# Vulnerabilities published in 2014


- [CVE-2014-3536](https://insights.sbomify.com/CVE-2014-3536/): Information disclosure in CFME (CloudForms Management Engine) (medium 5.5)
- [CVE-2014-3535](https://insights.sbomify.com/CVE-2014-3535/): Null dereference in linux:linux kernel (high 7.8)
- [CVE-2014-3534](https://insights.sbomify.com/CVE-2014-3534/): Privilege escalation in debian:debian linux (high 7.2)
- [CVE-2014-3533](https://insights.sbomify.com/CVE-2014-3533/): Denial of service in debian:debian linux (low 2.1)
- [CVE-2014-3532](https://insights.sbomify.com/CVE-2014-3532/): Denial of service in debian:debian linux (low 2.1)
- [CVE-2014-3531](https://insights.sbomify.com/CVE-2014-3531/): Cross-site scripting in theforeman:foreman (medium 5.4)
- [CVE-2014-3530](https://insights.sbomify.com/CVE-2014-3530/): XML External Entity Reference in org.picketlink:picketlink-common (high 7.5)
- [CVE-2014-3529](https://insights.sbomify.com/CVE-2014-3529/): Improper Restriction of XML External Entity Reference in Apache POI (medium 4.3)
- [CVE-2014-3528](https://insights.sbomify.com/CVE-2014-3528/): Weak cryptography in apache:subversion (medium 4.0)
- [CVE-2014-3527](https://insights.sbomify.com/CVE-2014-3527/): Authorization Bypass in Spring Security (critical 9.8)
- [CVE-2014-3526](https://insights.sbomify.com/CVE-2014-3526/): Apache Wicket Sensitive Data Exposure (high 7.5)
- [CVE-2014-3525](https://insights.sbomify.com/CVE-2014-3525/): Other in apache:traffic server (critical 10.0)
- [CVE-2014-3524](https://insights.sbomify.com/CVE-2014-3524/): Command injection in apache:openoffice (critical 9.3)
- [CVE-2014-3523](https://insights.sbomify.com/CVE-2014-3523/): Denial of service in apache:http server (medium 5.0)
- [CVE-2014-3522](https://insights.sbomify.com/CVE-2014-3522/): Security feature bypass in apache:subversion (medium 4.0)
- [CVE-2014-3521](https://insights.sbomify.com/CVE-2014-3521/): Missing authorization in redhat:conga (medium 5.5)
- [CVE-2014-3520](https://insights.sbomify.com/CVE-2014-3520/): Missing authorization in openstack:keystone (medium 6.5)
- [CVE-2014-3519](https://insights.sbomify.com/CVE-2014-3519/): Security feature bypass in openvz:vzkernel (medium 6.5)
- [CVE-2014-3518](https://insights.sbomify.com/CVE-2014-3518/): Code injection in redhat:jboss enterprise application platform (medium 6.8)
- [CVE-2014-3517](https://insights.sbomify.com/CVE-2014-3517/): OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability (medium 4.3)
- [CVE-2014-3515](https://insights.sbomify.com/CVE-2014-3515/): Deserialization in debian:debian linux (high 7.5)
- [CVE-2014-3514](https://insights.sbomify.com/CVE-2014-3514/): Active Record subject to strong parameters protection bypass (high 7.5)
- [CVE-2014-3513](https://insights.sbomify.com/CVE-2014-3513/): Denial of service in openssl:openssl (high 7.1)
- [CVE-2014-3512](https://insights.sbomify.com/CVE-2014-3512/): Memory corruption in openssl:openssl (high 7.5)
- [CVE-2014-3511](https://insights.sbomify.com/CVE-2014-3511/): Security feature bypass in openssl:openssl (medium 4.3)
- [CVE-2014-3510](https://insights.sbomify.com/CVE-2014-3510/): Null dereference in openssl:openssl (medium 4.3)
- [CVE-2014-3509](https://insights.sbomify.com/CVE-2014-3509/): Race condition in openssl:openssl (medium 6.8)
- [CVE-2014-3508](https://insights.sbomify.com/CVE-2014-3508/): Information disclosure in openssl:openssl (medium 4.3)
- [CVE-2014-3507](https://insights.sbomify.com/CVE-2014-3507/): Denial of service in openssl:openssl (medium 5.0)
- [CVE-2014-3506](https://insights.sbomify.com/CVE-2014-3506/): Denial of service in openssl:openssl (medium 5.0)
- [CVE-2014-3505](https://insights.sbomify.com/CVE-2014-3505/): Memory corruption in openssl:openssl (medium 5.0)
- [CVE-2014-3504](https://insights.sbomify.com/CVE-2014-3504/): Security feature bypass in apache:subversion (medium 4.0)
- [CVE-2014-3503](https://insights.sbomify.com/CVE-2014-3503/): Apache Syncope uses a weak PNRG (medium 5.0)
- [CVE-2014-3502](https://insights.sbomify.com/CVE-2014-3502/): Information disclosure in apache:cordova (medium 4.3)
