# Vulnerabilities published in 2014 - [CVE-2014-3327](https://insights.sbomify.com/CVE-2014-3327/): Denial of service in cisco:ios (high 7.8) - [CVE-2014-3326](https://insights.sbomify.com/CVE-2014-3326/): SQL injection in cisco:security manager (medium 6.5) - [CVE-2014-3325](https://insights.sbomify.com/CVE-2014-3325/): Cross-site scripting in cisco:unified customer voice portal (medium 4.3) - [CVE-2014-3324](https://insights.sbomify.com/CVE-2014-3324/): Cross-site scripting in cisco:telepresence server software (medium 4.3) - [CVE-2014-3323](https://insights.sbomify.com/CVE-2014-3323/): Path traversal in cisco:unified contact center enterprise (medium 4.0) - [CVE-2014-3322](https://insights.sbomify.com/CVE-2014-3322/): Denial of service in cisco:asr 9000 rsp440 router (medium 6.1) - [CVE-2014-3321](https://insights.sbomify.com/CVE-2014-3321/): Denial of service in cisco:asr 9000 rsp440 router (medium 5.7) - [CVE-2014-3320](https://insights.sbomify.com/CVE-2014-3320/): Open redirect in cisco:unified communications domain manager (medium 5.8) - [CVE-2014-3319](https://insights.sbomify.com/CVE-2014-3319/): Path traversal in cisco:unified communications manager (medium 6.8) - [CVE-2014-3318](https://insights.sbomify.com/CVE-2014-3318/): Path traversal in cisco:unified communications manager (medium 4.0) - [CVE-2014-3317](https://insights.sbomify.com/CVE-2014-3317/): Path traversal in cisco:unified communications manager (medium 5.5) - [CVE-2014-3316](https://insights.sbomify.com/CVE-2014-3316/): File upload in cisco:unified communications manager (medium 4.0) - [CVE-2014-3315](https://insights.sbomify.com/CVE-2014-3315/): Cross-site scripting in cisco:unified communications manager (medium 4.3) - [CVE-2014-3314](https://insights.sbomify.com/CVE-2014-3314/): Security feature bypass in cisco:anyconnect secure mobility client (medium 5.0) - [CVE-2014-3313](https://insights.sbomify.com/CVE-2014-3313/): Cross-site scripting in cisco:spa901 1-line ip phone (medium 4.3) - [CVE-2014-3312](https://insights.sbomify.com/CVE-2014-3312/): Auth bypass in cisco:spa901 1-line ip phone (medium 6.9) - [CVE-2014-3311](https://insights.sbomify.com/CVE-2014-3311/): Memory corruption in cisco:webex meeting center (medium 5.1) - [CVE-2014-3310](https://insights.sbomify.com/CVE-2014-3310/): Missing authorization in cisco:webex meeting center (medium 4.3) - [CVE-2014-3309](https://insights.sbomify.com/CVE-2014-3309/): Security feature bypass in cisco:ios (medium 5.0) - [CVE-2014-3308](https://insights.sbomify.com/CVE-2014-3308/): Denial of service in cisco:asr 9000 rsp440 router (medium 6.4) - [CVE-2014-3307](https://insights.sbomify.com/CVE-2014-3307/): Command injection in cisco:universal small cell series firmware (medium 6.8) - [CVE-2014-3306](https://insights.sbomify.com/CVE-2014-3306/): Code injection in cisco:dpc3010 (critical 10.0) - [CVE-2014-3305](https://insights.sbomify.com/CVE-2014-3305/): Cross-site request forgery in cisco:webex meetings server (medium 6.8) - [CVE-2014-3304](https://insights.sbomify.com/CVE-2014-3304/): Information disclosure in cisco:webex meetings server (medium 5.0) - [CVE-2014-3303](https://insights.sbomify.com/CVE-2014-3303/): Information disclosure in cisco:webex meetings server (medium 