# Vulnerabilities published in 2014


- [CVE-2014-9324](https://insights.sbomify.com/CVE-2014-9324/): Missing authorization in n/a (medium 6.0)
- [CVE-2014-9323](https://insights.sbomify.com/CVE-2014-9323/): Null dereference in n/a (medium 5.0)
- [CVE-2014-9322](https://insights.sbomify.com/CVE-2014-9322/): Privilege escalation in n/a (high 7.8)
- [CVE-2014-9320](https://insights.sbomify.com/CVE-2014-9320/): Auth bypass in n/a (critical 9.8)
- [CVE-2014-9319](https://insights.sbomify.com/CVE-2014-9319/): Memory corruption in n/a (medium 5.0)
- [CVE-2014-9318](https://insights.sbomify.com/CVE-2014-9318/): Memory corruption in n/a (high 7.5)
- [CVE-2014-9317](https://insights.sbomify.com/CVE-2014-9317/): Memory corruption in n/a (high 7.5)
- [CVE-2014-9316](https://insights.sbomify.com/CVE-2014-9316/): Memory corruption in n/a (high 7.5)
- [CVE-2014-9312](https://insights.sbomify.com/CVE-2014-9312/): File upload in n/a (high 8.8)
- [CVE-2014-9311](https://insights.sbomify.com/CVE-2014-9311/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-9310](https://insights.sbomify.com/CVE-2014-9310/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2014-9308](https://insights.sbomify.com/CVE-2014-9308/): File upload in n/a (medium 6.5)
- [CVE-2014-9305](https://insights.sbomify.com/CVE-2014-9305/): SQL injection in n/a (medium 6.5)
- [CVE-2014-9304](https://insights.sbomify.com/CVE-2014-9304/): Server-side request forgery in n/a (high 7.5)
- [CVE-2014-9303](https://insights.sbomify.com/CVE-2014-9303/): Information disclosure in n/a (high 7.8)
- [CVE-2014-9302](https://insights.sbomify.com/CVE-2014-9302/): Server-side request forgery in n/a (medium 5.0)
- [CVE-2014-9301](https://insights.sbomify.com/CVE-2014-9301/): Server-side request forgery in n/a (medium 6.4)
- [CVE-2014-9300](https://insights.sbomify.com/CVE-2014-9300/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-9296](https://insights.sbomify.com/CVE-2014-9296/): Security feature bypass in n/a (medium 5.0)
- [CVE-2014-9295](https://insights.sbomify.com/CVE-2014-9295/): Memory corruption in n/a (high 7.5)
- [CVE-2014-9294](https://insights.sbomify.com/CVE-2014-9294/): Weak cryptography in n/a (high 7.5)
- [CVE-2014-9293](https://insights.sbomify.com/CVE-2014-9293/): Weak cryptography in n/a (high 7.5)
- [CVE-2014-9292](https://insights.sbomify.com/CVE-2014-9292/): Server-side request forgery in n/a (medium 5.8)
- [CVE-2014-9284](https://insights.sbomify.com/CVE-2014-9284/): Command injection in n/a (high 7.7)
- [CVE-2014-9283](https://insights.sbomify.com/CVE-2014-9283/): Security feature bypass in n/a (medium 5.0)
- [CVE-2014-9282](https://insights.sbomify.com/CVE-2014-9282/): Path traversal in n/a (medium 5.0)
- [CVE-2014-9281](https://insights.sbomify.com/CVE-2014-9281/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9280](https://insights.sbomify.com/CVE-2014-9280/): Code injection in n/a (high 7.5)
- [CVE-2014-9279](https://insights.sbomify.com/CVE-2014-9279/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-9278](https://insights.sbomify.com/CVE-2014-9278/): Auth bypass in n/a (medium 4.0)
- [CVE-2014-9277](https://insights.sbomify.com/CVE-2014-9277/): Deserialization in n/a (high 7.5)
- [CVE-2014-9276](https://insights.sbomify.com/CVE-2014-9276/): Cross-site request forgery in n/a (medium 5.1)
- [CVE-2014-9275](https://insights.sbomify.com/CVE-2014-9275/): Memory corruption in n/a (high 7.5)
- [CVE-2014-9274](https://insights.sbomify.com/CVE-2014-9274/): Memory corruption in n/a (high 7.5)