- [CVE-2014-3501](https://insights.sbomify.com/CVE-2014-3501/): Security feature bypass in apache:cordova (medium 4.3)
- [CVE-2014-3500](https://insights.sbomify.com/CVE-2014-3500/): Other in apache:cordova (medium 6.4)
- [CVE-2014-3499](https://insights.sbomify.com/CVE-2014-3499/): Privilege Escalation in Docker (high 7.2)
- [CVE-2014-3498](https://insights.sbomify.com/CVE-2014-3498/): Ansible Arbitrary Code Execution (high 8.8)
- [CVE-2014-3497](https://insights.sbomify.com/CVE-2014-3497/): OpenStack Swift Cross-site Scriping vulnerability (medium 4.3)
- [CVE-2014-3496](https://insights.sbomify.com/CVE-2014-3496/): Command injection in redhat:openshift (critical 10.0)
- [CVE-2014-3495](https://insights.sbomify.com/CVE-2014-3495/): Security feature bypass in duplicity (high 7.5)
- [CVE-2014-3494](https://insights.sbomify.com/CVE-2014-3494/): Information disclosure in kde:kdelibs (medium 4.3)
- [CVE-2014-3493](https://insights.sbomify.com/CVE-2014-3493/): Memory corruption in samba:samba (low 2.7)
- [CVE-2014-3492](https://insights.sbomify.com/CVE-2014-3492/): Cross-site scripting in theforeman:foreman (medium 4.3)
- [CVE-2014-3491](https://insights.sbomify.com/CVE-2014-3491/): Cross-site scripting in theforeman:foreman (medium 4.3)
- [CVE-2014-3490](https://insights.sbomify.com/CVE-2014-3490/): Incorrect Privilege Assignment in RESTEasy (high 7.5)
- [CVE-2014-3489](https://insights.sbomify.com/CVE-2014-3489/): Weak cryptography in redhat:cloudforms 3.0 management engine (medium 4.3)
- [CVE-2014-3488](https://insights.sbomify.com/CVE-2014-3488/): Denial of service in Netty (medium 5.0)
- [CVE-2014-3487](https://insights.sbomify.com/CVE-2014-3487/): Denial of service in debian:debian linux (medium 4.3)
- [CVE-2014-3486](https://insights.sbomify.com/CVE-2014-3486/): Race condition in redhat:cloudforms 3.0 management engine (medium 6.9)
- [CVE-2014-3485](https://insights.sbomify.com/CVE-2014-3485/): XML external entity in redhat:enterprise virtualization (medium 4.0)
- [CVE-2014-3484](https://insights.sbomify.com/CVE-2014-3484/): Memory corruption in musl libc (critical 9.8)
- [CVE-2014-3483](https://insights.sbomify.com/CVE-2014-3483/): Active Record contains SQL Injection via improper range quoting (high 7.5)
- [CVE-2014-3482](https://insights.sbomify.com/CVE-2014-3482/): SQL Injection in Active Record (high 7.5)
- [CVE-2014-3481](https://insights.sbomify.com/CVE-2014-3481/): XML external entity in redhat:jboss enterprise application platform (medium 5.0)
- [CVE-2014-3480](https://insights.sbomify.com/CVE-2014-3480/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2014-3479](https://insights.sbomify.com/CVE-2014-3479/): Denial of service in debian:debian linux (medium 4.3)
- [CVE-2014-3478](https://insights.sbomify.com/CVE-2014-3478/): Memory corruption in christos zoulas:file (medium 6.5)
- [CVE-2014-3477](https://insights.sbomify.com/CVE-2014-3477/): Denial of service in d-bus project:d-bus (medium 4.0)
- [CVE-2014-3476](https://insights.sbomify.com/CVE-2014-3476/): OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege (medium 6.0)
- [CVE-2014-3475](https://insights.sbomify.com/CVE-2014-3475/): Cross-site scripting in openstack:horizon (low 3.5)
- [CVE-2014-3474](https://insights.sbomify.com/CVE-2014-3474/): OpenStack Horizon Cross-site scripting (XSS) vulnerability (low 3.5)
- [CVE-2014-3473](https://insights.sbomify.com/CVE-2014-3473/): Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name (medium 4.3)
- [CVE-2014-3472](https://insights.sbomify.com/CVE-2014-3472/): Missing authorization in redhat:jboss enterprise application platform (medium 4.9)
- [CVE-2014-3471](https://insights.sbomify.com/CVE-2014-3471/): Use after free in qemu:qemu (medium 5.5)
- [CVE-2014-3470](https://insights.sbomify.com/CVE-2014-3470/): Null dereference in fedoraproject:fedora (medium 4.3)
- [CVE-2014-3469](https://insights.sbomify.com/CVE-2014-3469/): Null dereference in debian:debian linux (medium 5.0)
