Vulnerabilities published in 2014
8,436 vulnerabilities were published in 2014: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 67 of 85.
- CVE-2014-1994 Cross-site scripting in cybozu:garoon
- CVE-2014-1993 Missing authorization in cybozu:garoon
- CVE-2014-1992 Cross-site scripting in cybozu:garoon
- CVE-2014-1991 Open redirect in intra-mart:webplatform\/appframework
- CVE-2014-1990 Cross-site request forgery in toshibatec:e-studio-232
- CVE-2014-1989 Missing authorization in cybozu:garoon
- CVE-2014-1988 Denial of service in cybozu:garoon
- CVE-2014-1987 Command injection in cybozu:garoon
- CVE-2014-1986 Missing authorization in kokuyo:camiapp
- CVE-2014-1985 Open redirect in redmine:redmine
- CVE-2014-1984 Auth bypass in cybozu:remote service manager
- CVE-2014-1983 Denial of service in cybozu:remote service manager
- CVE-2014-1982 Auth bypass in alliedtelesis:at-rg634a
- CVE-2014-1980 Cross-site scripting in piwigo:piwigo
- CVE-2014-1979 Code injection in nttdocomo:spmode mail android
- CVE-2014-1978 Information disclosure in nttdocomo:spmode mail android
- CVE-2014-1977 Information disclosure in nttdocomo:spmode mail android
- CVE-2014-1976 Weak cryptography in yumenomachi:demaecan
- CVE-2014-1975 Path traversal in r-company:unzipper
- CVE-2014-1974 Path traversal in lyesoft:andexplorer
- CVE-2014-1973 Path traversal in nextapp:file explorer
- CVE-2014-1972 Apache Tapestry Unsafe Object Storage
- CVE-2014-1971 Cross-site scripting in silexlabs:silex
- CVE-2014-1970 Path traversal in estrongs:es file explorer
- CVE-2014-1969 Path traversal in apps4u\@android:sd card manager
- CVE-2014-1968 Cross-site scripting in riken:xoonips
- CVE-2014-1967 Weak cryptography in 7andi-fs.co:denny\'s
- CVE-2014-1966 Denial of service in siemens:ruggedcom rugged operating system
- CVE-2014-1965 Cross-site scripting in sap:netweaver
- CVE-2014-1964 Cross-site scripting in sap:netweaver
- CVE-2014-1963 Denial of service in sap:netweaver
- CVE-2014-1962 XML external entity in sap:customer relationship management
- CVE-2014-1961 Information disclosure in sap:netweaver
- CVE-2014-1960 Missing authorization in sap:netweaver
- CVE-2014-1959 Security feature bypass in gnu:gnutls
- CVE-2014-1958 Memory corruption in canonical:ubuntu linux
- CVE-2014-1957 Privilege escalation in fortinet:fortiweb
- CVE-2014-1956 Other in fortinet:fortiweb
- CVE-2014-1955 Cross-site scripting in fortinet:fortiweb
- CVE-2014-1950 Use after free in xen:xen
- CVE-2014-1949 Security feature bypass in canonical:ubuntu
- CVE-2014-1948 OpenStack Glance sensitive information disclosure via logs
- CVE-2014-1947 Memory corruption in imagemagick:imagemagick
- CVE-2014-1946 Privilege escalation in opendocman:opendocman
- CVE-2014-1945 SQL injection in opendocman:opendocman
- CVE-2014-1944 Cross-site scripting in ilch:ilch cms
- CVE-2014-1943 Denial of service in canonical:ubuntu linux
- CVE-2014-1942 Cross-site scripting in pearson:esis enterprise student information system
- CVE-2014-1939 Code injection in google:android
- CVE-2014-1938 Link Following in rply
- CVE-2014-1937 Other in gamera project:gamera
- CVE-2014-1936 Other in debian:debian linux
- CVE-2014-1935 Race condition in 9base project:9base
- CVE-2014-1934 eyeD3 is vulnerable to arbitrary file modification via symlink attack
- CVE-2014-1933 Pillow Temporary file name leakage
- CVE-2014-1932 PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles
- CVE-2014-1931 Information disclosure in visibility software:cyber recruiter
- CVE-2014-1930 Information disclosure in visibility software:cyber recruiter
- CVE-2014-1929 python-gnupg vulnerable to shell injection
- CVE-2014-1928 python-gnupg's shell_quote function does not properly escape characters
- CVE-2014-1927 python-gnupg's shell_quote function does not properly quote strings
- CVE-2014-1925 SQL injection in koha:koha
- CVE-2014-1924 SQL injection in koha:koha
- CVE-2014-1923 Path traversal in koha:koha
- CVE-2014-1922 Path traversal in koha:koha
- CVE-2014-1921 Race condition in parcimonie project:parcimonie
- CVE-2014-1916 Null dereference in light speed gaming:mumble
- CVE-2014-1915 Cross-site request forgery in doug poulin:command school student management system
- CVE-2014-1914 Cross-site scripting in doug poulin:command school student management system
- CVE-2014-1912 Memory corruption in apple:mac os x
- CVE-2014-1911 Auth bypass in foscam:fi8919w
- CVE-2014-1910 Weak cryptography in citrix:sharefile mobile
- CVE-2014-1909 Integer overflow in google:android debug bridge
- CVE-2014-1908 Information disclosure in videowhisper:videowhisper live streaming integration
- CVE-2014-1907 Path traversal in videowhisper:live streaming integration plugin
- CVE-2014-1906 Cross-site scripting in videowhisper:live streaming integration plugin
- CVE-2014-1905 File upload in videowhisper:videowhisper live streaming integration
- CVE-2014-1904 Improper Neutralization of Input During Web Page Generation in Spring Framework
- CVE-2014-1903 Code injection in freepbx:freepbx
- CVE-2014-1902 Cross-site scripting in y-cam:ycb001 firmware
- CVE-2014-1901 Denial of service in y-cam:ycb001 firmware
- CVE-2014-1900 Auth bypass in y-cam:ycb001 firmware
- CVE-2014-1899 Cross-site scripting in citrix:netscaler access gateway
- CVE-2014-1896 Memory corruption in xen:xen
- CVE-2014-1895 Memory corruption in xen:xen
- CVE-2014-1894 Integer overflow in xen:xen
- CVE-2014-1893 Integer overflow in xen:xen
- CVE-2014-1892 Denial of service in xen:xen
- CVE-2014-1891 Integer overflow in xen:xen
- CVE-2014-1889 Missing authorization in buddypress:buddypress
- CVE-2014-1888 Cross-site scripting in buddypress:buddypress
- CVE-2014-1887 Cross-site scripting in drinkedin:drinkedin barfinder
- CVE-2014-1886 Code injection in edinburghtour:edinburgh by bus
- CVE-2014-1885 Code injection in hsgroup:forzearmate
- CVE-2014-1884 Security feature bypass in adobe:phonegap
- CVE-2014-1883 Security feature bypass in adobe:phonegap
- CVE-2014-1882 Security feature bypass in adobe:phonegap
- CVE-2014-1881 Security feature bypass in adobe:phonegap
- CVE-2014-1879 Cross-site scripting in phpmyadmin:phpmyadmin
- CVE-2014-1878 Memory corruption in icinga:icinga