# CVEs published 2014-03-23

10 CVEs were published on March 23, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-2586](https://cve.now/CVE-2014-2586.md): Cross-site scripting (XSS) vulnerability in the login audit form in McAfee Cloud Single Sign On (SSO) allows remote attackers to inject… (no CVSS)
- [CVE-2014-2587](https://cve.now/CVE-2014-2587.md): SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute… (no CVSS)
- [CVE-2014-2588](https://cve.now/CVE-2014-2588.md): Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read… (no CVSS)
- [CVE-2014-2589](https://cve.now/CVE-2014-2589.md): Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance… (no CVSS)
- [CVE-2014-2585](https://cve.now/CVE-2014-2585.md): ownCloud before 5.0.15 and 6.x before 6.0.2, when the file\_external app is enabled, allows remote authenticated users to mount the local… (no CVSS)
- [CVE-2013-0303](https://cve.now/CVE-2013-0303.md): Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users… (no CVSS)
- [CVE-2013-7344](https://cve.now/CVE-2013-7344.md): Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to… (no CVSS)
- [CVE-2013-7345](https://cve.now/CVE-2013-7345.md): The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with… (no CVSS)
- [CVE-2014-0016](https://cve.now/CVE-2014-0016.md): stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG)… (no CVSS)
- [CVE-2014-2057](https://cve.now/CVE-2014-2057.md): Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 6.0.2 allow remote attackers to inject arbitrary web script or HTML… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-03-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.