4.0) - [CVE-2014-3302](https://insights.sbomify.com/CVE-2014-3302/): Weak cryptography in cisco:webex meetings server (medium 5.8) - [CVE-2014-3301](https://insights.sbomify.com/CVE-2014-3301/): Information disclosure in cisco:webex meetings server (medium 5.0) - [CVE-2014-3300](https://insights.sbomify.com/CVE-2014-3300/): Missing authorization in cisco:unified cdm application software (high 7.5) - [CVE-2014-3299](https://insights.sbomify.com/CVE-2014-3299/): Denial of service in cisco:ios (medium 6.8) - [CVE-2014-3298](https://insights.sbomify.com/CVE-2014-3298/): Information disclosure in cisco:cloud portal (medium 4.0) - [CVE-2014-3297](https://insights.sbomify.com/CVE-2014-3297/): Information disclosure in cisco:cloud portal (medium 4.0) - [CVE-2014-3296](https://insights.sbomify.com/CVE-2014-3296/): Information disclosure in cisco:webex meetings server (medium 4.0) - [CVE-2014-3295](https://insights.sbomify.com/CVE-2014-3295/): Auth bypass in cisco:nx-os (medium 4.8) - [CVE-2014-3294](https://insights.sbomify.com/CVE-2014-3294/): Information disclosure in cisco:webex meetings server (medium 4.0) - [CVE-2014-3293](https://insights.sbomify.com/CVE-2014-3293/): Denial of service in cisco:asr901 (medium 5.0) - [CVE-2014-3292](https://insights.sbomify.com/CVE-2014-3292/): Path traversal in cisco:unified communications manager (medium 5.5) - [CVE-2014-3291](https://insights.sbomify.com/CVE-2014-3291/): Null dereference in cisco:wireless lan controller (medium 5.7) - [CVE-2014-3290](https://insights.sbomify.com/CVE-2014-3290/): Information disclosure in cisco:ios xe (medium 4.8) - [CVE-2014-3289](https://insights.sbomify.com/CVE-2014-3289/): Cross-site scripting in cisco:content security management appliance (medium 4.3) - [CVE-2014-3287](https://insights.sbomify.com/CVE-2014-3287/): SQL injection in cisco:unified communications manager (medium 4.0) - [CVE-2014-3286](https://insights.sbomify.com/CVE-2014-3286/): Information disclosure in cisco:webex meetings server (medium 5.0) - [CVE-2014-3285](https://insights.sbomify.com/CVE-2014-3285/): Denial of service in cisco:wide area application services (medium 5.0) - [CVE-2014-3284](https://insights.sbomify.com/CVE-2014-3284/): Denial of service in cisco:asr 1001 (medium 6.1) - [CVE-2014-3283](https://insights.sbomify.com/CVE-2014-3283/): Open redirect in cisco:unified communications domain manager (medium 5.8) - [CVE-2014-3282](https://insights.sbomify.com/CVE-2014-3282/): Missing authorization in cisco:unified communications domain manager (medium 4.0) - [CVE-2014-3281](https://insights.sbomify.com/CVE-2014-3281/): Missing authorization in cisco:unified communications domain manager (medium 5.0) - [CVE-2014-3280](https://insights.sbomify.com/CVE-2014-3280/): Missing authorization in cisco:unified communications domain manager (medium 4.0) - [CVE-2014-3279](https://insights.sbomify.com/CVE-2014-3279/): Missing authorization in cisco:unified communications domain manager (medium 5.0) - [CVE-2014-3278](https://insights.sbomify.com/CVE-2014-3278/): Missing authorization in cisco:unified communications domain manager (medium 5.0) - [CVE-2014-3277](https://insights.sbomify.com/CVE-2014-3277/): Missing authorization in cisco:unified communications domain manager (medium 