# Vulnerabilities published in 2014


- [CVE-2014-3888](https://insights.sbomify.com/CVE-2014-3888/): Memory corruption in yokogawa:b\/m9000 vp (high 8.3)
- [CVE-2014-3887](https://insights.sbomify.com/CVE-2014-3887/): Cross-site scripting in iodata:rockdisk firmware (medium 5.4)
- [CVE-2014-3886](https://insights.sbomify.com/CVE-2014-3886/): Cross-site scripting in webmin:webmin (low 2.6)
- [CVE-2014-3885](https://insights.sbomify.com/CVE-2014-3885/): Cross-site scripting in webmin:webmin (medium 4.3)
- [CVE-2014-3884](https://insights.sbomify.com/CVE-2014-3884/): Cross-site scripting in webmin:usermin (medium 4.3)
- [CVE-2014-3883](https://insights.sbomify.com/CVE-2014-3883/): Command injection in webmin:usermin (medium 6.8)
- [CVE-2014-3882](https://insights.sbomify.com/CVE-2014-3882/): Cross-site request forgery in 12net:login rebuilder (medium 6.8)
- [CVE-2014-3881](https://insights.sbomify.com/CVE-2014-3881/): Cross-site request forgery in intercom:web kyukincho (medium 6.8)
- [CVE-2014-3880](https://insights.sbomify.com/CVE-2014-3880/): Race condition in freebsd:freebsd (medium 4.9)
- [CVE-2014-3879](https://insights.sbomify.com/CVE-2014-3879/): Auth bypass in freebsd:freebsd (critical 9.8)
- [CVE-2014-3878](https://insights.sbomify.com/CVE-2014-3878/): Cross-site scripting in ipswitch:imail server (medium 4.3)
- [CVE-2014-3877](https://insights.sbomify.com/CVE-2014-3877/): Cross-site scripting in ulli horlacher:fex (medium 4.3)
- [CVE-2014-3876](https://insights.sbomify.com/CVE-2014-3876/): Cross-site scripting in ulli horlacher:fex (medium 4.3)
- [CVE-2014-3875](https://insights.sbomify.com/CVE-2014-3875/): Cross-site scripting in ulli horlacher:fex (medium 6.1)
- [CVE-2014-3873](https://insights.sbomify.com/CVE-2014-3873/): Information disclosure in freebsd:freebsd (low 2.1)
- [CVE-2014-3872](https://insights.sbomify.com/CVE-2014-3872/): SQL injection in dlink:dap-1350 (high 7.5)
- [CVE-2014-3871](https://insights.sbomify.com/CVE-2014-3871/): SQL injection in geodesicsolutions:geocore max (high 7.5)
- [CVE-2014-3870](https://insights.sbomify.com/CVE-2014-3870/): Cross-site scripting in bib2html project:bib2html (medium 4.3)
- [CVE-2014-3868](https://insights.sbomify.com/CVE-2014-3868/): SQL injection in zeuscart:zeuscart (high 8.8)
- [CVE-2014-3867](https://insights.sbomify.com/CVE-2014-3867/): Information disclosure in ibm:sametime (medium 5.0)
- [CVE-2014-3866](https://insights.sbomify.com/CVE-2014-3866/): Cross-site request forgery in usercake:usercake (medium 6.8)
- [CVE-2014-3865](https://insights.sbomify.com/CVE-2014-3865/): Path traversal in debian:dpkg-dev (medium 6.4)
- [CVE-2014-3864](https://insights.sbomify.com/CVE-2014-3864/): Path traversal in debian:dpkg-dev (medium 6.4)
- [CVE-2014-3863](https://insights.sbomify.com/CVE-2014-3863/): Cross-site scripting in j\!extensions store:jchatsocial (medium 4.3)
- [CVE-2014-3862](https://insights.sbomify.com/CVE-2014-3862/): Information disclosure in hl7:c-cda (medium 4.3)
- [CVE-2014-3861](https://insights.sbomify.com/CVE-2014-3861/): Cross-site scripting in hl7:c-cda (medium 4.3)
- [CVE-2014-3860](https://insights.sbomify.com/CVE-2014-3860/): Other in xilisoft:video converter (high 7.8)
- [CVE-2014-3859](https://insights.sbomify.com/CVE-2014-3859/): Denial of service in isc:bind (medium 5.0)
- [CVE-2014-3857](https://insights.sbomify.com/CVE-2014-3857/): SQL injection in kerio:control (medium 6.5)
- [CVE-2014-3856](https://insights.sbomify.com/CVE-2014-3856/): Race condition in fishshell:fish (high 7.0)
- [CVE-2014-3855](https://insights.sbomify.com/CVE-2014-3855/): Path traversal in pyplate:pyplate (medium 5.0)
- [CVE-2014-3854](https://insights.sbomify.com/CVE-2014-3854/): Cross-site request forgery in pyplate:pyplate (medium 6.8)
- [CVE-2014-3853](https://insights.sbomify.com/CVE-2014-3853/): Information disclosure in pyplate:pyplate (medium 5.0)
- [CVE-2014-3852](https://insights.sbomify.com/CVE-2014-3852/): Information disclosure in pyplate:pyplate (medium 5.0)
- [CVE-2014-3851](https://insights.sbomify.com/CVE-2014-3851/): Information disclosure in pyplate:pyplate (low 2.1)
