# CVEs published 2014-07-23

22 CVEs were published on July 23, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3537](https://cve.now/CVE-2014-3537.md): The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cac (no CVSS)
- [CVE-2014-3555](https://cve.now/CVE-2014-3555.md): OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of ser (no CVSS)
- [CVE-2014-3938](https://cve.now/CVE-2014-3938.md): Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a (no CVSS)
- [CVE-2014-3939](https://cve.now/CVE-2014-3939.md): Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitma (no CVSS)
- [CVE-2014-4501](https://cve.now/CVE-2014-4501.md): Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to (no CVSS)
- [CVE-2014-4502](https://cve.now/CVE-2014-4502.md): Multiple heap-based buffer overflows in the parse\_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 a (no CVSS)
- [CVE-2014-4503](https://cve.now/CVE-2014-4503.md): The parse\_notify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a de (no CVSS)
- [CVE-2014-4980](https://cve.now/CVE-2014-4980.md): The /server/properties resource in Tenable Web UI before 2.3.5 for Nessus 5.2.3 through 5.2.7 allows remote attackers to obtain sensitive in (no CVSS)
- [CVE-2014-1544](https://cve.now/CVE-2014-1544.md): Use-after-free vulnerability in the CERT\_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used i (no CVSS)
- [CVE-2014-1547](https://cve.now/CVE-2014-1547.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird bef (no CVSS)
- [CVE-2014-1548](https://cve.now/CVE-2014-1548.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers (no CVSS)
- [CVE-2014-1549](https://cve.now/CVE-2014-1549.md): The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does (no CVSS)
- [CVE-2014-1550](https://cve.now/CVE-2014-1550.md): Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers (no CVSS)
- [CVE-2014-1551](https://cve.now/CVE-2014-1551.md): Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird be (no CVSS)
- [CVE-2014-1552](https://cve.now/CVE-2014-1552.md): Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows (no CVSS)
- [CVE-2014-1555](https://cve.now/CVE-2014-1555.md): Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thund (no CVSS)
- [CVE-2014-1556](https://cve.now/CVE-2014-1556.md): Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2014-1557](https://cve.now/CVE-2014-1557.md): The ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 (no CVSS)
- [CVE-2014-1558](https://cve.now/CVE-2014-1558.md): Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outag (no CVSS)
- [CVE-2014-1559](https://cve.now/CVE-2014-1559.md): Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outag (no CVSS)
- [CVE-2014-1560](https://cve.now/CVE-2014-1560.md): Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outag (no CVSS)
- [CVE-2014-1561](https://cve.now/CVE-2014-1561.md): Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attack (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-07-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.