# Vulnerabilities published in 2014


- [CVE-2014-7278](https://insights.sbomify.com/CVE-2014-7278/): Denial of service in n/a (medium 5.0)
- [CVE-2014-7277](https://insights.sbomify.com/CVE-2014-7277/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7275](https://insights.sbomify.com/CVE-2014-7275/): Weak cryptography in n/a (medium 5.8)
- [CVE-2014-7274](https://insights.sbomify.com/CVE-2014-7274/): Weak cryptography in n/a (medium 5.8)
- [CVE-2014-7273](https://insights.sbomify.com/CVE-2014-7273/): Weak cryptography in n/a (medium 6.8)
- [CVE-2014-7272](https://insights.sbomify.com/CVE-2014-7272/): Race condition in n/a (high 7.8)
- [CVE-2014-7271](https://insights.sbomify.com/CVE-2014-7271/): Auth bypass in n/a (high 7.8)
- [CVE-2014-7270](https://insights.sbomify.com/CVE-2014-7270/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-7269](https://insights.sbomify.com/CVE-2014-7269/): Command injection in n/a (medium 6.5)
- [CVE-2014-7268](https://insights.sbomify.com/CVE-2014-7268/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7267](https://insights.sbomify.com/CVE-2014-7267/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-7266](https://insights.sbomify.com/CVE-2014-7266/): Denial of service in n/a (high 7.8)
- [CVE-2014-7265](https://insights.sbomify.com/CVE-2014-7265/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7264](https://insights.sbomify.com/CVE-2014-7264/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-7263](https://insights.sbomify.com/CVE-2014-7263/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7262](https://insights.sbomify.com/CVE-2014-7262/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7261](https://insights.sbomify.com/CVE-2014-7261/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7260](https://insights.sbomify.com/CVE-2014-7260/): Code injection in n/a (high 7.5)
- [CVE-2014-7259](https://insights.sbomify.com/CVE-2014-7259/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-7258](https://insights.sbomify.com/CVE-2014-7258/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7257](https://insights.sbomify.com/CVE-2014-7257/): SQL injection in DBD::PgPP (critical 9.8)
- [CVE-2014-7256](https://insights.sbomify.com/CVE-2014-7256/): Denial of service in n/a (high 7.8)
- [CVE-2014-7255](https://insights.sbomify.com/CVE-2014-7255/): Denial of service in n/a (high 7.5)
- [CVE-2014-7254](https://insights.sbomify.com/CVE-2014-7254/): Information disclosure in n/a (medium 4.6)
- [CVE-2014-7253](https://insights.sbomify.com/CVE-2014-7253/): Command injection in n/a (high 7.2)
- [CVE-2014-7252](https://insights.sbomify.com/CVE-2014-7252/): Memory corruption in n/a (medium 4.6)
- [CVE-2014-7251](https://insights.sbomify.com/CVE-2014-7251/): XML external entity in n/a (low 3.2)
- [CVE-2014-7250](https://insights.sbomify.com/CVE-2014-7250/): Denial of service in n/a (medium 5.0)
- [CVE-2014-7249](https://insights.sbomify.com/CVE-2014-7249/): Memory corruption in n/a (critical 10.0)
- [CVE-2014-7248](https://insights.sbomify.com/CVE-2014-7248/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7247](https://insights.sbomify.com/CVE-2014-7247/): Other in n/a (critical 10.0)
- [CVE-2014-7246](https://insights.sbomify.com/CVE-2014-7246/): Denial of service in n/a (low 3.5)
- [CVE-2014-7243](https://insights.sbomify.com/CVE-2014-7243/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-7242](https://insights.sbomify.com/CVE-2014-7242/): Security feature bypass in n/a (medium 5.9)
