# CVEs published 2014-03-27 20 CVEs were published on March 27, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2014-2106](https://cve.now/CVE-2014-2106.md): Cisco IOS 15.3M before 15.3(3)M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service (device reload) via c (no CVSS) - [CVE-2014-2107](https://cve.now/CVE-2014-2107.md): Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows remo (no CVSS) - [CVE-2014-2108](https://cve.now/CVE-2014-2108.md): Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to (no CVSS) - [CVE-2014-2109](https://cve.now/CVE-2014-2109.md): The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of se (no CVSS) - [CVE-2014-2111](https://cve.now/CVE-2014-2111.md): The Application Layer Gateway (ALG) module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers t (no CVSS) - [CVE-2014-2112](https://cve.now/CVE-2014-2112.md): The SSL VPN (aka WebVPN) feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service (memory consumption) vi (no CVSS) - [CVE-2014-2113](https://cve.now/CVE-2014-2113.md): Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote atta (no CVSS) - [CVE-2014-2118](https://cve.now/CVE-2014-2118.md): Multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager (aka PRSM) 9.2(.1-2) (no CVSS) - [CVE-2013-0732](https://cve.now/CVE-2013-0732.md): Heap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote attackers to execute arbitrary code via crafted fon (no CVSS) - [CVE-2013-2559](https://cve.now/CVE-2013-2559.md): SQL injection vulnerability in Symphony CMS before 2.3.2 allows remote authenticated users to execute arbitrary SQL commands via the sort pa (no CVSS) - [CVE-2013-3481](https://cve.now/CVE-2013-3481.md): Stack-based buffer overflow in Artweaver Plus and Free before 3.1.5 allows remote attackers to execute arbitrary code via a crafted JPG imag (no CVSS) - [CVE-2013-7346](https://cve.now/CVE-2013-7346.md): Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2.3.2 allows remote attackers to hijack the authentication of adminis (no CVSS) - [CVE-2014-0089](https://cve.now/CVE-2014-0089.md): Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to (no CVSS) - [CVE-2014-2326](https://cve.now/CVE-2014-2326.md): Cross-site scripting (XSS) vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to inject arbitrary web s (no CVSS) - [CVE-2014-0506](https://cve.now/CVE-2014-0506.md): Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and b (no CVSS) - [CVE-2014-0510](https://cve.now/CVE-2014-0510.md): Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection (no CVSS) - [CVE-2014-0511](https://cve.now/CVE-2014-0511.md): Heap-based buffer overflow in Adobe Reader 11.0.06 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrate (no CVSS) - [CVE-2014-0512](https://cve.now/CVE-2014-0512.md): Adobe Reader 11.0.06 allows attackers to bypass a PDF sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during (no CVSS) - [CVE-2014-0623](https://cve.now/CVE-2014-0623.md): Cross-site scripting (XSS) vulnerability in the Self-Service Console in EMC RSA Authentication Manager 7.1 before SP4 P32 allows remote atta (no CVSS) - [CVE-2014-2653](https://cve.now/CVE-2014-2653.md): The verify\_host\_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP (CVSS 6.5) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-03-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.