# Vulnerabilities published in 2014


- [CVE-2014-4944](https://insights.sbomify.com/CVE-2014-4944/): SQL injection in bannersky:bsk pdf manager (medium 6.5)
- [CVE-2014-4943](https://insights.sbomify.com/CVE-2014-4943/): Privilege escalation in debian:debian linux (medium 6.9)
- [CVE-2014-4942](https://insights.sbomify.com/CVE-2014-4942/): Information disclosure in levelfourdevelopment:wp-easycart (medium 5.0)
- [CVE-2014-4941](https://insights.sbomify.com/CVE-2014-4941/): Path traversal in cross-rss plugin project:wp-cross-rss (medium 5.0)
- [CVE-2014-4940](https://insights.sbomify.com/CVE-2014-4940/): Path traversal in tera charts plugin project:tera-charts (medium 5.0)
- [CVE-2014-4939](https://insights.sbomify.com/CVE-2014-4939/): SQL injection in enl newsletter plugin project:enl-newsletter (medium 6.5)
- [CVE-2014-4938](https://insights.sbomify.com/CVE-2014-4938/): SQL injection in wp rss poster plugin project:wp-rss-poster (high 7.5)
- [CVE-2014-4937](https://insights.sbomify.com/CVE-2014-4937/): Path traversal in bookx plugin project:bookx (medium 5.0)
- [CVE-2014-4936](https://insights.sbomify.com/CVE-2014-4936/): Security feature bypass in malwarebytes:malwarebytes anti-exploit (critical 9.3)
- [CVE-2014-4932](https://insights.sbomify.com/CVE-2014-4932/): Cross-site scripting in wordfence:wordfence security (medium 6.1)
- [CVE-2014-4930](https://insights.sbomify.com/CVE-2014-4930/): Cross-site scripting in zohocorp:manageengine eventlog analyzer (medium 4.3)
- [CVE-2014-4929](https://insights.sbomify.com/CVE-2014-4929/): Path traversal in owncloud:owncloud (medium 6.8)
- [CVE-2014-4928](https://insights.sbomify.com/CVE-2014-4928/): SQL injection in invisioncommunity:invision power board (high 8.8)
- [CVE-2014-4927](https://insights.sbomify.com/CVE-2014-4927/): Memory corruption in acme:micro httpd (high 7.8)
- [CVE-2014-4925](https://insights.sbomify.com/CVE-2014-4925/): Cross-site scripting in good:good for enterprise (medium 6.1)
- [CVE-2014-4919](https://insights.sbomify.com/CVE-2014-4919/): Privilege escalation in oxid-esales:eshop (medium 5.4)
- [CVE-2014-4914](https://insights.sbomify.com/CVE-2014-4914/): SQL injection in debian:debian linux (critical 9.8)
- [CVE-2014-4913](https://insights.sbomify.com/CVE-2014-4913/): Cross-site scripting in zendframework (medium 6.1)
- [CVE-2014-4912](https://insights.sbomify.com/CVE-2014-4912/): File upload in frog cms project:frog cms (critical 9.8)
- [CVE-2014-4911](https://insights.sbomify.com/CVE-2014-4911/): Denial of service in debian:debian linux (medium 5.0)
- [CVE-2014-4910](https://insights.sbomify.com/CVE-2014-4910/): Path traversal in x:xf86-video-intel (medium 4.6)
- [CVE-2014-4909](https://insights.sbomify.com/CVE-2014-4909/): Integer overflow in canonical:ubuntu linux (medium 6.8)
- [CVE-2014-4908](https://insights.sbomify.com/CVE-2014-4908/): Cross-site scripting in pnp4nagios:pnp4nagios (medium 4.3)
- [CVE-2014-4907](https://insights.sbomify.com/CVE-2014-4907/): Cross-site scripting in op5:monitor (medium 4.3)
- [CVE-2014-4906](https://insights.sbomify.com/CVE-2014-4906/): Weak cryptography in playstudio:brisbane \& queensland alert (medium 5.4)
