# Vulnerabilities published in 2014


- [CVE-2014-1994](https://insights.sbomify.com/CVE-2014-1994/): Cross-site scripting in cybozu:garoon (low 3.5)
- [CVE-2014-1993](https://insights.sbomify.com/CVE-2014-1993/): Missing authorization in cybozu:garoon (medium 4.0)
- [CVE-2014-1992](https://insights.sbomify.com/CVE-2014-1992/): Cross-site scripting in cybozu:garoon (low 3.5)
- [CVE-2014-1991](https://insights.sbomify.com/CVE-2014-1991/): Open redirect in intra-mart:webplatform\/appframework (medium 5.8)
- [CVE-2014-1990](https://insights.sbomify.com/CVE-2014-1990/): Cross-site request forgery in toshibatec:e-studio-232 (medium 6.8)
- [CVE-2014-1989](https://insights.sbomify.com/CVE-2014-1989/): Missing authorization in cybozu:garoon (medium 6.0)
- [CVE-2014-1988](https://insights.sbomify.com/CVE-2014-1988/): Denial of service in cybozu:garoon (low 3.5)
- [CVE-2014-1987](https://insights.sbomify.com/CVE-2014-1987/): Command injection in cybozu:garoon (critical 10.0)
- [CVE-2014-1986](https://insights.sbomify.com/CVE-2014-1986/): Missing authorization in kokuyo:camiapp (medium 5.8)
- [CVE-2014-1985](https://insights.sbomify.com/CVE-2014-1985/): Open redirect in redmine:redmine (medium 5.8)
- [CVE-2014-1984](https://insights.sbomify.com/CVE-2014-1984/): Auth bypass in cybozu:remote service manager (medium 6.8)
- [CVE-2014-1983](https://insights.sbomify.com/CVE-2014-1983/): Denial of service in cybozu:remote service manager (high 7.8)
- [CVE-2014-1982](https://insights.sbomify.com/CVE-2014-1982/): Auth bypass in alliedtelesis:at-rg634a (critical 10.0)
- [CVE-2014-1980](https://insights.sbomify.com/CVE-2014-1980/): Cross-site scripting in piwigo:piwigo (medium 4.3)
- [CVE-2014-1979](https://insights.sbomify.com/CVE-2014-1979/): Code injection in nttdocomo:spmode mail android (medium 6.8)
- [CVE-2014-1978](https://insights.sbomify.com/CVE-2014-1978/): Information disclosure in nttdocomo:spmode mail android (medium 4.3)
- [CVE-2014-1977](https://insights.sbomify.com/CVE-2014-1977/): Information disclosure in nttdocomo:spmode mail android (medium 4.3)
- [CVE-2014-1976](https://insights.sbomify.com/CVE-2014-1976/): Weak cryptography in yumenomachi:demaecan (medium 5.8)
- [CVE-2014-1975](https://insights.sbomify.com/CVE-2014-1975/): Path traversal in r-company:unzipper (medium 5.8)
- [CVE-2014-1974](https://insights.sbomify.com/CVE-2014-1974/): Path traversal in lyesoft:andexplorer (medium 6.4)
- [CVE-2014-1973](https://insights.sbomify.com/CVE-2014-1973/): Path traversal in nextapp:file explorer (medium 5.0)
- [CVE-2014-1972](https://insights.sbomify.com/CVE-2014-1972/): Apache Tapestry Unsafe Object Storage (high 7.8)
- [CVE-2014-1971](https://insights.sbomify.com/CVE-2014-1971/): Cross-site scripting in silexlabs:silex (medium 4.3)
- [CVE-2014-1970](https://insights.sbomify.com/CVE-2014-1970/): Path traversal in estrongs:es file explorer (medium 5.8)
- [CVE-2014-1969](https://insights.sbomify.com/CVE-2014-1969/): Path traversal in apps4u\@android:sd card manager (medium 5.8)
- [CVE-2014-1968](https://insights.sbomify.com/CVE-2014-1968/): Cross-site scripting in riken:xoonips (medium 4.3)
- [CVE-2014-1967](https://insights.sbomify.com/CVE-2014-1967/): Weak cryptography in 7andi-fs.co:denny\'s (medium 5.8)
- [CVE-2014-1966](https://insights.sbomify.com/CVE-2014-1966/): Denial of service in siemens:ruggedcom rugged operating system (high 7.8)
- [CVE-2014-1965](https://insights.sbomify.com/CVE-2014-1965/): Cross-site scripting in sap:netweaver (medium 4.3)
- [CVE-2014-1964](https://insights.sbomify.com/CVE-2014-1964/): Cross-site scripting in sap:netweaver (medium 4.3)
- [CVE-2014-1963](https://insights.sbomify.com/CVE-2014-1963/): Denial of service in sap:netweaver (medium 5.0)
- [CVE-2014-1962](https://insights.sbomify.com/CVE-2014-1962/): XML external entity in sap:customer relationship management (medium 5.0)
- [CVE-2014-1961](https://insights.sbomify.com/CVE-2014-1961/): Information disclosure in sap:netweaver (medium 5.0)
- [CVE-2014-1960](https://insights.sbomify.com/CVE-2014-1960/): Missing authorization in sap:netweaver (medium 5.0)
