# CVEs published 2014-04-20

2 CVEs were published on April 20, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-1517](https://cve.now/CVE-2014-1517.md): The login form in Bugzilla 2.x, 3.x, 4.x before 4.4.3, and 4.5.x before 4.5.3 does not properly handle a correctly authenticated but uninten (no CVSS)
- [CVE-2014-2665](https://cve.now/CVE-2014-2665.md): includes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before 1.21.8, and 1.22.x before 1.22.5 does not (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-04-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.