- [CVE-2014-3850](https://insights.sbomify.com/CVE-2014-3850/): Cross-site request forgery in member approval plugin project:member approval (medium 6.8)
- [CVE-2014-3849](https://insights.sbomify.com/CVE-2014-3849/): Missing authorization in imember360:imember360 (medium 4.3)
- [CVE-2014-3848](https://insights.sbomify.com/CVE-2014-3848/): Missing authorization in imember360:imember360 (medium 5.0)
- [CVE-2014-3846](https://insights.sbomify.com/CVE-2014-3846/): Cross-site scripting in flyingcart:flying cart (medium 4.3)
- [CVE-2014-3845](https://insights.sbomify.com/CVE-2014-3845/): Cross-site request forgery in tinymce:color picker (medium 6.8)
- [CVE-2014-3844](https://insights.sbomify.com/CVE-2014-3844/): Missing authorization in tinymce:color picker (medium 5.0)
- [CVE-2014-3843](https://insights.sbomify.com/CVE-2014-3843/): Cross-site request forgery in zemanta:search everything (medium 6.8)
- [CVE-2014-3842](https://insights.sbomify.com/CVE-2014-3842/): Cross-site scripting in imember360:imember360 (medium 4.3)
- [CVE-2014-3841](https://insights.sbomify.com/CVE-2014-3841/): Cross-site scripting in tech-banker:contact bank (medium 4.3)
- [CVE-2014-3840](https://insights.sbomify.com/CVE-2014-3840/): Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities (low 3.5)
- [CVE-2014-3838](https://insights.sbomify.com/CVE-2014-3838/): Missing authorization in owncloud:owncloud (medium 4.0)
- [CVE-2014-3837](https://insights.sbomify.com/CVE-2014-3837/): Information disclosure in owncloud:owncloud (medium 4.0)
- [CVE-2014-3836](https://insights.sbomify.com/CVE-2014-3836/): Cross-site request forgery in owncloud:owncloud (medium 6.8)
- [CVE-2014-3835](https://insights.sbomify.com/CVE-2014-3835/): Missing authorization in owncloud:owncloud (medium 5.5)
- [CVE-2014-3834](https://insights.sbomify.com/CVE-2014-3834/): Missing authorization in owncloud:owncloud (high 7.5)
- [CVE-2014-3833](https://insights.sbomify.com/CVE-2014-3833/): Cross-site scripting in owncloud:owncloud (medium 4.3)
- [CVE-2014-3832](https://insights.sbomify.com/CVE-2014-3832/): Cross-site scripting in owncloud:owncloud server (medium 4.3)
- [CVE-2014-3830](https://insights.sbomify.com/CVE-2014-3830/): Cross-site scripting in tomatocart:tomatocart (medium 4.3)
- [CVE-2014-3829](https://insights.sbomify.com/CVE-2014-3829/): Command injection in merethis:centreon (critical 10.0)
- [CVE-2014-3828](https://insights.sbomify.com/CVE-2014-3828/): SQL injection in merethis:centreon (critical 10.0)
- [CVE-2014-3827](https://insights.sbomify.com/CVE-2014-3827/): Cross-site scripting in mybb:mybb (medium 5.4)
- [CVE-2014-3826](https://insights.sbomify.com/CVE-2014-3826/): Cross-site scripting in mybb:mybb (medium 5.4)
- [CVE-2014-3825](https://insights.sbomify.com/CVE-2014-3825/): Denial of service in juniper:junos (medium 6.8)
- [CVE-2014-3824](https://insights.sbomify.com/CVE-2014-3824/): Cross-site scripting in juniper:junos pulse secure access service (medium 4.3)
- [CVE-2014-3823](https://insights.sbomify.com/CVE-2014-3823/): Other in juniper:junos pulse secure access service (medium 4.3)
- [CVE-2014-3822](https://insights.sbomify.com/CVE-2014-3822/): Denial of service in juniper:junos (medium 5.4)
- [CVE-2014-3821](https://insights.sbomify.com/CVE-2014-3821/): Cross-site scripting in juniper:junos (medium 4.3)
- [CVE-2014-3820](https://insights.sbomify.com/CVE-2014-3820/): Cross-site scripting in juniper:junos pulse access control service (medium 4.3)
- [CVE-2014-3819](https://insights.sbomify.com/CVE-2014-3819/): Denial of service in juniper:junos (high 7.8)
- [CVE-2014-3818](https://insights.sbomify.com/CVE-2014-3818/): Memory corruption in juniper:junos (high 7.8)
- [CVE-2014-3817](https://insights.sbomify.com/CVE-2014-3817/): Denial of service in juniper:junos (high 7.8)
- [CVE-2014-3816](https://insights.sbomify.com/CVE-2014-3816/): Privilege escalation in juniper:junos (critical 9.0)
- [CVE-2014-3815](https://insights.sbomify.com/CVE-2014-3815/): Denial of service in juniper:junos (high 7.8)