- [CVE-2014-3468](https://insights.sbomify.com/CVE-2014-3468/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2014-3467](https://insights.sbomify.com/CVE-2014-3467/): Memory corruption in debian:debian linux (medium 5.0)
- [CVE-2014-3466](https://insights.sbomify.com/CVE-2014-3466/): Memory corruption in gnu:gnutls (medium 6.8)
- [CVE-2014-3465](https://insights.sbomify.com/CVE-2014-3465/): Null dereference in gnu:gnutls (medium 5.0)
- [CVE-2014-3464](https://insights.sbomify.com/CVE-2014-3464/): Missing authorization in redhat:jboss enterprise application platform (medium 5.5)
- [CVE-2014-3462](https://insights.sbomify.com/CVE-2014-3462/): Weak cryptography in encfs project:encfs (high 7.5)
- [CVE-2014-3461](https://insights.sbomify.com/CVE-2014-3461/): Memory corruption in qemu:qemu (medium 6.8)
- [CVE-2014-3460](https://insights.sbomify.com/CVE-2014-3460/): Path traversal in microfocus:sentinel (medium 6.8)
- [CVE-2014-3459](https://insights.sbomify.com/CVE-2014-3459/): Memory corruption in solarwinds:network configuration manager (medium 6.8)
- [CVE-2014-3456](https://insights.sbomify.com/CVE-2014-3456/): Cross-site scripting in gitlab:gitlab (medium 4.3)
- [CVE-2014-3455](https://insights.sbomify.com/CVE-2014-3455/): Cross-site request forgery in mediawiki:mediawiki (medium 6.8)
- [CVE-2014-3454](https://insights.sbomify.com/CVE-2014-3454/): Cross-site request forgery in mediawiki:mediawiki (medium 6.8)
- [CVE-2014-3453](https://insights.sbomify.com/CVE-2014-3453/): Code injection in flag module project:flag (medium 6.5)
- [CVE-2014-3452](https://insights.sbomify.com/CVE-2014-3452/): Memory corruption in codecguide:k-lite codec pack (medium 4.3)
- [CVE-2014-3451](https://insights.sbomify.com/CVE-2014-3451/): Security feature bypass in igniterealtime:openfire (high 7.5)
- [CVE-2014-3450](https://insights.sbomify.com/CVE-2014-3450/): Privilege escalation in pandasecurity:panda av pro 2014 (high 7.2)
- [CVE-2014-3449](https://insights.sbomify.com/CVE-2014-3449/): Auth bypass in bss continuity cms project:bss continuty cms (critical 9.8)
- [CVE-2014-3448](https://insights.sbomify.com/CVE-2014-3448/): File upload in bss continuity cms project:bss continuty cms (critical 9.8)
- [CVE-2014-3447](https://insights.sbomify.com/CVE-2014-3447/): Denial of service in bss continuity cms project:bss continuty cms (high 7.5)
- [CVE-2014-3446](https://insights.sbomify.com/CVE-2014-3446/): SQL injection in bss:continuity cms (high 7.5)
- [CVE-2014-3445](https://insights.sbomify.com/CVE-2014-3445/): Auth bypass in handsomeweb:sos webpages (critical 9.8)
- [CVE-2014-3444](https://insights.sbomify.com/CVE-2014-3444/): Memory corruption in realnetworks:realplayer (critical 9.3)
- [CVE-2014-3443](https://insights.sbomify.com/CVE-2014-3443/): Memory corruption in jetaudio:jetaudio (medium 4.3)
- [CVE-2014-3442](https://insights.sbomify.com/CVE-2014-3442/): Memory corruption in nullsoft:winamp (medium 4.3)
- [CVE-2014-3441](https://insights.sbomify.com/CVE-2014-3441/): Memory corruption in videolan:vlc media player (medium 4.3)
- [CVE-2014-3440](https://insights.sbomify.com/CVE-2014-3440/): Command injection in broadcom:symantec critical system protection (critical 9.0)
- [CVE-2014-3439](https://insights.sbomify.com/CVE-2014-3439/): Other in symantec:endpoint protection manager (medium 6.1)
- [CVE-2014-3438](https://insights.sbomify.com/CVE-2014-3438/): Cross-site scripting in symantec:endpoint protection manager (medium 4.3)
- [CVE-2014-3437](https://insights.sbomify.com/CVE-2014-3437/): XML external entity in symantec:endpoint protection manager (high 7.5)
- [CVE-2014-3436](https://insights.sbomify.com/CVE-2014-3436/): Denial of service in symantec:encryption desktop (medium 5.0)
- [CVE-2014-3434](https://insights.sbomify.com/CVE-2014-3434/): Memory corruption in symantec:endpoint protection (medium 6.9)
- [CVE-2014-3433](https://insights.sbomify.com/CVE-2014-3433/): Cross-site scripting in symantec:data insight (medium 4.3)
- [CVE-2014-3432](https://insights.sbomify.com/CVE-2014-3432/): Cross-site scripting in symantec:data insight (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/54/