# Vulnerabilities published in 2014


- [CVE-2014-2690](https://insights.sbomify.com/CVE-2014-2690/): Information disclosure in citrix:vdi-in-a-box (low 2.1)
- [CVE-2014-2689](https://insights.sbomify.com/CVE-2014-2689/): Cross-site scripting in slashes\&dots:offria (medium 4.3)
- [CVE-2014-2686](https://insights.sbomify.com/CVE-2014-2686/): Ansible unsafe evaluation of some strings (high 7.5)
- [CVE-2014-2685](https://insights.sbomify.com/CVE-2014-2685/): Auth bypass in zend:zend framework (high 7.5)
- [CVE-2014-2684](https://insights.sbomify.com/CVE-2014-2684/): Auth bypass in zend:zend framework (medium 6.4)
- [CVE-2014-2683](https://insights.sbomify.com/CVE-2014-2683/): Several Zend Products Vulnerable to XXE and XEE attacks (medium 5.0)
- [CVE-2014-2682](https://insights.sbomify.com/CVE-2014-2682/): Several Zend Products Vulnerable to XXE and XEE attacks (medium 6.8)
- [CVE-2014-2681](https://insights.sbomify.com/CVE-2014-2681/): Several Zend Products Vulnerable to XXE and XEE attacks (medium 6.4)
- [CVE-2014-2680](https://insights.sbomify.com/CVE-2014-2680/): Security feature bypass in xmind:xmind (high 8.1)
- [CVE-2014-2678](https://insights.sbomify.com/CVE-2014-2678/): Null dereference in fedoraproject:fedora (medium 4.7)
- [CVE-2014-2675](https://insights.sbomify.com/CVE-2014-2675/): Cross-site request forgery in wp-html-sitemap project:wp-html-sitemap (medium 6.5)
- [CVE-2014-2674](https://insights.sbomify.com/CVE-2014-2674/): Path traversal in ajax-pagination project:ajax-pagination (high 7.5)
- [CVE-2014-2673](https://insights.sbomify.com/CVE-2014-2673/): Denial of service in linux:linux kernel (medium 4.7)
- [CVE-2014-2672](https://insights.sbomify.com/CVE-2014-2672/): Race condition in linux:linux kernel (high 7.1)
- [CVE-2014-2671](https://insights.sbomify.com/CVE-2014-2671/): Memory corruption in microsoft:windows media player (medium 6.8)
- [CVE-2014-2670](https://insights.sbomify.com/CVE-2014-2670/): Cross-site scripting in zohocorp:manageengine opstor (low 3.5)
- [CVE-2014-2669](https://insights.sbomify.com/CVE-2014-2669/): Integer overflow in postgresql:postgresql (medium 6.5)
- [CVE-2014-2668](https://insights.sbomify.com/CVE-2014-2668/): Denial of service in apache:couchdb (medium 5.0)
- [CVE-2014-2667](https://insights.sbomify.com/CVE-2014-2667/): Race condition in python:python (low 3.3)
- [CVE-2014-2665](https://insights.sbomify.com/CVE-2014-2665/): Cross-site request forgery in mediawiki:mediawiki (medium 4.0)
- [CVE-2014-2664](https://insights.sbomify.com/CVE-2014-2664/): File upload in x2engine:x2crm (high 8.8)
- [CVE-2014-2659](https://insights.sbomify.com/CVE-2014-2659/): Cross-site request forgery in papercut:papercut mf (medium 6.8)
- [CVE-2014-2658](https://insights.sbomify.com/CVE-2014-2658/): Denial of service in papercut:papercut mf (medium 5.0)
- [CVE-2014-2657](https://insights.sbomify.com/CVE-2014-2657/): Other in papercut:papercut mf (high 7.5)
- [CVE-2014-2655](https://insights.sbomify.com/CVE-2014-2655/): SQL injection in postfix admin project:postfix admin (medium 6.5)
- [CVE-2014-2654](https://insights.sbomify.com/CVE-2014-2654/): SQL injection in mobfox:madserve (medium 6.5)
- [CVE-2014-2653](https://insights.sbomify.com/CVE-2014-2653/): Security feature bypass in openbsd:openssh (medium 6.5)
- [CVE-2014-2652](https://insights.sbomify.com/CVE-2014-2652/): SQL injection in unify:openscape deployment service (critical 9.8)
- [CVE-2014-2651](https://insights.sbomify.com/CVE-2014-2651/): Auth bypass in atos:openscape desk phone ip 35g eco firmware (critical 9.8)
- [CVE-2014-2650](https://insights.sbomify.com/CVE-2014-2650/): Command injection in atos:openscape desk phone ip 35g eco firmware (critical 9.8)
- [CVE-2014-2649](https://insights.sbomify.com/CVE-2014-2649/): Other in hp:operations manager (high 7.5)
- [CVE-2014-2648](https://insights.sbomify.com/CVE-2014-2648/): Other in hp:operations manager (critical 10.0)
- [CVE-2014-2647](https://insights.sbomify.com/CVE-2014-2647/): Cross-site scripting in hp:operations agent (medium 4.3)
- [CVE-2014-2646](https://insights.sbomify.com/CVE-2014-2646/): Security feature bypass in hp:network automation (high 7.2)
