# Vulnerabilities published in 2014


- [CVE-2014-2112](https://insights.sbomify.com/CVE-2014-2112/): Denial of service in cisco:ios (high 7.8)
- [CVE-2014-2111](https://insights.sbomify.com/CVE-2014-2111/): Denial of service in cisco:ios (high 7.1)
- [CVE-2014-2109](https://insights.sbomify.com/CVE-2014-2109/): Denial of service in cisco:ios (high 7.8)
- [CVE-2014-2108](https://insights.sbomify.com/CVE-2014-2108/): Denial of service in cisco:ios (high 7.8)
- [CVE-2014-2107](https://insights.sbomify.com/CVE-2014-2107/): Denial of service in cisco:ios (high 7.1)
- [CVE-2014-2106](https://insights.sbomify.com/CVE-2014-2106/): Denial of service in cisco:ios (high 7.8)
- [CVE-2014-2104](https://insights.sbomify.com/CVE-2014-2104/): Cross-site scripting in cisco:unified communications domain manager (medium 4.3)
- [CVE-2014-2103](https://insights.sbomify.com/CVE-2014-2103/): Denial of service in cisco:intrusion prevention system (medium 6.8)
- [CVE-2014-2102](https://insights.sbomify.com/CVE-2014-2102/): Information disclosure in cisco:unified contact center express editor software (medium 4.0)
- [CVE-2014-2099](https://insights.sbomify.com/CVE-2014-2099/): Memory corruption in ffmpeg:ffmpeg (medium 6.8)
- [CVE-2014-2098](https://insights.sbomify.com/CVE-2014-2098/): Memory corruption in ffmpeg:ffmpeg (medium 6.8)
- [CVE-2014-2097](https://insights.sbomify.com/CVE-2014-2097/): Memory corruption in ffmpeg:ffmpeg (medium 6.8)
- [CVE-2014-2096](https://insights.sbomify.com/CVE-2014-2096/): Privilege escalation in catfish project:catfish (medium 4.6)
- [CVE-2014-2095](https://insights.sbomify.com/CVE-2014-2095/): Privilege escalation in catfish project:catfish (medium 4.6)
- [CVE-2014-2094](https://insights.sbomify.com/CVE-2014-2094/): Privilege escalation in catfish project:catfish (medium 4.6)
- [CVE-2014-2093](https://insights.sbomify.com/CVE-2014-2093/): Privilege escalation in catfish project:catfish (medium 4.6)
- [CVE-2014-2092](https://insights.sbomify.com/CVE-2014-2092/): Cross-site scripting in cmsmadesimple:cms made simple (medium 4.3)
- [CVE-2014-2091](https://insights.sbomify.com/CVE-2014-2091/): Cross-site scripting in atutor:atutor (low 3.5)
- [CVE-2014-2090](https://insights.sbomify.com/CVE-2014-2090/): Cross-site scripting in ilias:ilias (low 3.5)
- [CVE-2014-2089](https://insights.sbomify.com/CVE-2014-2089/): Code injection in ilias:ilias (medium 6.8)
- [CVE-2014-2088](https://insights.sbomify.com/CVE-2014-2088/): File upload in ilias:ilias (medium 6.5)
- [CVE-2014-2087](https://insights.sbomify.com/CVE-2014-2087/): Memory corruption in freedownloadmanager:free download manager (critical 9.3)
- [CVE-2014-2084](https://insights.sbomify.com/CVE-2014-2084/): Missing authorization in skyboxsecurity:skybox view appliance (high 8.5)
- [CVE-2014-2081](https://insights.sbomify.com/CVE-2014-2081/): SQL injection in iii:vtls-virtua (high 7.5)
- [CVE-2014-2080](https://insights.sbomify.com/CVE-2014-2080/): Cross-site scripting in modx:modx revolution (medium 4.3)
- [CVE-2014-2079](https://insights.sbomify.com/CVE-2014-2079/): Security feature bypass in debian:debian linux (medium 5.5)
- [CVE-2014-2078](https://insights.sbomify.com/CVE-2014-2078/): Information disclosure in open-xchange:open-xchange appsuite (medium 5.3)
- [CVE-2014-2077](https://insights.sbomify.com/CVE-2014-2077/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 4.3)
- [CVE-2014-2075](https://insights.sbomify.com/CVE-2014-2075/): Auth bypass in tibco:enterprise administrator (critical 10.0)
- [CVE-2014-2073](https://insights.sbomify.com/CVE-2014-2073/): Memory corruption in 3ds:catia (critical 9.8)
- [CVE-2014-2072](https://insights.sbomify.com/CVE-2014-2072/): Memory corruption in 3ds:catia (critical 9.8)
- [CVE-2014-2071](https://insights.sbomify.com/CVE-2014-2071/): Privilege escalation in arubanetworks:clearpass (high 7.1)
- [CVE-2014-2069](https://insights.sbomify.com/CVE-2014-2069/): Path traversal in eshtery.she7ata:eshtery cms (high 7.5)
