# Vulnerabilities published in 2014


- [CVE-2014-3641](https://insights.sbomify.com/CVE-2014-3641/): OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability (medium 4.0)
- [CVE-2014-3640](https://insights.sbomify.com/CVE-2014-3640/): Null dereference in canonical:ubuntu linux (low 2.1)
- [CVE-2014-3639](https://insights.sbomify.com/CVE-2014-3639/): Denial of service in d-bus project:d-bus (low 2.1)
- [CVE-2014-3638](https://insights.sbomify.com/CVE-2014-3638/): Denial of service in d-bus project:d-bus (low 2.1)
- [CVE-2014-3637](https://insights.sbomify.com/CVE-2014-3637/): Denial of service in freedesktop:dbus (low 2.1)
- [CVE-2014-3636](https://insights.sbomify.com/CVE-2014-3636/): Denial of service in d-bus project:d-bus (low 1.9)
- [CVE-2014-3635](https://insights.sbomify.com/CVE-2014-3635/): Memory corruption in d-bus project:d-bus (medium 4.4)
- [CVE-2014-3634](https://insights.sbomify.com/CVE-2014-3634/): Memory corruption in rsyslog:rsyslog (high 7.5)
- [CVE-2014-3633](https://insights.sbomify.com/CVE-2014-3633/): Memory corruption in canonical:ubuntu linux (medium 5.8)
- [CVE-2014-3632](https://insights.sbomify.com/CVE-2014-3632/): Misconfiguration in openstack:neutron (high 7.6)
- [CVE-2014-3631](https://insights.sbomify.com/CVE-2014-3631/): Null dereference in linux:linux kernel (high 7.2)
- [CVE-2014-3630](https://insights.sbomify.com/CVE-2014-3630/): XML external entity in lightbend:play framework (critical 9.8)
- [CVE-2014-3629](https://insights.sbomify.com/CVE-2014-3629/): XML external entity in apache:qpid (medium 4.3)
- [CVE-2014-3628](https://insights.sbomify.com/CVE-2014-3628/): Improper Neutralization of Input During Web Page Generation in Apache Solr (medium 4.3)
- [CVE-2014-3627](https://insights.sbomify.com/CVE-2014-3627/): Improper Link Resolution Before File Access in Apache Hadoop (medium 5.0)
- [CVE-2014-3626](https://insights.sbomify.com/CVE-2014-3626/): Path traversal in Grails by Pivotal (high 7.5)
- [CVE-2014-3625](https://insights.sbomify.com/CVE-2014-3625/): Improper Limitation of a Pathname to a Restricted Directory in Spring Framework (medium 5.0)
- [CVE-2014-3624](https://insights.sbomify.com/CVE-2014-3624/): Security feature bypass in apache:traffic server (critical 9.8)
- [CVE-2014-3623](https://insights.sbomify.com/CVE-2014-3623/): Improper Authentication in Apache WSS4J (medium 5.0)
- [CVE-2014-3622](https://insights.sbomify.com/CVE-2014-3622/): Use after free in PHP (critical 9.8)
- [CVE-2014-3621](https://insights.sbomify.com/CVE-2014-3621/): OpenStack Identity Keystone Exposure of Sensitive Information (medium 4.0)
- [CVE-2014-3620](https://insights.sbomify.com/CVE-2014-3620/): Security feature bypass in apple:mac os x (medium 5.0)
- [CVE-2014-3619](https://insights.sbomify.com/CVE-2014-3619/): Denial of service in gluster:glusterfs (medium 5.0)
- [CVE-2014-3618](https://insights.sbomify.com/CVE-2014-3618/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2014-3617](https://insights.sbomify.com/CVE-2014-3617/): Moodle allows discovery of an author's username (medium 4.0)
- [CVE-2014-3616](https://insights.sbomify.com/CVE-2014-3616/): Auth bypass in debian:debian linux (medium 4.3)
- [CVE-2014-3615](https://insights.sbomify.com/CVE-2014-3615/): Information disclosure in canonical:ubuntu linux (low 2.1)
- [CVE-2014-3614](https://insights.sbomify.com/CVE-2014-3614/): Denial of service in powerdns:powerdns recursor (medium 5.0)
- [CVE-2014-3613](https://insights.sbomify.com/CVE-2014-3613/): Security feature bypass in apple:mac os x (medium 5.0)
- [CVE-2014-3612](https://insights.sbomify.com/CVE-2014-3612/): Improper Authentication in Apache WSS4J (high 7.5)
- [CVE-2014-3611](https://insights.sbomify.com/CVE-2014-3611/): Race condition in canonical:ubuntu linux (medium 4.7)
- [CVE-2014-3610](https://insights.sbomify.com/CVE-2014-3610/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2014-3609](https://insights.sbomify.com/CVE-2014-3609/): Denial of service in squid-cache:squid (medium 5.0)
- [CVE-2014-3608](https://insights.sbomify.com/CVE-2014-3608/): OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service (low 2.7)
