# Vulnerabilities published in 2014


- [CVE-2014-3199](https://insights.sbomify.com/CVE-2014-3199/): Denial of service in google:chrome (medium 5.0)
- [CVE-2014-3198](https://insights.sbomify.com/CVE-2014-3198/): Memory corruption in google:chrome (medium 5.0)
- [CVE-2014-3197](https://insights.sbomify.com/CVE-2014-3197/): Information disclosure in google:chrome (medium 5.0)
- [CVE-2014-3196](https://insights.sbomify.com/CVE-2014-3196/): Security feature bypass in google:chrome (high 7.5)
- [CVE-2014-3195](https://insights.sbomify.com/CVE-2014-3195/): Information disclosure in google:chrome (medium 5.0)
- [CVE-2014-3194](https://insights.sbomify.com/CVE-2014-3194/): Use after free in google:chrome (high 7.5)
- [CVE-2014-3193](https://insights.sbomify.com/CVE-2014-3193/): Use after free in google:chrome (high 7.5)
- [CVE-2014-3192](https://insights.sbomify.com/CVE-2014-3192/): Use after free in apple:iphone os (high 7.5)
- [CVE-2014-3191](https://insights.sbomify.com/CVE-2014-3191/): Use after free in google:chrome (high 7.5)
- [CVE-2014-3190](https://insights.sbomify.com/CVE-2014-3190/): Use after free in google:chrome (high 7.5)
- [CVE-2014-3189](https://insights.sbomify.com/CVE-2014-3189/): Memory corruption in google:chrome (high 7.5)
- [CVE-2014-3188](https://insights.sbomify.com/CVE-2014-3188/): Code injection in google:chrome (critical 10.0)
- [CVE-2014-3187](https://insights.sbomify.com/CVE-2014-3187/): Security feature bypass in apple:iphone os (medium 6.8)
- [CVE-2014-3186](https://insights.sbomify.com/CVE-2014-3186/): Memory corruption in canonical:ubuntu linux (medium 6.9)
- [CVE-2014-3185](https://insights.sbomify.com/CVE-2014-3185/): Memory corruption in linux:linux kernel (medium 6.9)
- [CVE-2014-3184](https://insights.sbomify.com/CVE-2014-3184/): Memory corruption in linux:linux kernel (medium 4.7)
- [CVE-2014-3183](https://insights.sbomify.com/CVE-2014-3183/): Memory corruption in linux:linux kernel (medium 6.9)
- [CVE-2014-3182](https://insights.sbomify.com/CVE-2014-3182/): Memory corruption in linux:linux kernel (medium 6.9)
- [CVE-2014-3181](https://insights.sbomify.com/CVE-2014-3181/): Memory corruption in linux:linux kernel (medium 6.9)
- [CVE-2014-3180](https://insights.sbomify.com/CVE-2014-3180/): Memory corruption in kernel (critical 9.1)
- [CVE-2014-3179](https://insights.sbomify.com/CVE-2014-3179/): Other in google:chrome (high 7.5)
- [CVE-2014-3178](https://insights.sbomify.com/CVE-2014-3178/): Use after free in google:chrome (high 7.5)
- [CVE-2014-3177](https://insights.sbomify.com/CVE-2014-3177/): Code injection in google:chrome (critical 10.0)
- [CVE-2014-3176](https://insights.sbomify.com/CVE-2014-3176/): Code injection in google:chrome (critical 10.0)
- [CVE-2014-3175](https://insights.sbomify.com/CVE-2014-3175/): Memory corruption in google:chrome (critical 10.0)
- [CVE-2014-3174](https://insights.sbomify.com/CVE-2014-3174/): Race condition in google:chrome (medium 5.0)
- [CVE-2014-3173](https://insights.sbomify.com/CVE-2014-3173/): Memory corruption in google:chrome (medium 5.0)
- [CVE-2014-3172](https://insights.sbomify.com/CVE-2014-3172/): Security feature bypass in google:chrome (medium 6.4)
- [CVE-2014-3171](https://insights.sbomify.com/CVE-2014-3171/): Use after free in google:chrome (high 7.5)
- [CVE-2014-3170](https://insights.sbomify.com/CVE-2014-3170/): Security feature bypass in google:chrome (medium 6.4)
- [CVE-2014-3169](https://insights.sbomify.com/CVE-2014-3169/): Use after free in debian:debian linux (high 7.5)
- [CVE-2014-3168](https://insights.sbomify.com/CVE-2014-3168/): Use after free in debian:debian linux (high 7.5)
- [CVE-2014-3167](https://insights.sbomify.com/CVE-2014-3167/): Other in debian:debian linux (high 7.5)
- [CVE-2014-3166](https://insights.sbomify.com/CVE-2014-3166/): Information disclosure in debian:debian linux (medium 4.3)
- [CVE-2014-3165](https://insights.sbomify.com/CVE-2014-3165/): Use after free in debian:debian linux (high 7.5)
