# Vulnerabilities published in 2014


- [CVE-2014-2949](https://insights.sbomify.com/CVE-2014-2949/): SQL injection in f5:arx data manager (medium 6.5)
- [CVE-2014-2948](https://insights.sbomify.com/CVE-2014-2948/): SQL injection in bizagi:business process management suite (medium 6.5)
- [CVE-2014-2947](https://insights.sbomify.com/CVE-2014-2947/): Cross-site scripting in bizagi:business process management suite (medium 4.3)
- [CVE-2014-2946](https://insights.sbomify.com/CVE-2014-2946/): Cross-site request forgery in huawei:e303 modem (medium 6.8)
- [CVE-2014-2942](https://insights.sbomify.com/CVE-2014-2942/): Weak cryptography in cobham:aviator 700d (high 7.2)
- [CVE-2014-2941](https://insights.sbomify.com/CVE-2014-2941/): Hardcoded credentials in cobham:ailor 6110 mini-c gmdss (high 7.1)
- [CVE-2014-2940](https://insights.sbomify.com/CVE-2014-2940/): Hardcoded credentials in cobham:sailor 6000 series firmware (critical 10.0)
- [CVE-2014-2939](https://insights.sbomify.com/CVE-2014-2939/): Cross-site scripting in alfresco:alfresco (medium 4.3)
- [CVE-2014-2938](https://insights.sbomify.com/CVE-2014-2938/): Missing authorization in hanon:faceid (high 8.3)
- [CVE-2014-2936](https://insights.sbomify.com/CVE-2014-2936/): Code injection in caldera:caldera (high 7.5)
- [CVE-2014-2935](https://insights.sbomify.com/CVE-2014-2935/): Command injection in caldera:caldera (critical 10.0)
- [CVE-2014-2934](https://insights.sbomify.com/CVE-2014-2934/): SQL injection in caldera:caldera (high 7.5)
- [CVE-2014-2933](https://insights.sbomify.com/CVE-2014-2933/): Path traversal in caldera:caldera (medium 5.0)
- [CVE-2014-2928](https://insights.sbomify.com/CVE-2014-2928/): Command injection in f5:big-ip access policy manager (high 7.1)
- [CVE-2014-2927](https://insights.sbomify.com/CVE-2014-2927/): Auth bypass in f5:arx (critical 9.3)
- [CVE-2014-2926](https://insights.sbomify.com/CVE-2014-2926/): Null dereference in kaseya:virtual system administrator (low 1.7)
- [CVE-2014-2925](https://insights.sbomify.com/CVE-2014-2925/): Cross-site scripting in asus:rt-ac68u (medium 4.3)
- [CVE-2014-2922](https://insights.sbomify.com/CVE-2014-2922/): Deserialization in pimcore:pimcore (medium 6.4)
- [CVE-2014-2921](https://insights.sbomify.com/CVE-2014-2921/): Pimcore Vulnerable to PHP Object Injection Attacks (high 7.5)
- [CVE-2014-2916](https://insights.sbomify.com/CVE-2014-2916/): Cross-site request forgery in phplist:phplist (medium 6.8)
- [CVE-2014-2915](https://insights.sbomify.com/CVE-2014-2915/): Missing authorization in xen:xen (medium 5.5)
- [CVE-2014-2914](https://insights.sbomify.com/CVE-2014-2914/): Missing authorization in fishshell:fish (critical 9.8)
- [CVE-2014-2913](https://insights.sbomify.com/CVE-2014-2913/): Command injection in nagios:remote plugin executor (high 7.5)
- [CVE-2014-2909](https://insights.sbomify.com/CVE-2014-2909/): Other in siemens:simatic s7 cpu-1211c (medium 5.8)
- [CVE-2014-2908](https://insights.sbomify.com/CVE-2014-2908/): Cross-site scripting in siemens:simatic s7 cpu-1211c (medium 4.3)
- [CVE-2014-2907](https://insights.sbomify.com/CVE-2014-2907/): Denial of service in wireshark:wireshark (medium 4.3)
- [CVE-2014-2906](https://insights.sbomify.com/CVE-2014-2906/): Race condition in fishshell:fish (high 7.0)
- [CVE-2014-2905](https://insights.sbomify.com/CVE-2014-2905/): Privilege escalation in fishshell:fish (medium 6.9)
- [CVE-2014-2904](https://insights.sbomify.com/CVE-2014-2904/): Auth bypass in wolfssl:wolfssl (high 7.5)
- [CVE-2014-2903](https://insights.sbomify.com/CVE-2014-2903/): Security feature bypass in wolfssl:wolfssl (medium 5.9)
- [CVE-2014-2902](https://insights.sbomify.com/CVE-2014-2902/): Security feature bypass in wolfssl:wolfssl (high 7.5)
- [CVE-2014-2901](https://insights.sbomify.com/CVE-2014-2901/): Security feature bypass in wolfssl:wolfssl (high 7.5)
- [CVE-2014-2900](https://insights.sbomify.com/CVE-2014-2900/): Security feature bypass in yassl:cyassl (medium 5.8)
- [CVE-2014-2899](https://insights.sbomify.com/CVE-2014-2899/): Null dereference in yassl:cyassl (medium 5.0)
