# CVEs published 2014-03-19 30 CVEs were published on March 19, 2014: 0 critical, 0 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2013-5952](https://cve.now/CVE-2013-5952.md): Multiple cross-site scripting (XSS) vulnerabilities in the Freichat (com\_freichat) component, possibly 9.4 and earlier, for Joomla! allow… (no CVSS) - [CVE-2013-5953](https://cve.now/CVE-2013-5953.md): Multiple cross-site scripting (XSS) vulnerabilities in tmpl/layout\_editevent.php in the Multi Calendar (com\_multicalendar) component… (no CVSS) - [CVE-2013-5955](https://cve.now/CVE-2013-5955.md): Cross-site scripting (XSS) vulnerability in manage.php in the PBBooking (com\_pbbooking) component 2.4 for Joomla! allows remote attackers… (no CVSS) - [CVE-2014-1977](https://cve.now/CVE-2014-1977.md): The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and earlier for Android 4.1 through 4.4 uses weak… (no CVSS) - [CVE-2014-1978](https://cve.now/CVE-2014-1978.md): The application link interface in the NTT DOCOMO sp mode mail application 6100 through 6300 for Android 4.0.x and 6130 through 6700 for… (no CVSS) - [CVE-2014-1979](https://cve.now/CVE-2014-1979.md): The NTT DOCOMO sp mode mail application 5900 through 6300 for Android 4.0.x and 6000 through 6620 for Android 4.1 through 4.4 allows… (no CVSS) - [CVE-2014-2339](https://cve.now/CVE-2014-2339.md): Multiple SQL injection vulnerabilities in bbs/ajax.autosave.php in GNUboard 5.x and possibly earlier allow remote authenticated users to… (no CVSS) - [CVE-2014-1493](https://cve.now/CVE-2014-1493.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird… (no CVSS) - [CVE-2014-1494](https://cve.now/CVE-2014-1494.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers… (no CVSS) - [CVE-2014-1496](https://cve.now/CVE-2014-1496.md): Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to… (no CVSS) - [CVE-2014-1497](https://cve.now/CVE-2014-1497.md): The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4… (no CVSS) - [CVE-2014-1498](https://cve.now/CVE-2014-1498.md): The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key… (no CVSS) - [CVE-2014-1499](https://cve.now/CVE-2014-1499.md): Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2)… (no CVSS) - [CVE-2014-1500](https://cve.now/CVE-2014-1500.md): Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and… (no CVSS) - [CVE-2014-1501](https://cve.now/CVE-2014-1501.md): Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via… (no CVSS) - [CVE-2014-1502](https://cve.now/CVE-2014-1502.md): The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before… (no CVSS) - [CVE-2014-1504](https://cve.now/CVE-2014-1504.md): The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a… (no CVSS) - [CVE-2014-1505](https://cve.now/CVE-2014-1505.md): The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before… (no CVSS) - [CVE-2014-1506](https://cve.now/CVE-2014-1506.md): Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the… (no CVSS) - [CVE-2014-1507](https://cve.now/CVE-2014-1507.md): Directory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2 allows attackers to bypass the media sandbox… (no CVSS) - [CVE-2014-1508](https://cve.now/CVE-2014-1508.md): The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and… (no CVSS) - [CVE-2014-1509](https://cve.now/CVE-2014-1509.md): Buffer overflow in the \_cairo\_truetype\_index\_to\_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before… (no CVSS) - [CVE-2014-1510](https://cve.now/CVE-2014-1510.md): The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before… (no CVSS) - [CVE-2014-1511](https://cve.now/CVE-2014-1511.md): Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to… (no CVSS) - [CVE-2014-1512](https://cve.now/CVE-2014-1512.md): Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before… (no CVSS) - [CVE-2014-1513](https://cve.now/CVE-2014-1513.md): TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does… (no CVSS) - [CVE-2014-1514](https://cve.now/CVE-2014-1514.md): vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25… (no CVSS) - [CVE-2014-2120](https://cve.now/CVE-2014-2120.md): Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attacker (CVSS 5.4, KEV) - [CVE-2014-2121](https://cve.now/CVE-2014-2121.md): The Java-based software in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (closing of TCP… (no CVSS) - [CVE-2014-2122](https://cve.now/CVE-2014-2122.md): Memory leak in the GUI in the Impact server in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2014-03-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.