- [CVE-2014-7241](https://insights.sbomify.com/CVE-2014-7241/): Code injection in n/a (medium 6.8)
- [CVE-2014-7240](https://insights.sbomify.com/CVE-2014-7240/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2014-7238](https://insights.sbomify.com/CVE-2014-7238/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2014-7237](https://insights.sbomify.com/CVE-2014-7237/): File upload in n/a (medium 6.8)
- [CVE-2014-7236](https://insights.sbomify.com/CVE-2014-7236/): Code injection in n/a (critical 9.1)
- [CVE-2014-7235](https://insights.sbomify.com/CVE-2014-7235/): Deserialization in n/a (critical 10.0)
- [CVE-2014-7233](https://insights.sbomify.com/CVE-2014-7233/): Hardcoded credentials in n/a (critical 10.0)
- [CVE-2014-7232](https://insights.sbomify.com/CVE-2014-7232/): Hardcoded credentials in n/a (critical 10.0)
- [CVE-2014-7231](https://insights.sbomify.com/CVE-2014-7231/): OpenStack Oslo utility sensitive information exposure via log files (low 2.1)
- [CVE-2014-7230](https://insights.sbomify.com/CVE-2014-7230/): Information disclosure in n/a (low 2.1)
- [CVE-2014-7229](https://insights.sbomify.com/CVE-2014-7229/): Denial of service in n/a (medium 5.0)
- [CVE-2014-7228](https://insights.sbomify.com/CVE-2014-7228/): Code injection in n/a (high 7.5)
- [CVE-2014-7226](https://insights.sbomify.com/CVE-2014-7226/): Code injection in n/a (high 7.5)
- [CVE-2014-7224](https://insights.sbomify.com/CVE-2014-7224/): Code injection in n/a (high 8.8)
- [CVE-2014-7222](https://insights.sbomify.com/CVE-2014-7222/): Memory corruption in n/a (medium 6.5)
- [CVE-2014-7221](https://insights.sbomify.com/CVE-2014-7221/): Memory corruption in n/a (medium 6.5)
- [CVE-2014-7217](https://insights.sbomify.com/CVE-2014-7217/): phpMyAdmin cross-site scripting Vulnerability via ENUM value (low 3.5)
- [CVE-2014-7216](https://insights.sbomify.com/CVE-2014-7216/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-7210](https://insights.sbomify.com/CVE-2014-7210/): Misconfiguration in pdns (critical 9.8)
- [CVE-2014-7209](https://insights.sbomify.com/CVE-2014-7209/): Command injection in n/a (high 7.5)
- [CVE-2014-7208](https://insights.sbomify.com/CVE-2014-7208/): Command injection in n/a (high 7.2)
- [CVE-2014-7207](https://insights.sbomify.com/CVE-2014-7207/): Null dereference in n/a (medium 4.9)
- [CVE-2014-7206](https://insights.sbomify.com/CVE-2014-7206/): Path traversal in n/a (low 3.6)
- [CVE-2014-7205](https://insights.sbomify.com/CVE-2014-7205/): Arbitrary JavaScript Execution in bassmaster (critical 10.0)
- [CVE-2014-7204](https://insights.sbomify.com/CVE-2014-7204/): Denial of service in n/a (medium 5.0)
- [CVE-2014-7203](https://insights.sbomify.com/CVE-2014-7203/): Other in n/a (medium 4.3)
- [CVE-2014-7202](https://insights.sbomify.com/CVE-2014-7202/): Security feature bypass in n/a (medium 4.3)
- [CVE-2014-7201](https://insights.sbomify.com/CVE-2014-7201/): SQL injection in n/a (high 7.5)
- [CVE-2014-7200](https://insights.sbomify.com/CVE-2014-7200/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7199](https://insights.sbomify.com/CVE-2014-7199/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7198](https://insights.sbomify.com/CVE-2014-7198/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2014-7195](https://insights.sbomify.com/CVE-2014-7195/): Information disclosure in n/a (medium 4.0)
- [CVE-2014-7194](https://insights.sbomify.com/CVE-2014-7194/): Missing authorization in n/a (medium 6.4)