- [CVE-2014-1959](https://insights.sbomify.com/CVE-2014-1959/): Security feature bypass in gnu:gnutls (medium 5.8)
- [CVE-2014-1958](https://insights.sbomify.com/CVE-2014-1958/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2014-1957](https://insights.sbomify.com/CVE-2014-1957/): Privilege escalation in fortinet:fortiweb (medium 6.5)
- [CVE-2014-1956](https://insights.sbomify.com/CVE-2014-1956/): Other in fortinet:fortiweb (medium 5.0)
- [CVE-2014-1955](https://insights.sbomify.com/CVE-2014-1955/): Cross-site scripting in fortinet:fortiweb (medium 4.3)
- [CVE-2014-1950](https://insights.sbomify.com/CVE-2014-1950/): Use after free in xen:xen (medium 4.6)
- [CVE-2014-1949](https://insights.sbomify.com/CVE-2014-1949/): Security feature bypass in canonical:ubuntu (high 7.2)
- [CVE-2014-1948](https://insights.sbomify.com/CVE-2014-1948/): OpenStack Glance sensitive information disclosure via logs (low 2.6)
- [CVE-2014-1947](https://insights.sbomify.com/CVE-2014-1947/): Memory corruption in imagemagick:imagemagick (high 7.8)
- [CVE-2014-1946](https://insights.sbomify.com/CVE-2014-1946/): Privilege escalation in opendocman:opendocman (high 8.8)
- [CVE-2014-1945](https://insights.sbomify.com/CVE-2014-1945/): SQL injection in opendocman:opendocman (high 7.5)
- [CVE-2014-1944](https://insights.sbomify.com/CVE-2014-1944/): Cross-site scripting in ilch:ilch cms (medium 4.3)
- [CVE-2014-1943](https://insights.sbomify.com/CVE-2014-1943/): Denial of service in canonical:ubuntu linux (medium 5.0)
- [CVE-2014-1942](https://insights.sbomify.com/CVE-2014-1942/): Cross-site scripting in pearson:esis enterprise student information system (medium 4.3)
- [CVE-2014-1939](https://insights.sbomify.com/CVE-2014-1939/): Code injection in google:android (high 7.5)
- [CVE-2014-1938](https://insights.sbomify.com/CVE-2014-1938/): Link Following in rply (medium 5.5)
- [CVE-2014-1937](https://insights.sbomify.com/CVE-2014-1937/): Other in gamera project:gamera (high 7.5)
- [CVE-2014-1936](https://insights.sbomify.com/CVE-2014-1936/): Other in debian:debian linux (high 7.5)
- [CVE-2014-1935](https://insights.sbomify.com/CVE-2014-1935/): Race condition in 9base project:9base (medium 5.3)
- [CVE-2014-1934](https://insights.sbomify.com/CVE-2014-1934/): eyeD3 is vulnerable to arbitrary file modification via symlink attack (low 3.3)
- [CVE-2014-1933](https://insights.sbomify.com/CVE-2014-1933/): Pillow Temporary file name leakage (low 2.1)
- [CVE-2014-1932](https://insights.sbomify.com/CVE-2014-1932/): PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles (medium 4.4)
- [CVE-2014-1931](https://insights.sbomify.com/CVE-2014-1931/): Information disclosure in visibility software:cyber recruiter (medium 4.3)
- [CVE-2014-1930](https://insights.sbomify.com/CVE-2014-1930/): Information disclosure in visibility software:cyber recruiter (medium 4.3)
- [CVE-2014-1929](https://insights.sbomify.com/CVE-2014-1929/): python-gnupg vulnerable to shell injection (medium 4.4)
- [CVE-2014-1928](https://insights.sbomify.com/CVE-2014-1928/): python-gnupg's shell_quote function does not properly escape characters (medium 4.6)
- [CVE-2014-1927](https://insights.sbomify.com/CVE-2014-1927/): python-gnupg's shell_quote function does not properly quote strings (high 7.5)
- [CVE-2014-1925](https://insights.sbomify.com/CVE-2014-1925/): SQL injection in koha:koha (critical 9.8)
- [CVE-2014-1924](https://insights.sbomify.com/CVE-2014-1924/): SQL injection in koha:koha (critical 9.8)
- [CVE-2014-1923](https://insights.sbomify.com/CVE-2014-1923/): Path traversal in koha:koha (high 7.5)
- [CVE-2014-1922](https://insights.sbomify.com/CVE-2014-1922/): Path traversal in koha:koha (high 7.5)
- [CVE-2014-1921](https://insights.sbomify.com/CVE-2014-1921/): Race condition in parcimonie project:parcimonie (high 7.5)
- [CVE-2014-1916](https://insights.sbomify.com/CVE-2014-1916/): Null dereference in light speed gaming:mumble (medium 5.0)
