Vulnerabilities published in 2014
8,436 vulnerabilities were published in 2014: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 40 of 85.
- CVE-2014-5213 Information disclosure in novell:edirectory
- CVE-2014-5212 Cross-site scripting in novell:edirectory
- CVE-2014-5211 Memory corruption in attachmate:reflection ftp client
- CVE-2014-5210 Command injection in alienvault:open source security information management
- CVE-2014-5209 Information disclosure in NTP
- CVE-2014-5208 Missing authorization in yokogawa:centum cs 3000
- CVE-2014-5207 Privilege escalation in canonical:ubuntu linux
- CVE-2014-5206 Security feature bypass in canonical:ubuntu linux
- CVE-2014-5205 Cross-site request forgery in wordpress:wordpress
- CVE-2014-5204 Cross-site request forgery in debian:debian linux
- CVE-2014-5203 Deserialization in wordpress:wordpress
- CVE-2014-5202 Cross-site scripting in compfight project:compfight
- CVE-2014-5201 SQL injection in gallery objects project:gallery objects
- CVE-2014-5200 SQL injection in fb gorilla project:fb gorilla
- CVE-2014-5199 Cross-site request forgery in wordpress file upload project:wordpress file upload
- CVE-2014-5198 Cross-site scripting in splunk:splunk
- CVE-2014-5197 Path traversal in splunk:splunk
- CVE-2014-5196 Cross-site request forgery in improved user search in backend project:improved user search in backend
- CVE-2014-5195 Race condition in ayatana project:unity
- CVE-2014-5194 Code injection in sphider:sphider
- CVE-2014-5193 Cross-site scripting in sphider:sphider
- CVE-2014-5192 SQL injection in sphider:sphider
- CVE-2014-5191 The Preview plugin in CKEditor allows Cross-site scripting (XSS)
- CVE-2014-5190 Cross-site scripting in si captcha anti-spam project:si captcha anti-spam
- CVE-2014-5189 SQL injection in leadoctopus:lead octopus
- CVE-2014-5188 Cross-site scripting in lyris:list manager
- CVE-2014-5187 Path traversal in tom m8te plugin project:tom-m8te plugin
- CVE-2014-5186 SQL injection in all video gallery plugin project:all-video-gallery
- CVE-2014-5185 SQL injection in quartz plugin project:quartz plugin
- CVE-2014-5184 SQL injection in stripshow plugin project:stripshow
- CVE-2014-5183 SQL injection in simple retail menus plugin project:simple-retail-menus
- CVE-2014-5182 SQL injection in ostenta:yawpp
- CVE-2014-5181 Path traversal in last.fm rotation plugin project:lastfm-rotation plugin
- CVE-2014-5180 SQL injection in hdwplayer:hdw-player-video-player-video-gallery
- CVE-2014-5179 Missing authorization in freelinking for case tracker project:freelinking for case tracker
- CVE-2014-5178 Cross-site scripting in efssoft:easy file sharing web server
- CVE-2014-5177 XML external entity in opensuse:opensuse
- CVE-2014-5176 Hardcoded credentials in sap:fi manager self-service
- CVE-2014-5175 Auth bypass in sap:solution manager
- CVE-2014-5174 Missing authorization in sap:netweaver business warehouse
- CVE-2014-5173 Missing authorization in sap:hana extended application services
- CVE-2014-5172 Cross-site scripting in sap:hana
- CVE-2014-5171 Weak cryptography in sap:hana extended application services
- CVE-2014-5170 Code injection in drupal:storage api
- CVE-2014-5169 Cross-site scripting in date project:date
- CVE-2014-5165 Memory corruption in wireshark:wireshark
- CVE-2014-5164 Memory corruption in wireshark:wireshark
- CVE-2014-5163 Memory corruption in wireshark:wireshark
- CVE-2014-5162 Memory corruption in wireshark:wireshark
- CVE-2014-5161 Memory corruption in wireshark:wireshark
- CVE-2014-5160 Path traversal in hp:data protector
- CVE-2014-5159 SQL injection in alienvault:open source security information management
- CVE-2014-5158 Code injection in alienvault:open source security information management
- CVE-2014-5149 Denial of service in opensuse:opensuse
- CVE-2014-5148 Memory corruption in xen:xen
- CVE-2014-5147 Denial of service in xen:xen
- CVE-2014-5146 Denial of service in opensuse:opensuse
- CVE-2014-5144 Cross-site scripting in telescopeapp:telescope
- CVE-2014-5140 SQL injection in loadedcommerce:loaded7
- CVE-2014-5139 Null dereference in openssl:openssl
- CVE-2014-5138 Security feature bypass in iii:sierra
- CVE-2014-5137 Information disclosure in iii:sierra
- CVE-2014-5136 Cross-site scripting in iii:sierra
- CVE-2014-5132 Information disclosure in avolvesoftware:projectdox
- CVE-2014-5131 Weak cryptography in avolvesoftware:projectdox
- CVE-2014-5130 Information disclosure in avolvesoftware:projectdox
- CVE-2014-5129 Cross-site scripting in avolvesoftware:projectdox
- CVE-2014-5128 Information disclosure in iii:encore discovery solution
- CVE-2014-5127 Open redirect in iii:encore discovery solution
- CVE-2014-5122 Open redirect in esri:arcgis server
- CVE-2014-5121 Cross-site scripting in esri:arcgis server
- CVE-2014-5120 Path traversal in php:php
- CVE-2014-5119 Memory corruption in debian:debian linux
- CVE-2014-5118 Security feature bypass in fedoraproject:fedora
- CVE-2014-5117 Information disclosure in torproject:tor
- CVE-2014-5116 Null dereference in cairographics:cairo
- CVE-2014-5115 Path traversal in dirphp project:dirphp
- CVE-2014-5114 Other in webidsupport:webid
- CVE-2014-5113 Cross-site scripting in visualware:myconnection server
- CVE-2014-5112 Command injection in netfortris:trixbox
- CVE-2014-5111 Path traversal in netfortris:trixbox
- CVE-2014-5110 Cross-site scripting in netfortris:trixbox
- CVE-2014-5109 SQL injection in netfortris:trixbox
- CVE-2014-5108 Cross-site scripting in concrete5:concrete5
- CVE-2014-5107 Information disclosure in concrete5:concrete5
- CVE-2014-5106 Cross-site scripting in invisioncommunity:invision power board
- CVE-2014-5105 Cross-site scripting in ol-commerce project:ol-commerce
- CVE-2014-5104 SQL injection in ol-commerce project:ol-commerce
- CVE-2014-5103 Cross-site scripting in zohocorp:manageengine eventlog analyzer
- CVE-2014-5102 SQL injection in vbulletin:vbulletin
- CVE-2014-5101 Cross-site scripting in webidsupport:webid
- CVE-2014-5100 Cross-site request forgery in omeka:omeka
- CVE-2014-5098 Cross-site scripting in jamroom:search module
- CVE-2014-5097 SQL injection in freereprintables:articlefr
- CVE-2014-5094 Information disclosure in status2k:status2k
- CVE-2014-5093 Information disclosure in status2k:status2k
- CVE-2014-5092 Command injection in status2k:status2k
- CVE-2014-5091 Code injection in status2k:status2k
- CVE-2014-5090 Command injection in status2k:status2k
- CVE-2014-5089 SQL injection in status2k:status2k