# Vulnerabilities published in 2014


- [CVE-2014-6276](https://insights.sbomify.com/CVE-2014-6276/): Roundup sensitive data disclosure vulnerability (medium 4.3)
- [CVE-2014-6275](https://insights.sbomify.com/CVE-2014-6275/): Information disclosure in FusionForge (medium 5.9)
- [CVE-2014-6274](https://insights.sbomify.com/CVE-2014-6274/): S3 and Glacier remotes creds embedded in the git repo were not encrypted (high 7.5)
- [CVE-2014-6273](https://insights.sbomify.com/CVE-2014-6273/): Memory corruption in n/a (medium 6.8)
- [CVE-2014-6272](https://insights.sbomify.com/CVE-2014-6272/): Integer overflow in n/a (high 7.5)
- [CVE-2014-6271](https://insights.sbomify.com/CVE-2014-6271/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-6270](https://insights.sbomify.com/CVE-2014-6270/): Memory corruption in n/a (medium 6.8)
- [CVE-2014-6269](https://insights.sbomify.com/CVE-2014-6269/): Integer overflow in n/a (medium 5.0)
- [CVE-2014-6268](https://insights.sbomify.com/CVE-2014-6268/): Denial of service in n/a (medium 4.9)
- [CVE-2014-6262](https://insights.sbomify.com/CVE-2014-6262/): Code injection in n/a (high 7.5)
- [CVE-2014-6261](https://insights.sbomify.com/CVE-2014-6261/): Code injection in n/a (critical 9.3)
- [CVE-2014-6260](https://insights.sbomify.com/CVE-2014-6260/): Command injection in n/a (medium 6.8)
- [CVE-2014-6259](https://insights.sbomify.com/CVE-2014-6259/): XML external entity in n/a (medium 5.0)
- [CVE-2014-6258](https://insights.sbomify.com/CVE-2014-6258/): Denial of service in n/a (medium 5.0)
- [CVE-2014-6257](https://insights.sbomify.com/CVE-2014-6257/): Auth bypass in n/a (medium 5.0)
- [CVE-2014-6256](https://insights.sbomify.com/CVE-2014-6256/): Missing authorization in n/a (high 7.5)
- [CVE-2014-6255](https://insights.sbomify.com/CVE-2014-6255/): Open redirect in n/a (medium 6.4)
- [CVE-2014-6254](https://insights.sbomify.com/CVE-2014-6254/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6253](https://insights.sbomify.com/CVE-2014-6253/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-6252](https://insights.sbomify.com/CVE-2014-6252/): Memory corruption in n/a (medium 6.5)
- [CVE-2014-6251](https://insights.sbomify.com/CVE-2014-6251/): Memory corruption in n/a (medium 6.0)
- [CVE-2014-6243](https://insights.sbomify.com/CVE-2014-6243/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6242](https://insights.sbomify.com/CVE-2014-6242/): SQL injection in n/a (medium 6.5)
- [CVE-2014-6241](https://insights.sbomify.com/CVE-2014-6241/): SQL injection in n/a (high 7.5)
- [CVE-2014-6240](https://insights.sbomify.com/CVE-2014-6240/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6239](https://insights.sbomify.com/CVE-2014-6239/): SQL injection in n/a (high 7.5)
- [CVE-2014-6238](https://insights.sbomify.com/CVE-2014-6238/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6237](https://insights.sbomify.com/CVE-2014-6237/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-6236](https://insights.sbomify.com/CVE-2014-6236/): Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote attackers to execute ar (high 7.5)
- [CVE-2014-6235](https://insights.sbomify.com/CVE-2014-6235/): Unspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors. (high 7.5)
- [CVE-2014-6234](https://insights.sbomify.com/CVE-2014-6234/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6233](https://insights.sbomify.com/CVE-2014-6233/): SQL injection in n/a (high 7.5)
- [CVE-2014-6232](https://insights.sbomify.com/CVE-2014-6232/): Information disclosure in n/a (medium 4.0)
- [CVE-2014-6231](https://insights.sbomify.com/CVE-2014-6231/): Unspecified vulnerability in the CWT Frontend Edit (cwt_feedit) extension before 1.2.5 for TYPO3 allows remote authenticated users to execut (high 7.5)
- [CVE-2014-6230](https://insights.sbomify.com/CVE-2014-6230/): Security feature bypass in n/a (medium 4.3)
- [CVE-2014-6229](https://insights.sbomify.com/CVE-2014-6229/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-6228](https://insights.sbomify.com/CVE-2014-6228/): Integer overflow in n/a (high 7.5)
- [CVE-2014-6222](https://insights.sbomify.com/CVE-2014-6222/): Path traversal in n/a (medium 4.0)
- [CVE-2014-6221](https://insights.sbomify.com/CVE-2014-6221/): Weak cryptography in n/a (critical 9.4)
- [CVE-2014-6215](https://insights.sbomify.com/CVE-2014-6215/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-6214](https://insights.sbomify.com/CVE-2014-6214/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-6212](https://insights.sbomify.com/CVE-2014-6212/): XML external entity in n/a (medium 4.0)
- [CVE-2014-6211](https://insights.sbomify.com/CVE-2014-6211/): Information disclosure in n/a (low 2.1)
- [CVE-2014-6210](https://insights.sbomify.com/CVE-2014-6210/): Denial of service in n/a (medium 4.0)
- [CVE-2014-6209](https://insights.sbomify.com/CVE-2014-6209/): Denial of service in n/a (medium 4.0)
- [CVE-2014-6199](https://insights.sbomify.com/CVE-2014-6199/): Denial of service in n/a (medium 5.0)
- [CVE-2014-6198](https://insights.sbomify.com/CVE-2014-6198/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-6197](https://insights.sbomify.com/CVE-2014-6197/): Other in n/a (medium 4.3)