- [CVE-2014-2898](https://insights.sbomify.com/CVE-2014-2898/): Memory corruption in wolfssl:wolfssl (critical 9.8)
- [CVE-2014-2897](https://insights.sbomify.com/CVE-2014-2897/): Memory corruption in wolfssl:wolfssl (critical 9.8)
- [CVE-2014-2896](https://insights.sbomify.com/CVE-2014-2896/): Memory corruption in wolfssl:wolfssl (critical 9.8)
- [CVE-2014-2894](https://insights.sbomify.com/CVE-2014-2894/): Memory corruption in qemu:qemu (high 7.2)
- [CVE-2014-2893](https://insights.sbomify.com/CVE-2014-2893/): Race condition in llvm:clang (low 1.9)
- [CVE-2014-2892](https://insights.sbomify.com/CVE-2014-2892/): Memory corruption in libmms project:libmms (high 7.5)
- [CVE-2014-2891](https://insights.sbomify.com/CVE-2014-2891/): Null dereference in debian:strongswan (medium 5.0)
- [CVE-2014-2890](https://insights.sbomify.com/CVE-2014-2890/): Cross-site scripting in siege:phpmyid (medium 4.3)
- [CVE-2014-2889](https://insights.sbomify.com/CVE-2014-2889/): Memory corruption in linux:linux kernel (medium 4.6)
- [CVE-2014-2888](https://insights.sbomify.com/CVE-2014-2888/): sfpagent Command Injection vulnerability (high 7.5)
- [CVE-2014-2886](https://insights.sbomify.com/CVE-2014-2886/): Command injection in nongnu:gksu (medium 6.8)
- [CVE-2014-2885](https://insights.sbomify.com/CVE-2014-2885/): Integer overflow in truecrypt project:truecrypt (high 7.1)
- [CVE-2014-2884](https://insights.sbomify.com/CVE-2014-2884/): Information disclosure in truecrypt project:truecrypt (low 3.3)
- [CVE-2014-2882](https://insights.sbomify.com/CVE-2014-2882/): Other in citrix:netscaler access gateway (critical 10.0)
- [CVE-2014-2881](https://insights.sbomify.com/CVE-2014-2881/): Weak cryptography in citrix:netscaler access gateway (critical 10.0)
- [CVE-2014-2880](https://insights.sbomify.com/CVE-2014-2880/): Open redirect in oracle:identity manager (medium 5.8)
- [CVE-2014-2879](https://insights.sbomify.com/CVE-2014-2879/): Cross-site scripting in sonicwall:email security appliance (medium 4.3)
- [CVE-2014-2875](https://insights.sbomify.com/CVE-2014-2875/): Weak cryptography in keplerproject:cgilua (medium 6.1)
- [CVE-2014-2874](https://insights.sbomify.com/CVE-2014-2874/): Command injection in paperthin:commonspot content server (critical 10.0)
- [CVE-2014-2873](https://insights.sbomify.com/CVE-2014-2873/): Missing authorization in paperthin:commonspot content server (medium 5.0)
- [CVE-2014-2872](https://insights.sbomify.com/CVE-2014-2872/): Information disclosure in paperthin:commonspot content server (medium 5.0)
- [CVE-2014-2871](https://insights.sbomify.com/CVE-2014-2871/): Information disclosure in paperthin:commonspot content server (medium 5.0)
- [CVE-2014-2870](https://insights.sbomify.com/CVE-2014-2870/): Weak cryptography in paperthin:commonspot content server (medium 5.0)
- [CVE-2014-2869](https://insights.sbomify.com/CVE-2014-2869/): Information disclosure in paperthin:commonspot content server (medium 5.0)
- [CVE-2014-2868](https://insights.sbomify.com/CVE-2014-2868/): Code injection in paperthin:commonspot content server (high 7.5)
- [CVE-2014-2867](https://insights.sbomify.com/CVE-2014-2867/): File upload in paperthin:commonspot content server (critical 10.0)
- [CVE-2014-2866](https://insights.sbomify.com/CVE-2014-2866/): Security feature bypass in paperthin:commonspot content server (critical 10.0)
- [CVE-2014-2865](https://insights.sbomify.com/CVE-2014-2865/): Security feature bypass in paperthin:commonspot content server (high 7.5)
- [CVE-2014-2864](https://insights.sbomify.com/CVE-2014-2864/): Path traversal in paperthin:commonspot content server (critical 10.0)
- [CVE-2014-2863](https://insights.sbomify.com/CVE-2014-2863/): Path traversal in paperthin:commonspot content server (critical 10.0)
- [CVE-2014-2862](https://insights.sbomify.com/CVE-2014-2862/): Missing authorization in paperthin:commonspot content server (medium 6.5)
- [CVE-2014-2861](https://insights.sbomify.com/CVE-2014-2861/): Cross-site scripting in paperthin:commonspot content server (medium 4.3)
