Vulnerabilities published in 2014
8,436 vulnerabilities were published in 2014: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 38 of 85.
- CVE-2014-5465 Path traversal in werdswords:download shortcode
- CVE-2014-5464 Cross-site scripting in ntop:ntopng
- CVE-2014-5462 SQL injection in open-emr:openemr
- CVE-2014-5461 Memory corruption in canonical:ubuntu linux
- CVE-2014-5460 File upload in tribulant:tibulant slideshow gallery
- CVE-2014-5459 Race condition in opensuse:evergreen
- CVE-2014-5458 SQL injection in php-sqrl project:php-sqrl
- CVE-2014-5457 Misconfiguration in qnap:ss-839
- CVE-2014-5456 Cross-site scripting in social stats project:social stats
- CVE-2014-5455 Privilege escalation in openvpn:openvpn
- CVE-2014-5454 File upload in sas:visual analytics
- CVE-2014-5453 Misconfiguration in ubi:uplay pc
- CVE-2014-5452 Cross-site scripting in hl7:c-cda
- CVE-2014-5451 Cross-site scripting in modx:modx revolution
- CVE-2014-5450 Information disclosure in zarafa:zarafa collaboration platform
- CVE-2014-5449 Information disclosure in zarafa:webaccess
- CVE-2014-5448 Information disclosure in zarafa:zarafa
- CVE-2014-5447 Misconfiguration in zarafa:webapp
- CVE-2014-5446 Path traversal in zohocorp:manageengine it360
- CVE-2014-5445 Path traversal in zohocorp:manageengine it360
- CVE-2014-5444 Security feature bypass in yorba:geary
- CVE-2014-5443 Privilege escalation in seafile:seafile server
- CVE-2014-5441 Fat Free CRM subject to Cross-site Scripting
- CVE-2014-5440 SQL injection in mpexsolutions:mx-smartimer
- CVE-2014-5439 Memory corruption in debian:debian linux
- CVE-2014-5438 Cross-site scripting in arris:touchstone tg862g\/ct firmware
- CVE-2014-5437 Cross-site request forgery in arris:touchstone tg862g\/ct firmware
- CVE-2014-5436 Path traversal in Experion PKS
- CVE-2014-5435 Memory corruption in Experion PKS
- CVE-2014-5434 Hardcoded credentials in SIGMA Spectrum Infusion System
- CVE-2014-5433 Information disclosure in SIGMA Spectrum Infusion System
- CVE-2014-5432 Auth bypass in SIGMA Spectrum Infusion System
- CVE-2014-5431 Hardcoded credentials in SIGMA Spectrum Infusion System
- CVE-2014-5430 Privilege escalation in abb:robotstudio
- CVE-2014-5429 Denial of service in elipse:e3
- CVE-2014-5428 File upload in johnsoncontrols:metsys
- CVE-2014-5427 Information disclosure in johnsoncontrols:metsys
- CVE-2014-5426 Denial of service in matrikonopc:dnp3 opc server
- CVE-2014-5425 Denial of service in ioserver:ioserver
- CVE-2014-5424 Memory corruption in rockwellautomation:connected components workbench
- CVE-2014-5423 Information disclosure in carefusion:pyxis supplystation
- CVE-2014-5422 Hardcoded credentials in carefusion:pyxis supplystation
- CVE-2014-5421 Hardcoded credentials in carefusion:pyxis supplystation
- CVE-2014-5420 Hardcoded credentials in carefusion:pyxis supplystation
- CVE-2014-5419 GE Multilink Use of Hard-coded Cryptographic Key
- CVE-2014-5418 GE Multilink Uncontrolled Resource Consumption
- CVE-2014-5417 Meinberg Radio Clocks LANTIME M-Series
- CVE-2014-5415 Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function
- CVE-2014-5414 Beckhoff Embedded PC Images and TwinCAT Components Improper Restriction of Excessive Authentication Attempts
- CVE-2014-5413 Schneider Electric SCADA Expert ClearSCADA Cryptographic Issues