- [CVE-2014-7193](https://insights.sbomify.com/CVE-2014-7193/): CORS Token Disclosure in crumb (medium 5.8)
- [CVE-2014-7192](https://insights.sbomify.com/CVE-2014-7192/): Potential for Script Injection in syntax-error (critical 10.0)
- [CVE-2014-7191](https://insights.sbomify.com/CVE-2014-7191/): Denial-of-Service Memory Exhaustion in qs (medium 5.0)
- [CVE-2014-7190](https://insights.sbomify.com/CVE-2014-7190/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-7189](https://insights.sbomify.com/CVE-2014-7189/): Security feature bypass in n/a (medium 4.3)
- [CVE-2014-7188](https://insights.sbomify.com/CVE-2014-7188/): Information disclosure in n/a (high 8.3)
- [CVE-2014-7187](https://insights.sbomify.com/CVE-2014-7187/): Memory corruption in n/a (critical 10.0)
- [CVE-2014-7186](https://insights.sbomify.com/CVE-2014-7186/): Memory corruption in n/a (critical 10.0)
- [CVE-2014-7185](https://insights.sbomify.com/CVE-2014-7185/): Integer overflow in n/a (medium 6.4)
- [CVE-2014-7183](https://insights.sbomify.com/CVE-2014-7183/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7182](https://insights.sbomify.com/CVE-2014-7182/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7181](https://insights.sbomify.com/CVE-2014-7181/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7180](https://insights.sbomify.com/CVE-2014-7180/): Privilege escalation in n/a (medium 4.6)
- [CVE-2014-7178](https://insights.sbomify.com/CVE-2014-7178/): Command injection in n/a (critical 9.3)
- [CVE-2014-7177](https://insights.sbomify.com/CVE-2014-7177/): XML external entity in n/a (medium 4.0)
- [CVE-2014-7176](https://insights.sbomify.com/CVE-2014-7176/): SQL injection in n/a (medium 6.5)
- [CVE-2014-7175](https://insights.sbomify.com/CVE-2014-7175/): Path traversal in n/a (critical 9.8)
- [CVE-2014-7174](https://insights.sbomify.com/CVE-2014-7174/): Path traversal in n/a (medium 5.3)
- [CVE-2014-7173](https://insights.sbomify.com/CVE-2014-7173/): Command injection in n/a (critical 9.8)
- [CVE-2014-7170](https://insights.sbomify.com/CVE-2014-7170/): Race condition in n/a (low 1.9)
- [CVE-2014-7169](https://insights.sbomify.com/CVE-2014-7169/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-7158](https://insights.sbomify.com/CVE-2014-7158/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-7157](https://insights.sbomify.com/CVE-2014-7157/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7156](https://insights.sbomify.com/CVE-2014-7156/): Denial of service in n/a (low 3.3)
- [CVE-2014-7155](https://insights.sbomify.com/CVE-2014-7155/): Privilege escalation in n/a (medium 5.8)
- [CVE-2014-7154](https://insights.sbomify.com/CVE-2014-7154/): Race condition in n/a (medium 6.1)
- [CVE-2014-7153](https://insights.sbomify.com/CVE-2014-7153/): SQL injection in n/a (medium 6.5)
- [CVE-2014-7152](https://insights.sbomify.com/CVE-2014-7152/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-7151](https://insights.sbomify.com/CVE-2014-7151/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2014-7146](https://insights.sbomify.com/CVE-2014-7146/): Code injection in n/a (high 7.5)
- [CVE-2014-7145](https://insights.sbomify.com/CVE-2014-7145/): Null dereference in n/a (high 7.8)
- [CVE-2014-7144](https://insights.sbomify.com/CVE-2014-7144/): OpenStack keystonemiddleware does not verify certificate (medium 4.3)
- [CVE-2014-7143](https://insights.sbomify.com/CVE-2014-7143/): Python Twisted trustRoot is not respected in HTTP client (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/22/