Vulnerabilities published in 2014
8,436 vulnerabilities were published in 2014: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 50 of 85.
- CVE-2014-4000 Deserialization in cacti:cacti
- CVE-2014-3999 Auth bypass in horde:horde ldap
- CVE-2014-3997 SQL injection in zohocorp:manageengine it360
- CVE-2014-3996 SQL injection in manageengine:desktop central
- CVE-2014-3995 Djblets Cross-site scripting Vulnerability
- CVE-2014-3994 Djiblets Cross-site scripting Vulnerability via JSON Objects
- CVE-2014-3992 SQL injection in dolibarr:dolibarr erp\/crm
- CVE-2014-3991 Cross-site scripting in dolibarr:dolibarr erp\/crm
- CVE-2014-3990 Deserialization in opencart:opencart
- CVE-2014-3988 Cross-site scripting in sunhater:kcfinder
- CVE-2014-3986 Race condition in cisofy:lynis
- CVE-2014-3985 Memory corruption in miniupnp project:miniupnp
- CVE-2014-3984 Other in libav:libav
- CVE-2014-3982 Race condition in cisofy:lynis
- CVE-2014-3981 Race condition in php:php
- CVE-2014-3980 Privilege escalation in daiki ueno:libfep
- CVE-2014-3979 Denial of service in bytemark:symbiosis
- CVE-2014-3978 SQL injection in tomatocart:tomatocart
- CVE-2014-3977 Race condition in ibm:aix
- CVE-2014-3976 Memory corruption in a10networks:advanced core operating system
- CVE-2014-3975 Path traversal in auracms:auracms
- CVE-2014-3974 Cross-site scripting in auracms:auracms
- CVE-2014-3973 SQL injection in frontaccounting:frontaccounting
- CVE-2014-3972 Path traversal in apexis:apm-j601-ws firmware
- CVE-2014-3971 Denial of service in mongodb:mongodb
- CVE-2014-3970 Denial of service in pulseaudio:pulseaudio
- CVE-2014-3969 Privilege escalation in xen:xen
- CVE-2014-3968 Denial of service in opensuse:opensuse
- CVE-2014-3967 Null dereference in opensuse:opensuse
- CVE-2014-3966 Cross-site scripting in mediawiki:mediawiki
- CVE-2014-3963 Missing authorization in owncloud:owncloud
- CVE-2014-3962 SQL injection in videos tube project:videos tube
- CVE-2014-3961 SQL injection in xnau:participants database
- CVE-2014-3960 Cross-site scripting in opennms:opennms
- CVE-2014-3959 Cross-site scripting in f5:big-ip access policy manager
- CVE-2014-3956 Security feature bypass in fedoraproject:fedora
- CVE-2014-3955 Denial of service in freebsd:freebsd
- CVE-2014-3954 Memory corruption in freebsd:freebsd
- CVE-2014-3953 Information disclosure in freebsd:freebsd
- CVE-2014-3952 Information disclosure in freebsd:freebsd
- CVE-2014-3951 Null dereference in freebsd:freebsd
- CVE-2014-3949 Cross-site scripting in jo hasenau:gridelements
- CVE-2014-3948 Cross-site scripting in alex kellner:powermail
- CVE-2014-3947 TYPO3 powermail extension has unrestricted file upload vulnerability
- CVE-2014-3946 Typo3 Information Disclosure
- CVE-2014-3945 TYPO3 vulnerable to authentication bypass via leveraging knowledge of password hash
- CVE-2014-3944 TYPO3 Improper Session Invalidation
- CVE-2014-3943 Typo3 XSS Vulnerabilities
- CVE-2014-3942 TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code
- CVE-2014-3941 Typo3 Host Header Spoofing Vulnerability
- CVE-2014-3940 Race condition in linux:linux kernel
- CVE-2014-3939 Memory corruption in autodesk:sketchbook pro
- CVE-2014-3938 Integer overflow in autodesk:sketchbook pro
- CVE-2014-3937 SQL injection in ajaydsouza:contextual related posts
- CVE-2014-3936 Memory corruption in dlink:dir-505l shareport mobile companion
- CVE-2014-3935 SQL injection in xoops:glossaire module
- CVE-2014-3934 SQL injection in phpnuke:php-nuke
- CVE-2014-3933 Cross-site scripting in newsignature:addressfield tokens
- CVE-2014-3932 SQL injection in cososys:endpoint protector
- CVE-2014-3931 Multi-Router Looking Glass (MRLG) Buffer Overflow
- CVE-2014-3930 Information disclosure in lg project:lg
- CVE-2014-3929 Information disclosure in lg project:lg
- CVE-2014-3928 Information disclosure in lg project:lg
- CVE-2014-3927 Code injection in mrlg4php project:mrlg4php
- CVE-2014-3926 Cross-site scripting in lg project:lg
- CVE-2014-3925 Information disclosure in canonical:ubuntu linux
- CVE-2014-3924 Cross-site scripting in webmin:userwin
- CVE-2014-3923 Cross-site scripting in digitalzoomstudio:video gallery
- CVE-2014-3922 Cross-site scripting in trendmicro:interscan messaging security virtual appliance
- CVE-2014-3921 Cross-site scripting in simple popup project:simple popup
- CVE-2014-3920 Cross-site request forgery in kanboard:kanboard
- CVE-2014-3919 Cross-site scripting in netgear:cg3100 firmware
- CVE-2014-3917 Information disclosure in linux:linux kernel
- CVE-2014-3916 Denial of service in rubyonrails:rails
- CVE-2014-3915 Command injection in rocketsoftware:rocket servergraph
- CVE-2014-3914 Path traversal in rocketsoftware:rocket servergraph
- CVE-2014-3913 Memory corruption in ericom:accessnow server
- CVE-2014-3912 Memory corruption in samsung:ipolis device manager
- CVE-2014-3911 Code injection in samsung:ipolis device manager
- CVE-2014-3910 Code injection in emurasoft:emftp
- CVE-2014-3909 Auth bypass in falconsc:wisepoint
- CVE-2014-3908 Weak cryptography in amazon:kindle
- CVE-2014-3907 Cross-site request forgery in mailpoet:mailpoet newsletters
- CVE-2014-3906 SQL injection in kk-osk:advance-flow
- CVE-2014-3905 Cross-site scripting in tenfourzero:shutter
- CVE-2014-3904 SQL injection in tenfourzero:shutter
- CVE-2014-3903 Cross-site scripting in jayj:cakifo
- CVE-2014-3902 Weak cryptography in cyberagent:ameba
- CVE-2014-3901 Denial of service in raritan:dominion kx ii-101 firmware
- CVE-2014-3900 Cross-site scripting in piwigo:piwigo
- CVE-2014-3899 Denial of service in gomlab:gom player
- CVE-2014-3898 Cross-site scripting in fujitsu:serverview operations manager
- CVE-2014-3897 Cross-site scripting in homepage decorator perlmailer project:homepage decorator perlmailer
- CVE-2014-3896 Cross-site request forgery in seeds:acmailer
- CVE-2014-3895 Auth bypass in iodata:ts-ptcam\/poe camera
- CVE-2014-3894 Cross-site scripting in php kobo:multifunctional mailform free
- CVE-2014-3892 Cross-site scripting in nexatechnologies:meridian
- CVE-2014-3891 Memory corruption in rimarts:becky\! internet mail
- CVE-2014-3890 Denial of service in silex:sx-2000wg firmware
- CVE-2014-3889 Denial of service in silex:sx-2000wg firmware