# CVEs published 2014-03-24 9 CVEs were published on March 24, 2014: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2014-1761](https://cve.now/CVE-2014-1761.md): Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Wor (CVSS 7.8, KEV) - [CVE-2012-4886](https://cve.now/CVE-2012-4886.md): Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to execute arbitrary code v (no CVSS) - [CVE-2012-6430](https://cve.now/CVE-2012-6430.md): Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, (no CVSS) - [CVE-2013-1408](https://cve.now/CVE-2013-1408.md): Multiple SQL injection vulnerabilities in the Wysija Newsletters plugin before 2.2.1 for WordPress allow remote authenticated administrators (no CVSS) - [CVE-2014-2284](https://cve.now/CVE-2014-2284.md): The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly va (no CVSS) - [CVE-2013-7339](https://cve.now/CVE-2013-7339.md): The rds\_ib\_laddr\_check function in net/rds/ib.c in the Linux kernel before 3.12.8 allows local users to cause a denial of service (NULL poin (no CVSS) - [CVE-2014-0131](https://cve.now/CVE-2014-0131.md): Use-after-free vulnerability in the skb\_segment function in net/core/skbuff.c in the Linux kernel through 3.13.6 allows attackers to obtain (no CVSS) - [CVE-2014-2523](https://cve.now/CVE-2014-2523.md): net/netfilter/nf\_conntrack\_proto\_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attac (no CVSS) - [CVE-2014-2568](https://cve.now/CVE-2014-2568.md): Use-after-free vulnerability in the nfqnl\_zcopy function in net/netfilter/nfnetlink\_queue\_core.c in the Linux kernel through 3.13.6 allows a (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-03-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.