Vulnerabilities published in 2014
8,436 vulnerabilities were published in 2014: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 41 of 85.
- CVE-2014-5088 Cross-site scripting in status2k:status2k
- CVE-2014-5087 Code injection in sphider-plus:sphider-plus
- CVE-2014-5086 Code injection in sphider-plus:sphider-plus
- CVE-2014-5085 Code injection in sphider-plus:sphider-plus
- CVE-2014-5084 Code injection in sphiderpro:sphider pro
- CVE-2014-5083 Code injection in sphider:sphider
- CVE-2014-5082 SQL injection in sphider:sphider
- CVE-2014-5081 Auth bypass in sphider-plus:sphider-plus
- CVE-2014-5077 Null dereference in canonical:ubuntu linux
- CVE-2014-5076 Information disclosure in labanquepostale:labanquepostale
- CVE-2014-5075 Security feature bypass in igniterealtime:smack api
- CVE-2014-5074 Denial of service in siemens:simatic s7-1500 cpu firmware
- CVE-2014-5073 Command injection in vmturbo:operations manager
- CVE-2014-5072 Cross-site request forgery in wpsecurityauditlog:wp security audit log
- CVE-2014-5071 SQL injection in microsemi:s350i firmware
- CVE-2014-5070 Privilege escalation in microsemi:s350i firmware
- CVE-2014-5069 Cross-site scripting in microsemi:s350i firmware
- CVE-2014-5068 Path traversal in microsemi:s350i firmware
- CVE-2014-5045 Use after free in linux:linux kernel
- CVE-2014-5044 Integer overflow in gnu:libgfortran
- CVE-2014-5040 Missing authorization in eucalyptus:eucalyptus
- CVE-2014-5039 Cross-site scripting in eucalyptus:eucalyptus management console
- CVE-2014-5038 Information disclosure in eucalyptus:eucalyptus
- CVE-2014-5037 Information disclosure in eucalyptus:eucalyptus
- CVE-2014-5036 Information disclosure in eucalyptus:eucalyptus
- CVE-2014-5035 XML external entity in opendaylight:opendaylight
- CVE-2014-5034 Cross-site request forgery in fresh-media:brute force login protection
- CVE-2014-5033 Race condition in canonical:ubuntu linux
- CVE-2014-5032 Missing authorization in glpi-project:glpi
- CVE-2014-5031 Information disclosure in apple:cups
- CVE-2014-5030 Path traversal in apple:cups
- CVE-2014-5029 Path traversal in apple:cups
- CVE-2014-5028 Missing authorization in reviewboard:review board
- CVE-2014-5027 Cross-site scripting in reviewboard:review board
- CVE-2014-5026 Cross-site scripting in cacti:cacti
- CVE-2014-5025 Cross-site scripting in cacti:cacti
- CVE-2014-5024 Cross-site scripting in sonicwall:analyzer
- CVE-2014-5023 Command injection in gitlist:gitlist
- CVE-2014-5022 Cross-site scripting in drupal:drupal
- CVE-2014-5021 Cross-site scripting in drupal:drupal
- CVE-2014-5020 Missing authorization in drupal:drupal
- CVE-2014-5019 Denial of service in drupal:drupal
- CVE-2014-5018 Cross-site scripting in limesurvey:limesurvey
- CVE-2014-5017 SQL injection in limesurvey:limesurvey
- CVE-2014-5016 Cross-site scripting in limesurvey:limesurvey
- CVE-2014-5015 Auth bypass in eterna:bozohttpd
- CVE-2014-5014 Command injection in tinywebgallery:wordpress flash uploader
- CVE-2014-5013 DOMPDF Remote Code Execution
- CVE-2014-5012 DOMPDF denial of service vulnerability
- CVE-2014-5011 DOMPDF Information Disclosure
- CVE-2014-5009 Command injection in nagios:nagios
- CVE-2014-5008 Command injection in debian:debian linux
- CVE-2014-5007 Path traversal in zohocorp:manageengine desktop central
- CVE-2014-5006 Path traversal in zohocorp:manageengine desktop central
- CVE-2014-5005 Path traversal in zohocorp:manageengine desktop central
- CVE-2014-5004 brbackup exposes database password to unauthorized users
- CVE-2014-5003 Ciborg gem for Ruby allows local users to write files and gain privileges via Symlink
- CVE-2014-5002 lynx doesn't properly sanitize user input and exposes database password to unauthorized users
- CVE-2014-5001 Kcapifony gem for Ruby places database user passwords on the command line
- CVE-2014-5000 lawn-login exposes database password to unauthorized users
- CVE-2014-4999 kajam allows local users to obtain sensitive information by listing the process
- CVE-2014-4998 lean-ruport allows local users to obtain sensitive information by listing the process
- CVE-2014-4997 point-cli allows local users to obtain sensitive information by listing the process
- CVE-2014-4996 VladTheEnterprising allows local users to write to arbitrary files via a symlink attack
- CVE-2014-4995 VladTheEnterprising allows local users to obtain sensitive information by reading MySQL root password from temporary file
- CVE-2014-4994 Gyazo allows local users to write arbitrary files
- CVE-2014-4993 backup-agoddard and backup_checksum have Information Exposure vulnerability
- CVE-2014-4992 Cap-Strap gem for Ruby places credentials on the useradd command line
- CVE-2014-4991 codders-dataset Process Table Local Plaintext Credential Disclosure
- CVE-2014-4987 Missing authorization in opensuse:opensuse
- CVE-2014-4986 phpMyAdmin cross-site scripting Vulnerability in Table or Column Names
- CVE-2014-4984 SQL injection in dejavuprotech:crescendo - sales crm
- CVE-2014-4982 Command injection in xorux:lpar2rrd
- CVE-2014-4981 Command injection in xorux:lpar2rrd
- CVE-2014-4980 Information disclosure in tenable:nessus
- CVE-2014-4979 Memory corruption in apple:quicktime
- CVE-2014-4978 Other in fedoraproject:fedora
- CVE-2014-4977 SQL injection in sonicwall:scrutinizer
- CVE-2014-4976 Missing authorization in sonicwall:scrutinizer
- CVE-2014-4975 Memory corruption in canonical:ubuntu linux
- CVE-2014-4974 Information disclosure in eset:personal firewall ndis filter
- CVE-2014-4973 Privilege escalation in eset:endpoint security
- CVE-2014-4972 File upload in ajax upload for gravity forms project:ajax upload for gravity forms
- CVE-2014-4971 Memory corruption in microsoft:windows xp
- CVE-2014-4968 Code injection in boatmob:boat browser
- CVE-2014-4967 Ansible Arbitrary Code Execution
- CVE-2014-4966 Ansible Arbitrary Code Execution
- CVE-2014-4965 Cross-site scripting in shopizer:shopizer
- CVE-2014-4964 Cross-site request forgery in shopizer:shopizer
- CVE-2014-4963 Missing authorization in shopizer:shopizer
- CVE-2014-4962 Business logic in shopizer:shopizer
- CVE-2014-4960 SQL injection in joomlaboat:com youtubegallery
- CVE-2014-4959 SQL injection in google:android
- CVE-2014-4958 Cross-site scripting in telerik:asp.net ajax radeditor control
- CVE-2014-4955 Cross-site scripting in phpmyadmin:phpmyadmin
- CVE-2014-4954 Cross-site scripting in phpmyadmin:phpmyadmin
- CVE-2014-4948 Other in citrix:xenserver
- CVE-2014-4947 Memory corruption in citrix:xenserver
- CVE-2014-4946 Cross-site scripting in horde:groupware
- CVE-2014-4945 Cross-site scripting in horde:groupware