# Vulnerabilities published in 2014 - [CVE-2014-9565](https://insights.sbomify.com/CVE-2014-9565/): Cross-site request forgery in n/a (high 8.8) - [CVE-2014-9564](https://insights.sbomify.com/CVE-2014-9564/): Cross-site scripting in n/a (medium 6.1) - [CVE-2014-9563](https://insights.sbomify.com/CVE-2014-9563/): Other in n/a (medium 4.9) - [CVE-2014-9562](https://insights.sbomify.com/CVE-2014-9562/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9561](https://insights.sbomify.com/CVE-2014-9561/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9560](https://insights.sbomify.com/CVE-2014-9560/): SQL injection in n/a (high 7.5) - [CVE-2014-9559](https://insights.sbomify.com/CVE-2014-9559/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9558](https://insights.sbomify.com/CVE-2014-9558/): SQL injection in n/a (critical 9.8) - [CVE-2014-9557](https://insights.sbomify.com/CVE-2014-9557/): Cross-site scripting in n/a (medium 6.1) - [CVE-2014-9556](https://insights.sbomify.com/CVE-2014-9556/): Integer overflow in n/a (medium 5.0) - [CVE-2014-9530](https://insights.sbomify.com/CVE-2014-9530/): Other in n/a (critical 9.8) - [CVE-2014-9529](https://insights.sbomify.com/CVE-2014-9529/): Race condition in n/a (medium 6.9) - [CVE-2014-9528](https://insights.sbomify.com/CVE-2014-9528/): SQL injection in n/a (high 7.5) - [CVE-2014-9527](https://insights.sbomify.com/CVE-2014-9527/): Loop with Unreachable Exit Condition in Apache POI (medium 5.0) - [CVE-2014-9526](https://insights.sbomify.com/CVE-2014-9526/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9525](https://insights.sbomify.com/CVE-2014-9525/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2014-9524](https://insights.sbomify.com/CVE-2014-9524/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2014-9523](https://insights.sbomify.com/CVE-2014-9523/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2014-9522](https://insights.sbomify.com/CVE-2014-9522/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9521](https://insights.sbomify.com/CVE-2014-9521/): File upload in n/a (high 7.5) - [CVE-2014-9520](https://insights.sbomify.com/CVE-2014-9520/): SQL injection in n/a (high 7.5) - [CVE-2014-9519](https://insights.sbomify.com/CVE-2014-9519/): SQL injection in n/a (high 7.5) - [CVE-2014-9518](https://insights.sbomify.com/CVE-2014-9518/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9517](https://insights.sbomify.com/CVE-2014-9517/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9516](https://insights.sbomify.com/CVE-2014-9516/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9515](https://insights.sbomify.com/CVE-2014-9515/): Deserialization in n/a (critical 9.8) - [CVE-2014-9514](https://insights.sbomify.com/CVE-2014-9514/): Cross-site scripting in n/a (medium 6.1) - [CVE-2014-9513](https://insights.sbomify.com/CVE-2014-9513/): Other in n/a (critical 9.8) - [CVE-2014-9512](https://insights.sbomify.com/CVE-2014-9512/): Path traversal in n/a (medium 6.4) - [CVE-2014-9510](https://insights.sbomify.com/CVE-2014-9510/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2014-9509](https://insights.sbomify.com/CVE-2014-9509/): Typo3 Vulnerable to Cache Poisoning (high 7.5) - [CVE-2014-9508](https://insights.sbomify.com/CVE-2014-9508/): Typo3 Open Redirect In Frontend Rendering (medium 4.3) - [CVE-2014-9507](https://insights.sbomify.com/CVE-2014-9507/): Cross-site scripting in n/a (low 2.6) - [CVE-2014-9506](https://insights.sbomify.com/CVE-2014-9506/): Information disclosure in n/a (low 