# CVEs published 2014-03-02

17 CVEs were published on March 2, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0334](https://cve.now/CVE-2014-0334.md): Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple allow remote authenticated users to inject arbitrary web script or… (no CVSS)
- [CVE-2014-2033](https://cve.now/CVE-2014-2033.md): The caching feature in SGOS in Blue Coat ProxySG 5.5 through 5.5.11.3, 6.1 through 6.1.6.3, 6.2 through 6.2.15.3, 6.4 through 6.4.6.1, and… (no CVSS)
- [CVE-2014-2088](https://cve.now/CVE-2014-2088.md): Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated users to execute arbitrary PHP code by… (no CVSS)
- [CVE-2014-2089](https://cve.now/CVE-2014-2089.md): ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a… (no CVSS)
- [CVE-2014-2090](https://cve.now/CVE-2014-2090.md): Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inject arbitrary web… (no CVSS)
- [CVE-2014-2091](https://cve.now/CVE-2014-2091.md): Cross-site scripting (XSS) vulnerability in mods/\_standard/forums/admin/forum\_add.php in ATutor 2.1.1 allows remote authenticated… (no CVSS)
- [CVE-2014-2092](https://cve.now/CVE-2014-2092.md): Cross-site scripting (XSS) vulnerability in lib/filemanager/ImageManager/editorFrame.php in CMS Made Simple 1.11.10 allows remote… (no CVSS)
- [CVE-2014-2264](https://cve.now/CVE-2014-2264.md): The OpenVPN module in Synology DiskStation Manager (DSM) 4.3-3810 update 1 has a hardcoded root password of synopass, which makes it… (no CVSS)
- [CVE-2013-4054](https://cve.now/CVE-2013-4054.md): Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to read arbitrary files… (no CVSS)
- [CVE-2014-0862](https://cve.now/CVE-2014-0862.md): Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x before 3.0.1.6 iFix 2 and 4.x… (no CVSS)
- [CVE-2014-2097](https://cve.now/CVE-2014-2097.md): The tak\_decode\_frame function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value… (no CVSS)
- [CVE-2014-2098](https://cve.now/CVE-2014-2098.md): libavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for certain coefficients, which allows remote… (no CVSS)
- [CVE-2014-2099](https://cve.now/CVE-2014-2099.md): The msrle\_decode\_frame function in libavcodec/msrle.c in FFmpeg before 2.1.4 does not properly calculate line sizes, which allows remote… (no CVSS)
- [CVE-2014-2104](https://cve.now/CVE-2014-2104.md): Multiple cross-site scripting (XSS) vulnerabilities in the Business Voice Services Manager (BVSM) page in Cisco Unified Communications… (no CVSS)
- [CVE-2014-2242](https://cve.now/CVE-2014-2242.md): includes/upload/UploadBase.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 does not prevent use… (no CVSS)
- [CVE-2014-2243](https://cve.now/CVE-2014-2243.md): includes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 terminates validation of a user… (no CVSS)
- [CVE-2014-2244](https://cve.now/CVE-2014-2244.md): Cross-site scripting (XSS) vulnerability in the formatHTML function in includes/api/ApiFormatBase.php in MediaWiki before 1.19.12, 1.20.x… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-03-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.