# CVEs published 2014-03-05

24 CVEs were published on March 5, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-3478](https://cve.now/CVE-2013-3478.md): SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitra (no CVSS)
- [CVE-2014-2206](https://cve.now/CVE-2014-2206.md): Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a deni (no CVSS)
- [CVE-2014-2235](https://cve.now/CVE-2014-2235.md): Cross-site scripting (XSS) vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors (no CVSS)
- [CVE-2014-2236](https://cve.now/CVE-2014-2236.md): Multiple cross-site scripting (XSS) vulnerabilities in Askbot before 0.7.49 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2014-2238](https://cve.now/CVE-2014-2238.md): SQL injection vulnerability in the manage configuration page (adm\_config\_report.php) in MantisBT 1.2.13 through 1.2.16 allows remote authent (no CVSS)
- [CVE-2014-2245](https://cve.now/CVE-2014-2245.md): SQL injection vulnerability in the News module in CMS Made Simple (CMSMS) before 1.11.10 allows remote authenticated users with the "Modify (no CVSS)
- [CVE-2013-5468](https://cve.now/CVE-2013-5468.md): IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 throu (no CVSS)
- [CVE-2013-6299](https://cve.now/CVE-2013-6299.md): Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Se (no CVSS)
- [CVE-2013-6300](https://cve.now/CVE-2013-6300.md): Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Se (no CVSS)
- [CVE-2013-6301](https://cve.now/CVE-2013-6301.md): Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Se (no CVSS)
- [CVE-2013-6302](https://cve.now/CVE-2013-6302.md): SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access (no CVSS)
- [CVE-2013-6303](https://cve.now/CVE-2013-6303.md): Directory traversal vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security (no CVSS)
- [CVE-2013-6318](https://cve.now/CVE-2013-6318.md): Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Se (no CVSS)
- [CVE-2013-6319](https://cve.now/CVE-2013-6319.md): IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 throu (no CVSS)
- [CVE-2013-6320](https://cve.now/CVE-2013-6320.md): Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Se (no CVSS)
- [CVE-2013-6331](https://cve.now/CVE-2013-6331.md): SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access (no CVSS)
- [CVE-2013-6333](https://cve.now/CVE-2013-6333.md): Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Se (no CVSS)
- [CVE-2013-6663](https://cve.now/CVE-2013-6663.md): Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink (no CVSS)
- [CVE-2013-6664](https://cve.now/CVE-2013-6664.md): Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as (no CVSS)
- [CVE-2013-6665](https://cve.now/CVE-2013-6665.md): Heap-based buffer overflow in the ResourceProvider::InitializeSoftware function in cc/resources/resource\_provider.cc in Google Chrome before (no CVSS)
- [CVE-2013-6666](https://cve.now/CVE-2013-6666.md): The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper\_flash\_renderer\_host.cc in Google Chrome before 33.0.1750.146 does (no CVSS)
- [CVE-2013-6667](https://cve.now/CVE-2013-6667.md): Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.146 allow attackers to cause a denial of service or possibly have oth (no CVSS)
- [CVE-2013-6668](https://cve.now/CVE-2013-6668.md): Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, allow attackers to cause (no CVSS)
- [CVE-2014-2234](https://cve.now/CVE-2014-2234.md): A certain Apple patch for OpenSSL in Apple OS X 10.9.2 and earlier uses a Trust Evaluation Agent (TEA) feature without terminating certain T (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-03-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.