# CVEs published 2014-03-06 29 CVEs were published on March 6, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2009-5138](https://cve.now/CVE-2009-5138.md): GnuTLS before 2.7.6, when the GNUTLS\_VERIFY\_ALLOW\_X509\_V1\_CA\_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CA (no CVSS) - [CVE-2014-0092](https://cve.now/CVE-2014-0092.md): lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certifica (no CVSS) - [CVE-2014-1959](https://cve.now/CVE-2014-1959.md): lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remo (no CVSS) - [CVE-2011-3153](https://cve.now/CVE-2011-3153.md): dmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary files via a symlink attack on ~/.dmrc. (no CVSS) - [CVE-2012-6619](https://cve.now/CVE-2012-6619.md): The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of s (no CVSS) - [CVE-2013-6437](https://cve.now/CVE-2013-6437.md): The libvirt driver in OpenStack Compute (Nova) before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a d (no CVSS, nova) - [CVE-2014-1906](https://cve.now/CVE-2014-1906.md): Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow (no CVSS) - [CVE-2014-1907](https://cve.now/CVE-2014-1907.md): Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote (no CVSS) - [CVE-2013-3706](https://cve.now/CVE-2013-3706.md): Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management (ZCM) 11.2 allows remote attackers to r (no CVSS) - [CVE-2013-6201](https://cve.now/CVE-2013-6201.md): Unspecified vulnerability in HP Security Management System 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2 allows remote attackers to (no CVSS) - [CVE-2013-6304](https://cve.now/CVE-2013-6304.md): Multiple directory traversal vulnerabilities in Algo Risk Application (ARA) 2.4.0.1 through 4.9.1 in IBM Algo One allow remote authenticated (no CVSS) - [CVE-2013-6314](https://cve.now/CVE-2013-6314.md): Cross-site scripting (XSS) vulnerability in IBM InfoSphere Enterprise Records 4.5.1 before 4.5.1.7-IER-IF001 and Enterprise Records 5.1.1 be (no CVSS) - [CVE-2013-6315](https://cve.now/CVE-2013-6315.md): IBM InfoSphere Enterprise Records 4.5.1 before 4.5.1.7-IER-IF001 and Enterprise Records 5.1.1 before 5.1.1.1-IER-IF003 do not properly restr (no CVSS) - [CVE-2013-6719](https://cve.now/CVE-2013-6719.md): delivery.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2, and 8.8 before FP2 (no CVSS) - [CVE-2013-6720](https://cve.now/CVE-2013-6720.md): Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8. (no CVSS) - [CVE-2014-0335](https://cve.now/CVE-2014-0335.md): Multiple cross-site scripting (XSS) vulnerabilities in the web client in Serena Dimensions CM 12.2 build 7.199.0 allow remote attackers to i (no CVSS) - [CVE-2014-0336](https://cve.now/CVE-2014-0336.md): Cross-site request forgery (CSRF) vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hija (no CVSS) - [CVE-2014-0624](https://cve.now/CVE-2014-0624.md): EMC RSA Data Loss Prevention (DLP) 9.x before 9.6-SP2 does not properly manage sessions, which allows remote authenticated users to gain pri (no CVSS) - [CVE-2014-0629](https://cve.now/CVE-2014-0629.md): EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 does not properly handle the interaction between the dm\_world group a (no CVSS) - [CVE-2014-0630](https://cve.now/CVE-2014-0630.md): EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 allows remote authenticated users to read arbitrary files via a modif (no CVSS) - [CVE-2014-0683](https://cve.now/CVE-2014-0683.md): The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier (no CVSS) - [CVE-2014-0701](https://cve.now/CVE-2014-0701.md): Cisco Wireless LAN Controller (WLC) devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, whic (no CVSS) - [CVE-2014-0703](https://cve.now/CVE-2014-0703.md): Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the (no CVSS) - [CVE-2014-0704](https://cve.now/CVE-2014-0704.md): The IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 S (no CVSS) - [CVE-2014-0705](https://cve.now/CVE-2014-0705.md): The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when (no CVSS) - [CVE-2014-0706](https://cve.now/CVE-2014-0706.md): Cisco Wireless LAN Controller (WLC) devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of (no CVSS) - [CVE-2014-0707](https://cve.now/CVE-2014-0707.md): Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service (device r (no CVSS) - [CVE-2014-0890](https://cve.now/CVE-2014-0890.md): The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1, 9.0, and 9.0.0.1, when a certain com.ibm.collaboration.realtime. (no CVSS) - [CVE-2014-1911](https://cve.now/CVE-2014-1911.md): The Foscam FI8910W camera with firmware before 11.37.2.55 allows remote attackers to obtain sensitive video and image data via a blank usern (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-03-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.