# Vulnerabilities published in 2014


- [CVE-2014-4690](https://insights.sbomify.com/CVE-2014-4690/): Path traversal in netgate:pfsense (medium 5.0)
- [CVE-2014-4689](https://insights.sbomify.com/CVE-2014-4689/): Path traversal in netgate:pfsense (medium 5.0)
- [CVE-2014-4688](https://insights.sbomify.com/CVE-2014-4688/): Command injection in netgate:pfsense (medium 6.5)
- [CVE-2014-4687](https://insights.sbomify.com/CVE-2014-4687/): Cross-site scripting in netgate:pfsense (medium 4.3)
- [CVE-2014-4686](https://insights.sbomify.com/CVE-2014-4686/): Hardcoded credentials in siemens:simatic pcs7 (medium 6.8)
- [CVE-2014-4685](https://insights.sbomify.com/CVE-2014-4685/): Privilege escalation in siemens:simatic pcs7 (medium 4.6)
- [CVE-2014-4684](https://insights.sbomify.com/CVE-2014-4684/): Privilege escalation in siemens:simatic pcs7 (medium 6.0)
- [CVE-2014-4683](https://insights.sbomify.com/CVE-2014-4683/): Privilege escalation in siemens:simatic pcs7 (medium 4.9)
- [CVE-2014-4682](https://insights.sbomify.com/CVE-2014-4682/): Information disclosure in siemens:simatic pcs7 (medium 5.0)
- [CVE-2014-4678](https://insights.sbomify.com/CVE-2014-4678/): Ansible Code Injection Vulnerability (critical 9.8)
- [CVE-2014-4677](https://insights.sbomify.com/CVE-2014-4677/): Command injection in gpgtools:libmacgpg (high 7.8)
- [CVE-2014-4672](https://insights.sbomify.com/CVE-2014-4672/): Yii PHP Framework arbitrary PHP scripts execution (high 7.5)
- [CVE-2014-4671](https://insights.sbomify.com/CVE-2014-4671/): Rosetta-Flash JSONP Vulnerability in hapi (medium 4.3)
- [CVE-2014-4670](https://insights.sbomify.com/CVE-2014-4670/): Use after free in php:php (medium 4.6)
- [CVE-2014-4669](https://insights.sbomify.com/CVE-2014-4669/): XML external entity in hp:enterprise maps (low 3.5)
- [CVE-2014-4668](https://insights.sbomify.com/CVE-2014-4668/): Auth bypass in cherokee-project:cherokee (medium 6.8)
- [CVE-2014-4667](https://insights.sbomify.com/CVE-2014-4667/): Denial of service in canonical:ubuntu linux (medium 5.0)
- [CVE-2014-4664](https://insights.sbomify.com/CVE-2014-4664/): Cross-site scripting in wordfence security project:wordfence security (medium 4.3)
- [CVE-2014-4663](https://insights.sbomify.com/CVE-2014-4663/): Command injection in binarymoon:timthumb (medium 6.8)
- [CVE-2014-4661](https://insights.sbomify.com/CVE-2014-4661/): Cross-site scripting in hp:records manager (medium 4.3)
- [CVE-2014-4660](https://insights.sbomify.com/CVE-2014-4660/): Ansible discloses credential information (medium 5.5)
- [CVE-2014-4659](https://insights.sbomify.com/CVE-2014-4659/): Ansible sets unsafe permissions for sources.list (medium 5.5)
- [CVE-2014-4658](https://insights.sbomify.com/CVE-2014-4658/): Ansible Sensitive Files Are Locally Readable (medium 5.5)
- [CVE-2014-4657](https://insights.sbomify.com/CVE-2014-4657/): Ansible Remote Code Execution (critical 9.8)
- [CVE-2014-4656](https://insights.sbomify.com/CVE-2014-4656/): Integer overflow in canonical:ubuntu linux (medium 4.6)
- [CVE-2014-4655](https://insights.sbomify.com/CVE-2014-4655/): Integer overflow in canonical:ubuntu linux (medium 4.9)
- [CVE-2014-4654](https://insights.sbomify.com/CVE-2014-4654/): Use after free in canonical:ubuntu linux (medium 4.6)