3.5) - [CVE-2014-9505](https://insights.sbomify.com/CVE-2014-9505/): Cross-site scripting in n/a (low 3.5) - [CVE-2014-9504](https://insights.sbomify.com/CVE-2014-9504/): Missing authorization in n/a (high 7.5) - [CVE-2014-9503](https://insights.sbomify.com/CVE-2014-9503/): Missing authorization in n/a (medium 6.5) - [CVE-2014-9502](https://insights.sbomify.com/CVE-2014-9502/): Cross-site request forgery in n/a (high 8.8) - [CVE-2014-9501](https://insights.sbomify.com/CVE-2014-9501/): Cross-site scripting in n/a (low 3.5) - [CVE-2014-9500](https://insights.sbomify.com/CVE-2014-9500/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9499](https://insights.sbomify.com/CVE-2014-9499/): Cross-site scripting in n/a (low 3.5) - [CVE-2014-9498](https://insights.sbomify.com/CVE-2014-9498/): Cross-site scripting in n/a (low 3.5) - [CVE-2014-9497](https://insights.sbomify.com/CVE-2014-9497/): Buffer overflow in mpg123 before 1.18.0. (high 7.5) - [CVE-2014-9496](https://insights.sbomify.com/CVE-2014-9496/): Memory corruption in n/a (low 2.1) - [CVE-2014-9495](https://insights.sbomify.com/CVE-2014-9495/): Memory corruption in n/a (high 8.8) - [CVE-2014-9494](https://insights.sbomify.com/CVE-2014-9494/): RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For header. (medium 5.0) - [CVE-2014-9493](https://insights.sbomify.com/CVE-2014-9493/): Path traversal in n/a (medium 5.5) - [CVE-2014-9491](https://insights.sbomify.com/CVE-2014-9491/): Null dereference in n/a (medium 5.0) - [CVE-2014-9490](https://insights.sbomify.com/CVE-2014-9490/): sentry-raven allows remote attackers to cause a denial of service via a large exponent value in a scientific number (medium 5.0) - [CVE-2014-9489](https://insights.sbomify.com/CVE-2014-9489/): gollum and gollum-lib allow remote authenticated users to execute arbitrary code (high 8.8) - [CVE-2014-9488](https://insights.sbomify.com/CVE-2014-9488/): Memory corruption in n/a (critical 10.0) - [CVE-2014-9487](https://insights.sbomify.com/CVE-2014-9487/): XML external entity in n/a (critical 9.8) - [CVE-2014-9485](https://insights.sbomify.com/CVE-2014-9485/): Path traversal in n/a (medium 5.5) - [CVE-2014-9483](https://insights.sbomify.com/CVE-2014-9483/): Security feature bypass in n/a (high 7.5) - [CVE-2014-9482](https://insights.sbomify.com/CVE-2014-9482/): Use after free in n/a (medium 6.5) - [CVE-2014-9481](https://insights.sbomify.com/CVE-2014-9481/): Information disclosure in Scribunto (medium 5.9) - [CVE-2014-9480](https://insights.sbomify.com/CVE-2014-9480/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9479](https://insights.sbomify.com/CVE-2014-9479/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9478](https://insights.sbomify.com/CVE-2014-9478/): Cross-site scripting in n/a (low 2.6) - [CVE-2014-9477](https://insights.sbomify.com/CVE-2014-9477/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9476](https://insights.sbomify.com/CVE-2014-9476/): Security feature bypass in n/a (medium 5.0) - [CVE-2014-9475](https://insights.sbomify.com/CVE-2014-9475/): Cross-site scripting in n/a (low 3.5) - [CVE-2014-9474](https://insights.sbomify.com/CVE-2014-9474/): Memory corruption in n/a (critical 9.8) - [CVE-2014-9473](https://insights.sbomify.com/CVE-2014-9473/): File upload in n/a (high 7.5) - [CVE-2014-9472](https://insights.sbomify.com/CVE-2014-9472/): Denial of service in n/a (high 7.1) - [CVE-2014-9471](https://insights.sbomify.com/CVE-2014-9471/): Command injection in n/a (high 7.5) - [CVE-2014-9470](https://insights.sbomify.com/CVE-2014-9470/): Cross-site