Vulnerabilities published in 2014
8,436 vulnerabilities were published in 2014: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 39 of 85.
- CVE-2014-5346 Cross-site request forgery in disqus:disqus comment system
- CVE-2014-5345 Cross-site scripting in disqus:disqus comment system
- CVE-2014-5344 Cross-site scripting in mobiloud:mobiloud
- CVE-2014-5343 Cross-site scripting in fengoffice:feng office
- CVE-2014-5342 Command injection in arubanetworks:clearpass
- CVE-2014-5341 Weak cryptography in owncloud:owncloud
- CVE-2014-5340 Deserialization in check mk project:check mk
- CVE-2014-5339 Path traversal in check mk project:check mk
- CVE-2014-5338 Cross-site scripting in check mk project:check mk
- CVE-2014-5337 Missing authorization in wordpress mobile pack project:wordpress mobile pack
- CVE-2014-5336 Denial of service in monkey-project:monkey
- CVE-2014-5335 Cross-site request forgery in innovaphone:innovaphone pbx
- CVE-2014-5334 Hardcoded credentials in freenas:freenas
- CVE-2014-5333 Cross-site request forgery in adobe:adobe air
- CVE-2014-5332 Race condition in linux:linux kernel
- CVE-2014-5331 Cross-site scripting in aptana:aflax
- CVE-2014-5330 Cross-site scripting in birdblog:birdblog
- CVE-2014-5329 Denial of service in GIGAPOD 2010 / GIGAPOD 3 Appliance model
- CVE-2014-5328 Memory corruption in huawei:e5332
- CVE-2014-5327 Memory corruption in huawei:e5332
- CVE-2014-5326 Improper Neutralization of Input During Web Page Generation in Direct Web Remoting
- CVE-2014-5325 Exposure of Sensitive Information to an Unauthorized Actor in Direct Web Remoting
- CVE-2014-5324 File upload in najeebmedia:n-media file uploader
- CVE-2014-5323 Weak cryptography in yukoyuko: yuko yuko
- CVE-2014-5322 Cross-site scripting in filemaker:filemaker pro
- CVE-2014-5321 Weak cryptography in filemaker:filemaker pro
- CVE-2014-5320 Information disclosure in bump project:bump
- CVE-2014-5319 Path traversal in s-link:slfilemanager
- CVE-2014-5318 Security feature bypass in jig:jigbrowser\+
- CVE-2014-5317 Cross-site scripting in php365:365 links
- CVE-2014-5316 Cross-site scripting in dotclear:dotclear
- CVE-2014-5315 Cross-site scripting in adobe:acrobat
- CVE-2014-5314 Memory corruption in cybozu:dezie
- CVE-2014-5313 Cross-site scripting in sixapart:movabletype
- CVE-2014-5308 SQL injection in testlink:testlink
- CVE-2014-5307 Memory corruption in pandasecurity:panda av pro 2014
- CVE-2014-5302 Path traversal in manageengine:assetexplorer
- CVE-2014-5301 Path traversal in manageengine:assetexplorer
- CVE-2014-5300 Auth bypass in adaptivecomputing:moab
- CVE-2014-5298 File upload in x2engine:x2engine
- CVE-2014-5297 Deserialization in x2engine:x2engine
- CVE-2014-5289 Memory corruption in senkas kolibri project:senkas kolibri
- CVE-2014-5288 Cross-site request forgery in kemptechnologies:load master
- CVE-2014-5287 Code injection in progress:loadmaster
- CVE-2014-5286 Privilege escalation in tibco:activematrix management agent
- CVE-2014-5285 Other in tibco:spotfire server
- CVE-2014-5284 Race condition in ossec:ossec
- CVE-2014-5282 Security feature bypass in docker:docker
- CVE-2014-5280 Cross-site request forgery in boot2docker:boot2docker
- CVE-2014-5279 Misconfiguration in boot2docker:boot2docker
- CVE-2014-5278 Other in docker:docker
- CVE-2014-5277 Man-in-the-Middle (MitM)
- CVE-2014-5276 Cross-site scripting in pro chat rooms:text chat rooms
- CVE-2014-5275 SQL injection in prochatrooms:text chat rooms
- CVE-2014-5274 phpMyAdmin cross-site scripting vulnerability in crafted view name
- CVE-2014-5273 Cross-site scripting in phpmyadmin:phpmyadmin
- CVE-2014-5272 Memory corruption in ffmpeg:ffmpeg
- CVE-2014-5271 Memory corruption in ffmpeg:ffmpeg
- CVE-2014-5270 Weak cryptography in debian:debian linux
- CVE-2014-5269 Path traversal in plack project:plack
- CVE-2014-5268 Missing authorization in fasttoggle project:fasttoggle
- CVE-2014-5267 Other in drupal:drupal
- CVE-2014-5266 Denial of service in debian:debian linux
- CVE-2014-5265 Denial of service in debian:debian linux
- CVE-2014-5263 Memory corruption in qemu:qemu
- CVE-2014-5262 SQL injection in cacti:cacti
- CVE-2014-5261 Command injection in cacti:cacti
- CVE-2014-5260 Race condition in xml-dt project:xml-dt
- CVE-2014-5259 Cross-site scripting in blackcat-cms:blackcat cms
- CVE-2014-5258 Path traversal in webedition:webedition cms
- CVE-2014-5257 Cross-site scripting in formalms:formalms
- CVE-2014-5256 Memory corruption in nodejs:nodejs
- CVE-2014-5255 Race condition in xcfa
- CVE-2014-5254 Race condition in xcfa
- CVE-2014-5253 OpenStack Keystone Domain-scoped tokens don't get revoked
- CVE-2014-5252 OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events
- CVE-2014-5251 OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events
- CVE-2014-5250 Missing authorization in biblio autocomplete project:biblio autocomplete
- CVE-2014-5249 SQL injection in biblio autocomplete project:biblio autocomplete
- CVE-2014-5248 Cross-site scripting in mybb:mybb
- CVE-2014-5247 Misconfiguration in spi-inc:ganeti
- CVE-2014-5246 Auth bypass in tenda:a5s
- CVE-2014-5243 Security feature bypass in mediawiki:mediawiki
- CVE-2014-5242 Cross-site scripting in mediawiki:mediawiki
- CVE-2014-5241 Cross-site request forgery in mediawiki:mediawiki
- CVE-2014-5240 Cross-site scripting in debian:debian linux
- CVE-2014-5239 Weak cryptography in microsoft:outlook.com
- CVE-2014-5238 XML external entity in open-xchange:open-xchange appsuite
- CVE-2014-5237 Server-side request forgery in open-xchange:app suite
- CVE-2014-5236 Path traversal in open-xchange:open-xchange appsuite
- CVE-2014-5235 Cross-site scripting in open-xchange:open-xchange appsuite
- CVE-2014-5234 Cross-site scripting in open-xchange:open-xchange appsuite
- CVE-2014-5233 Information disclosure in siemens:simatic wincc sm\@rtclient
- CVE-2014-5232 Auth bypass in siemens:simatic wincc sm\@rtclient
- CVE-2014-5231 Information disclosure in siemens:simatic wincc sm\@rtclient
- CVE-2014-5220 Command injection in mdadm project:mdadm
- CVE-2014-5217 Cross-site request forgery in microfocus:access manager
- CVE-2014-5216 Cross-site scripting in microfocus:access manager
- CVE-2014-5215 Information disclosure in microfocus:access manager
- CVE-2014-5214 XML external entity in microfocus:access manager