# CVEs published 2014-02-24

14 CVEs were published on February 24, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-2817](https://cve.now/CVE-2013-2817.md): An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute ar (no CVSS)
- [CVE-2013-6202](https://cve.now/CVE-2013-6202.md): Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack (no CVSS)
- [CVE-2013-6652](https://cve.now/CVE-2013-6652.md): Directory traversal vulnerability in sandbox/win/src/named\_pipe\_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attack (no CVSS)
- [CVE-2013-6653](https://cve.now/CVE-2013-6653.md): Use-after-free vulnerability in the web contents implementation in Google Chrome before 33.0.1750.117 allows remote attackers to cause a den (no CVSS)
- [CVE-2013-6654](https://cve.now/CVE-2013-6654.md): The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome before 33.0.1750 (no CVSS)
- [CVE-2013-6655](https://cve.now/CVE-2013-6655.md): Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a denial of service o (no CVSS)
- [CVE-2013-6656](https://cve.now/CVE-2013-6656.md): The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, (no CVSS)
- [CVE-2013-6657](https://cve.now/CVE-2013-6657.md): core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL duri (no CVSS)
- [CVE-2013-6658](https://cve.now/CVE-2013-6658.md): Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote a (no CVSS)
- [CVE-2013-6659](https://cve.now/CVE-2013-6659.md): The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl\_client\_socket\_nss.cc in Google Chrome before 33.0.1750.117 does (no CVSS)
- [CVE-2013-6660](https://cve.now/CVE-2013-6660.md): The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data struct (no CVSS)
- [CVE-2013-6661](https://cve.now/CVE-2013-6661.md): Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.117 allow attackers to bypass the sandbox protection mechanism after (no CVSS)
- [CVE-2014-0758](https://cve.now/CVE-2014-0758.md): ICONICS GENESIS32 Exposed Dangerous Method or Function (no CVSS, ICONICS GENESIS32)
- [CVE-2014-1966](https://cve.now/CVE-2014-1966.md): The SNMP implementation in Siemens RuggedCom ROS before 3.11, ROS 3.11 for RS950G, ROS 3.12 before 3.12.4, and ROS 4.0 for RSG2488 allows re (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-02-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.