- [CVE-2014-4653](https://insights.sbomify.com/CVE-2014-4653/): Use after free in canonical:ubuntu linux (medium 4.6)
- [CVE-2014-4652](https://insights.sbomify.com/CVE-2014-4652/): Race condition in canonical:ubuntu linux (low 1.9)
- [CVE-2014-4651](https://insights.sbomify.com/CVE-2014-4651/): Information disclosure in Apache jclouds (critical 9.8)
- [CVE-2014-4650](https://insights.sbomify.com/CVE-2014-4650/): Path traversal in python:python (critical 9.8)
- [CVE-2014-4649](https://insights.sbomify.com/CVE-2014-4649/): SQL injection in piwigo:piwigo (medium 6.5)
- [CVE-2014-4648](https://insights.sbomify.com/CVE-2014-4648/): Other in piwigo:piwigo (critical 10.0)
- [CVE-2014-4647](https://insights.sbomify.com/CVE-2014-4647/): Memory corruption in embarcadero:er\/studio data architect (medium 6.8)
- [CVE-2014-4646](https://insights.sbomify.com/CVE-2014-4646/): Memory corruption in foxitsoftware:foxit pdf sdk dll (medium 6.8)
- [CVE-2014-4645](https://insights.sbomify.com/CVE-2014-4645/): Cross-site scripting in dlink:dsl-2760u-e1 (medium 4.3)
- [CVE-2014-4644](https://insights.sbomify.com/CVE-2014-4644/): SQL injection in cacti:superlinks (high 7.5)
- [CVE-2014-4643](https://insights.sbomify.com/CVE-2014-4643/): Memory corruption in coreftp:core ftp (medium 5.0)
- [CVE-2014-4639](https://insights.sbomify.com/CVE-2014-4639/): Weak cryptography in emc:documentum wdk (medium 5.0)
- [CVE-2014-4638](https://insights.sbomify.com/CVE-2014-4638/): Other in emc:documentum wdk (medium 5.0)
- [CVE-2014-4637](https://insights.sbomify.com/CVE-2014-4637/): Open redirect in emc:documentum wdk (medium 6.4)
- [CVE-2014-4636](https://insights.sbomify.com/CVE-2014-4636/): Cross-site request forgery in emc:documentum wdk (medium 6.8)
- [CVE-2014-4635](https://insights.sbomify.com/CVE-2014-4635/): Cross-site scripting in emc:documentum wdk (medium 4.3)
- [CVE-2014-4634](https://insights.sbomify.com/CVE-2014-4634/): Privilege escalation in emc:appsync (medium 4.6)
- [CVE-2014-4633](https://insights.sbomify.com/CVE-2014-4633/): Cross-site scripting in emc:rsa archer egrc (medium 4.3)
- [CVE-2014-4632](https://insights.sbomify.com/CVE-2014-4632/): Security feature bypass in vmware:vsphere data protection (medium 4.3)
- [CVE-2014-4631](https://insights.sbomify.com/CVE-2014-4631/): Auth bypass in emc:rsa adaptive authentication on-premise (medium 5.0)
- [CVE-2014-4630](https://insights.sbomify.com/CVE-2014-4630/): Weak cryptography in dell:bsafe micro-edition-suite (medium 4.3)
- [CVE-2014-4629](https://insights.sbomify.com/CVE-2014-4629/): Missing authorization in emc:documentum content server (critical 9.0)
- [CVE-2014-4628](https://insights.sbomify.com/CVE-2014-4628/): Cross-site scripting in emc:isilon insightiq (medium 4.3)
- [CVE-2014-4627](https://insights.sbomify.com/CVE-2014-4627/): SQL injection in rsa:web threat detection (high 8.8)
- [CVE-2014-4626](https://insights.sbomify.com/CVE-2014-4626/): Privilege escalation in emc:documentum content server (critical 9.0)
- [CVE-2014-4624](https://insights.sbomify.com/CVE-2014-4624/): Missing authorization in avamar virtual edition:6.0 (medium 5.0)
