# Vulnerabilities published in 2014


- [CVE-2014-2346](https://insights.sbomify.com/CVE-2014-2346/): COPA-DATA zenon DNP3 Improper Input Validation (medium 4.0)
- [CVE-2014-2345](https://insights.sbomify.com/CVE-2014-2345/): COPA-DATA zenon DNP3 Improper Input Validation (high 7.1)
- [CVE-2014-2343](https://insights.sbomify.com/CVE-2014-2343/): Triangle MicroWorks SCADA Data Gateway Resource Exhaustion (low 1.2)
- [CVE-2014-2342](https://insights.sbomify.com/CVE-2014-2342/): Triangle MicroWorks SCADA Data Gateway Resource Exhaustion (medium 4.3)
- [CVE-2014-2341](https://insights.sbomify.com/CVE-2014-2341/): Auth bypass in cubecart:cubecart (medium 6.8)
- [CVE-2014-2340](https://insights.sbomify.com/CVE-2014-2340/): Cross-site request forgery in xcloner:xcloner (medium 6.8)
- [CVE-2014-2339](https://insights.sbomify.com/CVE-2014-2339/): SQL injection in sir:gnuboard (medium 6.5)
- [CVE-2014-2338](https://insights.sbomify.com/CVE-2014-2338/): Auth bypass in strongswan:strongswan (medium 6.4)
- [CVE-2014-2336](https://insights.sbomify.com/CVE-2014-2336/): Cross-site scripting in fortinet:fortianalyzer firmware (medium 4.3)
- [CVE-2014-2335](https://insights.sbomify.com/CVE-2014-2335/): Cross-site scripting in fortinet:fortianalyzer firmware (medium 4.3)
- [CVE-2014-2334](https://insights.sbomify.com/CVE-2014-2334/): Cross-site scripting in fortinet:fortianalyzer firmware (medium 4.3)
- [CVE-2014-2333](https://insights.sbomify.com/CVE-2014-2333/): Cross-site scripting in marcel brinkkemper:lazyest-gallery (low 2.6)
- [CVE-2014-2332](https://insights.sbomify.com/CVE-2014-2332/): Missing authorization in check mk project:check mk (medium 5.5)
- [CVE-2014-2331](https://insights.sbomify.com/CVE-2014-2331/): Code injection in check mk project:check mk (high 8.5)
- [CVE-2014-2330](https://insights.sbomify.com/CVE-2014-2330/): Cross-site request forgery in check mk project:check mk (medium 6.8)
- [CVE-2014-2329](https://insights.sbomify.com/CVE-2014-2329/): Cross-site scripting in check mk project:check mk (low 3.5)
- [CVE-2014-2328](https://insights.sbomify.com/CVE-2014-2328/): Command injection in cacti:cacti (medium 6.5)
- [CVE-2014-2327](https://insights.sbomify.com/CVE-2014-2327/): Cross-site request forgery in cacti:cacti (medium 6.8)
- [CVE-2014-2326](https://insights.sbomify.com/CVE-2014-2326/): Cross-site scripting in cacti:cacti (medium 4.3)
- [CVE-2014-2325](https://insights.sbomify.com/CVE-2014-2325/): Cross-site scripting in proxmox:mail gateway (medium 4.3)
- [CVE-2014-2324](https://insights.sbomify.com/CVE-2014-2324/): Path traversal in contec:sv-cpt-mc310 firmware (medium 5.0)
- [CVE-2014-2323](https://insights.sbomify.com/CVE-2014-2323/): SQL injection in debian:debian linux (critical 9.8)
- [CVE-2014-2322](https://insights.sbomify.com/CVE-2014-2322/): Arabic Prawn allows remote attackers to execute arbitrary commands via shell metacharacters (high 7.5)
- [CVE-2014-2321](https://insights.sbomify.com/CVE-2014-2321/): Auth bypass in zte:f460 (critical 10.0)
