# Vulnerabilities published in 2014


- [CVE-2014-3777](https://insights.sbomify.com/CVE-2014-3777/): Path traversal in reportico:php report designer (medium 5.0)
- [CVE-2014-3776](https://insights.sbomify.com/CVE-2014-3776/): Memory corruption in call-cc:chicken (high 7.5)
- [CVE-2014-3775](https://insights.sbomify.com/CVE-2014-3775/): Memory corruption in libgadu:libgadu (high 7.5)
- [CVE-2014-3774](https://insights.sbomify.com/CVE-2014-3774/): Cross-site scripting in teampass:teampass (medium 4.3)
- [CVE-2014-3773](https://insights.sbomify.com/CVE-2014-3773/): SQL injection in teampass:teampass (high 7.5)
- [CVE-2014-3772](https://insights.sbomify.com/CVE-2014-3772/): Auth bypass in teampass:teampass (high 7.5)
- [CVE-2014-3771](https://insights.sbomify.com/CVE-2014-3771/): Auth bypass in teampass:teampass (high 7.5)
- [CVE-2014-3764](https://insights.sbomify.com/CVE-2014-3764/): Cross-site scripting in paloaltonetworks:pan-os (medium 4.3)
- [CVE-2014-3761](https://insights.sbomify.com/CVE-2014-3761/): Cross-site scripting in dlink:dap 1150 (medium 4.3)
- [CVE-2014-3760](https://insights.sbomify.com/CVE-2014-3760/): Cross-site request forgery in dlink:dap 1150 (medium 6.8)
- [CVE-2014-3759](https://insights.sbomify.com/CVE-2014-3759/): SQL injection in karlen walter:si bibtex (high 7.5)
- [CVE-2014-3758](https://insights.sbomify.com/CVE-2014-3758/): Cross-site scripting in karlen walter:si bibtex (medium 4.3)
- [CVE-2014-3757](https://insights.sbomify.com/CVE-2014-3757/): SQL injection in phpmanufaktur:kitform (high 7.5)
- [CVE-2014-3756](https://insights.sbomify.com/CVE-2014-3756/): Denial of service in mumble:mumble (medium 5.0)
- [CVE-2014-3755](https://insights.sbomify.com/CVE-2014-3755/): Denial of service in mumble:mumble (medium 5.0)
- [CVE-2014-3753](https://insights.sbomify.com/CVE-2014-3753/): Security feature bypass in 1password:1password (medium 5.5)
- [CVE-2014-3752](https://insights.sbomify.com/CVE-2014-3752/): Privilege escalation in gdata-software:totalprotection (medium 6.7)
- [CVE-2014-3750](https://insights.sbomify.com/CVE-2014-3750/): Weak cryptography in bilyoner:bilyoner (medium 5.8)
- [CVE-2014-3749](https://insights.sbomify.com/CVE-2014-3749/): SQL injection in construtiva:cis manager cms (high 7.5)
- [CVE-2014-3744](https://insights.sbomify.com/CVE-2014-3744/): Directory Traversal in st (high 7.5)
- [CVE-2014-3743](https://insights.sbomify.com/CVE-2014-3743/): Multiple Content Injection Vulnerabilities in marked (medium 6.1)
- [CVE-2014-3742](https://insights.sbomify.com/CVE-2014-3742/): File Descriptor Leak Can Cause DoS Vulnerability in hapi (medium 5.0)
- [CVE-2014-3741](https://insights.sbomify.com/CVE-2014-3741/): Potential Command Injection in printer (critical 9.8)
- [CVE-2014-3740](https://insights.sbomify.com/CVE-2014-3740/): Cross-site scripting in spiceworks:spiceworks (low 3.5)
- [CVE-2014-3739](https://insights.sbomify.com/CVE-2014-3739/): Open redirect in zenoss:zenoss (medium 5.8)
- [CVE-2014-3738](https://insights.sbomify.com/CVE-2014-3738/): Cross-site scripting in zenoss:zenoss (medium 4.3)
- [CVE-2014-3737](https://insights.sbomify.com/CVE-2014-3737/): Cross-site scripting in storesprite:storesprite (low 2.6)
- [CVE-2014-3735](https://insights.sbomify.com/CVE-2014-3735/): Memory corruption in intel:indeo video (medium 4.3)
- [CVE-2014-3730](https://insights.sbomify.com/CVE-2014-3730/): Django Allows Open Redirects (medium 4.3)
- [CVE-2014-3719](https://insights.sbomify.com/CVE-2014-3719/): SQL injection in exlibrisgroup:aleph 500 (critical 9.8)
- [CVE-2014-3718](https://insights.sbomify.com/CVE-2014-3718/): Cross-site scripting in exlibrisgroup:aleph 500 (medium 6.1)
- [CVE-2014-3717](https://insights.sbomify.com/CVE-2014-3717/): Memory corruption in xen:xen (low 3.3)
- [CVE-2014-3716](https://insights.sbomify.com/CVE-2014-3716/): Denial of service in xen:xen (low 1.9)
- [CVE-2014-3715](https://insights.sbomify.com/CVE-2014-3715/): Memory corruption in xen:xen (low 3.3)
