# CVEs published 2014-05-21

14 CVEs were published on May 21, 2014: 0 critical, 1 high. Days are UTC.

- [CVE-2011-2198](https://cve.now/CVE-2011-2198.md): The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remote authenticated users to cause a denial (no CVSS)
- [CVE-2012-1166](https://cve.now/CVE-2012-1166.md): The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via th (no CVSS)
- [CVE-2014-3806](https://cve.now/CVE-2014-3806.md): Directory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4.6 allows remote attackers to read arbitrar (no CVSS)
- [CVE-2014-3807](https://cve.now/CVE-2014-3807.md): Multiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive 6.7.2 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2014-3808](https://cve.now/CVE-2014-3808.md): Multiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive before 6.7.2 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2014-1743](https://cve.now/CVE-2014-1743.md): Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink, as used in Google Chro (no CVSS)
- [CVE-2014-1744](https://cve.now/CVE-2014-1744.md): Integer overflow in the AudioInputRendererHost::OnCreateStream function in content/browser/renderer\_host/media/audio\_input\_renderer\_host.cc (no CVSS)
- [CVE-2014-1746](https://cve.now/CVE-2014-1746.md): The InMemoryUrlProtocol::Read function in media/filters/in\_memory\_url\_protocol.cc in Google Chrome before 35.0.1916.114 relies on an insuffi (no CVSS)
- [CVE-2014-1747](https://cve.now/CVE-2014-1747.md): Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as u (no CVSS)
- [CVE-2014-1748](https://cve.now/CVE-2014-1748.md): The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote atta (no CVSS)
- [CVE-2014-1749](https://cve.now/CVE-2014-1749.md): Multiple unspecified vulnerabilities in Google Chrome before 35.0.1916.114 allow attackers to cause a denial of service or possibly have oth (no CVSS)
- [CVE-2014-3152](https://cve.now/CVE-2014-3152.md): Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Goo (no CVSS)
- [CVE-2014-3803](https://cve.now/CVE-2014-3803.md): The SpeechInput feature in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to enable microphone access and obt (no CVSS)
- [CVE-2014-1745](https://cve.now/CVE-2014-1745.md): Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to c (CVSS 7.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-05-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.