# Vulnerabilities published in 2014


- [CVE-2014-5346](https://insights.sbomify.com/CVE-2014-5346/): Cross-site request forgery in disqus:disqus comment system (medium 6.8)
- [CVE-2014-5345](https://insights.sbomify.com/CVE-2014-5345/): Cross-site scripting in disqus:disqus comment system (medium 4.3)
- [CVE-2014-5344](https://insights.sbomify.com/CVE-2014-5344/): Cross-site scripting in mobiloud:mobiloud (medium 4.3)
- [CVE-2014-5343](https://insights.sbomify.com/CVE-2014-5343/): Cross-site scripting in fengoffice:feng office (medium 4.3)
- [CVE-2014-5342](https://insights.sbomify.com/CVE-2014-5342/): Command injection in arubanetworks:clearpass (critical 10.0)
- [CVE-2014-5341](https://insights.sbomify.com/CVE-2014-5341/): Weak cryptography in owncloud:owncloud (medium 4.3)
- [CVE-2014-5340](https://insights.sbomify.com/CVE-2014-5340/): Deserialization in check mk project:check mk (critical 9.3)
- [CVE-2014-5339](https://insights.sbomify.com/CVE-2014-5339/): Path traversal in check mk project:check mk (medium 4.9)
- [CVE-2014-5338](https://insights.sbomify.com/CVE-2014-5338/): Cross-site scripting in check mk project:check mk (low 3.5)
- [CVE-2014-5337](https://insights.sbomify.com/CVE-2014-5337/): Missing authorization in wordpress mobile pack project:wordpress mobile pack (medium 5.0)
- [CVE-2014-5336](https://insights.sbomify.com/CVE-2014-5336/): Denial of service in monkey-project:monkey (medium 4.3)
- [CVE-2014-5335](https://insights.sbomify.com/CVE-2014-5335/): Cross-site request forgery in innovaphone:innovaphone pbx (medium 6.8)
- [CVE-2014-5334](https://insights.sbomify.com/CVE-2014-5334/): Hardcoded credentials in freenas:freenas (critical 9.8)
- [CVE-2014-5333](https://insights.sbomify.com/CVE-2014-5333/): Cross-site request forgery in adobe:adobe air (medium 4.3)
- [CVE-2014-5332](https://insights.sbomify.com/CVE-2014-5332/): Race condition in linux:linux kernel (medium 6.9)
- [CVE-2014-5331](https://insights.sbomify.com/CVE-2014-5331/): Cross-site scripting in aptana:aflax (medium 4.3)
- [CVE-2014-5330](https://insights.sbomify.com/CVE-2014-5330/): Cross-site scripting in birdblog:birdblog (medium 4.3)
- [CVE-2014-5329](https://insights.sbomify.com/CVE-2014-5329/): Denial of service in GIGAPOD 2010 / GIGAPOD 3 Appliance model (high 7.5)
- [CVE-2014-5328](https://insights.sbomify.com/CVE-2014-5328/): Memory corruption in huawei:e5332 (medium 6.8)
- [CVE-2014-5327](https://insights.sbomify.com/CVE-2014-5327/): Memory corruption in huawei:e5332 (medium 6.8)
- [CVE-2014-5326](https://insights.sbomify.com/CVE-2014-5326/): Improper Neutralization of Input During Web Page Generation in Direct Web Remoting (medium 4.3)
- [CVE-2014-5325](https://insights.sbomify.com/CVE-2014-5325/): Exposure of Sensitive Information to an Unauthorized Actor in Direct Web Remoting (medium 5.0)
- [CVE-2014-5324](https://insights.sbomify.com/CVE-2014-5324/): File upload in najeebmedia:n-media file uploader (medium 6.5)
- [CVE-2014-5323](https://insights.sbomify.com/CVE-2014-5323/): Weak cryptography in yukoyuko: yuko yuko (medium 5.4)
- [CVE-2014-5322](https://insights.sbomify.com/CVE-2014-5322/): Cross-site scripting in filemaker:filemaker pro (medium 4.3)
- [CVE-2014-5321](https://insights.sbomify.com/CVE-2014-5321/): Weak cryptography in filemaker:filemaker pro (medium 5.8)
- [CVE-2014-5320](https://insights.sbomify.com/CVE-2014-5320/): Information disclosure in bump project:bump (medium 5.0)
- [CVE-2014-5319](https://insights.sbomify.com/CVE-2014-5319/): Path traversal in s-link:slfilemanager (medium 6.4)
- [CVE-2014-5318](https://insights.sbomify.com/CVE-2014-5318/): Security feature bypass in jig:jigbrowser\+ (medium 5.8)
- [CVE-2014-5317](https://insights.sbomify.com/CVE-2014-5317/): Cross-site scripting in php365:365 links (medium 4.3)
- [CVE-2014-5316](https://insights.sbomify.com/CVE-2014-5316/): Cross-site scripting in dotclear:dotclear (medium 4.3)
- [CVE-2014-5315](https://insights.sbomify.com/CVE-2014-5315/): Cross-site scripting in adobe:acrobat (medium 4.3)
- [CVE-2014-5314](https://insights.sbomify.com/CVE-2014-5314/): Memory corruption in cybozu:dezie (critical 9.0)