- [CVE-2014-4623](https://insights.sbomify.com/CVE-2014-4623/): Weak cryptography in emc:avamar (medium 4.3)
- [CVE-2014-4622](https://insights.sbomify.com/CVE-2014-4622/): Privilege escalation in emc:documentum content server (high 7.1)
- [CVE-2014-4621](https://insights.sbomify.com/CVE-2014-4621/): Privilege escalation in emc:documentum content server (high 8.5)
- [CVE-2014-4620](https://insights.sbomify.com/CVE-2014-4620/): Information disclosure in emc:networker (low 2.1)
- [CVE-2014-4619](https://insights.sbomify.com/CVE-2014-4619/): Auth bypass in emc:rsa identity management and governance (critical 9.3)
- [CVE-2014-4618](https://insights.sbomify.com/CVE-2014-4618/): Privilege escalation in emc:documentum content server (high 8.5)
- [CVE-2014-4617](https://insights.sbomify.com/CVE-2014-4617/): Denial of service in debian:debian linux (medium 5.0)
- [CVE-2014-4616](https://insights.sbomify.com/CVE-2014-4616/): simplejson before 2.6.1 vulnerable to array index error (medium 5.9)
- [CVE-2014-4615](https://insights.sbomify.com/CVE-2014-4615/): Information disclosure in canonical:ubuntu linux (medium 5.0)
- [CVE-2014-4614](https://insights.sbomify.com/CVE-2014-4614/): Cross-site request forgery in piwigo:piwigo (medium 6.8)
- [CVE-2014-4613](https://insights.sbomify.com/CVE-2014-4613/): Cross-site request forgery in piwigo:piwigo (medium 6.5)
- [CVE-2014-4612](https://insights.sbomify.com/CVE-2014-4612/): Cross-site scripting in coppermine-gallery:coppermine photo gallery (medium 6.1)
- [CVE-2014-4611](https://insights.sbomify.com/CVE-2014-4611/): Integer overflow in linux:linux kernel (medium 5.0)
- [CVE-2014-4610](https://insights.sbomify.com/CVE-2014-4610/): Integer overflow in ffmpeg:ffmpeg (high 8.8)
- [CVE-2014-4609](https://insights.sbomify.com/CVE-2014-4609/): Integer overflow in libav:libav (high 8.8)
- [CVE-2014-4608](https://insights.sbomify.com/CVE-2014-4608/): Integer overflow in canonical:ubuntu linux (high 7.3)
- [CVE-2014-4607](https://insights.sbomify.com/CVE-2014-4607/): Integer overflow in oberhumer:liblzo2 (high 8.8)
- [CVE-2014-4606](https://insights.sbomify.com/CVE-2014-4606/): Cross-site scripting in zeenshare project:zeenshare (medium 4.3)
- [CVE-2014-4605](https://insights.sbomify.com/CVE-2014-4605/): Cross-site scripting in zdstatistics project:zdstatistics (medium 4.3)
- [CVE-2014-4604](https://insights.sbomify.com/CVE-2014-4604/): Cross-site scripting in your-text-manager project:your-text-manager (medium 4.3)
- [CVE-2014-4603](https://insights.sbomify.com/CVE-2014-4603/): Cross-site scripting in yahoo\! updates for wordpress plugin project:yahoo\! updates for wordpress plugin (medium 4.3)
- [CVE-2014-4602](https://insights.sbomify.com/CVE-2014-4602/): Cross-site scripting in xen carousel plugin project:xen carousel (medium 4.3)
- [CVE-2014-4601](https://insights.sbomify.com/CVE-2014-4601/): Cross-site scripting in wu-rating project:wu-rating (medium 4.3)
- [CVE-2014-4600](https://insights.sbomify.com/CVE-2014-4600/): Cross-site scripting in wp ultimate email marketer project:wp ultimate email marketer (medium 4.3)
- [CVE-2014-4599](https://insights.sbomify.com/CVE-2014-4599/): Cross-site scripting in wp-business directory project:wp-business directory (medium 4.3)