- [CVE-2014-2068](https://insights.sbomify.com/CVE-2014-2068/): Jenkins allows attackers to obtain sensitive information (low 3.5)
- [CVE-2014-2067](https://insights.sbomify.com/CVE-2014-2067/): Jenkins cross-site scripting (XSS) vulnerability (low 3.5)
- [CVE-2014-2066](https://insights.sbomify.com/CVE-2014-2066/): Jenkins session fixation vulnerability (medium 6.8)
- [CVE-2014-2065](https://insights.sbomify.com/CVE-2014-2065/): Jenkins cross-site scripting (XSS) vulnerability (medium 4.3)
- [CVE-2014-2064](https://insights.sbomify.com/CVE-2014-2064/): Jenkins allows attackers to determine whether a user exists (medium 5.0)
- [CVE-2014-2063](https://insights.sbomify.com/CVE-2014-2063/): Jenkins Vulnerable to Clickjacking (high 7.5)
- [CVE-2014-2062](https://insights.sbomify.com/CVE-2014-2062/): Jenkins does not invalidate the API token when a user is deleted (medium 6.5)
- [CVE-2014-2061](https://insights.sbomify.com/CVE-2014-2061/): Jenkin allows attackers to obtain passwords by reading the HTML source code (medium 5.0)
- [CVE-2014-2060](https://insights.sbomify.com/CVE-2014-2060/): Jenkins allows Remote Attackers to Hijack Sessions (medium 5.0)
- [CVE-2014-2059](https://insights.sbomify.com/CVE-2014-2059/): Jenkins directory traversal vulnerability (medium 6.5)
- [CVE-2014-2058](https://insights.sbomify.com/CVE-2014-2058/): Jenkins allows attackers to execute arbitrary jobs (medium 6.5)
- [CVE-2014-2057](https://insights.sbomify.com/CVE-2014-2057/): Cross-site scripting in owncloud:owncloud (medium 4.3)
- [CVE-2014-2056](https://insights.sbomify.com/CVE-2014-2056/): XML external entity in owncloud:owncloud server (high 7.5)
- [CVE-2014-2055](https://insights.sbomify.com/CVE-2014-2055/): XXE in SabreDAV (high 7.5)
- [CVE-2014-2054](https://insights.sbomify.com/CVE-2014-2054/): PHPExcel vulnerable to XXE attacks through libxml (high 7.5)
- [CVE-2014-2053](https://insights.sbomify.com/CVE-2014-2053/): getID3 is vulnerable to XML External Entity (XXE) (high 7.5)
- [CVE-2014-2052](https://insights.sbomify.com/CVE-2014-2052/): XML external entity in owncloud:owncloud (critical 9.8)
- [CVE-2014-2051](https://insights.sbomify.com/CVE-2014-2051/): Other in owncloud:owncloud server (high 7.5)
- [CVE-2014-2050](https://insights.sbomify.com/CVE-2014-2050/): Cross-site request forgery in owncloud:owncloud (medium 6.5)
- [CVE-2014-2049](https://insights.sbomify.com/CVE-2014-2049/): Misconfiguration in owncloud:owncloud (medium 5.0)
- [CVE-2014-2048](https://insights.sbomify.com/CVE-2014-2048/): Auth bypass in owncloud:owncloud (critical 9.8)
- [CVE-2014-2047](https://insights.sbomify.com/CVE-2014-2047/): Auth bypass in owncloud:owncloud (medium 6.8)
- [CVE-2014-2046](https://insights.sbomify.com/CVE-2014-2046/): Missing authorization in broadcom:pipa c211 (critical 9.7)
- [CVE-2014-2045](https://insights.sbomify.com/CVE-2014-2045/): Cross-site scripting in viprinet:multichannel vpn router 300 firmware (medium 6.1)
- [CVE-2014-2044](https://insights.sbomify.com/CVE-2014-2044/): File upload in owncloud:owncloud (high 7.5)
- [CVE-2014-2043](https://insights.sbomify.com/CVE-2014-2043/): SQL injection in procentia:intellipen (medium 6.5)
- [CVE-2014-2042](https://insights.sbomify.com/CVE-2014-2042/): File upload in livetecs:timeline (high 7.5)
- [CVE-2014-2040](https://insights.sbomify.com/CVE-2014-2040/): Cross-site scripting in jordy meow:media file renamer (low 2.1)
- [CVE-2014-2039](https://insights.sbomify.com/CVE-2014-2039/): Denial of service in linux:linux kernel (medium 4.9)
- [CVE-2014-2038](https://insights.sbomify.com/CVE-2014-2038/): Information disclosure in canonical:ubuntu linux (low 2.1)
- [CVE-2014-2037](https://insights.sbomify.com/CVE-2014-2037/): Null dereference in xelerance:openswan (medium 5.0)
- [CVE-2014-2035](https://insights.sbomify.com/CVE-2014-2035/): Cross-site scripting in interworx:web control panel (medium 4.3)
- [CVE-2014-2034](https://insights.sbomify.com/CVE-2014-2034/): Auth bypass in sonatype:nexus (high 7.5)