- [CVE-2014-3714](https://insights.sbomify.com/CVE-2014-3714/): Memory corruption in xen:xen (low 3.3)
- [CVE-2014-3712](https://insights.sbomify.com/CVE-2014-3712/): Denial of service in katello:katello (medium 5.0)
- [CVE-2014-3711](https://insights.sbomify.com/CVE-2014-3711/): Denial of service in freebsd:freebsd (medium 5.0)
- [CVE-2014-3710](https://insights.sbomify.com/CVE-2014-3710/): Memory corruption in canonical:ubuntu linux (medium 5.0)
- [CVE-2014-3709](https://insights.sbomify.com/CVE-2014-3709/): JBoss Keycloak CSRF Vulnerability (high 8.8)
- [CVE-2014-3708](https://insights.sbomify.com/CVE-2014-3708/): OpenStack Compute (Nova) Denial of Service vulnerability (medium 4.0)
- [CVE-2014-3707](https://insights.sbomify.com/CVE-2014-3707/): Information disclosure in apple:mac os x (medium 4.3)
- [CVE-2014-3706](https://insights.sbomify.com/CVE-2014-3706/): Security feature bypass in redhat:enterprise mrg (medium 5.9)
- [CVE-2014-3704](https://insights.sbomify.com/CVE-2014-3704/): SQL injection in debian:debian linux (high 7.5)
- [CVE-2014-3703](https://insights.sbomify.com/CVE-2014-3703/): Misconfiguration in redhat:packstack (medium 5.0)
- [CVE-2014-3702](https://insights.sbomify.com/CVE-2014-3702/): Path traversal in redhat:edeploy (critical 9.1)
- [CVE-2014-3701](https://insights.sbomify.com/CVE-2014-3701/): Race condition in eDeploy (high 8.1)
- [CVE-2014-3700](https://insights.sbomify.com/CVE-2014-3700/): Code injection in eDeploy (critical 9.8)
- [CVE-2014-3699](https://insights.sbomify.com/CVE-2014-3699/): Deserialization in eDeploy (critical 9.8)
- [CVE-2014-3698](https://insights.sbomify.com/CVE-2014-3698/): Information disclosure in pidgin:pidgin (medium 5.0)
- [CVE-2014-3697](https://insights.sbomify.com/CVE-2014-3697/): Path traversal in pidgin:pidgin (medium 6.4)
- [CVE-2014-3696](https://insights.sbomify.com/CVE-2014-3696/): Denial of service in pidgin:pidgin (medium 5.0)
- [CVE-2014-3695](https://insights.sbomify.com/CVE-2014-3695/): Memory corruption in pidgin:pidgin (medium 5.0)
- [CVE-2014-3694](https://insights.sbomify.com/CVE-2014-3694/): Weak cryptography in canonical:ubuntu linux (medium 6.4)
- [CVE-2014-3693](https://insights.sbomify.com/CVE-2014-3693/): Use after free in canonical:ubuntu linux (high 7.5)
- [CVE-2014-3692](https://insights.sbomify.com/CVE-2014-3692/): Hardcoded credentials in redhat:cloudforms 3.1 management engine (critical 10.0)
- [CVE-2014-3691](https://insights.sbomify.com/CVE-2014-3691/): Auth bypass in redhat:openstack (high 7.5)
- [CVE-2014-3690](https://insights.sbomify.com/CVE-2014-3690/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2014-3689](https://insights.sbomify.com/CVE-2014-3689/): Privilege escalation in canonical:ubuntu linux (high 7.2)
- [CVE-2014-3688](https://insights.sbomify.com/CVE-2014-3688/): Denial of service in linux:linux kernel (medium 5.0)
- [CVE-2014-3687](https://insights.sbomify.com/CVE-2014-3687/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2014-3686](https://insights.sbomify.com/CVE-2014-3686/): Command injection in canonical:ubuntu linux (medium 6.8)
- [CVE-2014-3684](https://insights.sbomify.com/CVE-2014-3684/): Missing authorization in adaptivecomputing:torque resource manager (medium 6.8)
- [CVE-2014-3683](https://insights.sbomify.com/CVE-2014-3683/): Integer overflow in rsyslog:rsyslog (medium 5.0)
- [CVE-2014-3682](https://insights.sbomify.com/CVE-2014-3682/): XML external entity in redhat:jbpm-designer (high 7.5)
- [CVE-2014-3681](https://insights.sbomify.com/CVE-2014-3681/): Jenkins Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2014-3680](https://insights.sbomify.com/CVE-2014-3680/): Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability (medium 4.0)
- [CVE-2014-3679](https://insights.sbomify.com/CVE-2014-3679/): Jenkins Monitoring Plugin Reveals Sensitive Information via Unspecified Pages (medium 5.0)
