# Vulnerabilities published in 2014


- [CVE-2014-4112](https://insights.sbomify.com/CVE-2014-4112/): Memory corruption in microsoft:internet explorer (high 7.5)
- [CVE-2014-4111](https://insights.sbomify.com/CVE-2014-4111/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4110](https://insights.sbomify.com/CVE-2014-4110/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4109](https://insights.sbomify.com/CVE-2014-4109/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4108](https://insights.sbomify.com/CVE-2014-4108/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4107](https://insights.sbomify.com/CVE-2014-4107/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4106](https://insights.sbomify.com/CVE-2014-4106/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4105](https://insights.sbomify.com/CVE-2014-4105/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4104](https://insights.sbomify.com/CVE-2014-4104/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4103](https://insights.sbomify.com/CVE-2014-4103/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4102](https://insights.sbomify.com/CVE-2014-4102/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4101](https://insights.sbomify.com/CVE-2014-4101/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4100](https://insights.sbomify.com/CVE-2014-4100/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4099](https://insights.sbomify.com/CVE-2014-4099/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4098](https://insights.sbomify.com/CVE-2014-4098/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4097](https://insights.sbomify.com/CVE-2014-4097/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4096](https://insights.sbomify.com/CVE-2014-4096/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4095](https://insights.sbomify.com/CVE-2014-4095/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4094](https://insights.sbomify.com/CVE-2014-4094/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4093](https://insights.sbomify.com/CVE-2014-4093/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4092](https://insights.sbomify.com/CVE-2014-4092/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4091](https://insights.sbomify.com/CVE-2014-4091/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4090](https://insights.sbomify.com/CVE-2014-4090/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4089](https://insights.sbomify.com/CVE-2014-4089/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4088](https://insights.sbomify.com/CVE-2014-4088/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4087](https://insights.sbomify.com/CVE-2014-4087/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4086](https://insights.sbomify.com/CVE-2014-4086/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4085](https://insights.sbomify.com/CVE-2014-4085/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4084](https://insights.sbomify.com/CVE-2014-4084/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4083](https://insights.sbomify.com/CVE-2014-4083/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4082](https://insights.sbomify.com/CVE-2014-4082/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4081](https://insights.sbomify.com/CVE-2014-4081/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4080](https://insights.sbomify.com/CVE-2014-4080/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4079](https://insights.sbomify.com/CVE-2014-4079/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4078](https://insights.sbomify.com/CVE-2014-4078/): Security feature bypass in microsoft:internet information services (medium 5.1)
- [CVE-2014-4077](https://insights.sbomify.com/CVE-2014-4077/): Microsoft IME Japanese Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2014-4076](https://insights.sbomify.com/CVE-2014-4076/): Privilege escalation in microsoft:windows server 2003 (high 7.2)
- [CVE-2014-4075](https://insights.sbomify.com/CVE-2014-4075/): Cross-site scripting in microsoft:asp.net model view controller (medium 4.3)
- [CVE-2014-4074](https://insights.sbomify.com/CVE-2014-4074/): Privilege escalation in microsoft:windows 8 (high 7.2)
- [CVE-2014-4073](https://insights.sbomify.com/CVE-2014-4073/): Privilege escalation in microsoft:.net framework (critical 10.0)
- [CVE-2014-4072](https://insights.sbomify.com/CVE-2014-4072/): Denial of service in microsoft:.net framework (medium 5.0)
- [CVE-2014-4071](https://insights.sbomify.com/CVE-2014-4071/): Null dereference in microsoft:lync server (medium 5.0)
- [CVE-2014-4070](https://insights.sbomify.com/CVE-2014-4070/): Cross-site scripting in microsoft:lync server (medium 4.3)
- [CVE-2014-4068](https://insights.sbomify.com/CVE-2014-4068/): Denial of service in microsoft:lync server (medium 5.0)
- [CVE-2014-4067](https://insights.sbomify.com/CVE-2014-4067/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4066](https://insights.sbomify.com/CVE-2014-4066/): Memory corruption in microsoft:internet explorer (high 7.5)
- [CVE-2014-4065](https://insights.sbomify.com/CVE-2014-4065/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4064](https://insights.sbomify.com/CVE-2014-4064/): Information disclosure in microsoft:windows 7 (medium 4.9)
- [CVE-2014-4063](https://insights.sbomify.com/CVE-2014-4063/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4062](https://insights.sbomify.com/CVE-2014-4062/): Security feature bypass in microsoft:.net framework (medium 4.3)
- [CVE-2014-4061](https://insights.sbomify.com/CVE-2014-4061/): Denial of service in microsoft:sql server (medium 6.8)
- [CVE-2014-4060](https://insights.sbomify.com/CVE-2014-4060/): Use after free in microsoft:windows media center (medium 6.8)
