# Vulnerabilities published in 2014


- [CVE-2014-6396](https://insights.sbomify.com/CVE-2014-6396/): Memory corruption in n/a (high 7.5)
- [CVE-2014-6395](https://insights.sbomify.com/CVE-2014-6395/): Memory corruption in n/a (high 7.5)
- [CVE-2014-6394](https://insights.sbomify.com/CVE-2014-6394/): Directory Traversal in send (high 7.5)
- [CVE-2014-6393](https://insights.sbomify.com/CVE-2014-6393/): No Charset in Content-Type Header in express (medium 6.1)
- [CVE-2014-6392](https://insights.sbomify.com/CVE-2014-6392/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6389](https://insights.sbomify.com/CVE-2014-6389/): Command injection in n/a (high 7.5)
- [CVE-2014-6387](https://insights.sbomify.com/CVE-2014-6387/): Auth bypass in n/a (medium 5.0)
- [CVE-2014-6386](https://insights.sbomify.com/CVE-2014-6386/): Denial of service in n/a (high 7.8)
- [CVE-2014-6385](https://insights.sbomify.com/CVE-2014-6385/): Denial of service in n/a (medium 6.1)
- [CVE-2014-6384](https://insights.sbomify.com/CVE-2014-6384/): Auth bypass in n/a (medium 6.9)
- [CVE-2014-6383](https://insights.sbomify.com/CVE-2014-6383/): Security feature bypass in n/a (medium 5.0)
- [CVE-2014-6382](https://insights.sbomify.com/CVE-2014-6382/): Denial of service in n/a (high 7.1)
- [CVE-2014-6381](https://insights.sbomify.com/CVE-2014-6381/): Denial of service in n/a (low 2.9)
- [CVE-2014-6380](https://insights.sbomify.com/CVE-2014-6380/): Denial of service in n/a (high 7.8)
- [CVE-2014-6379](https://insights.sbomify.com/CVE-2014-6379/): Auth bypass in n/a (high 7.5)
- [CVE-2014-6378](https://insights.sbomify.com/CVE-2014-6378/): Denial of service in n/a (high 7.8)
- [CVE-2014-6377](https://insights.sbomify.com/CVE-2014-6377/): Denial of service in n/a (high 7.8)
- [CVE-2014-6376](https://insights.sbomify.com/CVE-2014-6376/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6375](https://insights.sbomify.com/CVE-2014-6375/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6374](https://insights.sbomify.com/CVE-2014-6374/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6373](https://insights.sbomify.com/CVE-2014-6373/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6369](https://insights.sbomify.com/CVE-2014-6369/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6368](https://insights.sbomify.com/CVE-2014-6368/): Security feature bypass in n/a (medium 4.3)
- [CVE-2014-6366](https://insights.sbomify.com/CVE-2014-6366/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6365](https://insights.sbomify.com/CVE-2014-6365/): Security feature bypass in n/a (medium 4.3)
- [CVE-2014-6364](https://insights.sbomify.com/CVE-2014-6364/): Use after free in n/a (critical 9.3)
- [CVE-2014-6363](https://insights.sbomify.com/CVE-2014-6363/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6362](https://insights.sbomify.com/CVE-2014-6362/): Use after free in n/a (medium 4.3)
- [CVE-2014-6361](https://insights.sbomify.com/CVE-2014-6361/): Code injection in n/a (critical 9.3)
- [CVE-2014-6360](https://insights.sbomify.com/CVE-2014-6360/): Code injection in n/a (critical 9.3)
- [CVE-2014-6357](https://insights.sbomify.com/CVE-2014-6357/): Use after free in n/a (critical 9.3)
- [CVE-2014-6356](https://insights.sbomify.com/CVE-2014-6356/): Code injection in n/a (critical 9.3)
- [CVE-2014-6355](https://insights.sbomify.com/CVE-2014-6355/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-6354](https://insights.sbomify.com/CVE-2014-6354/): Memory corruption in n/a (high 7.5)
- [CVE-2014-6353](https://insights.sbomify.com/CVE-2014-6353/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6352](https://insights.sbomify.com/CVE-2014-6352/): Microsoft Windows Code Injection (high 7.8, exploited in the wild)
- [CVE-2014-6351](https://insights.sbomify.com/CVE-2014-6351/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6350](https://insights.sbomify.com/CVE-2014-6350/): Privilege escalation in n/a (medium 4.3)
- [CVE-2014-6349](https://insights.sbomify.com/CVE-2014-6349/): Privilege escalation in n/a (medium 4.3)
- [CVE-2014-6348](https://insights.sbomify.com/CVE-2014-6348/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6347](https://insights.sbomify.com/CVE-2014-6347/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6346](https://insights.sbomify.com/CVE-2014-6346/): Information disclosure in n/a (medium 4.3)
- [CVE-2014-6345](https://insights.sbomify.com/CVE-2014-6345/): Information disclosure in n/a (medium 4.3)
- [CVE-2014-6344](https://insights.sbomify.com/CVE-2014-6344/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6343](https://insights.sbomify.com/CVE-2014-6343/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6342](https://insights.sbomify.com/CVE-2014-6342/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6341](https://insights.sbomify.com/CVE-2014-6341/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6340](https://insights.sbomify.com/CVE-2014-6340/): Information disclosure in n/a (medium 4.3)
- [CVE-2014-6339](https://insights.sbomify.com/CVE-2014-6339/): Security feature bypass in n/a (medium 5.0)
- [CVE-2014-6337](https://insights.sbomify.com/CVE-2014-6337/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6336](https://insights.sbomify.com/CVE-2014-6336/): Open redirect in n/a (low 3.5)