- [CVE-2014-5313](https://insights.sbomify.com/CVE-2014-5313/): Cross-site scripting in sixapart:movabletype (low 3.5)
- [CVE-2014-5308](https://insights.sbomify.com/CVE-2014-5308/): SQL injection in testlink:testlink (critical 9.0)
- [CVE-2014-5307](https://insights.sbomify.com/CVE-2014-5307/): Memory corruption in pandasecurity:panda av pro 2014 (high 7.2)
- [CVE-2014-5302](https://insights.sbomify.com/CVE-2014-5302/): Path traversal in manageengine:assetexplorer (high 8.8)
- [CVE-2014-5301](https://insights.sbomify.com/CVE-2014-5301/): Path traversal in manageengine:assetexplorer (high 8.8)
- [CVE-2014-5300](https://insights.sbomify.com/CVE-2014-5300/): Auth bypass in adaptivecomputing:moab (medium 5.0)
- [CVE-2014-5298](https://insights.sbomify.com/CVE-2014-5298/): File upload in x2engine:x2engine (medium 5.0)
- [CVE-2014-5297](https://insights.sbomify.com/CVE-2014-5297/): Deserialization in x2engine:x2engine (high 7.5)
- [CVE-2014-5289](https://insights.sbomify.com/CVE-2014-5289/): Memory corruption in senkas kolibri project:senkas kolibri (critical 9.8)
- [CVE-2014-5288](https://insights.sbomify.com/CVE-2014-5288/): Cross-site request forgery in kemptechnologies:load master (high 8.8)
- [CVE-2014-5287](https://insights.sbomify.com/CVE-2014-5287/): Code injection in progress:loadmaster (high 8.8)
- [CVE-2014-5286](https://insights.sbomify.com/CVE-2014-5286/): Privilege escalation in tibco:activematrix management agent (medium 6.4)
- [CVE-2014-5285](https://insights.sbomify.com/CVE-2014-5285/): Other in tibco:spotfire server (high 7.5)
- [CVE-2014-5284](https://insights.sbomify.com/CVE-2014-5284/): Race condition in ossec:ossec (high 7.2)
- [CVE-2014-5282](https://insights.sbomify.com/CVE-2014-5282/): Security feature bypass in docker:docker (high 8.1)
- [CVE-2014-5280](https://insights.sbomify.com/CVE-2014-5280/): Cross-site request forgery in boot2docker:boot2docker (high 8.8)
- [CVE-2014-5279](https://insights.sbomify.com/CVE-2014-5279/): Misconfiguration in boot2docker:boot2docker (high 8.8)
- [CVE-2014-5278](https://insights.sbomify.com/CVE-2014-5278/): Other in docker:docker (medium 5.3)
- [CVE-2014-5277](https://insights.sbomify.com/CVE-2014-5277/): Man-in-the-Middle (MitM) (medium 5.0)
- [CVE-2014-5276](https://insights.sbomify.com/CVE-2014-5276/): Cross-site scripting in pro chat rooms:text chat rooms (low 3.5)
- [CVE-2014-5275](https://insights.sbomify.com/CVE-2014-5275/): SQL injection in prochatrooms:text chat rooms (medium 6.5)
- [CVE-2014-5274](https://insights.sbomify.com/CVE-2014-5274/): phpMyAdmin cross-site scripting vulnerability in crafted view name (low 3.5)
- [CVE-2014-5273](https://insights.sbomify.com/CVE-2014-5273/): Cross-site scripting in phpmyadmin:phpmyadmin (low 3.5)
- [CVE-2014-5272](https://insights.sbomify.com/CVE-2014-5272/): Memory corruption in ffmpeg:ffmpeg (medium 6.8)
- [CVE-2014-5271](https://insights.sbomify.com/CVE-2014-5271/): Memory corruption in ffmpeg:ffmpeg (high 7.5)
- [CVE-2014-5270](https://insights.sbomify.com/CVE-2014-5270/): Weak cryptography in debian:debian linux (low 2.1)
- [CVE-2014-5269](https://insights.sbomify.com/CVE-2014-5269/): Path traversal in plack project:plack (medium 5.0)
- [CVE-2014-5268](https://insights.sbomify.com/CVE-2014-5268/): Missing authorization in fasttoggle project:fasttoggle (medium 5.8)
- [CVE-2014-5267](https://insights.sbomify.com/CVE-2014-5267/): Other in drupal:drupal (medium 6.8)
- [CVE-2014-5266](https://insights.sbomify.com/CVE-2014-5266/): Denial of service in debian:debian linux (medium 5.0)
- [CVE-2014-5265](https://insights.sbomify.com/CVE-2014-5265/): Denial of service in debian:debian linux (medium 5.0)
- [CVE-2014-5263](https://insights.sbomify.com/CVE-2014-5263/): Memory corruption in qemu:qemu (medium 6.8)
- [CVE-2014-5262](https://insights.sbomify.com/CVE-2014-5262/): SQL injection in cacti:cacti (high 7.5)
- [CVE-2014-5261](https://insights.sbomify.com/CVE-2014-5261/): Command injection in cacti:cacti (high 7.5)
