Vulnerabilities published in 2014
8,436 vulnerabilities were published in 2014: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 54 of 85.
- CVE-2014-3536 Information disclosure in CFME (CloudForms Management Engine)
- CVE-2014-3535 Null dereference in linux:linux kernel
- CVE-2014-3534 Privilege escalation in debian:debian linux
- CVE-2014-3533 Denial of service in debian:debian linux
- CVE-2014-3532 Denial of service in debian:debian linux
- CVE-2014-3531 Cross-site scripting in theforeman:foreman
- CVE-2014-3530 XML External Entity Reference in org.picketlink:picketlink-common
- CVE-2014-3529 Improper Restriction of XML External Entity Reference in Apache POI
- CVE-2014-3528 Weak cryptography in apache:subversion
- CVE-2014-3527 Authorization Bypass in Spring Security
- CVE-2014-3526 Apache Wicket Sensitive Data Exposure
- CVE-2014-3525 Other in apache:traffic server
- CVE-2014-3524 Command injection in apache:openoffice
- CVE-2014-3523 Denial of service in apache:http server
- CVE-2014-3522 Security feature bypass in apache:subversion
- CVE-2014-3521 Missing authorization in redhat:conga
- CVE-2014-3520 Missing authorization in openstack:keystone
- CVE-2014-3519 Security feature bypass in openvz:vzkernel
- CVE-2014-3518 Code injection in redhat:jboss enterprise application platform
- CVE-2014-3517 OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability
- CVE-2014-3515 Deserialization in debian:debian linux
- CVE-2014-3514 Active Record subject to strong parameters protection bypass
- CVE-2014-3513 Denial of service in openssl:openssl
- CVE-2014-3512 Memory corruption in openssl:openssl
- CVE-2014-3511 Security feature bypass in openssl:openssl
- CVE-2014-3510 Null dereference in openssl:openssl
- CVE-2014-3509 Race condition in openssl:openssl
- CVE-2014-3508 Information disclosure in openssl:openssl
- CVE-2014-3507 Denial of service in openssl:openssl
- CVE-2014-3506 Denial of service in openssl:openssl
- CVE-2014-3505 Memory corruption in openssl:openssl
- CVE-2014-3504 Security feature bypass in apache:subversion
- CVE-2014-3503 Apache Syncope uses a weak PNRG
- CVE-2014-3502 Information disclosure in apache:cordova
- CVE-2014-3501 Security feature bypass in apache:cordova
- CVE-2014-3500 Other in apache:cordova
- CVE-2014-3499 Privilege Escalation in Docker
- CVE-2014-3498 Ansible Arbitrary Code Execution
- CVE-2014-3497 OpenStack Swift Cross-site Scriping vulnerability
- CVE-2014-3496 Command injection in redhat:openshift
- CVE-2014-3495 Security feature bypass in duplicity
- CVE-2014-3494 Information disclosure in kde:kdelibs
- CVE-2014-3493 Memory corruption in samba:samba
- CVE-2014-3492 Cross-site scripting in theforeman:foreman
- CVE-2014-3491 Cross-site scripting in theforeman:foreman
- CVE-2014-3490 Incorrect Privilege Assignment in RESTEasy
- CVE-2014-3489 Weak cryptography in redhat:cloudforms 3.0 management engine
- CVE-2014-3488 Denial of service in Netty
- CVE-2014-3487 Denial of service in debian:debian linux
- CVE-2014-3486 Race condition in redhat:cloudforms 3.0 management engine
- CVE-2014-3485 XML external entity in redhat:enterprise virtualization
- CVE-2014-3484 Memory corruption in musl libc
- CVE-2014-3483 Active Record contains SQL Injection via improper range quoting
- CVE-2014-3482 SQL Injection in Active Record
- CVE-2014-3481 XML external entity in redhat:jboss enterprise application platform
- CVE-2014-3480 Denial of service in debian:debian linux
- CVE-2014-3479 Denial of service in debian:debian linux
- CVE-2014-3478 Memory corruption in christos zoulas:file
- CVE-2014-3477 Denial of service in d-bus project:d-bus
- CVE-2014-3476 OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege
- CVE-2014-3475 Cross-site scripting in openstack:horizon
- CVE-2014-3474 OpenStack Horizon Cross-site scripting (XSS) vulnerability
- CVE-2014-3473 Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name
- CVE-2014-3472 Missing authorization in redhat:jboss enterprise application platform
- CVE-2014-3471 Use after free in qemu:qemu
- CVE-2014-3470 Null dereference in fedoraproject:fedora
- CVE-2014-3469 Null dereference in debian:debian linux
- CVE-2014-3468 Memory corruption in debian:debian linux
- CVE-2014-3467 Memory corruption in debian:debian linux
- CVE-2014-3466 Memory corruption in gnu:gnutls
- CVE-2014-3465 Null dereference in gnu:gnutls
- CVE-2014-3464 Missing authorization in redhat:jboss enterprise application platform
- CVE-2014-3462 Weak cryptography in encfs project:encfs
- CVE-2014-3461 Memory corruption in qemu:qemu
- CVE-2014-3460 Path traversal in microfocus:sentinel
- CVE-2014-3459 Memory corruption in solarwinds:network configuration manager
- CVE-2014-3456 Cross-site scripting in gitlab:gitlab
- CVE-2014-3455 Cross-site request forgery in mediawiki:mediawiki
- CVE-2014-3454 Cross-site request forgery in mediawiki:mediawiki
- CVE-2014-3453 Code injection in flag module project:flag
- CVE-2014-3452 Memory corruption in codecguide:k-lite codec pack
- CVE-2014-3451 Security feature bypass in igniterealtime:openfire
- CVE-2014-3450 Privilege escalation in pandasecurity:panda av pro 2014
- CVE-2014-3449 Auth bypass in bss continuity cms project:bss continuty cms
- CVE-2014-3448 File upload in bss continuity cms project:bss continuty cms
- CVE-2014-3447 Denial of service in bss continuity cms project:bss continuty cms
- CVE-2014-3446 SQL injection in bss:continuity cms
- CVE-2014-3445 Auth bypass in handsomeweb:sos webpages
- CVE-2014-3444 Memory corruption in realnetworks:realplayer
- CVE-2014-3443 Memory corruption in jetaudio:jetaudio
- CVE-2014-3442 Memory corruption in nullsoft:winamp
- CVE-2014-3441 Memory corruption in videolan:vlc media player
- CVE-2014-3440 Command injection in broadcom:symantec critical system protection
- CVE-2014-3439 Other in symantec:endpoint protection manager
- CVE-2014-3438 Cross-site scripting in symantec:endpoint protection manager
- CVE-2014-3437 XML external entity in symantec:endpoint protection manager
- CVE-2014-3436 Denial of service in symantec:encryption desktop
- CVE-2014-3434 Memory corruption in symantec:endpoint protection
- CVE-2014-3433 Cross-site scripting in symantec:data insight
- CVE-2014-3432 Cross-site scripting in symantec:data insight