# Vulnerabilities published in 2014


- [CVE-2014-5213](https://insights.sbomify.com/CVE-2014-5213/): Information disclosure in novell:edirectory (medium 4.0)
- [CVE-2014-5212](https://insights.sbomify.com/CVE-2014-5212/): Cross-site scripting in novell:edirectory (medium 4.3)
- [CVE-2014-5211](https://insights.sbomify.com/CVE-2014-5211/): Memory corruption in attachmate:reflection ftp client (medium 6.8)
- [CVE-2014-5210](https://insights.sbomify.com/CVE-2014-5210/): Command injection in alienvault:open source security information management (critical 10.0)
- [CVE-2014-5209](https://insights.sbomify.com/CVE-2014-5209/): Information disclosure in NTP (medium 5.3)
- [CVE-2014-5208](https://insights.sbomify.com/CVE-2014-5208/): Missing authorization in yokogawa:centum cs 3000 (high 7.5)
- [CVE-2014-5207](https://insights.sbomify.com/CVE-2014-5207/): Privilege escalation in canonical:ubuntu linux (medium 6.2)
- [CVE-2014-5206](https://insights.sbomify.com/CVE-2014-5206/): Security feature bypass in canonical:ubuntu linux (high 7.2)
- [CVE-2014-5205](https://insights.sbomify.com/CVE-2014-5205/): Cross-site request forgery in wordpress:wordpress (medium 6.8)
- [CVE-2014-5204](https://insights.sbomify.com/CVE-2014-5204/): Cross-site request forgery in debian:debian linux (medium 6.8)
- [CVE-2014-5203](https://insights.sbomify.com/CVE-2014-5203/): Deserialization in wordpress:wordpress (high 7.5)
- [CVE-2014-5202](https://insights.sbomify.com/CVE-2014-5202/): Cross-site scripting in compfight project:compfight (low 3.5)
- [CVE-2014-5201](https://insights.sbomify.com/CVE-2014-5201/): SQL injection in gallery objects project:gallery objects (high 7.5)
- [CVE-2014-5200](https://insights.sbomify.com/CVE-2014-5200/): SQL injection in fb gorilla project:fb gorilla (high 7.5)
- [CVE-2014-5199](https://insights.sbomify.com/CVE-2014-5199/): Cross-site request forgery in wordpress file upload project:wordpress file upload (medium 6.8)
- [CVE-2014-5198](https://insights.sbomify.com/CVE-2014-5198/): Cross-site scripting in splunk:splunk (medium 4.3)
- [CVE-2014-5197](https://insights.sbomify.com/CVE-2014-5197/): Path traversal in splunk:splunk (medium 4.0)
- [CVE-2014-5196](https://insights.sbomify.com/CVE-2014-5196/): Cross-site request forgery in improved user search in backend project:improved user search in backend (medium 4.3)
- [CVE-2014-5195](https://insights.sbomify.com/CVE-2014-5195/): Race condition in ayatana project:unity (high 7.2)
- [CVE-2014-5194](https://insights.sbomify.com/CVE-2014-5194/): Code injection in sphider:sphider (medium 6.5)
- [CVE-2014-5193](https://insights.sbomify.com/CVE-2014-5193/): Cross-site scripting in sphider:sphider (medium 4.3)
- [CVE-2014-5192](https://insights.sbomify.com/CVE-2014-5192/): SQL injection in sphider:sphider (high 7.5)
- [CVE-2014-5191](https://insights.sbomify.com/CVE-2014-5191/): The Preview plugin in CKEditor allows Cross-site scripting (XSS) (medium 4.3)
- [CVE-2014-5190](https://insights.sbomify.com/CVE-2014-5190/): Cross-site scripting in si captcha anti-spam project:si captcha anti-spam (medium 4.3)
- [CVE-2014-5189](https://insights.sbomify.com/CVE-2014-5189/): SQL injection in leadoctopus:lead octopus (high 7.5)
- [CVE-2014-5188](https://insights.sbomify.com/CVE-2014-5188/): Cross-site scripting in lyris:list manager (medium 4.3)
- [CVE-2014-5187](https://insights.sbomify.com/CVE-2014-5187/): Path traversal in tom m8te plugin project:tom-m8te plugin (medium 5.0)
- [CVE-2014-5186](https://insights.sbomify.com/CVE-2014-5186/): SQL injection in all video gallery plugin project:all-video-gallery (medium 6.5)
- [CVE-2014-5185](https://insights.sbomify.com/CVE-2014-5185/): SQL injection in quartz plugin project:quartz plugin (medium 6.0)
- [CVE-2014-5184](https://insights.sbomify.com/CVE-2014-5184/): SQL injection in stripshow plugin project:stripshow (medium 6.5)
- [CVE-2014-5183](https://insights.sbomify.com/CVE-2014-5183/): SQL injection in simple retail menus plugin project:simple-retail-menus (medium 6.5)
- [CVE-2014-5182](https://insights.sbomify.com/CVE-2014-5182/): SQL injection in ostenta:yawpp (medium 6.0)