- [CVE-2014-2319](https://insights.sbomify.com/CVE-2014-2319/): Weak cryptography in powerarchiver:powerarchiver (medium 5.0)
- [CVE-2014-2318](https://insights.sbomify.com/CVE-2014-2318/): SQL injection in atcom:netvolution (high 7.5)
- [CVE-2014-2317](https://insights.sbomify.com/CVE-2014-2317/): SQL injection in opendocman:opendocman (medium 6.8)
- [CVE-2014-2316](https://insights.sbomify.com/CVE-2014-2316/): SQL injection in zemanta:search everything (high 7.5)
- [CVE-2014-2315](https://insights.sbomify.com/CVE-2014-2315/): Cross-site scripting in shinephp:thank you counter button (medium 4.3)
- [CVE-2014-2314](https://insights.sbomify.com/CVE-2014-2314/): Path traversal in atlassian:jira (medium 4.3)
- [CVE-2014-2313](https://insights.sbomify.com/CVE-2014-2313/): Path traversal in atlassian:jira (medium 4.3)
- [CVE-2014-2312](https://insights.sbomify.com/CVE-2014-2312/): Other in intel:thermald (medium 5.5)
- [CVE-2014-2311](https://insights.sbomify.com/CVE-2014-2311/): SQL injection in modx:modx revolution (high 7.5)
- [CVE-2014-2310](https://insights.sbomify.com/CVE-2014-2310/): Denial of service in net-snmp:net-snmp (medium 5.0)
- [CVE-2014-2309](https://insights.sbomify.com/CVE-2014-2309/): Denial of service in linux:linux kernel (medium 6.1)
- [CVE-2014-2304](https://insights.sbomify.com/CVE-2014-2304/): Denial of service in projectfloodlight:open sdn controller (high 7.5)
- [CVE-2014-2303](https://insights.sbomify.com/CVE-2014-2303/): SQL injection in webedition:webedition cms (high 7.5)
- [CVE-2014-2302](https://insights.sbomify.com/CVE-2014-2302/): Deserialization in webedition:webedition cms (critical 9.8)
- [CVE-2014-2301](https://insights.sbomify.com/CVE-2014-2301/): Information disclosure in bscw:bscw (medium 5.0)
- [CVE-2014-2299](https://insights.sbomify.com/CVE-2014-2299/): Memory corruption in wireshark:wireshark (critical 9.3)
- [CVE-2014-2297](https://insights.sbomify.com/CVE-2014-2297/): Cross-site scripting in videowhisper:videowhisper live streaming integration (medium 6.1)
- [CVE-2014-2296](https://insights.sbomify.com/CVE-2014-2296/): XML external entity in apereo:cas server (high 8.8)
- [CVE-2014-2294](https://insights.sbomify.com/CVE-2014-2294/): Deserialization in openwebanalytics:open web analytics (critical 9.8)
- [CVE-2014-2293](https://insights.sbomify.com/CVE-2014-2293/): Deserialization in zikula:zikula application framework (critical 9.8)
- [CVE-2014-2292](https://insights.sbomify.com/CVE-2014-2292/): Privilege escalation in juniper:ive os (high 7.2)
- [CVE-2014-2291](https://insights.sbomify.com/CVE-2014-2291/): Cross-site scripting in juniper:ive os (low 3.5)
- [CVE-2014-2289](https://insights.sbomify.com/CVE-2014-2289/): Null dereference in digium:asterisk (low 3.5)
- [CVE-2014-2288](https://insights.sbomify.com/CVE-2014-2288/): Denial of service in digium:asterisk (medium 4.3)
- [CVE-2014-2287](https://insights.sbomify.com/CVE-2014-2287/): Denial of service in digium:asterisk (low 3.5)
- [CVE-2014-2286](https://insights.sbomify.com/CVE-2014-2286/): Denial of service in digium:asterisk (high 7.5)
