# Vulnerabilities published in 2014


- [CVE-2014-7896](https://insights.sbomify.com/CVE-2014-7896/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7895](https://insights.sbomify.com/CVE-2014-7895/): Code injection in n/a (critical 10.0)
- [CVE-2014-7894](https://insights.sbomify.com/CVE-2014-7894/): Code injection in n/a (critical 10.0)
- [CVE-2014-7893](https://insights.sbomify.com/CVE-2014-7893/): Code injection in n/a (critical 10.0)
- [CVE-2014-7892](https://insights.sbomify.com/CVE-2014-7892/): Code injection in n/a (critical 10.0)
- [CVE-2014-7891](https://insights.sbomify.com/CVE-2014-7891/): Code injection in n/a (critical 10.0)
- [CVE-2014-7890](https://insights.sbomify.com/CVE-2014-7890/): Code injection in n/a (critical 10.0)
- [CVE-2014-7889](https://insights.sbomify.com/CVE-2014-7889/): Code injection in n/a (critical 10.0)
- [CVE-2014-7888](https://insights.sbomify.com/CVE-2014-7888/): Code injection in n/a (critical 10.0)
- [CVE-2014-7885](https://insights.sbomify.com/CVE-2014-7885/): Other in n/a (critical 10.0)
- [CVE-2014-7884](https://insights.sbomify.com/CVE-2014-7884/): Other in n/a (critical 9.0)
- [CVE-2014-7883](https://insights.sbomify.com/CVE-2014-7883/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-7882](https://insights.sbomify.com/CVE-2014-7882/): Privilege escalation in n/a (medium 5.5)
- [CVE-2014-7881](https://insights.sbomify.com/CVE-2014-7881/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7880](https://insights.sbomify.com/CVE-2014-7880/): Denial of service in n/a (medium 5.0)
- [CVE-2014-7879](https://insights.sbomify.com/CVE-2014-7879/): Auth bypass in n/a (high 8.5)
- [CVE-2014-7878](https://insights.sbomify.com/CVE-2014-7878/): Hardcoded credentials in n/a (critical 10.0)
- [CVE-2014-7877](https://insights.sbomify.com/CVE-2014-7877/): Denial of service in n/a (medium 4.9)
- [CVE-2014-7876](https://insights.sbomify.com/CVE-2014-7876/): Privilege escalation in n/a (critical 10.0)
- [CVE-2014-7875](https://insights.sbomify.com/CVE-2014-7875/): Other in n/a (critical 9.0)
- [CVE-2014-7874](https://insights.sbomify.com/CVE-2014-7874/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-7872](https://insights.sbomify.com/CVE-2014-7872/): Missing authorization in n/a (high 7.2)
- [CVE-2014-7871](https://insights.sbomify.com/CVE-2014-7871/): SQL injection in n/a (medium 6.5)
- [CVE-2014-7870](https://insights.sbomify.com/CVE-2014-7870/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-7869](https://insights.sbomify.com/CVE-2014-7869/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-7868](https://insights.sbomify.com/CVE-2014-7868/): SQL injection in n/a (high 7.5)
- [CVE-2014-7867](https://insights.sbomify.com/CVE-2014-7867/): SQL injection in n/a (high 7.5)
- [CVE-2014-7866](https://insights.sbomify.com/CVE-2014-7866/): Path traversal in n/a (high 7.5)
- [CVE-2014-7864](https://insights.sbomify.com/CVE-2014-7864/): SQL injection in n/a (high 7.5)
- [CVE-2014-7863](https://insights.sbomify.com/CVE-2014-7863/): Path traversal in n/a (high 7.5)
- [CVE-2014-7862](https://insights.sbomify.com/CVE-2014-7862/): Missing authorization in n/a (critical 9.8)
- [CVE-2014-7861](https://insights.sbomify.com/CVE-2014-7861/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-7860](https://insights.sbomify.com/CVE-2014-7860/): Missing authorization in n/a (medium 5.3)
- [CVE-2014-7859](https://insights.sbomify.com/CVE-2014-7859/): Memory corruption in n/a (critical 9.8)
- [CVE-2014-7858](https://insights.sbomify.com/CVE-2014-7858/): Auth bypass in n/a (critical 9.8)
