# CVEs published 2014-03-23 10 CVEs were published on March 23, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2014-2586](https://cve.now/CVE-2014-2586.md): Cross-site scripting (XSS) vulnerability in the login audit form in McAfee Cloud Single Sign On (SSO) allows remote attackers to inject arbi (no CVSS) - [CVE-2014-2587](https://cve.now/CVE-2014-2587.md): SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitra (no CVSS) - [CVE-2014-2588](https://cve.now/CVE-2014-2588.md): Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary (no CVSS) - [CVE-2014-2589](https://cve.now/CVE-2014-2589.md): Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA (no CVSS) - [CVE-2014-2585](https://cve.now/CVE-2014-2585.md): ownCloud before 5.0.15 and 6.x before 6.0.2, when the file\_external app is enabled, allows remote authenticated users to mount the local fil (no CVSS) - [CVE-2013-0303](https://cve.now/CVE-2013-0303.md): Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users t (no CVSS) - [CVE-2013-7344](https://cve.now/CVE-2013-7344.md): Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute (no CVSS) - [CVE-2013-7345](https://cve.now/CVE-2013-7345.md): The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited (no CVSS) - [CVE-2014-0016](https://cve.now/CVE-2014-0016.md): stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), whi (no CVSS) - [CVE-2014-2057](https://cve.now/CVE-2014-2057.md): Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 6.0.2 allow remote attackers to inject arbitrary web script or HTML v (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-03-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.