# Vulnerabilities published in 2014


- [CVE-2014-4576](https://insights.sbomify.com/CVE-2014-4576/): Cross-site scripting in wordpress social login project:wordpress social login (medium 4.3)
- [CVE-2014-4575](https://insights.sbomify.com/CVE-2014-4575/): Cross-site scripting in wikipop plugin project:wikipop (medium 4.3)
- [CVE-2014-4574](https://insights.sbomify.com/CVE-2014-4574/): Cross-site scripting in webengage project:webengage (medium 4.3)
- [CVE-2014-4573](https://insights.sbomify.com/CVE-2014-4573/): Cross-site scripting in walk score project:walk score (medium 4.3)
- [CVE-2014-4572](https://insights.sbomify.com/CVE-2014-4572/): Cross-site scripting in votecount for balatarin project:votecount for balatarin (medium 4.3)
- [CVE-2014-4571](https://insights.sbomify.com/CVE-2014-4571/): Cross-site scripting in vn-calendar project:vn-calendar (medium 4.3)
- [CVE-2014-4570](https://insights.sbomify.com/CVE-2014-4570/): Cross-site scripting in videowhisper:video presentation (medium 4.3)
- [CVE-2014-4569](https://insights.sbomify.com/CVE-2014-4569/): Cross-site scripting in videowhisper:videowhisper live streaming integration (medium 4.3)
- [CVE-2014-4568](https://insights.sbomify.com/CVE-2014-4568/): Cross-site scripting in videowhisper:video posts webcam recorder (medium 4.3)
- [CVE-2014-4567](https://insights.sbomify.com/CVE-2014-4567/): Cross-site scripting in videowhisper:video comments webcam recorder (medium 6.1)
- [CVE-2014-4566](https://insights.sbomify.com/CVE-2014-4566/): Cross-site scripting in verweise-wordpress-twitter project:verweise-wordpress-twitter (medium 4.3)
- [CVE-2014-4565](https://insights.sbomify.com/CVE-2014-4565/): Cross-site scripting in verification code for comments project:verification code for comments (medium 4.3)
- [CVE-2014-4564](https://insights.sbomify.com/CVE-2014-4564/): Cross-site scripting in validated plugin project:validated plugin (medium 4.3)
- [CVE-2014-4563](https://insights.sbomify.com/CVE-2014-4563/): Cross-site scripting in url cloak \& encrypt project:url cloak \& encrypt (medium 4.3)
- [CVE-2014-4561](https://insights.sbomify.com/CVE-2014-4561/): Cross-site scripting in ultimate-weather project:ultimate-weather (medium 6.1)
- [CVE-2014-4560](https://insights.sbomify.com/CVE-2014-4560/): Cross-site scripting in toolpage project:toolpage (medium 4.3)
- [CVE-2014-4559](https://insights.sbomify.com/CVE-2014-4559/): Cross-site scripting in cybercompay:swipehq-payment-gateway-wp-e-commerce (medium 6.1)
- [CVE-2014-4558](https://insights.sbomify.com/CVE-2014-4558/): Cross-site scripting in cybercompany:swipehq-payment-gateway-woocommerce (medium 6.1)
- [CVE-2014-4557](https://insights.sbomify.com/CVE-2014-4557/): Cross-site scripting in jigoshop:swipe hq checkout for jigoshop (medium 4.3)
- [CVE-2014-4556](https://insights.sbomify.com/CVE-2014-4556/): Cross-site scripting in swipe checkout for eshop project:swipe checkout for eshop (medium 4.3)
- [CVE-2014-4555](https://insights.sbomify.com/CVE-2014-4555/): Cross-site scripting in style it project:style it (medium 4.3)
- [CVE-2014-4554](https://insights.sbomify.com/CVE-2014-4554/): Cross-site scripting in ss downloads project:ss downloads (medium 4.3)
- [CVE-2014-4553](https://insights.sbomify.com/CVE-2014-4553/): Cross-site scripting in spreadshirt-rss-3d-cube-flash-gallery project:spreadshirt-rss-3d-cube-flash-gallery (medium 6.1)