- [CVE-2014-5260](https://insights.sbomify.com/CVE-2014-5260/): Race condition in xml-dt project:xml-dt (medium 6.3)
- [CVE-2014-5259](https://insights.sbomify.com/CVE-2014-5259/): Cross-site scripting in blackcat-cms:blackcat cms (medium 4.3)
- [CVE-2014-5258](https://insights.sbomify.com/CVE-2014-5258/): Path traversal in webedition:webedition cms (medium 4.0)
- [CVE-2014-5257](https://insights.sbomify.com/CVE-2014-5257/): Cross-site scripting in formalms:formalms (medium 4.3)
- [CVE-2014-5256](https://insights.sbomify.com/CVE-2014-5256/): Memory corruption in nodejs:nodejs (medium 5.0)
- [CVE-2014-5255](https://insights.sbomify.com/CVE-2014-5255/): Race condition in xcfa (high 7.0)
- [CVE-2014-5254](https://insights.sbomify.com/CVE-2014-5254/): Race condition in xcfa (medium 4.7)
- [CVE-2014-5253](https://insights.sbomify.com/CVE-2014-5253/): OpenStack Keystone Domain-scoped tokens don't get revoked (medium 4.9)
- [CVE-2014-5252](https://insights.sbomify.com/CVE-2014-5252/): OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events (medium 4.9)
- [CVE-2014-5251](https://insights.sbomify.com/CVE-2014-5251/): OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events (medium 4.9)
- [CVE-2014-5250](https://insights.sbomify.com/CVE-2014-5250/): Missing authorization in biblio autocomplete project:biblio autocomplete (high 7.5)
- [CVE-2014-5249](https://insights.sbomify.com/CVE-2014-5249/): SQL injection in biblio autocomplete project:biblio autocomplete (high 7.5)
- [CVE-2014-5248](https://insights.sbomify.com/CVE-2014-5248/): Cross-site scripting in mybb:mybb (medium 4.3)
- [CVE-2014-5247](https://insights.sbomify.com/CVE-2014-5247/): Misconfiguration in spi-inc:ganeti (low 2.1)
- [CVE-2014-5246](https://insights.sbomify.com/CVE-2014-5246/): Auth bypass in tenda:a5s (critical 10.0)
- [CVE-2014-5243](https://insights.sbomify.com/CVE-2014-5243/): Security feature bypass in mediawiki:mediawiki (medium 4.3)
- [CVE-2014-5242](https://insights.sbomify.com/CVE-2014-5242/): Cross-site scripting in mediawiki:mediawiki (medium 4.3)
- [CVE-2014-5241](https://insights.sbomify.com/CVE-2014-5241/): Cross-site request forgery in mediawiki:mediawiki (medium 6.8)
- [CVE-2014-5240](https://insights.sbomify.com/CVE-2014-5240/): Cross-site scripting in debian:debian linux (low 2.1)
- [CVE-2014-5239](https://insights.sbomify.com/CVE-2014-5239/): Weak cryptography in microsoft:outlook.com (medium 4.0)
- [CVE-2014-5238](https://insights.sbomify.com/CVE-2014-5238/): XML external entity in open-xchange:open-xchange appsuite (high 7.8)
- [CVE-2014-5237](https://insights.sbomify.com/CVE-2014-5237/): Server-side request forgery in open-xchange:app suite (medium 4.3)
- [CVE-2014-5236](https://insights.sbomify.com/CVE-2014-5236/): Path traversal in open-xchange:open-xchange appsuite (high 7.5)
- [CVE-2014-5235](https://insights.sbomify.com/CVE-2014-5235/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 4.3)
- [CVE-2014-5234](https://insights.sbomify.com/CVE-2014-5234/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 4.3)
- [CVE-2014-5233](https://insights.sbomify.com/CVE-2014-5233/): Information disclosure in siemens:simatic wincc sm\@rtclient (low 1.9)
- [CVE-2014-5232](https://insights.sbomify.com/CVE-2014-5232/): Auth bypass in siemens:simatic wincc sm\@rtclient (low 1.9)
- [CVE-2014-5231](https://insights.sbomify.com/CVE-2014-5231/): Information disclosure in siemens:simatic wincc sm\@rtclient (low 2.1)
- [CVE-2014-5220](https://insights.sbomify.com/CVE-2014-5220/): Command injection in mdadm project:mdadm (high 7.8)
- [CVE-2014-5217](https://insights.sbomify.com/CVE-2014-5217/): Cross-site request forgery in microfocus:access manager (medium 6.8)
- [CVE-2014-5216](https://insights.sbomify.com/CVE-2014-5216/): Cross-site scripting in microfocus:access manager (medium 4.3)
- [CVE-2014-5215](https://insights.sbomify.com/CVE-2014-5215/): Information disclosure in microfocus:access manager (medium 4.0)
- [CVE-2014-5214](https://insights.sbomify.com/CVE-2014-5214/): XML external entity in microfocus:access manager (medium 4.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/39/