- [CVE-2014-4905](https://insights.sbomify.com/CVE-2014-4905/): Weak cryptography in cleaninternet:clean internet browser (medium 5.4)
- [CVE-2014-4904](https://insights.sbomify.com/CVE-2014-4904/): Weak cryptography in crossmo:crossmo calendar (medium 5.4)
- [CVE-2014-4903](https://insights.sbomify.com/CVE-2014-4903/): Weak cryptography in mocoga:kakao bingo garden (medium 5.4)
- [CVE-2014-4901](https://insights.sbomify.com/CVE-2014-4901/): Weak cryptography in tradingandinvesting4u:bond trading (medium 5.4)
- [CVE-2014-4900](https://insights.sbomify.com/CVE-2014-4900/): Weak cryptography in mig:migme (medium 5.4)
- [CVE-2014-4899](https://insights.sbomify.com/CVE-2014-4899/): Weak cryptography in magzter:indian cement review (medium 5.4)
- [CVE-2014-4898](https://insights.sbomify.com/CVE-2014-4898/): Weak cryptography in upasanhar:harivijay (medium 5.4)
- [CVE-2014-4897](https://insights.sbomify.com/CVE-2014-4897/): Weak cryptography in magzter:touriosity travelmag (medium 5.4)
- [CVE-2014-4896](https://insights.sbomify.com/CVE-2014-4896/): Weak cryptography in mobileappspartner:parque imperial (medium 5.4)
- [CVE-2014-4895](https://insights.sbomify.com/CVE-2014-4895/): Weak cryptography in herpin time radio project:herpin time radio (medium 5.4)
- [CVE-2014-4894](https://insights.sbomify.com/CVE-2014-4894/): Weak cryptography in mymetro project:mymetro (medium 5.4)
- [CVE-2014-4892](https://insights.sbomify.com/CVE-2014-4892/): Weak cryptography in ucontrol:ucontrol smart home automation (medium 5.4)
- [CVE-2014-4891](https://insights.sbomify.com/CVE-2014-4891/): Weak cryptography in ctihub:ct ihub (medium 5.4)
- [CVE-2014-4890](https://insights.sbomify.com/CVE-2014-4890/): Weak cryptography in magzter:nano digest (medium 5.4)
- [CVE-2014-4889](https://insights.sbomify.com/CVE-2014-4889/): Weak cryptography in diabetic diet guide project:diabetic diet guide (medium 5.4)
- [CVE-2014-4888](https://insights.sbomify.com/CVE-2014-4888/): Weak cryptography in tequilagames:battlefriends at sea gold (medium 5.4)
- [CVE-2014-4887](https://insights.sbomify.com/CVE-2014-4887/): Weak cryptography in nobexrc:joint radio blues (medium 5.4)
- [CVE-2014-4885](https://insights.sbomify.com/CVE-2014-4885/): Weak cryptography in closeprotectionworld:cpworld close protection world (medium 5.4)
- [CVE-2014-4884](https://insights.sbomify.com/CVE-2014-4884/): Weak cryptography in conrad hotel project:conrad hotel (medium 5.4)
- [CVE-2014-4883](https://insights.sbomify.com/CVE-2014-4883/): Weak cryptography in lwip project:lwip (medium 4.3)
- [CVE-2014-4882](https://insights.sbomify.com/CVE-2014-4882/): Missing authorization in aptexx:resident anywhere (high 7.5)
- [CVE-2014-4881](https://insights.sbomify.com/CVE-2014-4881/): Weak cryptography in partytrack library project:partytrack library (medium 5.4)
- [CVE-2014-4880](https://insights.sbomify.com/CVE-2014-4880/): Memory corruption in hikvision:dvr ds-7204 firmware (high 7.5)
- [CVE-2014-4877](https://insights.sbomify.com/CVE-2014-4877/): Path traversal in gnu:wget (critical 9.3)
- [CVE-2014-4876](https://insights.sbomify.com/CVE-2014-4876/): Information disclosure in toshiba:4690 operating system (low 3.7)
- [CVE-2014-4875](https://insights.sbomify.com/CVE-2014-4875/): Hardcoded credentials in toshiba:chec (medium 5.0)