- [CVE-2014-1915](https://insights.sbomify.com/CVE-2014-1915/): Cross-site request forgery in doug poulin:command school student management system (medium 6.8)
- [CVE-2014-1914](https://insights.sbomify.com/CVE-2014-1914/): Cross-site scripting in doug poulin:command school student management system (medium 4.3)
- [CVE-2014-1912](https://insights.sbomify.com/CVE-2014-1912/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2014-1911](https://insights.sbomify.com/CVE-2014-1911/): Auth bypass in foscam:fi8919w (high 7.8)
- [CVE-2014-1910](https://insights.sbomify.com/CVE-2014-1910/): Weak cryptography in citrix:sharefile mobile (medium 5.8)
- [CVE-2014-1909](https://insights.sbomify.com/CVE-2014-1909/): Integer overflow in google:android debug bridge (high 7.5)
- [CVE-2014-1908](https://insights.sbomify.com/CVE-2014-1908/): Information disclosure in videowhisper:videowhisper live streaming integration (medium 5.0)
- [CVE-2014-1907](https://insights.sbomify.com/CVE-2014-1907/): Path traversal in videowhisper:live streaming integration plugin (medium 6.4)
- [CVE-2014-1906](https://insights.sbomify.com/CVE-2014-1906/): Cross-site scripting in videowhisper:live streaming integration plugin (medium 4.3)
- [CVE-2014-1905](https://insights.sbomify.com/CVE-2014-1905/): File upload in videowhisper:videowhisper live streaming integration (critical 10.0)
- [CVE-2014-1904](https://insights.sbomify.com/CVE-2014-1904/): Improper Neutralization of Input During Web Page Generation in Spring Framework (medium 4.3)
- [CVE-2014-1903](https://insights.sbomify.com/CVE-2014-1903/): Code injection in freepbx:freepbx (high 7.5)
- [CVE-2014-1902](https://insights.sbomify.com/CVE-2014-1902/): Cross-site scripting in y-cam:ycb001 firmware (low 3.5)
- [CVE-2014-1901](https://insights.sbomify.com/CVE-2014-1901/): Denial of service in y-cam:ycb001 firmware (medium 6.8)
- [CVE-2014-1900](https://insights.sbomify.com/CVE-2014-1900/): Auth bypass in y-cam:ycb001 firmware (medium 5.0)
- [CVE-2014-1899](https://insights.sbomify.com/CVE-2014-1899/): Cross-site scripting in citrix:netscaler access gateway (medium 4.3)
- [CVE-2014-1896](https://insights.sbomify.com/CVE-2014-1896/): Memory corruption in xen:xen (medium 4.9)
- [CVE-2014-1895](https://insights.sbomify.com/CVE-2014-1895/): Memory corruption in xen:xen (medium 5.8)
- [CVE-2014-1894](https://insights.sbomify.com/CVE-2014-1894/): Integer overflow in xen:xen (medium 5.2)
- [CVE-2014-1893](https://insights.sbomify.com/CVE-2014-1893/): Integer overflow in xen:xen (medium 5.2)
- [CVE-2014-1892](https://insights.sbomify.com/CVE-2014-1892/): Denial of service in xen:xen (medium 5.2)
- [CVE-2014-1891](https://insights.sbomify.com/CVE-2014-1891/): Integer overflow in xen:xen (medium 5.2)
- [CVE-2014-1889](https://insights.sbomify.com/CVE-2014-1889/): Missing authorization in buddypress:buddypress (medium 6.5)
- [CVE-2014-1888](https://insights.sbomify.com/CVE-2014-1888/): Cross-site scripting in buddypress:buddypress (medium 4.3)
- [CVE-2014-1887](https://insights.sbomify.com/CVE-2014-1887/): Cross-site scripting in drinkedin:drinkedin barfinder (medium 4.3)
- [CVE-2014-1886](https://insights.sbomify.com/CVE-2014-1886/): Code injection in edinburghtour:edinburgh by bus (medium 6.8)
- [CVE-2014-1885](https://insights.sbomify.com/CVE-2014-1885/): Code injection in hsgroup:forzearmate (medium 6.4)
- [CVE-2014-1884](https://insights.sbomify.com/CVE-2014-1884/): Security feature bypass in adobe:phonegap (high 7.5)
- [CVE-2014-1883](https://insights.sbomify.com/CVE-2014-1883/): Security feature bypass in adobe:phonegap (high 7.5)
- [CVE-2014-1882](https://insights.sbomify.com/CVE-2014-1882/): Security feature bypass in adobe:phonegap (high 7.5)
- [CVE-2014-1881](https://insights.sbomify.com/CVE-2014-1881/): Security feature bypass in adobe:phonegap (high 7.5)
- [CVE-2014-1879](https://insights.sbomify.com/CVE-2014-1879/): Cross-site scripting in phpmyadmin:phpmyadmin (low 3.5)
- [CVE-2014-1878](https://insights.sbomify.com/CVE-2014-1878/): Memory corruption in icinga:icinga (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/67/