# CVEs published 2014-06-11

102 CVEs were published on June 11, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2010-5300](https://cve.now/CVE-2010-5300.md): Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash) and possibly execu (no CVSS)
- [CVE-2011-3625](https://cve.now/CVE-2011-3625.md): Stack-based buffer overflow in the sub\_read\_line\_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, allows remote attackers (no CVSS)
- [CVE-2014-0249](https://cve.now/CVE-2014-0249.md): The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membershi (no CVSS)
- [CVE-2014-2977](https://cve.now/CVE-2014-2977.md): Multiple integer signedness errors in the Dispatch\_Write function in proxy/dispatcher/idirectfbsurface\_dispatcher.c in DirectFB 1.4.13 allow (no CVSS)
- [CVE-2014-2978](https://cve.now/CVE-2014-2978.md): The Dispatch\_Write function in proxy/dispatcher/idirectfbsurface\_dispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2014-3004](https://cve.now/CVE-2014-3004.md): The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (no CVSS, org.codehaus.castor:castor · castor:castor)
- [CVE-2014-3781](https://cve.now/CVE-2014-3781.md): The dcXmlRpc::setUser method in nc/core/class.dc.xmlrpc.php in Dotclear before 2.6.3 allows remote attackers to bypass authentication via an (no CVSS)
- [CVE-2014-3782](https://cve.now/CVE-2014-3782.md): Multiple incomplete blacklist vulnerabilities in the filemanager::isFileExclude method in the Media Manager in Dotclear before 2.6.3 allow r (no CVSS)
- [CVE-2014-3850](https://cve.now/CVE-2014-3850.md): Cross-site request forgery (CSRF) vulnerability in the Member Approval plugin 131109 for WordPress allows remote attackers to hijack the aut (no CVSS)
- [CVE-2014-3911](https://cve.now/CVE-2014-3911.md): Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the (1) Start, (2) Cha (no CVSS)
- [CVE-2014-3915](https://cve.now/CVE-2014-3915.md): The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2014-3970](https://cve.now/CVE-2014-3970.md): The pa\_rtp\_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a (no CVSS)
- [CVE-2014-3980](https://cve.now/CVE-2014-3980.md): libfep 0.0.5 before 0.1.0 does not properly use UNIX domain sockets in the abstract namespace, which allows local users to gain privileges v (no CVSS)
- [CVE-2014-4032](https://cve.now/CVE-2014-4032.md): Cross-site scripting (XSS) vulnerability in apps/app\_comment/form\_comment.php in Fiyo CMS 1.5.7 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2014-4033](https://cve.now/CVE-2014-4033.md): Cross-site scripting (XSS) vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to (no CVSS)
- [CVE-2014-4034](https://cve.now/CVE-2014-4034.md): SQL injection vulnerability in zero\_view\_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the articl (no CVSS)
- [CVE-2014-4035](https://cve.now/CVE-2014-4035.md): Cross-site scripting (XSS) vulnerability in booking\_details.php in Best Soft Inc. (no CVSS)
- [CVE-2014-4036](https://cve.now/CVE-2014-4036.md): Cross-site scripting (XSS) vulnerability in modules/system/admin.php in ImpressCMS 1.3.6.1 allows remote attackers to inject arbitrary web s (no CVSS, impresscms/impresscms)
- [CVE-2014-4037](https://cve.now/CVE-2014-4037.md): Cross-site scripting (XSS) vulnerability in editor/dialog/fck\_spellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor before (no CVSS)
- [CVE-2014-0531](https://cve.now/CVE-2014-0531.md): Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 1 (no CVSS)
- [CVE-2014-0532](https://cve.now/CVE-2014-0532.md): Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 1 (no CVSS)
- [CVE-2014-0533](https://cve.now/CVE-2014-0533.md): Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 1 (no CVSS)
- [CVE-2014-0534](https://cve.now/CVE-2014-0534.md): Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0. (no CVSS)
- [CVE-2014-0535](https://cve.now/CVE-2014-0535.md): Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0. (no CVSS)
- [CVE-2014-0536](https://cve.now/CVE-2014-0536.md): Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0. (no CVSS)
- [CVE-2014-1533](https://cve.now/CVE-2014-1533.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird bef (no CVSS)
- [CVE-2014-1534](https://cve.now/CVE-2014-1534.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow remote attackers to cause a denial of servic (no CVSS)
- [CVE-2014-1536](https://cve.now/CVE-2014-1536.md): The PropertyProvider::FindJustificationRange function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or ca (no CVSS)
- [CVE-2014-1537](https://cve.now/CVE-2014-1537.md): Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 allows remote attacke (no CVSS)
- [CVE-2014-1538](https://cve.now/CVE-2014-1538.md): Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and (no CVSS)
- [CVE-2014-1539](https://cve.now/CVE-2014-1539.md): Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash objec (no CVSS)
- [CVE-2014-1540](https://cve.now/CVE-2014-1540.md): Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Fi (no CVSS)
- [CVE-2014-1541](https://cve.now/CVE-2014-1541.md): Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, (no CVSS)
- [CVE-2014-1542](https://cve.now/CVE-2014-1542.md): Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2014-1543](https://cve.now/CVE-2014-1543.md): Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in Mozilla Firefox before 30.0 allow remote at (no CVSS)
- [CVE-2014-1545](https://cve.now/CVE-2014-1545.md): Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-o (no CVSS)
- [CVE-2014-3154](https://cve.now/CVE-2014-3154.md): Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/child\_thread.cc in the filesystem API in Google Chrome b (no CVSS)
- [CVE-2014-3155](https://cve.now/CVE-2014-3155.md): net/spdy/spdy\_write\_queue.cc in the SPDY implementation in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2014-3156](https://cve.now/CVE-2014-3156.md): Buffer overflow in the clipboard implementation in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service o (no CVSS)
- [CVE-2014-3157](https://cve.now/CVE-2014-3157.md): Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg\_video\_decoder.cc in Google Chrome befo (no CVSS)
- [CVE-2014-0282](https://cve.now/CVE-2014-0282.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-0296](https://cve.now/CVE-2014-0296.md): The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 doe (no CVSS)