- [CVE-2014-4874](https://insights.sbomify.com/CVE-2014-4874/): Path traversal in bmc:track-it\! (medium 4.0)
- [CVE-2014-4873](https://insights.sbomify.com/CVE-2014-4873/): SQL injection in bmc:track-it\! (medium 6.5)
- [CVE-2014-4872](https://insights.sbomify.com/CVE-2014-4872/): Missing authorization in bmc:track-it\! (high 7.5)
- [CVE-2014-4871](https://insights.sbomify.com/CVE-2014-4871/): Cross-site scripting in netcommwireless:nb604n (medium 4.3)
- [CVE-2014-4870](https://insights.sbomify.com/CVE-2014-4870/): Privilege escalation in brocade:vyatta 5400 vrouter (high 7.2)
- [CVE-2014-4869](https://insights.sbomify.com/CVE-2014-4869/): Information disclosure in brocade:vyatta 5400 vrouter (medium 5.0)
- [CVE-2014-4868](https://insights.sbomify.com/CVE-2014-4868/): Command injection in brocade:vyatta 5400 vrouter (critical 9.0)
- [CVE-2014-4867](https://insights.sbomify.com/CVE-2014-4867/): Misconfiguration in cryoserver:cryoserver security appliance (medium 6.8)
- [CVE-2014-4865](https://insights.sbomify.com/CVE-2014-4865/): Cross-site request forgery in cacheguard:cacheguardos (medium 6.8)
- [CVE-2014-4864](https://insights.sbomify.com/CVE-2014-4864/): Information disclosure in netgear:prosafe firmware (low 3.3)
- [CVE-2014-4863](https://insights.sbomify.com/CVE-2014-4863/): Hardcoded credentials in arris:touchstone dg950a (medium 5.0)
- [CVE-2014-4862](https://insights.sbomify.com/CVE-2014-4862/): Hardcoded credentials in netmaster:cbw700 software (medium 5.0)
- [CVE-2014-4861](https://insights.sbomify.com/CVE-2014-4861/): Information disclosure in thycotic:secret server (critical 9.8)
- [CVE-2014-4860](https://insights.sbomify.com/CVE-2014-4860/): Integer overflow in BIOS (medium 6.8)
- [CVE-2014-4859](https://insights.sbomify.com/CVE-2014-4859/): Integer overflow in BIOS (medium 6.8)
- [CVE-2014-4858](https://insights.sbomify.com/CVE-2014-4858/): SQL injection in sabreairlinesolutions:crew management (high 7.5)
- [CVE-2014-4857](https://insights.sbomify.com/CVE-2014-4857/): Cross-site scripting in gurock:testrail (medium 4.3)
- [CVE-2014-4856](https://insights.sbomify.com/CVE-2014-4856/): Cross-site scripting in polldaddy polls \& ratings plugin project:polldaddy polls \& ratings (medium 4.3)
- [CVE-2014-4855](https://insights.sbomify.com/CVE-2014-4855/): Cross-site scripting in polylang plugin project:polylang (medium 4.3)
- [CVE-2014-4854](https://insights.sbomify.com/CVE-2014-4854/): Cross-site scripting in smartcatdesign:wp contruction mode (medium 4.3)
- [CVE-2014-4853](https://insights.sbomify.com/CVE-2014-4853/): Cross-site scripting in opendocman:opendocman (medium 4.3)
- [CVE-2014-4852](https://insights.sbomify.com/CVE-2014-4852/): SQL injection in thedigitalcraft:atomcms (high 7.5)
- [CVE-2014-4851](https://insights.sbomify.com/CVE-2014-4851/): Open redirect in foecms:foecms (medium 5.8)
- [CVE-2014-4850](https://insights.sbomify.com/CVE-2014-4850/): SQL injection in foecms:foecms (high 7.5)
- [CVE-2014-4849](https://insights.sbomify.com/CVE-2014-4849/): Cross-site scripting in foecms:foecms (medium 4.3)
- [CVE-2014-4848](https://insights.sbomify.com/CVE-2014-4848/): Cross-site scripting in blogstand banner plugin project:blogstand-smart-banner (medium 4.3)