- [CVE-2014-3607](https://insights.sbomify.com/CVE-2014-3607/): Improper Certificate Validation in vt-ldap (medium 5.9)
- [CVE-2014-3604](https://insights.sbomify.com/CVE-2014-3604/): Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL (medium 6.8)
- [CVE-2014-3603](https://insights.sbomify.com/CVE-2014-3603/): Improper Validation of Certificate with Host Mismatch in Shibboleth Identity Provider and OpenSAML Java (medium 5.9)
- [CVE-2014-3602](https://insights.sbomify.com/CVE-2014-3602/): Information disclosure in redhat:openshift (low 2.1)
- [CVE-2014-3601](https://insights.sbomify.com/CVE-2014-3601/): Integer overflow in canonical:ubuntu linux (medium 4.3)
- [CVE-2014-3600](https://insights.sbomify.com/CVE-2014-3600/): Improper Restriction of XML External Entity Reference in Apache ActiveMQ (critical 9.8)
- [CVE-2014-3599](https://insights.sbomify.com/CVE-2014-3599/): HornetQ REST vulnerable to Improper Restriction of XML External Entity Reference (medium 6.5)
- [CVE-2014-3598](https://insights.sbomify.com/CVE-2014-3598/): Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin (medium 5.0)
- [CVE-2014-3597](https://insights.sbomify.com/CVE-2014-3597/): Memory corruption in php:php (medium 6.8)
- [CVE-2014-3596](https://insights.sbomify.com/CVE-2014-3596/): Improper Validation of Certificates in apache axis (medium 5.8)
- [CVE-2014-3595](https://insights.sbomify.com/CVE-2014-3595/): Cross-site scripting in redhat:satellite (medium 4.3)
- [CVE-2014-3594](https://insights.sbomify.com/CVE-2014-3594/): OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface (low 3.5)
- [CVE-2014-3593](https://insights.sbomify.com/CVE-2014-3593/): Code injection in scientificlinux:luci (medium 6.0)
- [CVE-2014-3592](https://insights.sbomify.com/CVE-2014-3592/): Cross-site scripting in OpenShift Origin (medium 6.1)
- [CVE-2014-3591](https://insights.sbomify.com/CVE-2014-3591/): Weak cryptography in GnuPG (medium 4.2)
- [CVE-2014-3590](https://insights.sbomify.com/CVE-2014-3590/): Cross-site request forgery in Red Hat Satellite 6 (medium 6.5)
- [CVE-2014-3589](https://insights.sbomify.com/CVE-2014-3589/): Pillow denial of service via Crafted Block Size (medium 5.0)
- [CVE-2014-3587](https://insights.sbomify.com/CVE-2014-3587/): Integer overflow in christos zoulas:file (medium 4.3)
- [CVE-2014-3586](https://insights.sbomify.com/CVE-2014-3586/): Misconfiguration in redhat:jboss enterprise application platform (low 2.1)
- [CVE-2014-3585](https://insights.sbomify.com/CVE-2014-3585/): Security feature bypass in redhat-upgrade-tool (critical 9.8)
- [CVE-2014-3584](https://insights.sbomify.com/CVE-2014-3584/): Loop with Unreachable Exit Condition in Apache CXF (medium 5.0)
- [CVE-2014-3583](https://insights.sbomify.com/CVE-2014-3583/): Memory corruption in apache:http server (medium 5.0)
- [CVE-2014-3582](https://insights.sbomify.com/CVE-2014-3582/): Code injection in apache:ambari (critical 9.8)
- [CVE-2014-3581](https://insights.sbomify.com/CVE-2014-3581/): Null dereference in apache:http server (medium 5.0)
- [CVE-2014-3580](https://insights.sbomify.com/CVE-2014-3580/): Null dereference in apache:subversion (medium 5.0)
- [CVE-2014-3579](https://insights.sbomify.com/CVE-2014-3579/): Apache ActiveMQ Apollo XXE Vulnerability (critical 9.8)
- [CVE-2014-3578](https://insights.sbomify.com/CVE-2014-3578/): Improper Limitation of a Pathname to a Restricted Directory in Spring Framework (medium 5.0)
- [CVE-2014-3577](https://insights.sbomify.com/CVE-2014-3577/): Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient (medium 5.8)
- [CVE-2014-3576](https://insights.sbomify.com/CVE-2014-3576/): Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ (high 7.5)
- [CVE-2014-3575](https://insights.sbomify.com/CVE-2014-3575/): Other in apache:openoffice (medium 4.3)
- [CVE-2014-3574](https://insights.sbomify.com/CVE-2014-3574/): Improper Input Validation in Apache POI (medium 4.3)
- [CVE-2014-3573](https://insights.sbomify.com/CVE-2014-3573/): XML external entity in redhat:enterprise virtualization manager (medium 6.5)
- [CVE-2014-3572](https://insights.sbomify.com/CVE-2014-3572/): Weak cryptography in openssl:openssl (medium 5.0)
