# Vulnerabilities published in 2014


- [CVE-2014-2575](https://insights.sbomify.com/CVE-2014-2575/): Path traversal in devexpress:aspxfilemanager control for webforms and mvc (medium 6.5)
- [CVE-2014-2573](https://insights.sbomify.com/CVE-2014-2573/): OpenStack Nova VMWare driver leaks rescued images (low 2.3)
- [CVE-2014-2572](https://insights.sbomify.com/CVE-2014-2572/): Moodle attackers to modify grade metadata (medium 4.0)
- [CVE-2014-2571](https://insights.sbomify.com/CVE-2014-2571/): Moodle cross-site scripting (XSS) vulnerability (low 3.5)
- [CVE-2014-2570](https://insights.sbomify.com/CVE-2014-2570/): Cross-site scripting in php font lib project:php font lib (medium 4.3)
- [CVE-2014-2568](https://insights.sbomify.com/CVE-2014-2568/): Use after free in canonical:ubuntu linux (low 2.9)
- [CVE-2014-2567](https://insights.sbomify.com/CVE-2014-2567/): Information disclosure in trojita project:trojita (medium 4.3)
- [CVE-2014-2565](https://insights.sbomify.com/CVE-2014-2565/): Command injection in bluecoat:content analysis system (medium 6.5)
- [CVE-2014-2560](https://insights.sbomify.com/CVE-2014-2560/): Information disclosure in phoner:phonerlite (high 7.5)
- [CVE-2014-2559](https://insights.sbomify.com/CVE-2014-2559/): Cross-site request forgery in twitget project:twitget (medium 6.8)
- [CVE-2014-2558](https://insights.sbomify.com/CVE-2014-2558/): Code injection in skyphe:file-gallery (medium 6.5)
- [CVE-2014-2554](https://insights.sbomify.com/CVE-2014-2554/): Other in opensuse:opensuse (medium 4.3)
- [CVE-2014-2553](https://insights.sbomify.com/CVE-2014-2553/): Cross-site scripting in otrs:otrs (low 3.5)
- [CVE-2014-2552](https://insights.sbomify.com/CVE-2014-2552/): Missing authorization in brookinsconsulting:collected information export (critical 9.8)
- [CVE-2014-2550](https://insights.sbomify.com/CVE-2014-2550/): Cross-site request forgery in disable comments:disable comments project (high 8.8)
- [CVE-2014-2545](https://insights.sbomify.com/CVE-2014-2545/): Information disclosure in tibco:managed file transfer command center (medium 5.0)
- [CVE-2014-2544](https://insights.sbomify.com/CVE-2014-2544/): Other in tibco:analyst (high 7.5)
- [CVE-2014-2543](https://insights.sbomify.com/CVE-2014-2543/): Memory corruption in tibco:messaging appliance (high 7.5)
- [CVE-2014-2542](https://insights.sbomify.com/CVE-2014-2542/): Cross-site scripting in tibco:messaging appliance (medium 4.3)
- [CVE-2014-2541](https://insights.sbomify.com/CVE-2014-2541/): Missing authorization in tibco:messaging appliance (medium 5.0)
- [CVE-2014-2540](https://insights.sbomify.com/CVE-2014-2540/): SQL injection in orbitscripts:orbit open ad server (high 7.5)
- [CVE-2014-2538](https://insights.sbomify.com/CVE-2014-2538/): rack-ssl Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2014-2537](https://insights.sbomify.com/CVE-2014-2537/): Denial of service in sophos:unified threat management (high 7.8)
- [CVE-2014-2536](https://insights.sbomify.com/CVE-2014-2536/): Path traversal in intel:expressway cloud access 360 (medium 4.3)
- [CVE-2014-2535](https://insights.sbomify.com/CVE-2014-2535/): Path traversal in mcafee:web gateway (medium 4.0)
- [CVE-2014-2534](https://insights.sbomify.com/CVE-2014-2534/): Information disclosure in blackberry:qnx neutrino rtos (medium 4.9)
- [CVE-2014-2533](https://insights.sbomify.com/CVE-2014-2533/): Privilege escalation in blackberry:qnx neutrino rtos (high 7.2)
- [CVE-2014-2532](https://insights.sbomify.com/CVE-2014-2532/): Security feature bypass in openbsd:openssh (medium 4.2)
- [CVE-2014-2531](https://insights.sbomify.com/CVE-2014-2531/): SQL injection in interworx:web control panel (medium 6.5)
- [CVE-2014-2528](https://insights.sbomify.com/CVE-2014-2528/): Command injection in kdirstat project:kdirstat (medium 6.8)
- [CVE-2014-2527](https://insights.sbomify.com/CVE-2014-2527/): Command injection in kdirstat project:kdirstat (medium 6.8)
- [CVE-2014-2526](https://insights.sbomify.com/CVE-2014-2526/): Cross-site scripting in barracudadrive:barracudadrive (medium 6.1)
