# CVEs published 2014-03-12 30 CVEs were published on March 12, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2013-1636](https://cve.now/CVE-2013-1636.md): Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link… (no CVSS) - [CVE-2013-3943](https://cve.now/CVE-2013-3943.md): Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote authenticated users to inject… (no CVSS) - [CVE-2013-4649](https://cve.now/CVE-2013-4649.md): Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to inject arbitrary… (no CVSS, DotNetNuke.Core) - [CVE-2013-5117](https://cve.now/CVE-2013-5117.md): SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module before 10.1 for DotNetNuke allows remote… (no CVSS) - [CVE-2013-7335](https://cve.now/CVE-2013-7335.md): Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary… (no CVSS, DotNetNuke.Core) - [CVE-2014-2240](https://cve.now/CVE-2014-2240.md): Stack-based buffer overflow in the cf2\_hintmap\_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause… (no CVSS) - [CVE-2014-0297](https://cve.now/CVE-2014-0297.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS) - [CVE-2014-0298](https://cve.now/CVE-2014-0298.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS) - [CVE-2014-0299](https://cve.now/CVE-2014-0299.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS) - [CVE-2014-0300](https://cve.now/CVE-2014-0300.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008… (no CVSS) - [CVE-2014-0301](https://cve.now/CVE-2014-0301.md): Double free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2… (no CVSS) - [CVE-2014-0302](https://cve.now/CVE-2014-0302.md): Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)… (no CVSS) - [CVE-2014-0303](https://cve.now/CVE-2014-0303.md): Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)… (no CVSS) - [CVE-2014-0304](https://cve.now/CVE-2014-0304.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… (no CVSS) - [CVE-2014-0305](https://cve.now/CVE-2014-0305.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS) - [CVE-2014-0306](https://cve.now/CVE-2014-0306.md): Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… (no CVSS) - [CVE-2014-0307](https://cve.now/CVE-2014-0307.md): Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of… (no CVSS) - [CVE-2014-0308](https://cve.now/CVE-2014-0308.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS) - [CVE-2014-0309](https://cve.now/CVE-2014-0309.md): Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS) - [CVE-2014-0311](https://cve.now/CVE-2014-0311.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS) - [CVE-2014-0312](https://cve.now/CVE-2014-0312.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS) - [CVE-2014-0313](https://cve.now/CVE-2014-0313.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)… (no CVSS) - [CVE-2014-0314](https://cve.now/CVE-2014-0314.md): Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)… (no CVSS) - [CVE-2014-0317](https://cve.now/CVE-2014-0317.md): The Security Account Manager Remote (SAMR) protocol implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows… (no CVSS) - [CVE-2014-0319](https://cve.now/CVE-2014-0319.md): Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and… (no CVSS) - [CVE-2014-0321](https://cve.now/CVE-2014-0321.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)… (no CVSS) - [CVE-2014-0323](https://cve.now/CVE-2014-0323.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008… (no CVSS) - [CVE-2014-0324](https://cve.now/CVE-2014-0324.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS) - [CVE-2014-0503](https://cve.now/CVE-2014-0503.md): Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux… (no CVSS) - [CVE-2014-0504](https://cve.now/CVE-2014-0504.md): Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2014-03-12 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.