Vulnerabilities published in 2014
8,436 vulnerabilities were published in 2014: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 52 of 85.
- CVE-2014-3777 Path traversal in reportico:php report designer
- CVE-2014-3776 Memory corruption in call-cc:chicken
- CVE-2014-3775 Memory corruption in libgadu:libgadu
- CVE-2014-3774 Cross-site scripting in teampass:teampass
- CVE-2014-3773 SQL injection in teampass:teampass
- CVE-2014-3772 Auth bypass in teampass:teampass
- CVE-2014-3771 Auth bypass in teampass:teampass
- CVE-2014-3764 Cross-site scripting in paloaltonetworks:pan-os
- CVE-2014-3761 Cross-site scripting in dlink:dap 1150
- CVE-2014-3760 Cross-site request forgery in dlink:dap 1150
- CVE-2014-3759 SQL injection in karlen walter:si bibtex
- CVE-2014-3758 Cross-site scripting in karlen walter:si bibtex
- CVE-2014-3757 SQL injection in phpmanufaktur:kitform
- CVE-2014-3756 Denial of service in mumble:mumble
- CVE-2014-3755 Denial of service in mumble:mumble
- CVE-2014-3753 Security feature bypass in 1password:1password
- CVE-2014-3752 Privilege escalation in gdata-software:totalprotection
- CVE-2014-3750 Weak cryptography in bilyoner:bilyoner
- CVE-2014-3749 SQL injection in construtiva:cis manager cms
- CVE-2014-3744 Directory Traversal in st
- CVE-2014-3743 Multiple Content Injection Vulnerabilities in marked
- CVE-2014-3742 File Descriptor Leak Can Cause DoS Vulnerability in hapi
- CVE-2014-3741 Potential Command Injection in printer
- CVE-2014-3740 Cross-site scripting in spiceworks:spiceworks
- CVE-2014-3739 Open redirect in zenoss:zenoss
- CVE-2014-3738 Cross-site scripting in zenoss:zenoss
- CVE-2014-3737 Cross-site scripting in storesprite:storesprite
- CVE-2014-3735 Memory corruption in intel:indeo video
- CVE-2014-3730 Django Allows Open Redirects
- CVE-2014-3719 SQL injection in exlibrisgroup:aleph 500
- CVE-2014-3718 Cross-site scripting in exlibrisgroup:aleph 500
- CVE-2014-3717 Memory corruption in xen:xen
- CVE-2014-3716 Denial of service in xen:xen
- CVE-2014-3715 Memory corruption in xen:xen
- CVE-2014-3714 Memory corruption in xen:xen
- CVE-2014-3712 Denial of service in katello:katello
- CVE-2014-3711 Denial of service in freebsd:freebsd
- CVE-2014-3710 Memory corruption in canonical:ubuntu linux
- CVE-2014-3709 JBoss Keycloak CSRF Vulnerability
- CVE-2014-3708 OpenStack Compute (Nova) Denial of Service vulnerability
- CVE-2014-3707 Information disclosure in apple:mac os x
- CVE-2014-3706 Security feature bypass in redhat:enterprise mrg
- CVE-2014-3704 SQL injection in debian:debian linux
- CVE-2014-3703 Misconfiguration in redhat:packstack
- CVE-2014-3702 Path traversal in redhat:edeploy
- CVE-2014-3701 Race condition in eDeploy
- CVE-2014-3700 Code injection in eDeploy
- CVE-2014-3699 Deserialization in eDeploy
- CVE-2014-3698 Information disclosure in pidgin:pidgin
- CVE-2014-3697 Path traversal in pidgin:pidgin
- CVE-2014-3696 Denial of service in pidgin:pidgin
- CVE-2014-3695 Memory corruption in pidgin:pidgin
- CVE-2014-3694 Weak cryptography in canonical:ubuntu linux
- CVE-2014-3693 Use after free in canonical:ubuntu linux
- CVE-2014-3692 Hardcoded credentials in redhat:cloudforms 3.1 management engine
- CVE-2014-3691 Auth bypass in redhat:openstack
- CVE-2014-3690 Denial of service in canonical:ubuntu linux
- CVE-2014-3689 Privilege escalation in canonical:ubuntu linux
- CVE-2014-3688 Denial of service in linux:linux kernel
- CVE-2014-3687 Denial of service in canonical:ubuntu linux
- CVE-2014-3686 Command injection in canonical:ubuntu linux
- CVE-2014-3684 Missing authorization in adaptivecomputing:torque resource manager
- CVE-2014-3683 Integer overflow in rsyslog:rsyslog
- CVE-2014-3682 XML external entity in redhat:jbpm-designer
- CVE-2014-3681 Jenkins Cross-site Scripting vulnerability
- CVE-2014-3680 Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability
- CVE-2014-3679 Jenkins Monitoring Plugin Reveals Sensitive Information via Unspecified Pages
- CVE-2014-3678 Jenkins Monitoring Plugin allows Cross-Site Scripting (XSS)
- CVE-2014-3677 Memory corruption in redhat:shim
- CVE-2014-3676 Memory corruption in redhat:shim
- CVE-2014-3675 Memory corruption in redhat:shim
- CVE-2014-3674 Missing authorization in redhat:openshift
- CVE-2014-3673 Denial of service in canonical:ubuntu linux
- CVE-2014-3672 Denial of service in redhat:libvirt
- CVE-2014-3670 Memory corruption in php:php
- CVE-2014-3669 Integer overflow in php:php
- CVE-2014-3668 Memory corruption in php:php
- CVE-2014-3667 Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code
- CVE-2014-3666 Jenkins allows for Code Execution via Crafted Packet to the CLI
- CVE-2014-3665 Jenkins improperly ensures trust separation
- CVE-2014-3664 Jenkins Path Traversal vulnerability
- CVE-2014-3663 Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs
- CVE-2014-3662 Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability
- CVE-2014-3661 Jenkins Denial of Service vulnerability
- CVE-2014-3660 Denial of service in apple:mac os x
- CVE-2014-3657 Denial of service in libvirt:libvirt
- CVE-2014-3656 JBoss KeyCloak Cross-site Scripting Vulnerability
- CVE-2014-3655 JBoss KeyCloak is vulnerable to soft token deletion via CSRF
- CVE-2014-3654 Cross-site scripting in redhat:satellite
- CVE-2014-3653 Cross-site scripting in theforeman:foreman
- CVE-2014-3652 JBoss KeyCloak Open Redirect
- CVE-2014-3651 Keycloak vulnerable to uncontrolled resource consumption
- CVE-2014-3650 Cross-site scripting in Jboss Aerogear
- CVE-2014-3649 Cross-site scripting in AeroGear
- CVE-2014-3648 Server-side request forgery in Jboss Aerogear
- CVE-2014-3647 Denial of service in canonical:ubuntu linux
- CVE-2014-3646 Denial of service in canonical:ubuntu linux
- CVE-2014-3645 Denial of service in linux:linux kernel
- CVE-2014-3643 jersey: XXE via parameter entities
- CVE-2014-3642 Privilege escalation in redhat:cloudforms 3.0.1 management engine