- [CVE-2014-6196](https://insights.sbomify.com/CVE-2014-6196/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6195](https://insights.sbomify.com/CVE-2014-6195/): Auth bypass in n/a (low 1.9)
- [CVE-2014-6194](https://insights.sbomify.com/CVE-2014-6194/): Path traversal in n/a (medium 4.0)
- [CVE-2014-6193](https://insights.sbomify.com/CVE-2014-6193/): XML external entity in n/a (medium 4.9)
- [CVE-2014-6192](https://insights.sbomify.com/CVE-2014-6192/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-6191](https://insights.sbomify.com/CVE-2014-6191/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2014-6190](https://insights.sbomify.com/CVE-2014-6190/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-6189](https://insights.sbomify.com/CVE-2014-6189/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2014-6188](https://insights.sbomify.com/CVE-2014-6188/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-6187](https://insights.sbomify.com/CVE-2014-6187/): Cross-site request forgery in n/a (medium 6.0)
- [CVE-2014-6186](https://insights.sbomify.com/CVE-2014-6186/): Missing authorization in n/a (medium 4.0)
- [CVE-2014-6185](https://insights.sbomify.com/CVE-2014-6185/): Privilege escalation in n/a (high 7.2)
- [CVE-2014-6184](https://insights.sbomify.com/CVE-2014-6184/): Memory corruption in n/a (high 7.2)
- [CVE-2014-6183](https://insights.sbomify.com/CVE-2014-6183/): Command injection in n/a (medium 4.0)
- [CVE-2014-6182](https://insights.sbomify.com/CVE-2014-6182/): Path traversal in n/a (medium 4.0)
- [CVE-2014-6181](https://insights.sbomify.com/CVE-2014-6181/): Missing authorization in n/a (medium 4.0)
- [CVE-2014-6180](https://insights.sbomify.com/CVE-2014-6180/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-6179](https://insights.sbomify.com/CVE-2014-6179/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6178](https://insights.sbomify.com/CVE-2014-6178/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-6177](https://insights.sbomify.com/CVE-2014-6177/): Missing authorization in n/a (medium 4.0)
- [CVE-2014-6176](https://insights.sbomify.com/CVE-2014-6176/): Weak cryptography in n/a (medium 4.3)
- [CVE-2014-6175](https://insights.sbomify.com/CVE-2014-6175/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-6174](https://insights.sbomify.com/CVE-2014-6174/): Other in n/a (medium 4.3)
- [CVE-2014-6173](https://insights.sbomify.com/CVE-2014-6173/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-6172](https://insights.sbomify.com/CVE-2014-6172/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-6171](https://insights.sbomify.com/CVE-2014-6171/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6170](https://insights.sbomify.com/CVE-2014-6170/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-6169](https://insights.sbomify.com/CVE-2014-6169/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2014-6168](https://insights.sbomify.com/CVE-2014-6168/): Cross-site request forgery in n/a (medium 6.0)
- [CVE-2014-6167](https://insights.sbomify.com/CVE-2014-6167/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-6166](https://insights.sbomify.com/CVE-2014-6166/): XML external entity in n/a (medium 4.3)
- [CVE-2014-6164](https://insights.sbomify.com/CVE-2014-6164/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-6163](https://insights.sbomify.com/CVE-2014-6163/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-6161](https://insights.sbomify.com/CVE-2014-6161/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-6160](https://insights.sbomify.com/CVE-2014-6160/): Auth bypass in n/a (low 2.1)
- [CVE-2014-6159](https://insights.sbomify.com/CVE-2014-6159/): Denial of service in n/a (low 3.5)
- [CVE-2014-6158](https://insights.sbomify.com/CVE-2014-6158/): Path traversal in n/a (critical 9.0)
- [CVE-2014-6155](https://insights.sbomify.com/CVE-2014-6155/): Path traversal in n/a (medium 4.0)
- [CVE-2014-6154](https://insights.sbomify.com/CVE-2014-6154/): Path traversal in n/a (high 7.8)
- [CVE-2014-6153](https://insights.sbomify.com/CVE-2014-6153/): Weak cryptography in n/a (medium 4.3)
- [CVE-2014-6152](https://insights.sbomify.com/CVE-2014-6152/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-6151](https://insights.sbomify.com/CVE-2014-6151/): Other in n/a (low 3.5)
- [CVE-2014-6150](https://insights.sbomify.com/CVE-2014-6150/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-6149](https://insights.sbomify.com/CVE-2014-6149/): Path traversal in n/a (medium 5.0)
- [CVE-2014-6148](https://insights.sbomify.com/CVE-2014-6148/): Missing authorization in n/a (low 3.5)
- [CVE-2014-6147](https://insights.sbomify.com/CVE-2014-6147/): Information disclosure in n/a (low 2.1)
- [CVE-2014-6146](https://insights.sbomify.com/CVE-2014-6146/): Information disclosure in n/a (low 1.9)
- [CVE-2014-6145](https://insights.sbomify.com/CVE-2014-6145/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-6144](https://insights.sbomify.com/CVE-2014-6144/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-6143](https://insights.sbomify.com/CVE-2014-6143/): Information disclosure in n/a (low 2.1)
- [CVE-2014-6141](https://insights.sbomify.com/CVE-2014-6141/): Privilege escalation in n/a (high 8.5)
- [CVE-2014-6140](https://insights.sbomify.com/CVE-2014-6140/): Hardcoded credentials in n/a (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/31/