- [CVE-2014-3571](https://insights.sbomify.com/CVE-2014-3571/): Null dereference in openssl:openssl (medium 5.0)
- [CVE-2014-3570](https://insights.sbomify.com/CVE-2014-3570/): Weak cryptography in openssl:openssl (medium 5.0)
- [CVE-2014-3569](https://insights.sbomify.com/CVE-2014-3569/): Null dereference in openssl:openssl (medium 5.0)
- [CVE-2014-3568](https://insights.sbomify.com/CVE-2014-3568/): Security feature bypass in openssl:openssl (medium 4.3)
- [CVE-2014-3567](https://insights.sbomify.com/CVE-2014-3567/): Denial of service in openssl:openssl (high 7.1)
- [CVE-2014-3566](https://insights.sbomify.com/CVE-2014-3566/): Weak cryptography in apple:mac os x (low 3.4)
- [CVE-2014-3565](https://insights.sbomify.com/CVE-2014-3565/): Null dereference in apple:mac os x (medium 5.0)
- [CVE-2014-3564](https://insights.sbomify.com/CVE-2014-3564/): Memory corruption in canonical:ubuntu linux (medium 6.8)
- [CVE-2014-3563](https://insights.sbomify.com/CVE-2014-3563/): SaltStack Salt Insecure Temporary File Creation (high 7.2)
- [CVE-2014-3562](https://insights.sbomify.com/CVE-2014-3562/): Information disclosure in fedoraproject:389 directory server (medium 5.0)
- [CVE-2014-3561](https://insights.sbomify.com/CVE-2014-3561/): Information disclosure in redhat:enterprise virtualization (low 2.1)
- [CVE-2014-3560](https://insights.sbomify.com/CVE-2014-3560/): Memory corruption in canonical:ubuntu linux (high 7.9)
- [CVE-2014-3559](https://insights.sbomify.com/CVE-2014-3559/): Information disclosure in redhat:enterprise virtualization (low 3.5)
- [CVE-2014-3558](https://insights.sbomify.com/CVE-2014-3558/): Improper Authentication in Hibernate Validator (medium 5.0)
- [CVE-2014-3556](https://insights.sbomify.com/CVE-2014-3556/): Command injection in f5:nginx (medium 6.8)
- [CVE-2014-3555](https://insights.sbomify.com/CVE-2014-3555/): Denial of service in openstack:neutron (medium 4.0)
- [CVE-2014-3554](https://insights.sbomify.com/CVE-2014-3554/): Memory corruption in libndp:libndp (medium 6.8)
- [CVE-2014-3553](https://insights.sbomify.com/CVE-2014-3553/): Moodle does not enforce the moodle/site:accessallgroups capability requirement (medium 4.9)
- [CVE-2014-3552](https://insights.sbomify.com/CVE-2014-3552/): Auth bypass in moodle:moodle (medium 6.0)
- [CVE-2014-3551](https://insights.sbomify.com/CVE-2014-3551/): Moodle multiple cross-site scripting (XSS) vulnerabilities (low 3.5)
- [CVE-2014-3550](https://insights.sbomify.com/CVE-2014-3550/): Cross-site scripting in moodle:moodle (medium 4.3)
- [CVE-2014-3549](https://insights.sbomify.com/CVE-2014-3549/): Cross-site scripting in moodle:moodle (medium 4.3)
- [CVE-2014-3548](https://insights.sbomify.com/CVE-2014-3548/): Moodle multiple cross-site scripting (XSS) vulnerabilities (medium 4.3)
- [CVE-2014-3547](https://insights.sbomify.com/CVE-2014-3547/): Moodle multiple cross-site scripting (XSS) vulnerabilities (medium 4.3)
- [CVE-2014-3546](https://insights.sbomify.com/CVE-2014-3546/): Moodle allows attackers to obtain username and course information (medium 5.0)
- [CVE-2014-3545](https://insights.sbomify.com/CVE-2014-3545/): Moodle remote code execution via quiz questions (medium 6.0)
- [CVE-2014-3544](https://insights.sbomify.com/CVE-2014-3544/): Moodle cross-site scripting (XSS) vulnerability (low 3.5)
- [CVE-2014-3543](https://insights.sbomify.com/CVE-2014-3543/): Moodle Arbitrary File Read via XML External Entity vulnerability (medium 4.3)
- [CVE-2014-3542](https://insights.sbomify.com/CVE-2014-3542/): Moodle allows remote attackers to read arbitrary files (medium 4.3)
- [CVE-2014-3541](https://insights.sbomify.com/CVE-2014-3541/): Moodle vulnerable to PHP object injection attacks (high 7.5)
- [CVE-2014-3539](https://insights.sbomify.com/CVE-2014-3539/): Code injection in rope (critical 9.8)
- [CVE-2014-3538](https://insights.sbomify.com/CVE-2014-3538/): Denial of service in christos zoulas:file (medium 5.0)
- [CVE-2014-3537](https://insights.sbomify.com/CVE-2014-3537/): Path traversal in apple:cups (low 1.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/53/