- [CVE-2014-3164](https://insights.sbomify.com/CVE-2014-3164/): Null dereference in google:android (high 7.5)
- [CVE-2014-3162](https://insights.sbomify.com/CVE-2014-3162/): Other in debian:debian linux (medium 5.0)
- [CVE-2014-3161](https://insights.sbomify.com/CVE-2014-3161/): Security feature bypass in google:chrome (high 7.5)
- [CVE-2014-3160](https://insights.sbomify.com/CVE-2014-3160/): Security feature bypass in debian:debian linux (medium 6.8)
- [CVE-2014-3159](https://insights.sbomify.com/CVE-2014-3159/): Security feature bypass in google:chrome (medium 6.4)
- [CVE-2014-3158](https://insights.sbomify.com/CVE-2014-3158/): Integer overflow in point-to-point protocol project:point-to-point protocol (high 7.5)
- [CVE-2014-3157](https://insights.sbomify.com/CVE-2014-3157/): Memory corruption in google:chrome (high 7.5)
- [CVE-2014-3156](https://insights.sbomify.com/CVE-2014-3156/): Memory corruption in google:chrome (high 7.5)
- [CVE-2014-3155](https://insights.sbomify.com/CVE-2014-3155/): Memory corruption in google:chrome (medium 5.0)
- [CVE-2014-3154](https://insights.sbomify.com/CVE-2014-3154/): Use after free in google:chrome (high 7.5)
- [CVE-2014-3153](https://insights.sbomify.com/CVE-2014-3153/): Linux Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2014-3152](https://insights.sbomify.com/CVE-2014-3152/): Integer overflow in fedoraproject:fedora (high 7.5)
- [CVE-2014-3150](https://insights.sbomify.com/CVE-2014-3150/): File upload in orange:livebox 1.1 firmware (high 8.8)
- [CVE-2014-3149](https://insights.sbomify.com/CVE-2014-3149/): Cross-site scripting in invisioncommunity:invision power board (medium 4.3)
- [CVE-2014-3148](https://insights.sbomify.com/CVE-2014-3148/): Cross-site scripting in ok web server project:ok web server (medium 4.3)
- [CVE-2014-3147](https://insights.sbomify.com/CVE-2014-3147/): Cross-site scripting in splunk:splunk (low 3.5)
- [CVE-2014-3146](https://insights.sbomify.com/CVE-2014-3146/): lxml Cross-site Scripting Via Control Characters (medium 6.1)
- [CVE-2014-3145](https://insights.sbomify.com/CVE-2014-3145/): Memory corruption in canonical:ubuntu linux (medium 4.9)
- [CVE-2014-3144](https://insights.sbomify.com/CVE-2014-3144/): Integer overflow in canonical:ubuntu linux (medium 4.9)
- [CVE-2014-3139](https://insights.sbomify.com/CVE-2014-3139/): Auth bypass in unitrends:enterprise backup (high 7.5)
- [CVE-2014-3138](https://insights.sbomify.com/CVE-2014-3138/): SQL injection in xerox:docushare (medium 6.5)
- [CVE-2014-3137](https://insights.sbomify.com/CVE-2014-3137/): Bottle does not properly limit content-types (medium 6.8)
- [CVE-2014-3136](https://insights.sbomify.com/CVE-2014-3136/): Cross-site request forgery in dlink:dwr-113 firmware (high 8.8)
- [CVE-2014-3135](https://insights.sbomify.com/CVE-2014-3135/): Cross-site scripting in vbulletin:vbulletin (medium 4.3)
- [CVE-2014-3134](https://insights.sbomify.com/CVE-2014-3134/): Cross-site scripting in sap:businessobjects (medium 4.3)
- [CVE-2014-3133](https://insights.sbomify.com/CVE-2014-3133/): Missing authorization in sap:netweaver java application server (medium 5.0)
- [CVE-2014-3132](https://insights.sbomify.com/CVE-2014-3132/): Missing authorization in sap:background processing (medium 4.0)
- [CVE-2014-3131](https://insights.sbomify.com/CVE-2014-3131/): Missing authorization in sap:profile maintenance (medium 4.0)
- [CVE-2014-3130](https://insights.sbomify.com/CVE-2014-3130/): Privilege escalation in sap:netweaver abap application server (medium 4.6)
- [CVE-2014-3129](https://insights.sbomify.com/CVE-2014-3129/): Information disclosure in sap:netweaver software lifecycle manager (medium 5.0)
- [CVE-2014-3127](https://insights.sbomify.com/CVE-2014-3127/): Path traversal in debian:dpkg (high 7.1)
- [CVE-2014-3125](https://insights.sbomify.com/CVE-2014-3125/): Other in xen:xen (medium 6.2)
- [CVE-2014-3124](https://insights.sbomify.com/CVE-2014-3124/): Memory corruption in xen:xen (medium 6.7)
