# CVEs published 2014-03-12 30 CVEs were published on March 12, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2013-1636](https://cve.now/CVE-2013-1636.md): Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite (no CVSS) - [CVE-2013-3943](https://cve.now/CVE-2013-3943.md): Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote authenticated users to inject a (no CVSS) - [CVE-2013-4649](https://cve.now/CVE-2013-4649.md): Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to inject arbitrary w (no CVSS, DotNetNuke.Core) - [CVE-2013-5117](https://cve.now/CVE-2013-5117.md): SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module before 10.1 for DotNetNuke allows remote att (no CVSS) - [CVE-2013-7335](https://cve.now/CVE-2013-7335.md): Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web (no CVSS, DotNetNuke.Core) - [CVE-2014-2240](https://cve.now/CVE-2014-2240.md): Stack-based buffer overflow in the cf2\_hintmap\_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a (no CVSS) - [CVE-2014-0297](https://cve.now/CVE-2014-0297.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2014-0298](https://cve.now/CVE-2014-0298.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2014-0299](https://cve.now/CVE-2014-0299.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2014-0300](https://cve.now/CVE-2014-0300.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS) - [CVE-2014-0301](https://cve.now/CVE-2014-0301.md): Double free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Window (no CVSS) - [CVE-2014-0302](https://cve.now/CVE-2014-0302.md): Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v (no CVSS) - [CVE-2014-0303](https://cve.now/CVE-2014-0303.md): Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v (no CVSS) - [CVE-2014-0304](https://cve.now/CVE-2014-0304.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2014-0305](https://cve.now/CVE-2014-0305.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2014-0306](https://cve.now/CVE-2014-0306.md): Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS) - [CVE-2014-0307](https://cve.now/CVE-2014-0307.md): Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS) - [CVE-2014-0308](https://cve.now/CVE-2014-0308.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2014-0309](https://cve.now/CVE-2014-0309.md): Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2014-0311](https://cve.now/CVE-2014-0311.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2014-0312](https://cve.now/CVE-2014-0312.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2014-0313](https://cve.now/CVE-2014-0313.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2014-0314](https://cve.now/CVE-2014-0314.md): Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2014-0317](https://cve.now/CVE-2014-0317.md): The Security Account Manager Remote (SAMR) protocol implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis (no CVSS) - [CVE-2014-0319](https://cve.now/CVE-2014-0319.md): Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR (no CVSS) - [CVE-2014-0321](https://cve.now/CVE-2014-0321.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2014-0323](https://cve.now/CVE-2014-0323.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS) - [CVE-2014-0324](https://cve.now/CVE-2014-0324.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2014-0503](https://cve.now/CVE-2014-0503.md): Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, all (no CVSS) - [CVE-2014-0504](https://cve.now/CVE-2014-0504.md): Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, all (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-03-12 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.