4.0) - [CVE-2014-3276](https://insights.sbomify.com/CVE-2014-3276/): Denial of service in cisco:identity services engine software (medium 4.0) - [CVE-2014-3275](https://insights.sbomify.com/CVE-2014-3275/): SQL injection in cisco:identity services engine software (medium 6.5) - [CVE-2014-3274](https://insights.sbomify.com/CVE-2014-3274/): Information disclosure in cisco:telepresence system software (medium 4.3) - [CVE-2014-3273](https://insights.sbomify.com/CVE-2014-3273/): Denial of service in cisco:ios (medium 6.1) - [CVE-2014-3272](https://insights.sbomify.com/CVE-2014-3272/): Privilege escalation in cisco:tidal enterprise scheduler (medium 6.0) - [CVE-2014-3271](https://insights.sbomify.com/CVE-2014-3271/): Denial of service in cisco:ios xr (medium 5.0) - [CVE-2014-3270](https://insights.sbomify.com/CVE-2014-3270/): Denial of service in cisco:ios xr (medium 5.0) - [CVE-2014-3269](https://insights.sbomify.com/CVE-2014-3269/): Denial of service in cisco:ios xe (medium 6.8) - [CVE-2014-3268](https://insights.sbomify.com/CVE-2014-3268/): Denial of service in cisco:ios (medium 5.0) - [CVE-2014-3267](https://insights.sbomify.com/CVE-2014-3267/): Cross-site request forgery in cisco:security manager (medium 6.8) - [CVE-2014-3266](https://insights.sbomify.com/CVE-2014-3266/): Cross-site scripting in cisco:security manager (medium 4.3) - [CVE-2014-3265](https://insights.sbomify.com/CVE-2014-3265/): Cross-site scripting in cisco:security manager (medium 4.3) - [CVE-2014-3264](https://insights.sbomify.com/CVE-2014-3264/): Denial of service in cisco:adaptive security appliance software (medium 6.3) - [CVE-2014-3263](https://insights.sbomify.com/CVE-2014-3263/): Denial of service in cisco:ios (medium 5.4) - [CVE-2014-3262](https://insights.sbomify.com/CVE-2014-3262/): Denial of service in cisco:ios (medium 4.3) - [CVE-2014-3261](https://insights.sbomify.com/CVE-2014-3261/): Memory corruption in cisco:cg-os (high 7.6) - [CVE-2014-3260](https://insights.sbomify.com/CVE-2014-3260/): Weak cryptography in pacom:1000 ccu gms (high 7.5) - [CVE-2014-3251](https://insights.sbomify.com/CVE-2014-3251/): Race condition in puppet:puppet enterprise (medium 4.4) - [CVE-2014-3250](https://insights.sbomify.com/CVE-2014-3250/): Security feature bypass in puppet:puppet (medium 6.5) - [CVE-2014-3249](https://insights.sbomify.com/CVE-2014-3249/): Information disclosure in puppet:puppet enterprise (medium 5.0) - [CVE-2014-3248](https://insights.sbomify.com/CVE-2014-3248/): facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability (medium 6.2) - [CVE-2014-3247](https://insights.sbomify.com/CVE-2014-3247/): Cross-site scripting in o-dyn:collabtive (medium 4.3) - [CVE-2014-3246](https://insights.sbomify.com/CVE-2014-3246/): SQL injection in o-dyn:collabtive (medium 6.5) - [CVE-2014-3244](https://insights.sbomify.com/CVE-2014-3244/): XML external entity in sugarcrm:sugarcrm (critical 9.8) - [CVE-2014-3243](https://insights.sbomify.com/CVE-2014-3243/): SOAPpy vulnerable to XXE attacks (medium 5.0) - [CVE-2014-3242](https://insights.sbomify.com/CVE-2014-3242/): SOAPpy vulnerable to XML External Entity attacks (medium 5.0) - [CVE-2014-3230](https://insights.sbomify.com/CVE-2014-3230/): Security feature bypass in LWP::Protocol::https (medium 5.9) - [CVE-2014-3227](https://insights.sbomify.com/CVE-2014-3227/): Path