- [CVE-2014-3123](https://insights.sbomify.com/CVE-2014-3123/): Cross-site scripting in wpgetready:nextcellent gallery (low 2.1)
- [CVE-2014-3122](https://insights.sbomify.com/CVE-2014-3122/): Denial of service in canonical:ubuntu linux (medium 4.9)
- [CVE-2014-3121](https://insights.sbomify.com/CVE-2014-3121/): Command injection in marc lehmann:rxvt-unicode (high 7.6)
- [CVE-2014-3120](https://insights.sbomify.com/CVE-2014-3120/): Elasticsearch Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2014-3119](https://insights.sbomify.com/CVE-2014-3119/): SQL injection in web2project:web2project (high 8.8)
- [CVE-2014-3115](https://insights.sbomify.com/CVE-2014-3115/): Cross-site request forgery in fortinet:fortiweb (medium 6.8)
- [CVE-2014-3114](https://insights.sbomify.com/CVE-2014-3114/): Command injection in ezpz-one-click-backup project:ezpz-one-click-backup (critical 9.8)
- [CVE-2014-3113](https://insights.sbomify.com/CVE-2014-3113/): Memory corruption in realnetworks:realplayer (critical 9.3)
- [CVE-2014-3111](https://insights.sbomify.com/CVE-2014-3111/): Cross-site scripting in fogproject:fog (low 3.5)
- [CVE-2014-3110](https://insights.sbomify.com/CVE-2014-3110/): Cross-site scripting in honeywell:falcon xlweb linux controller (medium 4.3)
- [CVE-2014-3106](https://insights.sbomify.com/CVE-2014-3106/): Auth bypass in ibm:rational clearcase (medium 5.0)
- [CVE-2014-3105](https://insights.sbomify.com/CVE-2014-3105/): Information disclosure in ibm:rational clearcase (medium 5.0)
- [CVE-2014-3104](https://insights.sbomify.com/CVE-2014-3104/): XML external entity in ibm:rational clearcase (medium 5.0)
- [CVE-2014-3103](https://insights.sbomify.com/CVE-2014-3103/): Information disclosure in ibm:rational clearcase (medium 5.0)
- [CVE-2014-3102](https://insights.sbomify.com/CVE-2014-3102/): Cross-site scripting in ibm:websphere portal (low 3.5)
- [CVE-2014-3101](https://insights.sbomify.com/CVE-2014-3101/): Auth bypass in ibm:rational clearcase (medium 5.0)
- [CVE-2014-3100](https://insights.sbomify.com/CVE-2014-3100/): Memory corruption in google:android (medium 5.1)
- [CVE-2014-3099](https://insights.sbomify.com/CVE-2014-3099/): Information disclosure in ibm:systems director (low 2.1)
- [CVE-2014-3097](https://insights.sbomify.com/CVE-2014-3097/): Open redirect in ibm:tivoli federated identity manager (medium 4.3)
- [CVE-2014-3096](https://insights.sbomify.com/CVE-2014-3096/): Cross-site scripting in ibm:curam social program management (low 3.5)
- [CVE-2014-3095](https://insights.sbomify.com/CVE-2014-3095/): Denial of service in ibm:db2 (low 3.5)
- [CVE-2014-3094](https://insights.sbomify.com/CVE-2014-3094/): Memory corruption in ibm:db2 (high 8.5)
- [CVE-2014-3093](https://insights.sbomify.com/CVE-2014-3093/): Information disclosure in ibm:powervc (low 2.1)
- [CVE-2014-3092](https://insights.sbomify.com/CVE-2014-3092/): Information disclosure in ibm:rational doors next generation (medium 5.0)
- [CVE-2014-3091](https://insights.sbomify.com/CVE-2014-3091/): Cross-site scripting in ibm:qradar security information and event manager (medium 5.0)
- [CVE-2014-3090](https://insights.sbomify.com/CVE-2014-3090/): Denial of service in ibm:rational clearcase (medium 5.0)
- [CVE-2014-3089](https://insights.sbomify.com/CVE-2014-3089/): Information disclosure in ibm:rational directory administrator (medium 4.9)
- [CVE-2014-3088](https://insights.sbomify.com/CVE-2014-3088/): File upload in ibm:sametime meeting server (medium 5.5)
- [CVE-2014-3087](https://insights.sbomify.com/CVE-2014-3087/): XML external entity in ibm:business process manager (medium 4.0)
- [CVE-2014-3086](https://insights.sbomify.com/CVE-2014-3086/): Privilege escalation in ibm:lotus domino (high 7.5)
- [CVE-2014-3085](https://insights.sbomify.com/CVE-2014-3085/): Command injection in ibm:global console manager 16 firmware (high 7.1)
- [CVE-2014-3084](https://insights.sbomify.com/CVE-2014-3084/): Missing authorization in ibm:maximo asset management (medium 4.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/57/