- [CVE-2014-2860](https://insights.sbomify.com/CVE-2014-2860/): Cross-site scripting in paperthin:commonspot content server (medium 4.3)
- [CVE-2014-2859](https://insights.sbomify.com/CVE-2014-2859/): Missing authorization in paperthin:commonspot content server (high 7.5)
- [CVE-2014-2858](https://insights.sbomify.com/CVE-2014-2858/): Path traversal in gopivotal:grails (medium 5.0)
- [CVE-2014-2857](https://insights.sbomify.com/CVE-2014-2857/): Information disclosure in gopivotal:grails (medium 5.0)
- [CVE-2014-2856](https://insights.sbomify.com/CVE-2014-2856/): Cross-site scripting in apple:cups (medium 4.3)
- [CVE-2014-2855](https://insights.sbomify.com/CVE-2014-2855/): Denial of service in samba:rsync (high 7.8)
- [CVE-2014-2854](https://insights.sbomify.com/CVE-2014-2854/): Cross-site scripting in semantictitle project:semantictitle (medium 4.3)
- [CVE-2014-2853](https://insights.sbomify.com/CVE-2014-2853/): Cross-site scripting vulnerability in includes/actions/InfoAction.php (medium 4.3)
- [CVE-2014-2852](https://insights.sbomify.com/CVE-2014-2852/): Denial of service in openafs:openafs (medium 5.0)
- [CVE-2014-2851](https://insights.sbomify.com/CVE-2014-2851/): Integer overflow in debian:debian linux (medium 6.9)
- [CVE-2014-2850](https://insights.sbomify.com/CVE-2014-2850/): Command injection in sophos:web appliance (high 8.5)
- [CVE-2014-2849](https://insights.sbomify.com/CVE-2014-2849/): Missing authorization in sophos:web appliance (high 8.5)
- [CVE-2014-2848](https://insights.sbomify.com/CVE-2014-2848/): Race condition in tenable:nessus (medium 6.9)
- [CVE-2014-2847](https://insights.sbomify.com/CVE-2014-2847/): SQL injection in construtiva:cis manager cms (high 7.5)
- [CVE-2014-2846](https://insights.sbomify.com/CVE-2014-2846/): Path traversal in westerndigital:arkeia virtual appliance firmware (high 7.5)
- [CVE-2014-2845](https://insights.sbomify.com/CVE-2014-2845/): Security feature bypass in cyberduck:cyberduck (medium 5.9)
- [CVE-2014-2844](https://insights.sbomify.com/CVE-2014-2844/): Cross-site scripting in f-secure:secure messaging secure gateway (low 3.5)
- [CVE-2014-2843](https://insights.sbomify.com/CVE-2014-2843/): Cross-site scripting in infoware:mapsuite (medium 6.1)
- [CVE-2014-2842](https://insights.sbomify.com/CVE-2014-2842/): Denial of service in juniper:screenos (high 7.8)
- [CVE-2014-2839](https://insights.sbomify.com/CVE-2014-2839/): SQL injection in dev4press:gd star rating (high 7.5)
- [CVE-2014-2838](https://insights.sbomify.com/CVE-2014-2838/): Cross-site request forgery in dev4press:gd star rating (medium 6.8)
- [CVE-2014-2830](https://insights.sbomify.com/CVE-2014-2830/): Memory corruption in debian:cifs-utils (critical 10.0)
- [CVE-2014-2829](https://insights.sbomify.com/CVE-2014-2829/): Erlang Solutions MongooseIM vulnerable to denial of service (DoS) via crafted XMPP stream (high 7.8)
- [CVE-2014-2828](https://insights.sbomify.com/CVE-2014-2828/): OpenStack Identity (Keystone) DoS through V3 API authentication chaining (high 7.8)
- [CVE-2014-2827](https://insights.sbomify.com/CVE-2014-2827/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-2826](https://insights.sbomify.com/CVE-2014-2826/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-2825](https://insights.sbomify.com/CVE-2014-2825/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-2824](https://insights.sbomify.com/CVE-2014-2824/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-2823](https://insights.sbomify.com/CVE-2014-2823/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-2822](https://insights.sbomify.com/CVE-2014-2822/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-2821](https://insights.sbomify.com/CVE-2014-2821/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-2820](https://insights.sbomify.com/CVE-2014-2820/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2014-2819](https://insights.sbomify.com/CVE-2014-2819/): Privilege escalation in microsoft:internet explorer (medium 6.8)
- [CVE-2014-2818](https://insights.sbomify.com/CVE-2014-2818/): Memory corruption in microsoft:internet explorer (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/59/