- [CVE-2014-3814](https://insights.sbomify.com/CVE-2014-3814/): Denial of service in juniper:netscreen-5200 (high 7.8)
- [CVE-2014-3813](https://insights.sbomify.com/CVE-2014-3813/): Denial of service in juniper:netscreen-5200 (high 7.8)
- [CVE-2014-3812](https://insights.sbomify.com/CVE-2014-3812/): Weak cryptography in juniper:fips infranet controller 6500 (medium 5.0)
- [CVE-2014-3811](https://insights.sbomify.com/CVE-2014-3811/): Privilege escalation in juniper:juniper installer service client (high 7.2)
- [CVE-2014-3810](https://insights.sbomify.com/CVE-2014-3810/): SQL injection in boonex:dolphin (medium 6.5)
- [CVE-2014-3809](https://insights.sbomify.com/CVE-2014-3809/): Cross-site scripting in nokia:1830 photonic service switch-16 firmware (medium 6.1)
- [CVE-2014-3808](https://insights.sbomify.com/CVE-2014-3808/): Cross-site scripting in barracudadrive:barracudadrive (medium 4.3)
- [CVE-2014-3807](https://insights.sbomify.com/CVE-2014-3807/): Cross-site scripting in barracudadrive:barracudadrive (medium 4.3)
- [CVE-2014-3806](https://insights.sbomify.com/CVE-2014-3806/): Path traversal in vmturbo:operations manager (medium 5.0)
- [CVE-2014-3805](https://insights.sbomify.com/CVE-2014-3805/): Command injection in alienvault:open source security information management (critical 10.0)
- [CVE-2014-3804](https://insights.sbomify.com/CVE-2014-3804/): Command injection in alienvault:open source security information management (critical 10.0)
- [CVE-2014-3803](https://insights.sbomify.com/CVE-2014-3803/): Information disclosure in google:chrome (medium 4.3)
- [CVE-2014-3802](https://insights.sbomify.com/CVE-2014-3802/): Memory corruption in microsoft:debug interface access software development kit (medium 6.8)
- [CVE-2014-3801](https://insights.sbomify.com/CVE-2014-3801/): OpenStack Heat template URL information leakage (low 3.5)
- [CVE-2014-3800](https://insights.sbomify.com/CVE-2014-3800/): Information disclosure in xbmc:xbmc (low 2.1)
- [CVE-2014-3798](https://insights.sbomify.com/CVE-2014-3798/): Denial of service in citrix:xenserver (medium 6.5)
- [CVE-2014-3797](https://insights.sbomify.com/CVE-2014-3797/): Cross-site scripting in vmware:vcenter server appliance (medium 4.3)
- [CVE-2014-3796](https://insights.sbomify.com/CVE-2014-3796/): Information disclosure in vmware:nsx (medium 5.0)
- [CVE-2014-3793](https://insights.sbomify.com/CVE-2014-3793/): Null dereference in vmware:esxi (medium 5.8)
- [CVE-2014-3792](https://insights.sbomify.com/CVE-2014-3792/): Cross-site request forgery in beetel:450tc2 router (medium 6.8)
- [CVE-2014-3791](https://insights.sbomify.com/CVE-2014-3791/): Memory corruption in efssoft:easy file sharing web server (critical 10.0)
- [CVE-2014-3790](https://insights.sbomify.com/CVE-2014-3790/): Privilege escalation in vmware:vcenter server appliance (critical 9.0)
- [CVE-2014-3789](https://insights.sbomify.com/CVE-2014-3789/): Code injection in cogentdatahub:cogent datahub (high 7.5)
- [CVE-2014-3788](https://insights.sbomify.com/CVE-2014-3788/): Memory corruption in cogentdatahub:cogent datahub (high 7.5)
- [CVE-2014-3787](https://insights.sbomify.com/CVE-2014-3787/): Information disclosure in sap:netweaver (medium 5.0)
- [CVE-2014-3786](https://insights.sbomify.com/CVE-2014-3786/): Cross-site scripting in lucidcrew:pixie (medium 4.3)
- [CVE-2014-3783](https://insights.sbomify.com/CVE-2014-3783/): SQL injection in dotclear:dotclear (medium 6.0)
- [CVE-2014-3782](https://insights.sbomify.com/CVE-2014-3782/): File upload in dotclear:dotclear (medium 6.0)
- [CVE-2014-3781](https://insights.sbomify.com/CVE-2014-3781/): Auth bypass in dotclear:dotclear (medium 5.8)
- [CVE-2014-3780](https://insights.sbomify.com/CVE-2014-3780/): Auth bypass in citrix:vdi-in-a-box (high 7.5)
- [CVE-2014-3779](https://insights.sbomify.com/CVE-2014-3779/): Cross-site scripting in zohocorp:manageengine adselfservice plus (medium 4.3)
- [CVE-2014-3778](https://insights.sbomify.com/CVE-2014-3778/): Cross-site request forgery in commscope:arris sbg901 (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/51/