- [CVE-2014-5181](https://insights.sbomify.com/CVE-2014-5181/): Path traversal in last.fm rotation plugin project:lastfm-rotation plugin (medium 5.0)
- [CVE-2014-5180](https://insights.sbomify.com/CVE-2014-5180/): SQL injection in hdwplayer:hdw-player-video-player-video-gallery (medium 6.5)
- [CVE-2014-5179](https://insights.sbomify.com/CVE-2014-5179/): Missing authorization in freelinking for case tracker project:freelinking for case tracker (medium 4.3)
- [CVE-2014-5178](https://insights.sbomify.com/CVE-2014-5178/): Cross-site scripting in efssoft:easy file sharing web server (medium 4.3)
- [CVE-2014-5177](https://insights.sbomify.com/CVE-2014-5177/): XML external entity in opensuse:opensuse (low 1.2)
- [CVE-2014-5176](https://insights.sbomify.com/CVE-2014-5176/): Hardcoded credentials in sap:fi manager self-service (medium 6.0)
- [CVE-2014-5175](https://insights.sbomify.com/CVE-2014-5175/): Auth bypass in sap:solution manager (high 7.5)
- [CVE-2014-5174](https://insights.sbomify.com/CVE-2014-5174/): Missing authorization in sap:netweaver business warehouse (low 3.5)
- [CVE-2014-5173](https://insights.sbomify.com/CVE-2014-5173/): Missing authorization in sap:hana extended application services (medium 5.0)
- [CVE-2014-5172](https://insights.sbomify.com/CVE-2014-5172/): Cross-site scripting in sap:hana (medium 4.3)
- [CVE-2014-5171](https://insights.sbomify.com/CVE-2014-5171/): Weak cryptography in sap:hana extended application services (low 2.9)
- [CVE-2014-5170](https://insights.sbomify.com/CVE-2014-5170/): Code injection in drupal:storage api (critical 9.8)
- [CVE-2014-5169](https://insights.sbomify.com/CVE-2014-5169/): Cross-site scripting in date project:date (low 3.5)
- [CVE-2014-5165](https://insights.sbomify.com/CVE-2014-5165/): Memory corruption in wireshark:wireshark (medium 5.0)
- [CVE-2014-5164](https://insights.sbomify.com/CVE-2014-5164/): Memory corruption in wireshark:wireshark (medium 5.0)
- [CVE-2014-5163](https://insights.sbomify.com/CVE-2014-5163/): Memory corruption in wireshark:wireshark (medium 5.0)
- [CVE-2014-5162](https://insights.sbomify.com/CVE-2014-5162/): Memory corruption in wireshark:wireshark (medium 5.0)
- [CVE-2014-5161](https://insights.sbomify.com/CVE-2014-5161/): Memory corruption in wireshark:wireshark (medium 5.0)
- [CVE-2014-5160](https://insights.sbomify.com/CVE-2014-5160/): Path traversal in hp:data protector (medium 6.4)
- [CVE-2014-5159](https://insights.sbomify.com/CVE-2014-5159/): SQL injection in alienvault:open source security information management (high 7.5)
- [CVE-2014-5158](https://insights.sbomify.com/CVE-2014-5158/): Code injection in alienvault:open source security information management (critical 10.0)
- [CVE-2014-5149](https://insights.sbomify.com/CVE-2014-5149/): Denial of service in opensuse:opensuse (medium 4.7)
- [CVE-2014-5148](https://insights.sbomify.com/CVE-2014-5148/): Memory corruption in xen:xen (medium 4.6)
- [CVE-2014-5147](https://insights.sbomify.com/CVE-2014-5147/): Denial of service in xen:xen (medium 4.3)
- [CVE-2014-5146](https://insights.sbomify.com/CVE-2014-5146/): Denial of service in opensuse:opensuse (medium 4.7)
- [CVE-2014-5144](https://insights.sbomify.com/CVE-2014-5144/): Cross-site scripting in telescopeapp:telescope (medium 5.4)
- [CVE-2014-5140](https://insights.sbomify.com/CVE-2014-5140/): SQL injection in loadedcommerce:loaded7 (high 8.8)
- [CVE-2014-5139](https://insights.sbomify.com/CVE-2014-5139/): Null dereference in openssl:openssl (medium 4.3)
- [CVE-2014-5138](https://insights.sbomify.com/CVE-2014-5138/): Security feature bypass in iii:sierra (high 7.5)
- [CVE-2014-5137](https://insights.sbomify.com/CVE-2014-5137/): Information disclosure in iii:sierra (medium 5.0)
- [CVE-2014-5136](https://insights.sbomify.com/CVE-2014-5136/): Cross-site scripting in iii:sierra (medium 4.3)
- [CVE-2014-5132](https://insights.sbomify.com/CVE-2014-5132/): Information disclosure in avolvesoftware:projectdox (medium 4.3)
- [CVE-2014-5131](https://insights.sbomify.com/CVE-2014-5131/): Weak cryptography in avolvesoftware:projectdox (medium 6.5)
- [CVE-2014-5130](https://insights.sbomify.com/CVE-2014-5130/): Information disclosure in avolvesoftware:projectdox (medium 6.5)