- [CVE-2014-9273](https://insights.sbomify.com/CVE-2014-9273/): Memory corruption in n/a (medium 4.6)
- [CVE-2014-9272](https://insights.sbomify.com/CVE-2014-9272/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9271](https://insights.sbomify.com/CVE-2014-9271/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2014-9270](https://insights.sbomify.com/CVE-2014-9270/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9269](https://insights.sbomify.com/CVE-2014-9269/): Cross-site scripting in n/a (low 2.6)
- [CVE-2014-9268](https://insights.sbomify.com/CVE-2014-9268/): Code injection in n/a (medium 6.8)
- [CVE-2014-9267](https://insights.sbomify.com/CVE-2014-9267/): Memory corruption in n/a (medium 6.8)
- [CVE-2014-9266](https://insights.sbomify.com/CVE-2014-9266/): Code injection in n/a (medium 6.8)
- [CVE-2014-9265](https://insights.sbomify.com/CVE-2014-9265/): Memory corruption in n/a (medium 6.8)
- [CVE-2014-9264](https://insights.sbomify.com/CVE-2014-9264/): Memory corruption in n/a (high 7.5)
- [CVE-2014-9263](https://insights.sbomify.com/CVE-2014-9263/): Memory corruption in n/a (medium 6.8)
- [CVE-2014-9262](https://insights.sbomify.com/CVE-2014-9262/): Missing authorization in n/a (high 8.2)
- [CVE-2014-9261](https://insights.sbomify.com/CVE-2014-9261/): Path traversal in n/a (medium 5.0)
- [CVE-2014-9260](https://insights.sbomify.com/CVE-2014-9260/): Missing authorization in n/a (high 8.8)
- [CVE-2014-9258](https://insights.sbomify.com/CVE-2014-9258/): SQL injection in n/a (medium 6.5)
- [CVE-2014-9254](https://insights.sbomify.com/CVE-2014-9254/): SQL injection in n/a (high 7.5)
- [CVE-2014-9253](https://insights.sbomify.com/CVE-2014-9253/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9252](https://insights.sbomify.com/CVE-2014-9252/): Information disclosure in n/a (low 2.1)
- [CVE-2014-9251](https://insights.sbomify.com/CVE-2014-9251/): Weak cryptography in n/a (medium 5.0)
- [CVE-2014-9250](https://insights.sbomify.com/CVE-2014-9250/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-9249](https://insights.sbomify.com/CVE-2014-9249/): Missing authorization in n/a (high 7.5)
- [CVE-2014-9248](https://insights.sbomify.com/CVE-2014-9248/): Weak cryptography in n/a (medium 5.0)
- [CVE-2014-9247](https://insights.sbomify.com/CVE-2014-9247/): Information disclosure in n/a (medium 4.0)
- [CVE-2014-9245](https://insights.sbomify.com/CVE-2014-9245/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-9243](https://insights.sbomify.com/CVE-2014-9243/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9242](https://insights.sbomify.com/CVE-2014-9242/): SQL injection in n/a (high 7.5)
- [CVE-2014-9241](https://insights.sbomify.com/CVE-2014-9241/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9240](https://insights.sbomify.com/CVE-2014-9240/): SQL injection in n/a (high 7.5)
- [CVE-2014-9239](https://insights.sbomify.com/CVE-2014-9239/): SQL injection in n/a (high 7.5)
- [CVE-2014-9238](https://insights.sbomify.com/CVE-2014-9238/): Path traversal in n/a (medium 5.0)
- [CVE-2014-9237](https://insights.sbomify.com/CVE-2014-9237/): SQL injection in n/a (high 7.5)
- [CVE-2014-9236](https://insights.sbomify.com/CVE-2014-9236/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9235](https://insights.sbomify.com/CVE-2014-9235/): SQL injection in n/a (medium 6.5)
- [CVE-2014-9234](https://insights.sbomify.com/CVE-2014-9234/): Path traversal in n/a (medium 5.0)
