Skip to content
OpenAdvisories

Archive

9 April 2014

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —

    WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Cont…

  • Unscored —
    CVE-2014-0166 Public exploit

    The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does…

  • Unscored —

    Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in…

  • Unscored —

    Use-after-free vulnerability in the HTMLBodyElement::insertedInto function in core/html/HTMLBodyElement.cpp in Blink, a…

  • Unscored —

    Use-after-free vulnerability in content/renderer/renderer_webcolorchooser_impl.h in Google Chrome before 34.0.1847.116 …

  • Unscored —

    The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does …

  • Unscored —

    Use-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.18…

  • Unscored —

    Integer overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser/renderer_host/software_frame_m…

  • Unscored —

    Use-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in core/rendering/Rende…

  • Unscored —

    Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows…

  • Unscored —

    Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, all…

  • Unscored —

    Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.116 allow attackers to cause a denial of service…

  • Unscored —

    The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in Google V8, as used in Go…

  • Unscored —

    The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly h…

  • Unscored —

    Use-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in content/worker/websharedw…

  • Unscored —

    Google V8, as used in Google Chrome before 34.0.1847.116, does not properly use numeric casts during handling of typed …