- [CVE-2014-6335](https://insights.sbomify.com/CVE-2014-6335/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6334](https://insights.sbomify.com/CVE-2014-6334/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6333](https://insights.sbomify.com/CVE-2014-6333/): Code injection in n/a (critical 9.3)
- [CVE-2014-6332](https://insights.sbomify.com/CVE-2014-6332/): Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2014-6331](https://insights.sbomify.com/CVE-2014-6331/): Security feature bypass in n/a (medium 5.0)
- [CVE-2014-6330](https://insights.sbomify.com/CVE-2014-6330/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6329](https://insights.sbomify.com/CVE-2014-6329/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6328](https://insights.sbomify.com/CVE-2014-6328/): Cross-site scripting in n/a (medium 5.0)
- [CVE-2014-6327](https://insights.sbomify.com/CVE-2014-6327/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-6326](https://insights.sbomify.com/CVE-2014-6326/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6325](https://insights.sbomify.com/CVE-2014-6325/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6324](https://insights.sbomify.com/CVE-2014-6324/): Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2014-6323](https://insights.sbomify.com/CVE-2014-6323/): Information disclosure in n/a (medium 4.3)
- [CVE-2014-6322](https://insights.sbomify.com/CVE-2014-6322/): Privilege escalation in n/a (medium 4.3)
- [CVE-2014-6321](https://insights.sbomify.com/CVE-2014-6321/): Code injection in n/a (critical 10.0)
- [CVE-2014-6319](https://insights.sbomify.com/CVE-2014-6319/): Auth bypass in n/a (medium 5.0)
- [CVE-2014-6318](https://insights.sbomify.com/CVE-2014-6318/): Security feature bypass in n/a (medium 4.3)
- [CVE-2014-6317](https://insights.sbomify.com/CVE-2014-6317/): Denial of service in n/a (high 7.1)
- [CVE-2014-6316](https://insights.sbomify.com/CVE-2014-6316/): Open redirect in n/a (medium 5.8)
- [CVE-2014-6315](https://insights.sbomify.com/CVE-2014-6315/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6313](https://insights.sbomify.com/CVE-2014-6313/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6312](https://insights.sbomify.com/CVE-2014-6312/): Cross-site request forgery in n/a (medium 4.3)
- [CVE-2014-6311](https://insights.sbomify.com/CVE-2014-6311/): Other in n/a (critical 9.8)
- [CVE-2014-6310](https://insights.sbomify.com/CVE-2014-6310/): Memory corruption in n/a (critical 9.8)
- [CVE-2014-6309](https://insights.sbomify.com/CVE-2014-6309/): Information disclosure in n/a (high 7.5)
- [CVE-2014-6308](https://insights.sbomify.com/CVE-2014-6308/): Path traversal in n/a (medium 5.0)
- [CVE-2014-6304](https://insights.sbomify.com/CVE-2014-6304/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-6303](https://insights.sbomify.com/CVE-2014-6303/): XML external entity in n/a (medium 5.0)
- [CVE-2014-6302](https://insights.sbomify.com/CVE-2014-6302/): XML external entity in n/a (medium 5.0)
- [CVE-2014-6301](https://insights.sbomify.com/CVE-2014-6301/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6300](https://insights.sbomify.com/CVE-2014-6300/): phpMyAdmin micro history Implementation XSS Vulnerability (medium 4.3)
- [CVE-2014-6299](https://insights.sbomify.com/CVE-2014-6299/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-6298](https://insights.sbomify.com/CVE-2014-6298/): File upload in n/a (high 7.5)
- [CVE-2014-6297](https://insights.sbomify.com/CVE-2014-6297/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6296](https://insights.sbomify.com/CVE-2014-6296/): WEC Map (wec_map) extension for TYPO3 allows Cross-site Scripting (medium 4.3)
- [CVE-2014-6295](https://insights.sbomify.com/CVE-2014-6295/): WEC Map (wec_map) extension for TYPO3 allows SQL Injection (high 7.5)
- [CVE-2014-6294](https://insights.sbomify.com/CVE-2014-6294/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6293](https://insights.sbomify.com/CVE-2014-6293/): SQL injection in n/a (high 7.5)
- [CVE-2014-6292](https://insights.sbomify.com/CVE-2014-6292/): TYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend users (medium 6.4)
- [CVE-2014-6291](https://insights.sbomify.com/CVE-2014-6291/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6290](https://insights.sbomify.com/CVE-2014-6290/): Deserialization in n/a (high 7.5)
- [CVE-2014-6289](https://insights.sbomify.com/CVE-2014-6289/): yag and pt_extbase extensions for TYPO3 allow remote attackers to bypass access restrictions (high 7.5)
- [CVE-2014-6288](https://insights.sbomify.com/CVE-2014-6288/): TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism (high 7.5)
- [CVE-2014-6287](https://insights.sbomify.com/CVE-2014-6287/): Rejetto HTTP File Server (HFS) Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-6284](https://insights.sbomify.com/CVE-2014-6284/): Auth bypass in n/a (high 7.5)
- [CVE-2014-6283](https://insights.sbomify.com/CVE-2014-6283/): Missing authorization in n/a (medium 6.5)
- [CVE-2014-6280](https://insights.sbomify.com/CVE-2014-6280/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6278](https://insights.sbomify.com/CVE-2014-6278/): GNU Bash OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2014-6277](https://insights.sbomify.com/CVE-2014-6277/): Code injection in n/a (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/30/