- [CVE-2014-9230](https://insights.sbomify.com/CVE-2014-9230/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9229](https://insights.sbomify.com/CVE-2014-9229/): SQL injection in n/a (medium 6.5)
- [CVE-2014-9228](https://insights.sbomify.com/CVE-2014-9228/): Denial of service in n/a (medium 4.9)
- [CVE-2014-9227](https://insights.sbomify.com/CVE-2014-9227/): Privilege escalation in n/a (medium 4.4)
- [CVE-2014-9226](https://insights.sbomify.com/CVE-2014-9226/): Security feature bypass in n/a (high 7.2)
- [CVE-2014-9225](https://insights.sbomify.com/CVE-2014-9225/): Information disclosure in n/a (medium 4.0)
- [CVE-2014-9224](https://insights.sbomify.com/CVE-2014-9224/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-9223](https://insights.sbomify.com/CVE-2014-9223/): Memory corruption in n/a (critical 10.0)
- [CVE-2014-9222](https://insights.sbomify.com/CVE-2014-9222/): Memory corruption in n/a (critical 10.0)
- [CVE-2014-9221](https://insights.sbomify.com/CVE-2014-9221/): strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted (medium 5.0)
- [CVE-2014-9220](https://insights.sbomify.com/CVE-2014-9220/): SQL injection in n/a (high 7.5)
- [CVE-2014-9219](https://insights.sbomify.com/CVE-2014-9219/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9218](https://insights.sbomify.com/CVE-2014-9218/): Denial of service in n/a (medium 5.0)
- [CVE-2014-9217](https://insights.sbomify.com/CVE-2014-9217/): Auth bypass in n/a (medium 5.0)
- [CVE-2014-9215](https://insights.sbomify.com/CVE-2014-9215/): SQL injection in n/a (high 7.5)
- [CVE-2014-9212](https://insights.sbomify.com/CVE-2014-9212/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9211](https://insights.sbomify.com/CVE-2014-9211/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2014-9209](https://insights.sbomify.com/CVE-2014-9209/): Path traversal in n/a (medium 6.9)
- [CVE-2014-9208](https://insights.sbomify.com/CVE-2014-9208/): Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitra (critical 10.0)
- [CVE-2014-9207](https://insights.sbomify.com/CVE-2014-9207/): Privilege escalation in n/a (medium 6.9)
- [CVE-2014-9206](https://insights.sbomify.com/CVE-2014-9206/): Memory corruption in n/a (medium 6.9)
- [CVE-2014-9205](https://insights.sbomify.com/CVE-2014-9205/): Memory corruption in n/a (high 7.5)
- [CVE-2014-9204](https://insights.sbomify.com/CVE-2014-9204/): Memory corruption in n/a (medium 6.9)
- [CVE-2014-9203](https://insights.sbomify.com/CVE-2014-9203/): Memory corruption in n/a (medium 5.0)
- [CVE-2014-9202](https://insights.sbomify.com/CVE-2014-9202/): Memory corruption in n/a (medium 6.9)
- [CVE-2014-9201](https://insights.sbomify.com/CVE-2014-9201/): Other in n/a (medium 6.4)
- [CVE-2014-9200](https://insights.sbomify.com/CVE-2014-9200/): Schneider Electric Device Type Managers (DTMs) Stack-based Buffer Overflow (high 7.5)
- [CVE-2014-9199](https://insights.sbomify.com/CVE-2014-9199/): Clorius Controls A/S ISC SCADA Insecure Java Client Inadequate Encryption Strength (critical 10.0)
- [CVE-2014-9198](https://insights.sbomify.com/CVE-2014-9198/): Schneider Electric ETG3000 FactoryCast HMI Gateway Use of Hard-coded Credentials (critical 10.0)
- [CVE-2014-9197](https://insights.sbomify.com/CVE-2014-9197/): Schneider Electric ETG3000 FactoryCast HMI Gateway Missing Authentication for Critical Function (critical 10.0)
- [CVE-2014-9196](https://insights.sbomify.com/CVE-2014-9196/): Eaton’s Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet (high 7.6)
- [CVE-2014-9195](https://insights.sbomify.com/CVE-2014-9195/): Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/7/