- [CVE-2014-2525](https://insights.sbomify.com/CVE-2014-2525/): Memory corruption in opensuse:leap (medium 6.8)
- [CVE-2014-2524](https://insights.sbomify.com/CVE-2014-2524/): Race condition in fedoraproject:fedora (low 3.3)
- [CVE-2014-2523](https://insights.sbomify.com/CVE-2014-2523/): Memory corruption in canonical:ubuntu linux (critical 10.0)
- [CVE-2014-2522](https://insights.sbomify.com/CVE-2014-2522/): Security feature bypass in haxx:curl (medium 4.0)
- [CVE-2014-2521](https://insights.sbomify.com/CVE-2014-2521/): Information disclosure in emc:documentum content server (medium 6.3)
- [CVE-2014-2520](https://insights.sbomify.com/CVE-2014-2520/): SQL injection in emc:documentum content server (medium 6.3)
- [CVE-2014-2519](https://insights.sbomify.com/CVE-2014-2519/): Misconfiguration in emc:recoverpoint appliance (medium 5.8)
- [CVE-2014-2518](https://insights.sbomify.com/CVE-2014-2518/): Cross-site request forgery in emc:digital assets manager (medium 6.8)
- [CVE-2014-2517](https://insights.sbomify.com/CVE-2014-2517/): Privilege escalation in emc:rsa archer egrc (medium 6.5)
- [CVE-2014-2516](https://insights.sbomify.com/CVE-2014-2516/): Open redirect in emc:rsa authentication manager (medium 5.8)
- [CVE-2014-2515](https://insights.sbomify.com/CVE-2014-2515/): Privilege escalation in emc:documentum d2 (high 8.5)
- [CVE-2014-2514](https://insights.sbomify.com/CVE-2014-2514/): Missing authorization in emc:documentum content server (high 8.2)
- [CVE-2014-2513](https://insights.sbomify.com/CVE-2014-2513/): Missing authorization in emc:documentum content server (high 8.2)
- [CVE-2014-2512](https://insights.sbomify.com/CVE-2014-2512/): Cross-site scripting in emc:documentum eroom (low 3.5)
- [CVE-2014-2511](https://insights.sbomify.com/CVE-2014-2511/): Cross-site scripting in emc:digital assets manager (medium 4.3)
- [CVE-2014-2510](https://insights.sbomify.com/CVE-2014-2510/): XML external entity in emc:centerstage (medium 6.8)
- [CVE-2014-2509](https://insights.sbomify.com/CVE-2014-2509/): Auth bypass in emc:smarts network configuration manager (medium 5.4)
- [CVE-2014-2508](https://insights.sbomify.com/CVE-2014-2508/): SQL injection in emc:documentum content server (high 7.5)
- [CVE-2014-2507](https://insights.sbomify.com/CVE-2014-2507/): Command injection in emc:documentum content server (high 8.5)
- [CVE-2014-2506](https://insights.sbomify.com/CVE-2014-2506/): Privilege escalation in emc:documentum content server (high 8.5)
- [CVE-2014-2505](https://insights.sbomify.com/CVE-2014-2505/): Other in emc:rsa archer egrc (medium 5.4)
- [CVE-2014-2504](https://insights.sbomify.com/CVE-2014-2504/): Missing authorization in emc:documentum d2 (critical 9.0)
- [CVE-2014-2503](https://insights.sbomify.com/CVE-2014-2503/): SQL injection in emc:documentum digital asset manager (high 7.5)
- [CVE-2014-2502](https://insights.sbomify.com/CVE-2014-2502/): Cross-site scripting in emc:rsa adaptive authentication hosted (medium 4.3)
- [CVE-2014-2497](https://insights.sbomify.com/CVE-2014-2497/): Null dereference in canonical:ubuntu linux (medium 4.3)
- [CVE-2014-2496](https://insights.sbomify.com/CVE-2014-2496/): Other in oracle:peoplesoft products (medium 5.5)
- [CVE-2014-2495](https://insights.sbomify.com/CVE-2014-2495/): Other in oracle:peoplesoft products (low 2.3)
- [CVE-2014-2494](https://insights.sbomify.com/CVE-2014-2494/): Denial of service in debian:debian linux (medium 4.0)
- [CVE-2014-2493](https://insights.sbomify.com/CVE-2014-2493/): Other in oracle:fusion middleware (medium 6.4)
- [CVE-2014-2492](https://insights.sbomify.com/CVE-2014-2492/): Other in oracle:supply chain products suite (medium 4.3)
- [CVE-2014-2491](https://insights.sbomify.com/CVE-2014-2491/): Other in oracle:siebel crm (medium 4.3)
- [CVE-2014-2490](https://insights.sbomify.com/CVE-2014-2490/): Other in debian:debian linux (critical 9.3)
- [CVE-2014-2489](https://insights.sbomify.com/CVE-2014-2489/): Other in oracle:vm virtualbox (medium 4.1)