traversal in debian:dpkg (medium 6.4) - [CVE-2014-3225](https://insights.sbomify.com/CVE-2014-3225/): Cobbler Path Traversal vulnerability (medium 4.0) - [CVE-2014-3224](https://insights.sbomify.com/CVE-2014-3224/): Denial of service in Quidway S9700,Quidway S9300,Quidway S7700,Quidway S6700,Quidway S6300,Quidway S5700,Quidway S5300 Quidway S9700 V200R003C00SPC500,Quidway S9300 V200R003C00SPC500,Quidway S7700 V200R003C00SPC500,Quidway S6700 V200R003C00SPC300,Quidway S6300 V200R003C00SPC300,Quidway S5700 V200R003C00SPC300,Quidway S5300 V200R003C00SPC300 (high 7.5) - [CVE-2014-3223](https://insights.sbomify.com/CVE-2014-3223/): Denial of service in S9300,S2300,S3300,S5300,S6300 S9300 with software V100R006C00SPC500??S9300 with software V100R006C00SPC800,S2300,S3300,S5300,S6300 with software V100R006C00SPC800,V100R006C01SPC100, V100R006C03 (high 7.5) - [CVE-2014-3222](https://insights.sbomify.com/CVE-2014-3222/): Privilege escalation in eSpace Meeting V100R001C03SPC201 and the earlier versions (high 7.0) - [CVE-2014-3221](https://insights.sbomify.com/CVE-2014-3221/): Denial of service in Eudemon8000E V200R001C01SPC800 and earlier versions (high 7.5) - [CVE-2014-3220](https://insights.sbomify.com/CVE-2014-3220/): Missing authorization in f5:big-iq (critical 9.0) - [CVE-2014-3219](https://insights.sbomify.com/CVE-2014-3219/): Other in fedoraproject:fedora (high 7.8) - [CVE-2014-3216](https://insights.sbomify.com/CVE-2014-3216/): Denial of service in gomlab:gom media player (medium 4.3) - [CVE-2014-3215](https://insights.sbomify.com/CVE-2014-3215/): Privilege escalation in selinuxproject:policycoreutils (medium 6.9) - [CVE-2014-3214](https://insights.sbomify.com/CVE-2014-3214/): Denial of service in isc:bind (medium 5.0) - [CVE-2014-3211](https://insights.sbomify.com/CVE-2014-3211/): Publify vulnerable to DoS attack (high 7.5) - [CVE-2014-3210](https://insights.sbomify.com/CVE-2014-3210/): SQL injection in dotonpaper:booking system (medium 6.5) - [CVE-2014-3209](https://insights.sbomify.com/CVE-2014-3209/): Misconfiguration in nlnetlabs:ldns (low 2.1) - [CVE-2014-3208](https://insights.sbomify.com/CVE-2014-3208/): Memory corruption in askpop3d project:askpop3d (high 7.5) - [CVE-2014-3207](https://insights.sbomify.com/CVE-2014-3207/): Cross-site scripting in sks keyserver project:sks keyserver (medium 4.3) - [CVE-2014-3206](https://insights.sbomify.com/CVE-2014-3206/): Command injection in seagate:blackarmor nas 110 firmware (critical 9.8) - [CVE-2014-3205](https://insights.sbomify.com/CVE-2014-3205/): Hardcoded credentials in seagate:blackarmor nas 110 firmware (critical 9.8) - [CVE-2014-3204](https://insights.sbomify.com/CVE-2014-3204/): Security feature bypass in ayatana project:unity (medium 4.4) - [CVE-2014-3203](https://insights.sbomify.com/CVE-2014-3203/): Security feature bypass in ayatana project:unity (medium 4.4) - [CVE-2014-3202](https://insights.sbomify.com/CVE-2014-3202/): Security feature bypass in ayatana project:unity (medium 4.4) - [CVE-2014-3201](https://insights.sbomify.com/CVE-2014-3201/): Other in google:chrome (medium 5.0) - [CVE-2014-3200](https://insights.sbomify.com/CVE-2014-3200/): Other in google:chrome (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2014/page/56/