- [CVE-2014-3678](https://insights.sbomify.com/CVE-2014-3678/): Jenkins Monitoring Plugin allows Cross-Site Scripting (XSS) (medium 4.3)
- [CVE-2014-3677](https://insights.sbomify.com/CVE-2014-3677/): Memory corruption in redhat:shim (high 7.5)
- [CVE-2014-3676](https://insights.sbomify.com/CVE-2014-3676/): Memory corruption in redhat:shim (high 7.5)
- [CVE-2014-3675](https://insights.sbomify.com/CVE-2014-3675/): Memory corruption in redhat:shim (medium 5.0)
- [CVE-2014-3674](https://insights.sbomify.com/CVE-2014-3674/): Missing authorization in redhat:openshift (high 7.5)
- [CVE-2014-3673](https://insights.sbomify.com/CVE-2014-3673/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2014-3672](https://insights.sbomify.com/CVE-2014-3672/): Denial of service in redhat:libvirt (medium 6.5)
- [CVE-2014-3670](https://insights.sbomify.com/CVE-2014-3670/): Memory corruption in php:php (medium 6.8)
- [CVE-2014-3669](https://insights.sbomify.com/CVE-2014-3669/): Integer overflow in php:php (high 7.5)
- [CVE-2014-3668](https://insights.sbomify.com/CVE-2014-3668/): Memory corruption in php:php (medium 5.0)
- [CVE-2014-3667](https://insights.sbomify.com/CVE-2014-3667/): Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code (medium 4.0)
- [CVE-2014-3666](https://insights.sbomify.com/CVE-2014-3666/): Jenkins allows for Code Execution via Crafted Packet to the CLI (high 7.5)
- [CVE-2014-3665](https://insights.sbomify.com/CVE-2014-3665/): Jenkins improperly ensures trust separation (medium 6.8)
- [CVE-2014-3664](https://insights.sbomify.com/CVE-2014-3664/): Jenkins Path Traversal vulnerability (medium 4.0)
- [CVE-2014-3663](https://insights.sbomify.com/CVE-2014-3663/): Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs (medium 6.0)
- [CVE-2014-3662](https://insights.sbomify.com/CVE-2014-3662/): Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability (medium 5.0)
- [CVE-2014-3661](https://insights.sbomify.com/CVE-2014-3661/): Jenkins Denial of Service vulnerability (medium 5.0)
- [CVE-2014-3660](https://insights.sbomify.com/CVE-2014-3660/): Denial of service in apple:mac os x (medium 5.0)
- [CVE-2014-3657](https://insights.sbomify.com/CVE-2014-3657/): Denial of service in libvirt:libvirt (medium 5.0)
- [CVE-2014-3656](https://insights.sbomify.com/CVE-2014-3656/): JBoss KeyCloak Cross-site Scripting Vulnerability (medium 6.1)
- [CVE-2014-3655](https://insights.sbomify.com/CVE-2014-3655/): JBoss KeyCloak is vulnerable to soft token deletion via CSRF (medium 4.3)
- [CVE-2014-3654](https://insights.sbomify.com/CVE-2014-3654/): Cross-site scripting in redhat:satellite (medium 4.3)
- [CVE-2014-3653](https://insights.sbomify.com/CVE-2014-3653/): Cross-site scripting in theforeman:foreman (medium 4.3)
- [CVE-2014-3652](https://insights.sbomify.com/CVE-2014-3652/): JBoss KeyCloak Open Redirect (medium 6.1)
- [CVE-2014-3651](https://insights.sbomify.com/CVE-2014-3651/): Keycloak vulnerable to uncontrolled resource consumption (high 7.5)
- [CVE-2014-3650](https://insights.sbomify.com/CVE-2014-3650/): Cross-site scripting in Jboss Aerogear (medium 5.4)
- [CVE-2014-3649](https://insights.sbomify.com/CVE-2014-3649/): Cross-site scripting in AeroGear (medium 6.1)
- [CVE-2014-3648](https://insights.sbomify.com/CVE-2014-3648/): Server-side request forgery in Jboss Aerogear (high 7.5)
- [CVE-2014-3647](https://insights.sbomify.com/CVE-2014-3647/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2014-3646](https://insights.sbomify.com/CVE-2014-3646/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2014-3645](https://insights.sbomify.com/CVE-2014-3645/): Denial of service in linux:linux kernel (low 2.1)
- [CVE-2014-3643](https://insights.sbomify.com/CVE-2014-3643/): jersey: XXE via parameter entities (high 7.5)
- [CVE-2014-3642](https://insights.sbomify.com/CVE-2014-3642/): Privilege escalation in redhat:cloudforms 3.0.1 management engine (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/52/