# CVEs published 2014-03-16 33 CVEs were published on March 16, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2013-4057](https://cve.now/CVE-2013-4057.md): Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8. (no CVSS) - [CVE-2013-4058](https://cve.now/CVE-2013-4058.md): Multiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9. (no CVSS) - [CVE-2013-4059](https://cve.now/CVE-2013-4059.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1 (no CVSS) - [CVE-2013-6208](https://cve.now/CVE-2013-6208.md): Unspecified vulnerability in HP Smart Update Manager 5.3.5 before build 70 on Linux allows local users to gain privileges via unknown vector (no CVSS) - [CVE-2013-6210](https://cve.now/CVE-2013-6210.md): Unspecified vulnerability in HP Unified Functional Testing before 12.0 allows remote attackers to execute arbitrary code via unknown vectors (no CVSS) - [CVE-2014-0338](https://cve.now/CVE-2014-0338.md): Multiple cross-site scripting (XSS) vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow r (no CVSS) - [CVE-2014-0339](https://cve.now/CVE-2014-0339.md): Cross-site scripting (XSS) vulnerability in view.cgi in Webmin before 1.680 allows remote attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2014-0850](https://cve.now/CVE-2014-0850.md): Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Reference Data Management (RDM) Hub 10.1 and 11.0 before 1 (no CVSS) - [CVE-2014-0873](https://cve.now/CVE-2014-0873.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Data Stewardship, (2) Business Admin, and (3) Product interfaces in IB (no CVSS) - [CVE-2014-0895](https://cve.now/CVE-2014-0895.md): Buffer overflow in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 3.0.1-IM-S3SAMPC-WIN32-FP001-IF02 allows remote att (no CVSS) - [CVE-2014-1700](https://cve.now/CVE-2014-1700.md): Use-after-free vulnerability in modules/speech/SpeechSynthesis.cpp in Blink, as used in Google Chrome before 33.0.1750.149, allows remote at (no CVSS) - [CVE-2014-1701](https://cve.now/CVE-2014-1701.md): The GenerateFunction function in bindings/scripts/code\_generator\_v8.pm in Blink, as used in Google Chrome before 33.0.1750.149, does not imp (no CVSS) - [CVE-2014-1702](https://cve.now/CVE-2014-1702.md): Use-after-free vulnerability in the DatabaseThread::cleanupDatabaseThread function in modules/webdatabase/DatabaseThread.cpp in the web data (no CVSS) - [CVE-2014-1703](https://cve.now/CVE-2014-1703.md): Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer\_host/websocket\_dispatcher\_host. (no CVSS) - [CVE-2014-1704](https://cve.now/CVE-2014-1704.md): Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome before 33.0.1750.149, allow attackers to cause (no CVSS) - [CVE-2014-1705](https://cve.now/CVE-2014-1705.md): Google V8, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows remote attackers to c (no CVSS) - [CVE-2014-1706](https://cve.now/CVE-2014-1706.md): crosh in Google Chrome OS before 33.0.1750.152 allows attackers to inject commands via unspecified vectors. (no CVSS) - [CVE-2014-1707](https://cve.now/CVE-2014-1707.md): Directory traversal vulnerability in CrosDisks in Google Chrome OS before 33.0.1750.152 has unspecified impact and attack vectors. (no CVSS) - [CVE-2014-1708](https://cve.now/CVE-2014-1708.md): The boot implementation in Google Chrome OS before 33.0.1750.152 does not properly consider file persistence, which allows remote attackers (no CVSS) - [CVE-2014-1710](https://cve.now/CVE-2014-1710.md): The AsyncPixelTransfersCompletedQuery::End function in gpu/command\_buffer/service/query\_manager.cc in Google Chrome, as used in Google Chrom (no CVSS) - [CVE-2014-1711](https://cve.now/CVE-2014-1711.md): The GPU driver in the kernel in Google Chrome OS before 33.0.1750.152 allows remote attackers to cause a denial of service (out-of-bounds wr (no CVSS) - [CVE-2014-1713](https://cve.now/CVE-2014-1713.md): Use-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp in the bindings in Blink, as used in Googl (no CVSS) - [CVE-2014-1714](https://cve.now/CVE-2014-1714.md): The ScopedClipboardWriter::WritePickledData function in ui/base/clipboard/scoped\_clipboard\_writer.cc in Google Chrome before 33.0.1750.152 o (no CVSS) - [CVE-2014-1715](https://cve.now/CVE-2014-1715.md): Directory traversal vulnerability in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows has unspecifie (no CVSS) - [CVE-2014-2246](https://cve.now/CVE-2014-2246.md): Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 (no CVSS) - [CVE-2014-2247](https://cve.now/CVE-2014-2247.md): The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject headers vi (no CVSS) - [CVE-2014-2248](https://cve.now/CVE-2014-2248.md): Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote (no CVSS) - [CVE-2014-2249](https://cve.now/CVE-2014-2249.md): Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CP (no CVSS) - [CVE-2014-2251](https://cve.now/CVE-2014-2251.md): The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which ma (no CVSS) - [CVE-2014-2253](https://cve.now/CVE-2014-2253.md): Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transiti (no CVSS) - [CVE-2014-2255](https://cve.now/CVE-2014-2255.md): Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transiti (no CVSS) - [CVE-2014-2257](https://cve.now/CVE-2014-2257.md): Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transiti (no CVSS) - [CVE-2014-2259](https://cve.now/CVE-2014-2259.md): Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transiti (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-03-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.