- [CVE-2014-4552](https://insights.sbomify.com/CVE-2014-4552/): Cross-site scripting in spotlightyour:spotlightyour (medium 4.3)
- [CVE-2014-4551](https://insights.sbomify.com/CVE-2014-4551/): Cross-site scripting in social connect project:social connect (medium 4.3)
- [CVE-2014-4550](https://insights.sbomify.com/CVE-2014-4550/): Cross-site scripting in visualshortcodes:ninja (medium 6.1)
- [CVE-2014-4549](https://insights.sbomify.com/CVE-2014-4549/): Cross-site scripting in woocommerce sagepay direct payment gateway project:woocommerce sagepay direct payment gateway (medium 4.3)
- [CVE-2014-4548](https://insights.sbomify.com/CVE-2014-4548/): Cross-site scripting in ruven-toolkit project:ruven-toolkit (medium 6.1)
- [CVE-2014-4547](https://insights.sbomify.com/CVE-2014-4547/): Cross-site scripting in rezgo:online booking (medium 4.3)
- [CVE-2014-4546](https://insights.sbomify.com/CVE-2014-4546/): Cross-site scripting in rezgo project:rezgo (medium 4.3)
- [CVE-2014-4545](https://insights.sbomify.com/CVE-2014-4545/): Cross-site scripting in pro quoter plugin project:pro quoter (medium 4.3)
- [CVE-2014-4544](https://insights.sbomify.com/CVE-2014-4544/): Cross-site scripting in podcast channels project:podcast channels (medium 6.1)
- [CVE-2014-4543](https://insights.sbomify.com/CVE-2014-4543/): Cross-site scripting in pay per media player project:pay per media player (medium 4.3)
- [CVE-2014-4542](https://insights.sbomify.com/CVE-2014-4542/): Cross-site scripting in ooorl project:ooorl (medium 4.3)
- [CVE-2014-4541](https://insights.sbomify.com/CVE-2014-4541/): Cross-site scripting in omfg mobile project:omfg mobile (medium 4.3)
- [CVE-2014-4540](https://insights.sbomify.com/CVE-2014-4540/): Cross-site scripting in oleggo livestream project:oleggo livestream (medium 4.3)
- [CVE-2014-4539](https://insights.sbomify.com/CVE-2014-4539/): Cross-site scripting in movies project:movies (medium 6.1)
- [CVE-2014-4538](https://insights.sbomify.com/CVE-2014-4538/): Cross-site scripting in malware finder plugin project:malware finder (medium 4.3)
- [CVE-2014-4537](https://insights.sbomify.com/CVE-2014-4537/): Cross-site scripting in keyword strategy internal links project:keyword strategy internal links (medium 4.3)
- [CVE-2014-4536](https://insights.sbomify.com/CVE-2014-4536/): Cross-site scripting in katz:infusionsoft gravity forms (medium 6.1)
- [CVE-2014-4535](https://insights.sbomify.com/CVE-2014-4535/): Cross-site scripting in import legacy media project:import legacy media (medium 6.1)
- [CVE-2014-4534](https://insights.sbomify.com/CVE-2014-4534/): Cross-site scripting in html5 video player with playlist plugin project:html5 video player with playlist plugin (medium 4.3)
- [CVE-2014-4533](https://insights.sbomify.com/CVE-2014-4533/): Cross-site scripting in geo redirector plugin project:geo redirector (medium 4.3)
- [CVE-2014-4532](https://insights.sbomify.com/CVE-2014-4532/): Cross-site scripting in garagesale project:garagesale (medium 4.3)
- [CVE-2014-4531](https://insights.sbomify.com/CVE-2014-4531/): Cross-site scripting in game tabs project:game tabs (medium 4.3)
- [CVE-2014-4530](https://insights.sbomify.com/CVE-2014-4530/): flog plugin 0.1 for WordPress has XSS (medium 6.1)