scripting in n/a (medium 6.1) - [CVE-2014-9469](https://insights.sbomify.com/CVE-2014-9469/): Cross-site scripting in n/a (medium 6.1) - [CVE-2014-9468](https://insights.sbomify.com/CVE-2014-9468/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9466](https://insights.sbomify.com/CVE-2014-9466/): Information disclosure in n/a (medium 4.0) - [CVE-2014-9465](https://insights.sbomify.com/CVE-2014-9465/): Denial of service in n/a (medium 5.0) - [CVE-2014-9464](https://insights.sbomify.com/CVE-2014-9464/): SQL injection in n/a (high 7.5) - [CVE-2014-9463](https://insights.sbomify.com/CVE-2014-9463/): Code injection in n/a (high 8.8) - [CVE-2014-9462](https://insights.sbomify.com/CVE-2014-9462/): Mercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command (high 7.5) - [CVE-2014-9461](https://insights.sbomify.com/CVE-2014-9461/): Path traversal in n/a (low 3.5) - [CVE-2014-9460](https://insights.sbomify.com/CVE-2014-9460/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2014-9459](https://insights.sbomify.com/CVE-2014-9459/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2014-9458](https://insights.sbomify.com/CVE-2014-9458/): Memory corruption in n/a (critical 10.0) - [CVE-2014-9457](https://insights.sbomify.com/CVE-2014-9457/): SQL injection in n/a (medium 6.5) - [CVE-2014-9456](https://insights.sbomify.com/CVE-2014-9456/): Memory corruption in n/a (critical 10.0) - [CVE-2014-9455](https://insights.sbomify.com/CVE-2014-9455/): SQL injection in n/a (high 7.5) - [CVE-2014-9454](https://insights.sbomify.com/CVE-2014-9454/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2014-9453](https://insights.sbomify.com/CVE-2014-9453/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9452](https://insights.sbomify.com/CVE-2014-9452/): Path traversal in n/a (medium 5.0) - [CVE-2014-9451](https://insights.sbomify.com/CVE-2014-9451/): Memory corruption in n/a (high 7.5) - [CVE-2014-9450](https://insights.sbomify.com/CVE-2014-9450/): SQL injection in n/a (high 7.5) - [CVE-2014-9449](https://insights.sbomify.com/CVE-2014-9449/): Memory corruption in n/a (medium 5.0) - [CVE-2014-9448](https://insights.sbomify.com/CVE-2014-9448/): Memory corruption in n/a (high 7.5) - [CVE-2014-9447](https://insights.sbomify.com/CVE-2014-9447/): Path traversal in n/a (medium 6.4) - [CVE-2014-9446](https://insights.sbomify.com/CVE-2014-9446/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9445](https://insights.sbomify.com/CVE-2014-9445/): SQL injection in n/a (high 7.5) - [CVE-2014-9444](https://insights.sbomify.com/CVE-2014-9444/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9443](https://insights.sbomify.com/CVE-2014-9443/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9442](https://insights.sbomify.com/CVE-2014-9442/): SQL injection in n/a (medium 6.5) - [CVE-2014-9441](https://insights.sbomify.com/CVE-2014-9441/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2014-9440](https://insights.sbomify.com/CVE-2014-9440/): SQL injection in n/a (high 7.5) - [CVE-2014-9439](https://insights.sbomify.com/CVE-2014-9439/): Cross-site scripting in n/a (medium 4.3) - [CVE-2014-9438](https://insights.sbomify.com/CVE-2014-9438/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2014-9437](https://insights.sbomify.com/CVE-2014-9437/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2014-9436](https://insights.sbomify.com/CVE-2014-9436/): Path traversal in n/a (medium 5.0) --- From sbomify Insights: https://insights.sbomify.com/years/2014/page/5/