# CVEs published 2014-04-27

19 CVEs were published on April 27, 2014: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2013-6053](https://cve.now/CVE-2013-6053.md): OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read. (no CVSS)
- [CVE-2014-2285](https://cve.now/CVE-2014-2285.md): The perl\_trapd\_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, a (no CVSS)
- [CVE-2011-3602](https://cve.now/CVE-2011-3602.md): Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite (no CVSS)
- [CVE-2011-3603](https://cve.now/CVE-2011-3603.md): The router advertisement daemon (radvd) before 1.8.2 does not properly handle errors in the privsep\_init function, which causes the radvd da (no CVSS)
- [CVE-2013-0296](https://cve.now/CVE-2013-0296.md): Race condition in pigz before 2.2.5 uses permissions derived from the umask when compressing a file before setting that file's permissions t (no CVSS)
- [CVE-2010-5105](https://cve.now/CVE-2010-5105.md): The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink at (no CVSS)
- [CVE-2011-3152](https://cve.now/CVE-2011-3152.md): DistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1: (no CVSS)
- [CVE-2013-6887](https://cve.now/CVE-2013-6887.md): OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division (no CVSS)
- [CVE-2014-0162](https://cve.now/CVE-2014-0162.md): The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allow (no CVSS, glance)
- [CVE-2014-3007](https://cve.now/CVE-2014-3007.md): Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharact (no CVSS, pillow)
- [CVE-2014-1762](https://cve.now/CVE-2014-1762.md): Unspecified vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code with medium-integrit (no CVSS)
- [CVE-2014-1763](https://cve.now/CVE-2014-1763.md): Use-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code and bypass a sand (no CVSS)
- [CVE-2014-1764](https://cve.now/CVE-2014-1764.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism by leve (no CVSS)
- [CVE-2014-1765](https://cve.now/CVE-2014-1765.md): Multiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote attackers to execute arbitrary code via uns (no CVSS)
- [CVE-2014-1766](https://cve.now/CVE-2014-1766.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-1776](https://cve.now/CVE-2014-1776.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial (CVSS 9.8, KEV)
- [CVE-2014-2994](https://cve.now/CVE-2014-2994.md): Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to execute arbitrary code v (no CVSS)
- [CVE-2014-0181](https://cve.now/CVE-2014-0181.md): The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the op (no CVSS)
- [CVE-2014-2889](https://cve.now/CVE-2014-2889.md): Off-by-one error in the bpf\_jit\_compile function in arch/x86/net/bpf\_jit\_comp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-04-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.