- [CVE-2014-4529](https://insights.sbomify.com/CVE-2014-4529/): Cross-site scripting in flash photo gallery project:flash photo gallery (medium 4.3)
- [CVE-2014-4528](https://insights.sbomify.com/CVE-2014-4528/): Cross-site scripting in fbpromotions project:fbpromotions (medium 4.3)
- [CVE-2014-4527](https://insights.sbomify.com/CVE-2014-4527/): Cross-site scripting in envialosimple:email marketing y newsletters (medium 4.3)
- [CVE-2014-4526](https://insights.sbomify.com/CVE-2014-4526/): Cross-site scripting in efence project:efence (medium 4.3)
- [CVE-2014-4525](https://insights.sbomify.com/CVE-2014-4525/): Cross-site scripting in winwar:wp ebay product feeds (medium 6.1)
- [CVE-2014-4524](https://insights.sbomify.com/CVE-2014-4524/): Cross-site scripting in wp easy post types project:wp easy post types (medium 4.3)
- [CVE-2014-4523](https://insights.sbomify.com/CVE-2014-4523/): Cross-site scripting in easy career openings project:easy career openings (medium 6.1)
- [CVE-2014-4522](https://insights.sbomify.com/CVE-2014-4522/): Cross-site scripting in dssearchagent project:dssearchagent (medium 4.3)
- [CVE-2014-4521](https://insights.sbomify.com/CVE-2014-4521/): Cross-site scripting in diversesolutions:dsidxpress idx plugin (medium 4.3)
- [CVE-2014-4520](https://insights.sbomify.com/CVE-2014-4520/): Cross-site scripting in dmca:dmca watermarker (medium 4.3)
- [CVE-2014-4519](https://insights.sbomify.com/CVE-2014-4519/): Cross-site scripting in conversador project:conversador (medium 6.1)
- [CVE-2014-4518](https://insights.sbomify.com/CVE-2014-4518/): Cross-site scripting in d-coda:contactme (medium 4.3)
- [CVE-2014-4517](https://insights.sbomify.com/CVE-2014-4517/): Cross-site scripting in cbi referral manager project:cbi referral manager (medium 4.3)
- [CVE-2014-4516](https://insights.sbomify.com/CVE-2014-4516/): Cross-site scripting in bic media widget plugin:bic media widget (medium 4.3)
- [CVE-2014-4515](https://insights.sbomify.com/CVE-2014-4515/): Cross-site scripting in anyfont plugin project:anyfont (medium 4.3)
- [CVE-2014-4514](https://insights.sbomify.com/CVE-2014-4514/): Cross-site scripting in alipay project:alipay (medium 4.3)
- [CVE-2014-4513](https://insights.sbomify.com/CVE-2014-4513/): Cross-site scripting in activehelper:activehelper livehelp live chat (medium 4.3)
- [CVE-2014-4511](https://insights.sbomify.com/CVE-2014-4511/): Command injection in gitlist:gitlist (high 7.5)
- [CVE-2014-4510](https://insights.sbomify.com/CVE-2014-4510/): Cross-site scripting in debian:apt-cacher (medium 4.3)
- [CVE-2014-4509](https://insights.sbomify.com/CVE-2014-4509/): Command injection in netiq:identity manager (medium 4.6)
- [CVE-2014-4508](https://insights.sbomify.com/CVE-2014-4508/): Denial of service in canonical:ubuntu linux (medium 4.7)
- [CVE-2014-4507](https://insights.sbomify.com/CVE-2014-4507/): Path traversal in theforeman:foreman (medium 6.4)
- [CVE-2014-4506](https://insights.sbomify.com/CVE-2014-4506/): Cross-site scripting in louis jimenez:custom meta (low 2.1)
- [CVE-2014-4505](https://insights.sbomify.com/CVE-2014-4505/): Cross-site scripting in roger padilla camacho:easy breadcrumb (medium 4.3)
- [CVE-2014-4503](https://insights.sbomify.com/CVE-2014-4503/): Denial of service in cgminer project:cgminer (medium 4.3)
- [CVE-2014-4502](https://insights.sbomify.com/CVE-2014-4502/): Memory corruption in bfgminer:bfgminer (critical 10.0)