- [CVE-2014-4059](https://insights.sbomify.com/CVE-2014-4059/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4058](https://insights.sbomify.com/CVE-2014-4058/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4057](https://insights.sbomify.com/CVE-2014-4057/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4056](https://insights.sbomify.com/CVE-2014-4056/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4055](https://insights.sbomify.com/CVE-2014-4055/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4052](https://insights.sbomify.com/CVE-2014-4052/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4051](https://insights.sbomify.com/CVE-2014-4051/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4050](https://insights.sbomify.com/CVE-2014-4050/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-4049](https://insights.sbomify.com/CVE-2014-4049/): Memory corruption in debian:debian linux (medium 5.1)
- [CVE-2014-4048](https://insights.sbomify.com/CVE-2014-4048/): Denial of service in digium:asterisk (medium 4.3)
- [CVE-2014-4047](https://insights.sbomify.com/CVE-2014-4047/): Denial of service in digium:asterisk (medium 5.0)
- [CVE-2014-4046](https://insights.sbomify.com/CVE-2014-4046/): Command injection in digium:asterisk (medium 6.5)
- [CVE-2014-4045](https://insights.sbomify.com/CVE-2014-4045/): Denial of service in digium:asterisk (medium 4.3)
- [CVE-2014-4044](https://insights.sbomify.com/CVE-2014-4044/): Memory corruption in openafs:openafs (medium 5.0)
- [CVE-2014-4043](https://insights.sbomify.com/CVE-2014-4043/): Use after free in gnu:glibc (high 7.5)
- [CVE-2014-4040](https://insights.sbomify.com/CVE-2014-4040/): Information disclosure in powerpc-utils project:powerpc-utils (medium 5.0)
- [CVE-2014-4039](https://insights.sbomify.com/CVE-2014-4039/): Misconfiguration in ppc64-diag project:ppc64-diag (low 2.1)
- [CVE-2014-4038](https://insights.sbomify.com/CVE-2014-4038/): Race condition in ppc64-diag project:ppc64-diag (medium 4.4)
- [CVE-2014-4037](https://insights.sbomify.com/CVE-2014-4037/): Cross-site scripting in ckeditor:fckeditor (medium 4.3)
- [CVE-2014-4036](https://insights.sbomify.com/CVE-2014-4036/): ImpressCMS Cross-site scripting Vulnerability (medium 4.3)
- [CVE-2014-4035](https://insights.sbomify.com/CVE-2014-4035/): Cross-site scripting in bestsoftinc:advance hotel booking system (medium 4.3)
- [CVE-2014-4034](https://insights.sbomify.com/CVE-2014-4034/): SQL injection in aas9:zerocms (high 7.5)
- [CVE-2014-4033](https://insights.sbomify.com/CVE-2014-4033/): Cross-site scripting in efrontlearning:efront (medium 4.3)
- [CVE-2014-4032](https://insights.sbomify.com/CVE-2014-4032/): Cross-site scripting in fiyo:fiyo cms (medium 4.3)
- [CVE-2014-4031](https://insights.sbomify.com/CVE-2014-4031/): Information disclosure in arubanetworks:clearpass (medium 4.0)
- [CVE-2014-4030](https://insights.sbomify.com/CVE-2014-4030/): Cross-site request forgery in longtailvideo:jw player for flash \& html5 video plugin (medium 6.8)
- [CVE-2014-4027](https://insights.sbomify.com/CVE-2014-4027/): Information disclosure in canonical:ubuntu linux (low 2.3)
- [CVE-2014-4024](https://insights.sbomify.com/CVE-2014-4024/): Information disclosure in f5:big-ip access policy manager (medium 5.9)
- [CVE-2014-4023](https://insights.sbomify.com/CVE-2014-4023/): Cross-site scripting in f5:big-ip access policy manager (medium 4.3)
- [CVE-2014-4022](https://insights.sbomify.com/CVE-2014-4022/): Information disclosure in xen:xen (low 2.7)
- [CVE-2014-4021](https://insights.sbomify.com/CVE-2014-4021/): Information disclosure in xen:xen (low 2.7)
- [CVE-2014-4020](https://insights.sbomify.com/CVE-2014-4020/): Integer overflow in wireshark:wireshark (medium 4.3)
- [CVE-2014-4019](https://insights.sbomify.com/CVE-2014-4019/): Information disclosure in zte:zxv10 w300 firmware (high 7.5)
- [CVE-2014-4018](https://insights.sbomify.com/CVE-2014-4018/): Hardcoded credentials in zte:zxv10 w300 (high 7.8)
- [CVE-2014-4017](https://insights.sbomify.com/CVE-2014-4017/): Cross-site scripting in conversionninja:conversion ninja (medium 4.3)
- [CVE-2014-4014](https://insights.sbomify.com/CVE-2014-4014/): Security feature bypass in linux:linux kernel (medium 6.2)
- [CVE-2014-4013](https://insights.sbomify.com/CVE-2014-4013/): SQL injection in arubanetworks:clearpass (medium 4.9)
- [CVE-2014-4012](https://insights.sbomify.com/CVE-2014-4012/): Hardcoded credentials in sap:open hub service (medium 5.0)
- [CVE-2014-4011](https://insights.sbomify.com/CVE-2014-4011/): Hardcoded credentials in sap:capacity leveling (medium 5.0)
- [CVE-2014-4010](https://insights.sbomify.com/CVE-2014-4010/): Hardcoded credentials in sap:transaction data pool (medium 5.0)
- [CVE-2014-4009](https://insights.sbomify.com/CVE-2014-4009/): Hardcoded credentials in sap:computing center management system monitoring (medium 5.0)
- [CVE-2014-4008](https://insights.sbomify.com/CVE-2014-4008/): Hardcoded credentials in sap:web services tool (medium 5.0)
- [CVE-2014-4007](https://insights.sbomify.com/CVE-2014-4007/): Hardcoded credentials in sap:upgrade tools (medium 5.0)
- [CVE-2014-4006](https://insights.sbomify.com/CVE-2014-4006/): Hardcoded credentials in sap:oil industry solution traders and schedulers workbench (medium 5.0)
- [CVE-2014-4005](https://insights.sbomify.com/CVE-2014-4005/): Hardcoded credentials in sap:brazil (medium 5.0)
- [CVE-2014-4004](https://insights.sbomify.com/CVE-2014-4004/): Hardcoded credentials in sap:project system (medium 5.0)
- [CVE-2014-4003](https://insights.sbomify.com/CVE-2014-4003/): Missing authorization in sap:netweaver (high 7.5)
- [CVE-2014-4002](https://insights.sbomify.com/CVE-2014-4002/): Cross-site scripting in cacti:cacti (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/49/