- [CVE-2014-4847](https://insights.sbomify.com/CVE-2014-4847/): Cross-site scripting in buffercode:random banner (medium 4.3)
- [CVE-2014-4846](https://insights.sbomify.com/CVE-2014-4846/): Cross-site scripting in matchalabs:metaslider (medium 4.3)
- [CVE-2014-4845](https://insights.sbomify.com/CVE-2014-4845/): Cross-site scripting in stillbreathing:bannerman (medium 4.3)
- [CVE-2014-4844](https://insights.sbomify.com/CVE-2014-4844/): Missing authorization in ibm:business process manager (medium 6.5)
- [CVE-2014-4843](https://insights.sbomify.com/CVE-2014-4843/): Information disclosure in ibm:curam social program management (medium 5.3)
- [CVE-2014-4840](https://insights.sbomify.com/CVE-2014-4840/): Code injection in ibm:tririga application platform (high 7.5)
- [CVE-2014-4839](https://insights.sbomify.com/CVE-2014-4839/): Cross-site request forgery in ibm:tririga application platform (medium 6.0)
- [CVE-2014-4838](https://insights.sbomify.com/CVE-2014-4838/): Cross-site scripting in ibm:tririga application platform (low 3.5)
- [CVE-2014-4837](https://insights.sbomify.com/CVE-2014-4837/): Cross-site scripting in ibm:tririga application platform (low 3.5)
- [CVE-2014-4836](https://insights.sbomify.com/CVE-2014-4836/): Cross-site scripting in ibm:tririga application platform (low 3.5)
- [CVE-2014-4835](https://insights.sbomify.com/CVE-2014-4835/): Information disclosure in ibm:serverguide (low 2.1)
- [CVE-2014-4834](https://insights.sbomify.com/CVE-2014-4834/): Denial of service in ibm:websphere commerce (medium 4.3)
- [CVE-2014-4833](https://insights.sbomify.com/CVE-2014-4833/): Privilege escalation in ibm:qradar security information and event manager (medium 6.5)
- [CVE-2014-4832](https://insights.sbomify.com/CVE-2014-4832/): Information disclosure in ibm:qradar risk manager (medium 4.3)
- [CVE-2014-4831](https://insights.sbomify.com/CVE-2014-4831/): Auth bypass in ibm:qradar risk manager (medium 5.8)
- [CVE-2014-4830](https://insights.sbomify.com/CVE-2014-4830/): Misconfiguration in ibm:qradar security information and event manager (medium 4.3)
- [CVE-2014-4829](https://insights.sbomify.com/CVE-2014-4829/): Cross-site request forgery in ibm:qradar risk manager (medium 6.8)
- [CVE-2014-4828](https://insights.sbomify.com/CVE-2014-4828/): Other in ibm:qradar security information and event manager (medium 4.3)
- [CVE-2014-4827](https://insights.sbomify.com/CVE-2014-4827/): Cross-site scripting in ibm:qradar security information and event manager (medium 4.3)
- [CVE-2014-4826](https://insights.sbomify.com/CVE-2014-4826/): Information disclosure in ibm:qradar security information and event manager (medium 4.3)
- [CVE-2014-4825](https://insights.sbomify.com/CVE-2014-4825/): Weak cryptography in ibm:qradar security information and event manager (medium 4.3)
- [CVE-2014-4824](https://insights.sbomify.com/CVE-2014-4824/): SQL injection in ibm:qradar security information and event manager (medium 6.5)
- [CVE-2014-4823](https://insights.sbomify.com/CVE-2014-4823/): Command injection in ibm:security access manager for mobile 8.0 firmware (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/42/