- [CVE-2014-2645](https://insights.sbomify.com/CVE-2014-2645/): Other in hp:systems insight manager (medium 4.3)
- [CVE-2014-2644](https://insights.sbomify.com/CVE-2014-2644/): Cross-site scripting in hp:systems insight manager (medium 4.3)
- [CVE-2014-2643](https://insights.sbomify.com/CVE-2014-2643/): Privilege escalation in hp:systems insight manager (medium 6.5)
- [CVE-2014-2642](https://insights.sbomify.com/CVE-2014-2642/): Other in hp:system management homepage (medium 4.3)
- [CVE-2014-2641](https://insights.sbomify.com/CVE-2014-2641/): Cross-site request forgery in hp:system management homepage (medium 6.0)
- [CVE-2014-2640](https://insights.sbomify.com/CVE-2014-2640/): Cross-site scripting in hp:system management homepage (medium 4.3)
- [CVE-2014-2639](https://insights.sbomify.com/CVE-2014-2639/): Privilege escalation in hp:mpio device specific module manager (medium 4.6)
- [CVE-2014-2638](https://insights.sbomify.com/CVE-2014-2638/): Other in hp:sprinter (high 7.5)
- [CVE-2014-2637](https://insights.sbomify.com/CVE-2014-2637/): Other in hp:sprinter (high 7.5)
- [CVE-2014-2636](https://insights.sbomify.com/CVE-2014-2636/): Other in hp:sprinter (high 7.5)
- [CVE-2014-2635](https://insights.sbomify.com/CVE-2014-2635/): Other in hp:sprinter (high 7.5)
- [CVE-2014-2634](https://insights.sbomify.com/CVE-2014-2634/): Security feature bypass in hp:service manager (critical 9.4)
- [CVE-2014-2633](https://insights.sbomify.com/CVE-2014-2633/): Cross-site request forgery in hp:service manager (medium 6.8)
- [CVE-2014-2632](https://insights.sbomify.com/CVE-2014-2632/): Other in hp:service manager (critical 10.0)
- [CVE-2014-2631](https://insights.sbomify.com/CVE-2014-2631/): Privilege escalation in hp:application lifecycle management (medium 4.6)
- [CVE-2014-2630](https://insights.sbomify.com/CVE-2014-2630/): Privilege escalation in hp:operations agent (medium 4.4)
- [CVE-2014-2629](https://insights.sbomify.com/CVE-2014-2629/): Security feature bypass in hp:nonstop safeguard security (medium 4.0)
- [CVE-2014-2628](https://insights.sbomify.com/CVE-2014-2628/): Information disclosure in hp:enterprise maps (medium 4.0)
- [CVE-2014-2627](https://insights.sbomify.com/CVE-2014-2627/): Privilege escalation in hp:nonstop netbatch (medium 5.2)
- [CVE-2014-2626](https://insights.sbomify.com/CVE-2014-2626/): Path traversal in hp:network virtualization (critical 9.4)
- [CVE-2014-2625](https://insights.sbomify.com/CVE-2014-2625/): Path traversal in hp:network virtualization (high 8.5)
- [CVE-2014-2624](https://insights.sbomify.com/CVE-2014-2624/): Other in hp:network node manager i (critical 10.0)
- [CVE-2014-2623](https://insights.sbomify.com/CVE-2014-2623/): Other in hp:storage data protector (critical 10.0)
- [CVE-2014-2622](https://insights.sbomify.com/CVE-2014-2622/): Other in hp:imc branch intelligent management system software module (high 8.5)
- [CVE-2014-2621](https://insights.sbomify.com/CVE-2014-2621/): Information disclosure in hp:imc branch intelligent management system software module (high 7.8)
- [CVE-2014-2620](https://insights.sbomify.com/CVE-2014-2620/): Information disclosure in hp:imc branch intelligent management system software module (high 7.8)
- [CVE-2014-2619](https://insights.sbomify.com/CVE-2014-2619/): Information disclosure in hp:imc branch intelligent management system software module (high 7.8)
- [CVE-2014-2618](https://insights.sbomify.com/CVE-2014-2618/): Information disclosure in hp:imc branch intelligent management system software module (high 7.8)
- [CVE-2014-2617](https://insights.sbomify.com/CVE-2014-2617/): Other in hp:universal configuration management database (critical 10.0)
- [CVE-2014-2616](https://insights.sbomify.com/CVE-2014-2616/): Other in hp:universal configuration management database (high 7.5)
- [CVE-2014-2615](https://insights.sbomify.com/CVE-2014-2615/): Other in hp:universal configuration management database (high 7.5)
- [CVE-2014-2614](https://insights.sbomify.com/CVE-2014-2614/): Auth bypass in hp:sitescope (high 7.5)
- [CVE-2014-2613](https://insights.sbomify.com/CVE-2014-2613/): Privilege escalation in hp:release control (critical 9.0)
