# CVEs published 2014-05-06

11 CVEs were published on May 6, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-7353](https://cve.now/CVE-2013-7353.md): Integer overflow in the png\_set\_unknown\_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers (CVSS 6.5)
- [CVE-2013-7354](https://cve.now/CVE-2013-7354.md): Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service (crash) via a crafted image to th (CVSS 6.5)
- [CVE-2014-0193](https://cve.now/CVE-2014-0193.md): WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 all (no CVSS, io.netty:netty · io.netty:netty-all)
- [CVE-2014-2558](https://cve.now/CVE-2014-2558.md): The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitra (no CVSS)
- [CVE-2014-3202](https://cve.now/CVE-2014-3202.md): Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holdi (no CVSS)
- [CVE-2014-3203](https://cve.now/CVE-2014-3203.md): Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows phys (no CVSS)
- [CVE-2014-3204](https://cve.now/CVE-2014-3204.md): Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to byp (no CVSS)
- [CVE-2014-0185](https://cve.now/CVE-2014-0185.md): sapi/fpm/fpm/fpm\_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX (no CVSS)
- [CVE-2014-0198](https://cve.now/CVE-2014-0198.md): The do\_ssl3\_write function in s3\_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL\_MODE\_RELEASE\_BUFFERS is enabled, does not properly manage a b (no CVSS)
- [CVE-2014-1736](https://cve.now/CVE-2014-1736.md): Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux (no CVSS)
- [CVE-2014-2347](https://cve.now/CVE-2014-2347.md): AMTELCO miSecure Information Exposure (no CVSS, AMTELCO miSecureMessages)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-05-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.