md): Cross-site scripting (XSS) vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administra (no CVSS)
- [CVE-2014-2856](https://cve.now/CVE-2014-2856.md): Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-04-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.