- [CVE-2014-4598](https://insights.sbomify.com/CVE-2014-4598/): Cross-site scripting in wp-tmkm-amazon project:wp-tmkm-amazon (medium 4.3)
- [CVE-2014-4597](https://insights.sbomify.com/CVE-2014-4597/): Cross-site scripting in wp social invitations project:wp social invitations (medium 4.3)
- [CVE-2014-4596](https://insights.sbomify.com/CVE-2014-4596/): Cross-site scripting in snapapp project:snapapp (medium 4.3)
- [CVE-2014-4595](https://insights.sbomify.com/CVE-2014-4595/): Cross-site scripting in wp restful project:wp restful (medium 4.3)
- [CVE-2014-4594](https://insights.sbomify.com/CVE-2014-4594/): Cross-site scripting in wordpress responsive preview project:wordpress responsive preview (medium 4.3)
- [CVE-2014-4593](https://insights.sbomify.com/CVE-2014-4593/): Cross-site scripting in wp plugin manager project:wp plugin manager (medium 4.3)
- [CVE-2014-4592](https://insights.sbomify.com/CVE-2014-4592/): Cross-site scripting in czepol:wp-planet (medium 6.1)
- [CVE-2014-4591](https://insights.sbomify.com/CVE-2014-4591/): Cross-site scripting in wp picasa image project:wp picasa image (medium 4.3)
- [CVE-2014-4590](https://insights.sbomify.com/CVE-2014-4590/): Cross-site scripting in wp microblogs project:wp microblogs (medium 4.3)
- [CVE-2014-4589](https://insights.sbomify.com/CVE-2014-4589/): Cross-site scripting in wp silverlight media player project:wp silverlight media player (medium 4.3)
- [CVE-2014-4588](https://insights.sbomify.com/CVE-2014-4588/): Cross-site scripting in hot files\:file sharing and download manager project (medium 4.3)
- [CVE-2014-4587](https://insights.sbomify.com/CVE-2014-4587/): Cross-site scripting in wp guestmap project:wp guestmap project (medium 4.3)
- [CVE-2014-4586](https://insights.sbomify.com/CVE-2014-4586/): Cross-site scripting in wp-football project:wp-football (medium 4.3)
- [CVE-2014-4585](https://insights.sbomify.com/CVE-2014-4585/): Cross-site scripting in mnt-tech:wp-facethumb (medium 4.3)
- [CVE-2014-4584](https://insights.sbomify.com/CVE-2014-4584/): Cross-site scripting in wp-easybooking plugin project:wp-easybooking (medium 4.3)
- [CVE-2014-4583](https://insights.sbomify.com/CVE-2014-4583/): Cross-site scripting in wp-contact plugin project:wp-contact-sidebar-widget (medium 4.3)
- [CVE-2014-4582](https://insights.sbomify.com/CVE-2014-4582/): Cross-site scripting in wp consultant project:wp consultant (medium 4.3)
- [CVE-2014-4581](https://insights.sbomify.com/CVE-2014-4581/): Cross-site scripting in wpcb project:wpcb (medium 4.3)
- [CVE-2014-4580](https://insights.sbomify.com/CVE-2014-4580/): Cross-site scripting in wp blipbot project:wp blipbot (medium 4.3)
- [CVE-2014-4579](https://insights.sbomify.com/CVE-2014-4579/): Cross-site scripting in wp appointments schedules project:wp appointments schedules (medium 4.3)
- [CVE-2014-4578](https://insights.sbomify.com/CVE-2014-4578/): Cross-site scripting in wp app maker project:wp app maker (medium 4.3)
- [CVE-2014-4577](https://insights.sbomify.com/CVE-2014-4577/): Path traversal in websupporter:wp amasin - the amazon affiliate shop (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/44/