- [CVE-2014-1769](https://cve.now/CVE-2014-1769.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-1771](https://cve.now/CVE-2014-1771.md): SChannel in Microsoft Internet Explorer 6 through 11 does not ensure that a server's X.509 certificate is the same during renegotiation as i (no CVSS)
- [CVE-2014-1772](https://cve.now/CVE-2014-1772.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-1773](https://cve.now/CVE-2014-1773.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-1774](https://cve.now/CVE-2014-1774.md): Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS)
- [CVE-2014-1775](https://cve.now/CVE-2014-1775.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-1777](https://cve.now/CVE-2014-1777.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to read local files on the client via a crafted web site, aka "Internet Explor (no CVSS)
- [CVE-2014-1778](https://cve.now/CVE-2014-1778.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified v (no CVSS)
- [CVE-2014-1779](https://cve.now/CVE-2014-1779.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-1780](https://cve.now/CVE-2014-1780.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-1781](https://cve.now/CVE-2014-1781.md): Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS)
- [CVE-2014-1782](https://cve.now/CVE-2014-1782.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-1783](https://cve.now/CVE-2014-1783.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-1784](https://cve.now/CVE-2014-1784.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-1785](https://cve.now/CVE-2014-1785.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-1786](https://cve.now/CVE-2014-1786.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-1788](https://cve.now/CVE-2014-1788.md): Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS)
- [CVE-2014-1789](https://cve.now/CVE-2014-1789.md): Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-1790](https://cve.now/CVE-2014-1790.md): Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-1791](https://cve.now/CVE-2014-1791.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-1792](https://cve.now/CVE-2014-1792.md): Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS)
- [CVE-2014-1794](https://cve.now/CVE-2014-1794.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-1795](https://cve.now/CVE-2014-1795.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-1796](https://cve.now/CVE-2014-1796.md): Microsoft Internet Explorer 6 and 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup (no CVSS)
- [CVE-2014-1797](https://cve.now/CVE-2014-1797.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-1799](https://cve.now/CVE-2014-1799.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-1800](https://cve.now/CVE-2014-1800.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-1802](https://cve.now/CVE-2014-1802.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-1803](https://cve.now/CVE-2014-1803.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-1804](https://cve.now/CVE-2014-1804.md): Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS)
- [CVE-2014-1805](https://cve.now/CVE-2014-1805.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-1811](https://cve.now/CVE-2014-1811.md): The TCP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Se (no CVSS)
- [CVE-2014-1816](https://cve.now/CVE-2014-1816.md): Microsoft XML Core Services (aka MSXML) 3.0 and 6.0 does not properly restrict the information transmitted by Internet Explorer during a dow (no CVSS)
- [CVE-2014-1817](https://cve.now/CVE-2014-1817.md): usp10.dll in Uniscribe (aka the Unicode Script Processor) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a (no CVSS)
- [CVE-2014-1818](https://cve.now/CVE-2014-1818.md): GDI+ in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Win (no CVSS)
- [CVE-2014-1823](https://cve.now/CVE-2014-1823.md): Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inje (no CVSS)
- [CVE-2014-2753](https://cve.now/CVE-2014-2753.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-2754](https://cve.now/CVE-2014-2754.md): Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS)
- [CVE-2014-2755](https://cve.now/CVE-2014-2755.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-2756](https://cve.now/CVE-2014-2756.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-2757](https://cve.now/CVE-2014-2757.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-2758](https://cve.now/CVE-2014-2758.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-2759](https://cve.now/CVE-2014-2759.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-2760](https://cve.now/CVE-2014-2760.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-2761](https://cve.now/CVE-2014-2761.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-2763](https://cve.now/CVE-2014-2763.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-2764](https://cve.now/CVE-2014-2764.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-2765](https://cve.now/CVE-2014-2765.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-2766](https://cve.now/CVE-2014-2766.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-2767](https://cve.now/CVE-2014-2767.md): Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS)
- [CVE-2014-2768](https://cve.now/CVE-2014-2768.md): Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v (no CVSS)
- [CVE-2014-2769](https://cve.now/CVE-2014-2769.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-2770](https://cve.now/CVE-2014-2770.md): Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS)
- [CVE-2014-2771](https://cve.now/CVE-2014-2771.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-2772](https://cve.now/CVE-2014-2772.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-2773](https://cve.now/CVE-2014-2773.md): Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v (no CVSS)
- [CVE-2014-2775](https://cve.now/CVE-2014-2775.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-2776](https://cve.now/CVE-2014-2776.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-2777](https://cve.now/CVE-2014-2777.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified v (no CVSS)
- [CVE-2014-2778](https://cve.now/CVE-2014-2778.md): Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (mem (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-06-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.