- [CVE-2014-5129](https://insights.sbomify.com/CVE-2014-5129/): Cross-site scripting in avolvesoftware:projectdox (medium 4.3)
- [CVE-2014-5128](https://insights.sbomify.com/CVE-2014-5128/): Information disclosure in iii:encore discovery solution (medium 5.0)
- [CVE-2014-5127](https://insights.sbomify.com/CVE-2014-5127/): Open redirect in iii:encore discovery solution (medium 5.8)
- [CVE-2014-5122](https://insights.sbomify.com/CVE-2014-5122/): Open redirect in esri:arcgis server (medium 5.8)
- [CVE-2014-5121](https://insights.sbomify.com/CVE-2014-5121/): Cross-site scripting in esri:arcgis server (medium 4.3)
- [CVE-2014-5120](https://insights.sbomify.com/CVE-2014-5120/): Path traversal in php:php (medium 6.4)
- [CVE-2014-5119](https://insights.sbomify.com/CVE-2014-5119/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2014-5118](https://insights.sbomify.com/CVE-2014-5118/): Security feature bypass in fedoraproject:fedora (medium 5.5)
- [CVE-2014-5117](https://insights.sbomify.com/CVE-2014-5117/): Information disclosure in torproject:tor (medium 5.8)
- [CVE-2014-5116](https://insights.sbomify.com/CVE-2014-5116/): Null dereference in cairographics:cairo (medium 5.0)
- [CVE-2014-5115](https://insights.sbomify.com/CVE-2014-5115/): Path traversal in dirphp project:dirphp (medium 5.0)
- [CVE-2014-5114](https://insights.sbomify.com/CVE-2014-5114/): Other in webidsupport:webid (high 7.5)
- [CVE-2014-5113](https://insights.sbomify.com/CVE-2014-5113/): Cross-site scripting in visualware:myconnection server (medium 4.3)
- [CVE-2014-5112](https://insights.sbomify.com/CVE-2014-5112/): Command injection in netfortris:trixbox (high 7.5)
- [CVE-2014-5111](https://insights.sbomify.com/CVE-2014-5111/): Path traversal in netfortris:trixbox (medium 5.0)
- [CVE-2014-5110](https://insights.sbomify.com/CVE-2014-5110/): Cross-site scripting in netfortris:trixbox (medium 4.3)
- [CVE-2014-5109](https://insights.sbomify.com/CVE-2014-5109/): SQL injection in netfortris:trixbox (high 7.5)
- [CVE-2014-5108](https://insights.sbomify.com/CVE-2014-5108/): Cross-site scripting in concrete5:concrete5 (medium 4.3)
- [CVE-2014-5107](https://insights.sbomify.com/CVE-2014-5107/): Information disclosure in concrete5:concrete5 (medium 5.0)
- [CVE-2014-5106](https://insights.sbomify.com/CVE-2014-5106/): Cross-site scripting in invisioncommunity:invision power board (medium 4.3)
- [CVE-2014-5105](https://insights.sbomify.com/CVE-2014-5105/): Cross-site scripting in ol-commerce project:ol-commerce (medium 4.3)
- [CVE-2014-5104](https://insights.sbomify.com/CVE-2014-5104/): SQL injection in ol-commerce project:ol-commerce (high 7.5)
- [CVE-2014-5103](https://insights.sbomify.com/CVE-2014-5103/): Cross-site scripting in zohocorp:manageengine eventlog analyzer (medium 4.3)
- [CVE-2014-5102](https://insights.sbomify.com/CVE-2014-5102/): SQL injection in vbulletin:vbulletin (high 7.5)
- [CVE-2014-5101](https://insights.sbomify.com/CVE-2014-5101/): Cross-site scripting in webidsupport:webid (medium 4.3)
- [CVE-2014-5100](https://insights.sbomify.com/CVE-2014-5100/): Cross-site request forgery in omeka:omeka (medium 6.8)
- [CVE-2014-5098](https://insights.sbomify.com/CVE-2014-5098/): Cross-site scripting in jamroom:search module (medium 4.3)
- [CVE-2014-5097](https://insights.sbomify.com/CVE-2014-5097/): SQL injection in freereprintables:articlefr (high 7.5)
- [CVE-2014-5094](https://insights.sbomify.com/CVE-2014-5094/): Information disclosure in status2k:status2k (medium 5.0)
- [CVE-2014-5093](https://insights.sbomify.com/CVE-2014-5093/): Information disclosure in status2k:status2k (critical 9.8)
- [CVE-2014-5092](https://insights.sbomify.com/CVE-2014-5092/): Command injection in status2k:status2k (high 8.8)
- [CVE-2014-5091](https://insights.sbomify.com/CVE-2014-5091/): Code injection in status2k:status2k (critical 9.8)
- [CVE-2014-5090](https://insights.sbomify.com/CVE-2014-5090/): Command injection in status2k:status2k (medium 6.5)
- [CVE-2014-5089](https://insights.sbomify.com/CVE-2014-5089/): SQL injection in status2k:status2k (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/40/