Vulnerabilities published in 2014
8,436 vulnerabilities were published in 2014: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 53 of 85.
- CVE-2014-3641 OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability
- CVE-2014-3640 Null dereference in canonical:ubuntu linux
- CVE-2014-3639 Denial of service in d-bus project:d-bus
- CVE-2014-3638 Denial of service in d-bus project:d-bus
- CVE-2014-3637 Denial of service in freedesktop:dbus
- CVE-2014-3636 Denial of service in d-bus project:d-bus
- CVE-2014-3635 Memory corruption in d-bus project:d-bus
- CVE-2014-3634 Memory corruption in rsyslog:rsyslog
- CVE-2014-3633 Memory corruption in canonical:ubuntu linux
- CVE-2014-3632 Misconfiguration in openstack:neutron
- CVE-2014-3631 Null dereference in linux:linux kernel
- CVE-2014-3630 XML external entity in lightbend:play framework
- CVE-2014-3629 XML external entity in apache:qpid
- CVE-2014-3628 Improper Neutralization of Input During Web Page Generation in Apache Solr
- CVE-2014-3627 Improper Link Resolution Before File Access in Apache Hadoop
- CVE-2014-3626 Path traversal in Grails by Pivotal
- CVE-2014-3625 Improper Limitation of a Pathname to a Restricted Directory in Spring Framework
- CVE-2014-3624 Security feature bypass in apache:traffic server
- CVE-2014-3623 Improper Authentication in Apache WSS4J
- CVE-2014-3622 Use after free in PHP
- CVE-2014-3621 OpenStack Identity Keystone Exposure of Sensitive Information
- CVE-2014-3620 Security feature bypass in apple:mac os x
- CVE-2014-3619 Denial of service in gluster:glusterfs
- CVE-2014-3618 Memory corruption in canonical:ubuntu linux
- CVE-2014-3617 Moodle allows discovery of an author's username
- CVE-2014-3616 Auth bypass in debian:debian linux
- CVE-2014-3615 Information disclosure in canonical:ubuntu linux
- CVE-2014-3614 Denial of service in powerdns:powerdns recursor
- CVE-2014-3613 Security feature bypass in apple:mac os x
- CVE-2014-3612 Improper Authentication in Apache WSS4J
- CVE-2014-3611 Race condition in canonical:ubuntu linux
- CVE-2014-3610 Denial of service in canonical:ubuntu linux
- CVE-2014-3609 Denial of service in squid-cache:squid
- CVE-2014-3608 OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service
- CVE-2014-3607 Improper Certificate Validation in vt-ldap
- CVE-2014-3604 Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL
- CVE-2014-3603 Improper Validation of Certificate with Host Mismatch in Shibboleth Identity Provider and OpenSAML Java
- CVE-2014-3602 Information disclosure in redhat:openshift
- CVE-2014-3601 Integer overflow in canonical:ubuntu linux
- CVE-2014-3600 Improper Restriction of XML External Entity Reference in Apache ActiveMQ
- CVE-2014-3599 HornetQ REST vulnerable to Improper Restriction of XML External Entity Reference
- CVE-2014-3598 Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin
- CVE-2014-3597 Memory corruption in php:php
- CVE-2014-3596 Improper Validation of Certificates in apache axis
- CVE-2014-3595 Cross-site scripting in redhat:satellite
- CVE-2014-3594 OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface
- CVE-2014-3593 Code injection in scientificlinux:luci
- CVE-2014-3592 Cross-site scripting in OpenShift Origin
- CVE-2014-3591 Weak cryptography in GnuPG
- CVE-2014-3590 Cross-site request forgery in Red Hat Satellite 6
- CVE-2014-3589 Pillow denial of service via Crafted Block Size
- CVE-2014-3587 Integer overflow in christos zoulas:file
- CVE-2014-3586 Misconfiguration in redhat:jboss enterprise application platform
- CVE-2014-3585 Security feature bypass in redhat-upgrade-tool
- CVE-2014-3584 Loop with Unreachable Exit Condition in Apache CXF
- CVE-2014-3583 Memory corruption in apache:http server
- CVE-2014-3582 Code injection in apache:ambari
- CVE-2014-3581 Null dereference in apache:http server
- CVE-2014-3580 Null dereference in apache:subversion
- CVE-2014-3579 Apache ActiveMQ Apollo XXE Vulnerability
- CVE-2014-3578 Improper Limitation of a Pathname to a Restricted Directory in Spring Framework
- CVE-2014-3577 Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient
- CVE-2014-3576 Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ
- CVE-2014-3575 Other in apache:openoffice
- CVE-2014-3574 Improper Input Validation in Apache POI
- CVE-2014-3573 XML external entity in redhat:enterprise virtualization manager
- CVE-2014-3572 Weak cryptography in openssl:openssl
- CVE-2014-3571 Null dereference in openssl:openssl
- CVE-2014-3570 Weak cryptography in openssl:openssl
- CVE-2014-3569 Null dereference in openssl:openssl
- CVE-2014-3568 Security feature bypass in openssl:openssl
- CVE-2014-3567 Denial of service in openssl:openssl
- CVE-2014-3566 Weak cryptography in apple:mac os x
- CVE-2014-3565 Null dereference in apple:mac os x
- CVE-2014-3564 Memory corruption in canonical:ubuntu linux
- CVE-2014-3563 SaltStack Salt Insecure Temporary File Creation
- CVE-2014-3562 Information disclosure in fedoraproject:389 directory server
- CVE-2014-3561 Information disclosure in redhat:enterprise virtualization
- CVE-2014-3560 Memory corruption in canonical:ubuntu linux
- CVE-2014-3559 Information disclosure in redhat:enterprise virtualization
- CVE-2014-3558 Improper Authentication in Hibernate Validator
- CVE-2014-3556 Command injection in f5:nginx
- CVE-2014-3555 Denial of service in openstack:neutron
- CVE-2014-3554 Memory corruption in libndp:libndp
- CVE-2014-3553 Moodle does not enforce the moodle/site:accessallgroups capability requirement
- CVE-2014-3552 Auth bypass in moodle:moodle
- CVE-2014-3551 Moodle multiple cross-site scripting (XSS) vulnerabilities
- CVE-2014-3550 Cross-site scripting in moodle:moodle
- CVE-2014-3549 Cross-site scripting in moodle:moodle
- CVE-2014-3548 Moodle multiple cross-site scripting (XSS) vulnerabilities
- CVE-2014-3547 Moodle multiple cross-site scripting (XSS) vulnerabilities
- CVE-2014-3546 Moodle allows attackers to obtain username and course information
- CVE-2014-3545 Moodle remote code execution via quiz questions
- CVE-2014-3544 Moodle cross-site scripting (XSS) vulnerability
- CVE-2014-3543 Moodle Arbitrary File Read via XML External Entity vulnerability
- CVE-2014-3542 Moodle allows remote attackers to read arbitrary files
- CVE-2014-3541 Moodle vulnerable to PHP object injection attacks
- CVE-2014-3539 Code injection in rope
- CVE-2014-3538 Denial of service in christos zoulas:file
- CVE-2014-3537 Path traversal in apple:cups