# CVEs published 2014-03-02

17 CVEs were published on March 2, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0334](https://cve.now/CVE-2014-0334.md): Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple allow remote authenticated users to inject arbitrary web script or HT (no CVSS)
- [CVE-2014-2033](https://cve.now/CVE-2014-2033.md): The caching feature in SGOS in Blue Coat ProxySG 5.5 through 5.5.11.3, 6.1 through 6.1.6.3, 6.2 through 6.2.15.3, 6.4 through 6.4.6.1, and 6 (no CVSS)
- [CVE-2014-2088](https://cve.now/CVE-2014-2088.md): Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated users to execute arbitrary PHP code by using (no CVSS)
- [CVE-2014-2089](https://cve.now/CVE-2014-2089.md): ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a cert (no CVSS)
- [CVE-2014-2090](https://cve.now/CVE-2014-2090.md): Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inject arbitrary web scr (no CVSS)
- [CVE-2014-2091](https://cve.now/CVE-2014-2091.md): Cross-site scripting (XSS) vulnerability in mods/\_standard/forums/admin/forum\_add.php in ATutor 2.1.1 allows remote authenticated administra (no CVSS)
- [CVE-2014-2092](https://cve.now/CVE-2014-2092.md): Cross-site scripting (XSS) vulnerability in lib/filemanager/ImageManager/editorFrame.php in CMS Made Simple 1.11.10 allows remote attackers (no CVSS)
- [CVE-2014-2264](https://cve.now/CVE-2014-2264.md): The OpenVPN module in Synology DiskStation Manager (DSM) 4.3-3810 update 1 has a hardcoded root password of synopass, which makes it easier (no CVSS)
- [CVE-2013-4054](https://cve.now/CVE-2013-4054.md): Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to read arbitrary files vi (no CVSS)
- [CVE-2014-0862](https://cve.now/CVE-2014-0862.md): Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x before 3.0.1.6 iFix 2 and 4.x bef (no CVSS)
- [CVE-2014-2097](https://cve.now/CVE-2014-2097.md): The tak\_decode\_frame function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, whic (no CVSS)
- [CVE-2014-2098](https://cve.now/CVE-2014-2098.md): libavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for certain coefficients, which allows remote attac (no CVSS)
- [CVE-2014-2099](https://cve.now/CVE-2014-2099.md): The msrle\_decode\_frame function in libavcodec/msrle.c in FFmpeg before 2.1.4 does not properly calculate line sizes, which allows remote att (no CVSS)
- [CVE-2014-2104](https://cve.now/CVE-2014-2104.md): Multiple cross-site scripting (XSS) vulnerabilities in the Business Voice Services Manager (BVSM) page in Cisco Unified Communications Domai (no CVSS)
- [CVE-2014-2242](https://cve.now/CVE-2014-2242.md): includes/upload/UploadBase.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 does not prevent use o (no CVSS)
- [CVE-2014-2243](https://cve.now/CVE-2014-2243.md): includes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 terminates validation of a user tok (no CVSS)
- [CVE-2014-2244](https://cve.now/CVE-2014-2244.md): Cross-site scripting (XSS) vulnerability in the formatHTML function in includes/api/ApiFormatBase.php in MediaWiki before 1.19.12, 1.20.x an (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-03-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.