- CVE-2014-5412 Schneider Electric SCADA Expert ClearSCADA Improper Authentication
- CVE-2014-5411 Schneider Electric SCADA Expert ClearSCADA Cross-site Scripting
- CVE-2014-5410 Rockwell Automation Micrologix 1400 Improper Input Validation
- CVE-2014-5409 GE Hydran M2 Predictable Value Range from Previous Values
- CVE-2014-5408 Nordex NC2 Cross-site Scripting
- CVE-2014-5407 Schneider Electric VAMPSET Stack-based Buffer Overflow
- CVE-2014-5406 Hospira LifeCare PCA Infusion System
- CVE-2014-5405 Hospira MedNet Use of Hard-coded Password
- CVE-2014-5403 Hospira MedNet Use of Hard-coded Cryptographic Key
- CVE-2014-5401 Hospira MedNet Code Injection
- CVE-2014-5400 Hospira MedNet Password in Configuration File
- CVE-2014-5399 Schneider Electric Wonderware SQL Injection
- CVE-2014-5398 Schneider Electric Wonderware Input Validation
- CVE-2014-5397 Schneider Electric Wonderware Cross-site Scripting
- CVE-2014-5396 Hardcoded credentials in schrack:technik microcontrol
- CVE-2014-5395 Cross-site request forgery in huawei:e3236 firmware
- CVE-2014-5394 Information disclosure in huawei:s2300 firmware
- CVE-2014-5393 Path traversal in sos:jobscheduler
- CVE-2014-5392 XML external entity in sos:jobscheduler
- CVE-2014-5391 Cross-site scripting in sos:jobscheduler
- CVE-2014-5389 SQL injection in content audit project:content audit
- CVE-2014-5388 Memory corruption in canonical:ubuntu linux
- CVE-2014-5387 SQL injection in ellislab:expressionengine
- CVE-2014-5386 Weak cryptography in facebook:hiphop virtual machine
- CVE-2014-5385 Auth bypass in shopizer:shopizer
- CVE-2014-5384 Memory corruption in freebsd:freebsd
- CVE-2014-5383 SQL injection in alienvault:open source security information management
- CVE-2014-5382 Cross-site scripting in schrack:technik microcontrol
- CVE-2014-5381 Auth bypass in granding:grand ma300 firmware
- CVE-2014-5380 Information disclosure in granding:grand ma300 firmware
- CVE-2014-5377 Information disclosure in manageengine:device expert
- CVE-2014-5376 Auth bypass in adaptivecomputing:moab
- CVE-2014-5375 Auth bypass in adaptivecomputing:moab
- CVE-2014-5370 Path traversal in new atlanta:bluedragon
- CVE-2014-5369 Information disclosure in enigmail:enigmail
- CVE-2014-5368 Path traversal in wp content source control project:wp content source control
- CVE-2014-5362 Code injection in landesk:landesk management suite
- CVE-2014-5361 Cross-site request forgery in landesk:landesk management suite
- CVE-2014-5360 Cross-site scripting in landesk:landesk management suite
- CVE-2014-5359 Path traversal in safenet-inc:safenet authentication service outlook web access agent
- CVE-2014-5356 OpenStack Glance improper validation of the image_size_cap configuration option
- CVE-2014-5355 Null dereference in mit:kerberos 5
- CVE-2014-5354 Null dereference in mit:kerberos
- CVE-2014-5353 Null dereference in canonical:ubuntu linux
- CVE-2014-5352 Use after free in mit:kerberos 5
- CVE-2014-5351 Information disclosure in mit:kerberos 5
- CVE-2014-5350 Path traversal in bitdefender:gravityzone
- CVE-2014-5349 Memory corruption in baidu:spark browser
- CVE-2014-5348 Cross-site scripting in riverbed:steelapp traffic manager
- CVE-2014-5347 Cross-site request forgery in disqus:disqus comment system