- [CVE-2014-7857](https://insights.sbomify.com/CVE-2014-7857/): Auth bypass in n/a (critical 9.8)
- [CVE-2014-7853](https://insights.sbomify.com/CVE-2014-7853/): Information disclosure in n/a (medium 4.0)
- [CVE-2014-7852](https://insights.sbomify.com/CVE-2014-7852/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7851](https://insights.sbomify.com/CVE-2014-7851/): Auth bypass in n/a (high 7.5)
- [CVE-2014-7850](https://insights.sbomify.com/CVE-2014-7850/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7849](https://insights.sbomify.com/CVE-2014-7849/): Missing authorization in n/a (medium 4.0)
- [CVE-2014-7848](https://insights.sbomify.com/CVE-2014-7848/): Moodle allows attacks to obtain sensitive information (medium 5.0)
- [CVE-2014-7847](https://insights.sbomify.com/CVE-2014-7847/): Moodle allows attackers to cause a denial of service (medium 5.0)
- [CVE-2014-7846](https://insights.sbomify.com/CVE-2014-7846/): Moodle does not consider the moodle/tag:edit capability before adding a tag (medium 4.0)
- [CVE-2014-7845](https://insights.sbomify.com/CVE-2014-7845/): Moodle Temporary Passwords are Brute Force-able (high 7.5)
- [CVE-2014-7844](https://insights.sbomify.com/CVE-2014-7844/): Command injection in mailx (high 7.8)
- [CVE-2014-7843](https://insights.sbomify.com/CVE-2014-7843/): Denial of service in n/a (medium 4.9)
- [CVE-2014-7842](https://insights.sbomify.com/CVE-2014-7842/): Race condition in n/a (medium 4.9)
- [CVE-2014-7841](https://insights.sbomify.com/CVE-2014-7841/): Null dereference in n/a (medium 5.0)
- [CVE-2014-7840](https://insights.sbomify.com/CVE-2014-7840/): Memory corruption in n/a (high 7.5)
- [CVE-2014-7839](https://insights.sbomify.com/CVE-2014-7839/): XML External Entity Reference in RESTEasy (medium 6.4)
- [CVE-2014-7838](https://insights.sbomify.com/CVE-2014-7838/): Moodle has multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module (medium 6.8)
- [CVE-2014-7837](https://insights.sbomify.com/CVE-2014-7837/): Moodle allows attackers to remove wiki pages (medium 5.5)
- [CVE-2014-7836](https://insights.sbomify.com/CVE-2014-7836/): Moodle multiple cross-site request forgery (CSRF) vulnerabilities (medium 6.8)
- [CVE-2014-7835](https://insights.sbomify.com/CVE-2014-7835/): Moodle allows attackers to upload files containing JavaScript (low 2.1)
- [CVE-2014-7834](https://insights.sbomify.com/CVE-2014-7834/): Moodle does not verify group permissions (medium 4.0)
- [CVE-2014-7833](https://insights.sbomify.com/CVE-2014-7833/): Moodle allows attackers to obtain sensitive information (medium 4.0)
- [CVE-2014-7832](https://insights.sbomify.com/CVE-2014-7832/): Moodle allows attackers to bypass the mod/lti:view capability requirement (medium 4.0)
- [CVE-2014-7831](https://insights.sbomify.com/CVE-2014-7831/): Moodle exposes hidden grades to students (medium 4.0)
- [CVE-2014-7830](https://insights.sbomify.com/CVE-2014-7830/): Moodle cross-site scripting (XSS) vulnerability (low 3.5)
- [CVE-2014-7829](https://insights.sbomify.com/CVE-2014-7829/): Directory traversal vulnerability in actionpack (medium 5.0)
- [CVE-2014-7828](https://insights.sbomify.com/CVE-2014-7828/): Auth bypass in n/a (low 3.5)
- [CVE-2014-7827](https://insights.sbomify.com/CVE-2014-7827/): Auth bypass in n/a (low 3.5)
- [CVE-2014-7826](https://insights.sbomify.com/CVE-2014-7826/): Null dereference in n/a (high 7.8)
- [CVE-2014-7825](https://insights.sbomify.com/CVE-2014-7825/): Information disclosure in n/a (high 7.8)
- [CVE-2014-7824](https://insights.sbomify.com/CVE-2014-7824/): Denial of service in n/a (low 2.1)