- [CVE-2014-2285](https://insights.sbomify.com/CVE-2014-2285/): Null dereference in net-snmp:net-snmp (medium 4.3)
- [CVE-2014-2284](https://insights.sbomify.com/CVE-2014-2284/): Denial of service in net-snmp:net-snmp (medium 5.0)
- [CVE-2014-2283](https://insights.sbomify.com/CVE-2014-2283/): Use after free in wireshark:wireshark (medium 4.3)
- [CVE-2014-2282](https://insights.sbomify.com/CVE-2014-2282/): Memory corruption in wireshark:wireshark (medium 4.3)
- [CVE-2014-2281](https://insights.sbomify.com/CVE-2014-2281/): Memory corruption in wireshark:wireshark (medium 4.3)
- [CVE-2014-2280](https://insights.sbomify.com/CVE-2014-2280/): Cross-site scripting in seeddms:seeddms (medium 4.3)
- [CVE-2014-2279](https://insights.sbomify.com/CVE-2014-2279/): Path traversal in seeddms:seeddms (medium 6.4)
- [CVE-2014-2278](https://insights.sbomify.com/CVE-2014-2278/): File upload in seeddms:seeddms (medium 5.1)
- [CVE-2014-2277](https://insights.sbomify.com/CVE-2014-2277/): Race condition in perltidy project:perltidy (high 7.1)
- [CVE-2014-2276](https://insights.sbomify.com/CVE-2014-2276/): File upload in emc:connectrix manager (medium 5.0)
- [CVE-2014-2274](https://insights.sbomify.com/CVE-2014-2274/): Cross-site request forgery in subscribe to comments reloaded project:subscribe to comments reloaded (high 8.8)
- [CVE-2014-2273](https://insights.sbomify.com/CVE-2014-2273/): Memory corruption in huawei:p2-6011 firmware (high 7.2)
- [CVE-2014-2271](https://insights.sbomify.com/CVE-2014-2271/): Security feature bypass in huawei:p2-6011 firmware (high 8.1)
- [CVE-2014-2270](https://insights.sbomify.com/CVE-2014-2270/): Memory corruption in canonical:ubuntu linux (medium 4.3)
- [CVE-2014-2269](https://insights.sbomify.com/CVE-2014-2269/): Business logic in vtiger:vtiger crm (medium 6.4)
- [CVE-2014-2268](https://insights.sbomify.com/CVE-2014-2268/): Missing authorization in vtiger:vtiger crm (medium 5.0)
- [CVE-2014-2265](https://insights.sbomify.com/CVE-2014-2265/): Security feature bypass in rocklobster:contact form 7 (medium 5.0)
- [CVE-2014-2264](https://insights.sbomify.com/CVE-2014-2264/): Hardcoded credentials in synology:diskstation manager (high 7.8)
- [CVE-2014-2263](https://insights.sbomify.com/CVE-2014-2263/): Memory corruption in ffmpeg:ffmpeg (medium 6.8)
- [CVE-2014-2262](https://insights.sbomify.com/CVE-2014-2262/): Memory corruption in sas:base sas (critical 9.3)
- [CVE-2014-2260](https://insights.sbomify.com/CVE-2014-2260/): Ajenti Cross-site scripting (XSS) vulnerability (low 3.5)
- [CVE-2014-2259](https://insights.sbomify.com/CVE-2014-2259/): Denial of service in siemens:simatic s7-1500 cpu firmware (high 7.8)
- [CVE-2014-2258](https://insights.sbomify.com/CVE-2014-2258/): Denial of service in siemens:simatic s7 cpu-1211c (high 7.8)
- [CVE-2014-2257](https://insights.sbomify.com/CVE-2014-2257/): Denial of service in siemens:simatic s7-1500 cpu firmware (high 7.8)
- [CVE-2014-2256](https://insights.sbomify.com/CVE-2014-2256/): Denial of service in siemens:simatic s7 cpu-1211c (high 7.8)