- [CVE-2014-4501](https://insights.sbomify.com/CVE-2014-4501/): Memory corruption in bfgminer:bfgminer (critical 10.0)
- [CVE-2014-4499](https://insights.sbomify.com/CVE-2014-4499/): Information disclosure in apple:mac os x (low 2.1)
- [CVE-2014-4498](https://insights.sbomify.com/CVE-2014-4498/): Security feature bypass in apple:mac os x (medium 4.7)
- [CVE-2014-4497](https://insights.sbomify.com/CVE-2014-4497/): Integer overflow in apple:mac os x (critical 10.0)
- [CVE-2014-4496](https://insights.sbomify.com/CVE-2014-4496/): Security feature bypass in apple:iphone os (medium 5.0)
- [CVE-2014-4495](https://insights.sbomify.com/CVE-2014-4495/): Security feature bypass in apple:iphone os (critical 10.0)
- [CVE-2014-4494](https://insights.sbomify.com/CVE-2014-4494/): Security feature bypass in apple:iphone os (medium 6.8)
- [CVE-2014-4493](https://insights.sbomify.com/CVE-2014-4493/): Privilege escalation in apple:iphone os (high 7.5)
- [CVE-2014-4492](https://insights.sbomify.com/CVE-2014-4492/): Memory corruption in apple:iphone os (high 7.5)
- [CVE-2014-4491](https://insights.sbomify.com/CVE-2014-4491/): Information disclosure in apple:iphone os (medium 5.0)
- [CVE-2014-4489](https://insights.sbomify.com/CVE-2014-4489/): Null dereference in apple:iphone os (critical 10.0)
- [CVE-2014-4488](https://insights.sbomify.com/CVE-2014-4488/): Memory corruption in apple:iphone os (critical 10.0)
- [CVE-2014-4487](https://insights.sbomify.com/CVE-2014-4487/): Memory corruption in apple:iphone os (critical 10.0)
- [CVE-2014-4486](https://insights.sbomify.com/CVE-2014-4486/): Null dereference in apple:iphone os (critical 10.0)
- [CVE-2014-4485](https://insights.sbomify.com/CVE-2014-4485/): Memory corruption in apple:iphone os (high 7.5)
- [CVE-2014-4484](https://insights.sbomify.com/CVE-2014-4484/): Memory corruption in apple:iphone os (high 7.5)
- [CVE-2014-4483](https://insights.sbomify.com/CVE-2014-4483/): Memory corruption in apple:iphone os (medium 6.8)
- [CVE-2014-4481](https://insights.sbomify.com/CVE-2014-4481/): Integer overflow in apple:iphone os (medium 6.8)
- [CVE-2014-4480](https://insights.sbomify.com/CVE-2014-4480/): Path traversal in apple:iphone os (critical 10.0)
- [CVE-2014-4479](https://insights.sbomify.com/CVE-2014-4479/): Memory corruption in apple:iphone os (medium 6.8)
- [CVE-2014-4477](https://insights.sbomify.com/CVE-2014-4477/): Memory corruption in apple:iphone os (medium 6.8)
- [CVE-2014-4476](https://insights.sbomify.com/CVE-2014-4476/): Memory corruption in apple:iphone os (medium 6.8)
- [CVE-2014-4475](https://insights.sbomify.com/CVE-2014-4475/): Memory corruption in apple:iphone os (medium 6.8)
- [CVE-2014-4474](https://insights.sbomify.com/CVE-2014-4474/): Memory corruption in apple:iphone os (medium 6.8)
- [CVE-2014-4473](https://insights.sbomify.com/CVE-2014-4473/): Memory corruption in apple:iphone os (medium 6.8)
- [CVE-2014-4472](https://insights.sbomify.com/CVE-2014-4472/): Memory corruption in apple:iphone os (medium 6.8)
- [CVE-2014-4471](https://insights.sbomify.com/CVE-2014-4471/): Memory corruption in apple:iphone os (medium 6.8)
- [CVE-2014-4470](https://insights.sbomify.com/CVE-2014-4470/): Memory corruption in apple:iphone os (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/45/