- [CVE-2014-2033](https://insights.sbomify.com/CVE-2014-2033/): Auth bypass in bluecoat:proxysgos (high 7.9)
- [CVE-2014-2032](https://insights.sbomify.com/CVE-2014-2032/): Memory corruption in deadwood project:deadwood (medium 5.9)
- [CVE-2014-2031](https://insights.sbomify.com/CVE-2014-2031/): Memory corruption in deadwood project:deadwood (medium 5.9)
- [CVE-2014-2030](https://insights.sbomify.com/CVE-2014-2030/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2014-2029](https://insights.sbomify.com/CVE-2014-2029/): Supply chain in percona:toolkit (high 8.1)
- [CVE-2014-2027](https://insights.sbomify.com/CVE-2014-2027/): Deserialization in egroupware:egroupware (high 7.5)
- [CVE-2014-2026](https://insights.sbomify.com/CVE-2014-2026/): Cross-site scripting in unitedplanet:intrexx (medium 4.3)
- [CVE-2014-2025](https://insights.sbomify.com/CVE-2014-2025/): File upload in unitedplanet:intrexx (critical 9.8)
- [CVE-2014-2024](https://insights.sbomify.com/CVE-2014-2024/): Cross-site scripting in openclassifieds:open classifieds 2 (medium 4.3)
- [CVE-2014-2023](https://insights.sbomify.com/CVE-2014-2023/): SQL injection in tapatalk:tapatalk (critical 9.8)
- [CVE-2014-2022](https://insights.sbomify.com/CVE-2014-2022/): SQL injection in vbulletin:vbulletin (high 7.1)
- [CVE-2014-2021](https://insights.sbomify.com/CVE-2014-2021/): Cross-site scripting in vbulletin:vbulletin (low 3.5)
- [CVE-2014-2020](https://insights.sbomify.com/CVE-2014-2020/): Information disclosure in php:php (medium 5.0)
- [CVE-2014-2019](https://insights.sbomify.com/CVE-2014-2019/): Auth bypass in apple:iphone os (medium 4.6)
- [CVE-2014-2018](https://insights.sbomify.com/CVE-2014-2018/): Cross-site scripting in mozilla:seamonkey (medium 4.3)
- [CVE-2014-2017](https://insights.sbomify.com/CVE-2014-2017/): Other in oxidforge:eshop (medium 6.1)
- [CVE-2014-2016](https://insights.sbomify.com/CVE-2014-2016/): Cross-site scripting in oxid-esales:eshop (medium 4.3)
- [CVE-2014-2015](https://insights.sbomify.com/CVE-2014-2015/): Memory corruption in freeradius:freeradius (high 7.5)
- [CVE-2014-2014](https://insights.sbomify.com/CVE-2014-2014/): Weak cryptography in imapsync project:imapsync (medium 4.3)
- [CVE-2014-2013](https://insights.sbomify.com/CVE-2014-2013/): Memory corruption in artifex:mupdf (high 7.5)
- [CVE-2014-2009](https://insights.sbomify.com/CVE-2014-2009/): Information disclosure in mpay24 project:mpay24 (medium 5.0)
- [CVE-2014-2008](https://insights.sbomify.com/CVE-2014-2008/): SQL injection in mpay24 project:mpay24 (high 7.5)
- [CVE-2014-2006](https://insights.sbomify.com/CVE-2014-2006/): Cross-site scripting in intercom:web kyukincho (medium 4.3)
- [CVE-2014-2005](https://insights.sbomify.com/CVE-2014-2005/): Auth bypass in sophos:enterprise console (medium 6.8)
- [CVE-2014-2004](https://insights.sbomify.com/CVE-2014-2004/): Memory corruption in iij:seil\%2fb1 firmware (medium 5.0)
- [CVE-2014-2003](https://insights.sbomify.com/CVE-2014-2003/): Security feature bypass in justsystems:ichitaro (high 7.6)
- [CVE-2014-2002](https://insights.sbomify.com/CVE-2014-2002/): Cross-site scripting in c-board moyuku project:c-board moyuku (medium 4.3)
- [CVE-2014-2001](https://insights.sbomify.com/CVE-2014-2001/): Weak cryptography in jreast:jr east japan (medium 5.8)
- [CVE-2014-2000](https://insights.sbomify.com/CVE-2014-2000/): Information disclosure in ntt:050 plus (low 2.6)
- [CVE-2014-1999](https://insights.sbomify.com/CVE-2014-1999/): Code injection in fuelphp:fuelphp (high 7.5)
- [CVE-2014-1998](https://insights.sbomify.com/CVE-2014-1998/): Cross-site scripting in n-i-agroinformatics:soy cms (medium 4.3)
- [CVE-2014-1997](https://insights.sbomify.com/CVE-2014-1997/): Denial of service in aten:cn8000 (high 7.8)
- [CVE-2014-1996](https://insights.sbomify.com/CVE-2014-1996/): Missing authorization in cybozu:garoon (high 7.5)
- [CVE-2014-1995](https://insights.sbomify.com/CVE-2014-1995/): Cross-site scripting in cybozu:garoon (low 3.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/66/