# CVEs published 2014-03-30 8 CVEs were published on March 30, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2013-6768](https://cve.now/CVE-2013-6768.md): Untrusted search path vulnerability in the CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier allows… (no CVSS) - [CVE-2013-6769](https://cve.now/CVE-2013-6769.md): The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android allows attackers to gain privileges via shell metacharacters in… (no CVSS) - [CVE-2013-6770](https://cve.now/CVE-2013-6770.md): The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.3 and 4.4 does not properly restrict the set of users who can… (no CVSS) - [CVE-2013-6774](https://cve.now/CVE-2013-6774.md): Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and earlier, CyanogenMod/ClockWorkMod/Koush… (no CVSS) - [CVE-2013-6775](https://cve.now/CVE-2013-6775.md): The Chainfire SuperSU package before 1.69 for Android allows attackers to gain privileges via the (1) backtick or (2) $() type of shell… (no CVSS) - [CVE-2014-2671](https://cve.now/CVE-2014-2671.md): Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly… (no CVSS) - [CVE-2012-3359](https://cve.now/CVE-2012-3359.md): Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the \_\_ac session cookie, which allows… (no CVSS) - [CVE-2013-7347](https://cve.now/CVE-2013-7347.md): Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2014-03-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.