# CVEs published 2014-03-19 30 CVEs were published on March 19, 2014: 0 critical, 0 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2013-5952](https://cve.now/CVE-2013-5952.md): Multiple cross-site scripting (XSS) vulnerabilities in the Freichat (com\_freichat) component, possibly 9.4 and earlier, for Joomla! allow re (no CVSS) - [CVE-2013-5953](https://cve.now/CVE-2013-5953.md): Multiple cross-site scripting (XSS) vulnerabilities in tmpl/layout\_editevent.php in the Multi Calendar (com\_multicalendar) component 4.0.2, (no CVSS) - [CVE-2013-5955](https://cve.now/CVE-2013-5955.md): Cross-site scripting (XSS) vulnerability in manage.php in the PBBooking (com\_pbbooking) component 2.4 for Joomla! allows remote attackers to (no CVSS) - [CVE-2014-1977](https://cve.now/CVE-2014-1977.md): The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and earlier for Android 4.1 through 4.4 uses weak permis (no CVSS) - [CVE-2014-1978](https://cve.now/CVE-2014-1978.md): The application link interface in the NTT DOCOMO sp mode mail application 6100 through 6300 for Android 4.0.x and 6130 through 6700 for Andr (no CVSS) - [CVE-2014-1979](https://cve.now/CVE-2014-1979.md): The NTT DOCOMO sp mode mail application 5900 through 6300 for Android 4.0.x and 6000 through 6620 for Android 4.1 through 4.4 allows remote (no CVSS) - [CVE-2014-2339](https://cve.now/CVE-2014-2339.md): Multiple SQL injection vulnerabilities in bbs/ajax.autosave.php in GNUboard 5.x and possibly earlier allow remote authenticated users to exe (no CVSS) - [CVE-2014-1493](https://cve.now/CVE-2014-1493.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before (no CVSS) - [CVE-2014-1494](https://cve.now/CVE-2014-1494.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers t (no CVSS) - [CVE-2014-1496](https://cve.now/CVE-2014-1496.md): Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gai (no CVSS) - [CVE-2014-1497](https://cve.now/CVE-2014-1497.md): The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and (no CVSS) - [CVE-2014-1498](https://cve.now/CVE-2014-1498.md): The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type (no CVSS) - [CVE-2014-1499](https://cve.now/CVE-2014-1499.md): Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microp (no CVSS) - [CVE-2014-1500](https://cve.now/CVE-2014-1500.md): Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and applicat (no CVSS) - [CVE-2014-1501](https://cve.now/CVE-2014-1501.md): Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors (no CVSS) - [CVE-2014-1502](https://cve.now/CVE-2014-1502.md): The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 (no CVSS) - [CVE-2014-1504](https://cve.now/CVE-2014-1504.md): The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data (no CVSS) - [CVE-2014-1505](https://cve.now/CVE-2014-1505.md): The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2. (no CVSS) - [CVE-2014-1506](https://cve.now/CVE-2014-1506.md): Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transm (no CVSS) - [CVE-2014-1507](https://cve.now/CVE-2014-1507.md): Directory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2 allows attackers to bypass the media sandbox pr (no CVSS) - [CVE-2014-1508](https://cve.now/CVE-2014-1508.md): The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMon (no CVSS) - [CVE-2014-1509](https://cve.now/CVE-2014-1509.md): Buffer overflow in the \_cairo\_truetype\_index\_to\_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4 (no CVSS) - [CVE-2014-1510](https://cve.now/CVE-2014-1510.md): The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 (no CVSS) - [CVE-2014-1511](https://cve.now/CVE-2014-1511.md): Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypa (no CVSS) - [CVE-2014-1512](https://cve.now/CVE-2014-1512.md): Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, (no CVSS) - [CVE-2014-1513](https://cve.now/CVE-2014-1513.md): TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does n (no CVSS) - [CVE-2014-1514](https://cve.now/CVE-2014-1514.md): vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does (no CVSS) - [CVE-2014-2120](https://cve.now/CVE-2014-2120.md): Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attacker (CVSS 5.4, KEV) - [CVE-2014-2121](https://cve.now/CVE-2014-2121.md): The Java-based software in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (closing of TCP po (no CVSS) - [CVE-2014-2122](https://cve.now/CVE-2014-2122.md): Memory leak in the GUI in the Impact server in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of servic (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-03-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.