# CVEs published 2014-03-29

8 CVEs were published on March 29, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0344](https://cve.now/CVE-2014-0344.md): Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated user (no CVSS)
- [CVE-2014-1516](https://cve.now/CVE-2014-1516.md): The saltProfileName function in base/GeckoProfileDirectories.java in Mozilla Firefox through 28.0.1 on Android relies on Android's weak appr (no CVSS)
- [CVE-2014-2670](https://cve.now/CVE-2014-2670.md): Cross-site scripting (XSS) vulnerability in Properties.do in ZOHO ManageEngine OpStor before build 8500 allows remote authenticated users to (no CVSS)
- [CVE-2013-6211](https://cve.now/CVE-2013-6211.md): Unspecified vulnerability in HP StoreOnce Virtual Storage Appliance (VSA) before 3.7.2, StoreOnce 26xx and 4210 iSCSI Backup System before 3 (no CVSS)
- [CVE-2014-0880](https://cve.now/CVE-2014-0880.md): IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 (no CVSS)
- [CVE-2014-1644](https://cve.now/CVE-2014-1644.md): The forgotten-password feature in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allow (no CVSS)
- [CVE-2014-1645](https://cve.now/CVE-2014-1645.md): SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows r (no CVSS)
- [CVE-2014-2131](https://cve.now/CVE-2014-2131.md): The packet driver in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a series of (1) Virtual Switching Sy (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-03-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.