# CVEs published 2014-03-30

8 CVEs were published on March 30, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-6768](https://cve.now/CVE-2013-6768.md): Untrusted search path vulnerability in the CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier allows att (no CVSS)
- [CVE-2013-6769](https://cve.now/CVE-2013-6769.md): The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android allows attackers to gain privileges via shell metacharacters in the (no CVSS)
- [CVE-2013-6770](https://cve.now/CVE-2013-6770.md): The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.3 and 4.4 does not properly restrict the set of users who can exe (no CVSS)
- [CVE-2013-6774](https://cve.now/CVE-2013-6774.md): Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and earlier, CyanogenMod/ClockWorkMod/Koush Su (no CVSS)
- [CVE-2013-6775](https://cve.now/CVE-2013-6775.md): The Chainfire SuperSU package before 1.69 for Android allows attackers to gain privileges via the (1) backtick or (2) $() type of shell meta (no CVSS)
- [CVE-2014-2671](https://cve.now/CVE-2014-2671.md): Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly hav (no CVSS)
- [CVE-2012-3359](https://cve.now/CVE-2012-3359.md): Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the \_\_ac session cookie, which allows attackers (no CVSS)
- [CVE-2013-7347](https://cve.now/CVE-2013-7347.md): Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by readi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-03-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.