- [CVE-2014-2255](https://insights.sbomify.com/CVE-2014-2255/): Denial of service in siemens:simatic s7-1500 cpu firmware (high 7.8)
- [CVE-2014-2254](https://insights.sbomify.com/CVE-2014-2254/): Denial of service in siemens:simatic s7 cpu-1211c (high 7.8)
- [CVE-2014-2253](https://insights.sbomify.com/CVE-2014-2253/): Denial of service in siemens:simatic s7-1500 cpu firmware (medium 6.1)
- [CVE-2014-2252](https://insights.sbomify.com/CVE-2014-2252/): Denial of service in siemens:simatic s7 cpu-1211c (medium 6.1)
- [CVE-2014-2251](https://insights.sbomify.com/CVE-2014-2251/): Weak cryptography in siemens:simatic s7-1500 cpu firmware (high 8.3)
- [CVE-2014-2250](https://insights.sbomify.com/CVE-2014-2250/): Weak cryptography in siemens:simatic s7 cpu-1211c (high 8.3)
- [CVE-2014-2249](https://insights.sbomify.com/CVE-2014-2249/): Cross-site request forgery in siemens:simatic s7-1500 cpu firmware (medium 5.8)
- [CVE-2014-2248](https://insights.sbomify.com/CVE-2014-2248/): Open redirect in siemens:simatic s7-1500 cpu firmware (medium 4.3)
- [CVE-2014-2247](https://insights.sbomify.com/CVE-2014-2247/): Other in siemens:simatic s7-1500 cpu firmware (medium 5.8)
- [CVE-2014-2246](https://insights.sbomify.com/CVE-2014-2246/): Cross-site scripting in siemens:simatic s7-1500 cpu firmware (medium 4.3)
- [CVE-2014-2245](https://insights.sbomify.com/CVE-2014-2245/): SQL injection in cmsmadesimple:cms made simple (medium 6.0)
- [CVE-2014-2244](https://insights.sbomify.com/CVE-2014-2244/): Cross-site scripting in mediawiki:mediawiki (medium 4.3)
- [CVE-2014-2243](https://insights.sbomify.com/CVE-2014-2243/): Race condition in mediawiki:mediawiki (medium 5.8)
- [CVE-2014-2242](https://insights.sbomify.com/CVE-2014-2242/): Cross-site scripting in mediawiki:mediawiki (medium 4.3)
- [CVE-2014-2241](https://insights.sbomify.com/CVE-2014-2241/): Denial of service in canonical:ubuntu linux (medium 6.8)
- [CVE-2014-2240](https://insights.sbomify.com/CVE-2014-2240/): Memory corruption in freetype:freetype (high 7.5)
- [CVE-2014-2238](https://insights.sbomify.com/CVE-2014-2238/): SQL injection in mantisbt:mantisbt (medium 6.5)
- [CVE-2014-2237](https://insights.sbomify.com/CVE-2014-2237/): OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend (medium 5.0)
- [CVE-2014-2236](https://insights.sbomify.com/CVE-2014-2236/): Cross-site scripting in askbot:askbot (medium 4.3)
- [CVE-2014-2235](https://insights.sbomify.com/CVE-2014-2235/): Cross-site scripting in askbot:askbot (medium 4.3)
- [CVE-2014-2234](https://insights.sbomify.com/CVE-2014-2234/): Security feature bypass in apple:mac os x (medium 6.4)
- [CVE-2014-2233](https://insights.sbomify.com/CVE-2014-2233/): Server-side request forgery in infoware:mapsuite (medium 5.0)
- [CVE-2014-2232](https://insights.sbomify.com/CVE-2014-2232/): Path traversal in infoware:mapsuite (medium 5.0)
- [CVE-2014-2231](https://insights.sbomify.com/CVE-2014-2231/): Cross-site scripting in i-doit:i-doit (medium 4.3)
- [CVE-2014-2230](https://insights.sbomify.com/CVE-2014-2230/): Open redirect in openx:openx (medium 5.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/64/