- [CVE-2014-2488](https://insights.sbomify.com/CVE-2014-2488/): Information disclosure in oracle:vm virtualbox (low 1.0)
- [CVE-2014-2487](https://insights.sbomify.com/CVE-2014-2487/): Other in oracle:vm virtualbox (medium 6.9)
- [CVE-2014-2486](https://insights.sbomify.com/CVE-2014-2486/): Other in oracle:vm virtualbox (low 3.0)
- [CVE-2014-2485](https://insights.sbomify.com/CVE-2014-2485/): Other in oracle:siebel crm (low 1.4)
- [CVE-2014-2484](https://insights.sbomify.com/CVE-2014-2484/): Other in oracle:mysql (medium 6.5)
- [CVE-2014-2483](https://insights.sbomify.com/CVE-2014-2483/): Other in debian:debian linux (critical 9.3)
- [CVE-2014-2482](https://insights.sbomify.com/CVE-2014-2482/): Other in oracle:e-business suite (medium 5.5)
- [CVE-2014-2481](https://insights.sbomify.com/CVE-2014-2481/): Other in oracle:fusion middleware (medium 6.8)
- [CVE-2014-2480](https://insights.sbomify.com/CVE-2014-2480/): Other in oracle:fusion middleware (medium 6.8)
- [CVE-2014-2479](https://insights.sbomify.com/CVE-2014-2479/): Other in oracle:fusion middleware (medium 6.8)
- [CVE-2014-2478](https://insights.sbomify.com/CVE-2014-2478/): Other in oracle:database server (low 2.6)
- [CVE-2014-2477](https://insights.sbomify.com/CVE-2014-2477/): Other in oracle:vm virtualbox (low 3.6)
- [CVE-2014-2476](https://insights.sbomify.com/CVE-2014-2476/): Denial of service in oracle:virtualization (medium 5.0)
- [CVE-2014-2475](https://insights.sbomify.com/CVE-2014-2475/): Denial of service in oracle:virtualization (medium 5.0)
- [CVE-2014-2474](https://insights.sbomify.com/CVE-2014-2474/): Denial of service in oracle:virtualization (medium 5.0)
- [CVE-2014-2473](https://insights.sbomify.com/CVE-2014-2473/): Denial of service in oracle:virtualization (medium 5.0)
- [CVE-2014-2472](https://insights.sbomify.com/CVE-2014-2472/): Denial of service in oracle:virtualization (medium 5.0)
- [CVE-2014-2471](https://insights.sbomify.com/CVE-2014-2471/): Other in oracle:ilearning (medium 4.3)
- [CVE-2014-2470](https://insights.sbomify.com/CVE-2014-2470/): Other in oracle:fusion middleware (high 7.5)
- [CVE-2014-2469](https://insights.sbomify.com/CVE-2014-2469/): Denial of service in oracle:sunos (medium 5.0)
- [CVE-2014-2468](https://insights.sbomify.com/CVE-2014-2468/): Other in oracle:siebel crm (medium 4.3)
- [CVE-2014-2467](https://insights.sbomify.com/CVE-2014-2467/): Other in oracle:supply chain products suite (low 3.5)
- [CVE-2014-2466](https://insights.sbomify.com/CVE-2014-2466/): Other in oracle:supply chain products suite (low 2.1)
- [CVE-2014-2465](https://insights.sbomify.com/CVE-2014-2465/): Other in oracle:supply chain products suite (medium 4.3)
- [CVE-2014-2464](https://insights.sbomify.com/CVE-2014-2464/): Other in oracle:supply chain products suite (low 3.5)
- [CVE-2014-2463](https://insights.sbomify.com/CVE-2014-2463/): Other in oracle:virtualization (medium 4.3)
- [CVE-2014-2461](https://insights.sbomify.com/CVE-2014-2461/): Other in oracle:supply chain products suite (medium 5.0)
- [CVE-2014-2460](https://insights.sbomify.com/CVE-2014-2460/): Other in oracle:supply chain products suite (medium 4.0)
- [CVE-2014-2459](https://insights.sbomify.com/CVE-2014-2459/): Other in oracle:supply chain products suite (low 3.7)
- [CVE-2014-2458](https://insights.sbomify.com/CVE-2014-2458/): Other in oracle:supply chain products suite (medium 4.3)
- [CVE-2014-2457](https://insights.sbomify.com/CVE-2014-2457/): Other in oracle:supply chain products suite (medium 4.3)
- [CVE-2014-2456](https://insights.sbomify.com/CVE-2014-2456/): Other in oracle:peoplesoft products (medium 5.5)
- [CVE-2014-2455](https://insights.sbomify.com/CVE-2014-2455/): Other in oracle:hyperion (medium 6.0)
- [CVE-2014-2454](https://insights.sbomify.com/CVE-2014-2454/): Other in oracle:hyperion (medium 4.3)
- [CVE-2014-2453](https://insights.sbomify.com/CVE-2014-2453/): Other in oracle:hyperion (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/62/