- [CVE-2014-7823](https://insights.sbomify.com/CVE-2014-7823/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-7822](https://insights.sbomify.com/CVE-2014-7822/): Denial of service in n/a (high 7.2)
- [CVE-2014-7821](https://insights.sbomify.com/CVE-2014-7821/): Denial of service in n/a (medium 4.0)
- [CVE-2014-7819](https://insights.sbomify.com/CVE-2014-7819/): sprockets vulnerable to Path Traversal (medium 5.0)
- [CVE-2014-7818](https://insights.sbomify.com/CVE-2014-7818/): actionpack vulnerable to Path Traversal (medium 4.3)
- [CVE-2014-7817](https://insights.sbomify.com/CVE-2014-7817/): Command injection in n/a (medium 4.6)
- [CVE-2014-7816](https://insights.sbomify.com/CVE-2014-7816/): Improper Limitation of a Pathname to a Restricted Directory in JBoss Undertow (medium 5.0)
- [CVE-2014-7815](https://insights.sbomify.com/CVE-2014-7815/): Denial of service in n/a (medium 5.0)
- [CVE-2014-7814](https://insights.sbomify.com/CVE-2014-7814/): SQL injection in n/a (medium 6.5)
- [CVE-2014-7813](https://insights.sbomify.com/CVE-2014-7813/): Denial of service in n/a (medium 6.5)
- [CVE-2014-7812](https://insights.sbomify.com/CVE-2014-7812/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-7811](https://insights.sbomify.com/CVE-2014-7811/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-7810](https://insights.sbomify.com/CVE-2014-7810/): Improper Access Control in Apache Tomcat (medium 5.0)
- [CVE-2014-7809](https://insights.sbomify.com/CVE-2014-7809/): Cross-Site Request Forgery in Apache Struts (medium 6.8)
- [CVE-2014-7808](https://insights.sbomify.com/CVE-2014-7808/): Apache Wicket insecure defaults (high 7.5)
- [CVE-2014-7807](https://insights.sbomify.com/CVE-2014-7807/): Auth bypass in n/a (medium 5.0)
- [CVE-2014-7804](https://insights.sbomify.com/CVE-2014-7804/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7803](https://insights.sbomify.com/CVE-2014-7803/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7802](https://insights.sbomify.com/CVE-2014-7802/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7800](https://insights.sbomify.com/CVE-2014-7800/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7799](https://insights.sbomify.com/CVE-2014-7799/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7798](https://insights.sbomify.com/CVE-2014-7798/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7797](https://insights.sbomify.com/CVE-2014-7797/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7796](https://insights.sbomify.com/CVE-2014-7796/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7795](https://insights.sbomify.com/CVE-2014-7795/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7794](https://insights.sbomify.com/CVE-2014-7794/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7793](https://insights.sbomify.com/CVE-2014-7793/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7791](https://insights.sbomify.com/CVE-2014-7791/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7789](https://insights.sbomify.com/CVE-2014-7789/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7788](https://insights.sbomify.com/CVE-2014-7788/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7787](https://insights.sbomify.com/CVE-2014-7787/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7786](https://insights.sbomify.com/CVE-2014-7786/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7785](https://insights.sbomify.com/CVE-2014-7785/): Weak cryptography in n/a (medium 5.4)
- [CVE-2014-7784](https://insights.sbomify.com/CVE-2014-7784/): Weak cryptography in n/a (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/17/