# CVEs published 2014-03-22 17 CVEs were published on March 22, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2013-7341](https://cve.now/CVE-2013-7341.md): Multiple cross-site scripting (XSS) vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, (no CVSS, moodle/moodle ยท typo3/cms) - [CVE-2013-7342](https://cve.now/CVE-2013-7342.md): Cross-site scripting (XSS) vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.1 allows remote attackers t (no CVSS) - [CVE-2013-7343](https://cve.now/CVE-2013-7343.md): Cross-site scripting (XSS) vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.3 allows remote attackers t (no CVSS) - [CVE-2014-0122](https://cve.now/CVE-2014-0122.md): mod/chat/chat\_ajax.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly check for (no CVSS, moodle/moodle) - [CVE-2014-0123](https://cve.now/CVE-2014-0123.md): The wiki subsystem in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly restrict (1) v (no CVSS, moodle/moodle) - [CVE-2014-0124](https://cve.now/CVE-2014-0124.md): The identity-reporting implementations in mod/forum/renderer.php and mod/quiz/override\_form.php in Moodle through 2.3.11, 2.4.x before 2.4.9 (no CVSS, moodle/moodle) - [CVE-2014-0125](https://cve.now/CVE-2014-0125.md): repository/alfresco/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 places a session key in (no CVSS, moodle/moodle) - [CVE-2014-0126](https://cve.now/CVE-2014-0126.md): Cross-site request forgery (CSRF) vulnerability in enrol/imsenterprise/importnow.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x bef (no CVSS, moodle/moodle) - [CVE-2014-0127](https://cve.now/CVE-2014-0127.md): The time-validation implementation in (1) mod/feedback/complete.php and (2) mod/feedback/complete\_guest.php in Moodle through 2.3.11, 2.4.x (no CVSS, moodle/moodle) - [CVE-2014-0129](https://cve.now/CVE-2014-0129.md): badges/mybadges.php in Moodle 2.5.x before 2.5.5 and 2.6.x before 2.6.2 does not properly track the user to whom a badge was issued, which a (no CVSS, moodle/moodle) - [CVE-2014-2250](https://cve.now/CVE-2014-2250.md): The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, which make (no CVSS) - [CVE-2014-2252](https://cve.now/CVE-2014-2252.md): Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition (no CVSS) - [CVE-2014-2254](https://cve.now/CVE-2014-2254.md): Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition (no CVSS) - [CVE-2014-2256](https://cve.now/CVE-2014-2256.md): Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition (no CVSS) - [CVE-2014-2258](https://cve.now/CVE-2014-2258.md): Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition (no CVSS) - [CVE-2014-2571](https://cve.now/CVE-2014-2571.md): Cross-site scripting (XSS) vulnerability in the quiz\_question\_tostring function in mod/quiz/editlib.php in Moodle through 2.3.11, 2.4.x befo (no CVSS, moodle/moodle) - [CVE-2014-2572](https://cve.now/CVE-2014-2572.md): mod/assign/externallib.php in Moodle 2.6.x before 2.6.2 does not properly handle assignment web-service parameters, which might allow remote (no CVSS, moodle/moodle) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-03-22 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.