- [CVE-2014-2612](https://insights.sbomify.com/CVE-2014-2612/): Information disclosure in hp:release control (medium 4.0)
- [CVE-2014-2611](https://insights.sbomify.com/CVE-2014-2611/): Path traversal in hp:executive scorecard (critical 9.0)
- [CVE-2014-2610](https://insights.sbomify.com/CVE-2014-2610/): Path traversal in hp:executive scorecard (high 7.1)
- [CVE-2014-2609](https://insights.sbomify.com/CVE-2014-2609/): Auth bypass in hp:executive scorecard (critical 10.0)
- [CVE-2014-2608](https://insights.sbomify.com/CVE-2014-2608/): Information disclosure in hpe:smart update manager (high 7.2)
- [CVE-2014-2607](https://insights.sbomify.com/CVE-2014-2607/): Other in hp:operations manager i (high 8.5)
- [CVE-2014-2606](https://insights.sbomify.com/CVE-2014-2606/): Privilege escalation in hp:storage management software (critical 9.0)
- [CVE-2014-2605](https://insights.sbomify.com/CVE-2014-2605/): Information disclosure in hp:storage management software (medium 5.0)
- [CVE-2014-2604](https://insights.sbomify.com/CVE-2014-2604/): Denial of service in hp:icewall mcrp (medium 5.0)
- [CVE-2014-2603](https://insights.sbomify.com/CVE-2014-2603/): Information disclosure in hp:8\/20q fibre channel switch 16 port (low 1.7)
- [CVE-2014-2602](https://insights.sbomify.com/CVE-2014-2602/): Privilege escalation in hp:oneview (medium 6.5)
- [CVE-2014-2601](https://insights.sbomify.com/CVE-2014-2601/): Denial of service in hp:integrated lights-out 2 firmware (high 7.8)
- [CVE-2014-2600](https://insights.sbomify.com/CVE-2014-2600/): Denial of service in hp:icewall identity manager (medium 4.0)
- [CVE-2014-2599](https://insights.sbomify.com/CVE-2014-2599/): Denial of service in xen:xen (medium 4.9)
- [CVE-2014-2598](https://insights.sbomify.com/CVE-2014-2598/): Cross-site request forgery in quick page\/post redirect project:quick page\/post redirect (medium 6.8)
- [CVE-2014-2597](https://insights.sbomify.com/CVE-2014-2597/): Memory corruption in remote-rac:rac server (medium 4.9)
- [CVE-2014-2595](https://insights.sbomify.com/CVE-2014-2595/): Auth bypass in barracuda:web application firewall (critical 9.8)
- [CVE-2014-2593](https://insights.sbomify.com/CVE-2014-2593/): Command injection in arubanetworks:clearpass policy manager (critical 9.0)
- [CVE-2014-2592](https://insights.sbomify.com/CVE-2014-2592/): File upload in arubanetworks:web management portal (critical 9.8)
- [CVE-2014-2591](https://insights.sbomify.com/CVE-2014-2591/): Privilege escalation in bmc:patrol agent (medium 6.9)
- [CVE-2014-2590](https://insights.sbomify.com/CVE-2014-2590/): Denial of service in siemens:ruggedcom rugged operating system (medium 5.0)
- [CVE-2014-2589](https://insights.sbomify.com/CVE-2014-2589/): Cross-site scripting in sonicwall:nsa 2400 (medium 4.3)
- [CVE-2014-2588](https://insights.sbomify.com/CVE-2014-2588/): Path traversal in mcafee:asset manager (medium 4.0)
- [CVE-2014-2587](https://insights.sbomify.com/CVE-2014-2587/): SQL injection in mcafee:asset manager (medium 6.5)
- [CVE-2014-2586](https://insights.sbomify.com/CVE-2014-2586/): Cross-site scripting in mcafee:cloud single sign on (medium 4.3)
- [CVE-2014-2585](https://insights.sbomify.com/CVE-2014-2585/): Path traversal in owncloud:owncloud server (medium 4.9)
- [CVE-2014-2583](https://insights.sbomify.com/CVE-2014-2583/): Path traversal in linux-pam:linux-pam (medium 5.8)
- [CVE-2014-2581](https://insights.sbomify.com/CVE-2014-2581/): Information disclosure in fedoraproject:fedora (high 7.5)
- [CVE-2014-2580](https://insights.sbomify.com/CVE-2014-2580/): Denial of service in xen:xen (medium 4.4)
- [CVE-2014-2579](https://insights.sbomify.com/CVE-2014-2579/): Cross-site request forgery in xcloner:xcloner (high 7.6)
- [CVE-2014-2578](https://insights.sbomify.com/CVE-2014-2578/): Cross-site scripting in splunk:splunk (medium 4.3)
- [CVE-2014-2577](https://insights.sbomify.com/CVE-2014-2577/): Cross-site scripting in bottomline:transform foundation server (medium 4.3)
- [CVE-2014-2576](https://insights.sbomify.com/CVE-2014-2576/): Security feature bypass in claws-mail:claws-mail (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/61/