# Vulnerabilities published in 2014


- [CVE-2014-1507](https://insights.sbomify.com/CVE-2014-1507/): Path traversal in mozilla:firefoxos (critical 9.3)
- [CVE-2014-1506](https://insights.sbomify.com/CVE-2014-1506/): Path traversal in mozilla:firefox (medium 6.4)
- [CVE-2014-1505](https://insights.sbomify.com/CVE-2014-1505/): Information disclosure in canonical:ubuntu linux (high 7.5)
- [CVE-2014-1504](https://insights.sbomify.com/CVE-2014-1504/): Security feature bypass in mozilla:firefox (low 2.6)
- [CVE-2014-1502](https://insights.sbomify.com/CVE-2014-1502/): Security feature bypass in mozilla:firefox (medium 6.8)
- [CVE-2014-1501](https://insights.sbomify.com/CVE-2014-1501/): Security feature bypass in mozilla:firefox (medium 5.8)
- [CVE-2014-1500](https://insights.sbomify.com/CVE-2014-1500/): Denial of service in mozilla:firefox (medium 5.0)
- [CVE-2014-1499](https://insights.sbomify.com/CVE-2014-1499/): Security feature bypass in mozilla:firefox (medium 4.3)
- [CVE-2014-1498](https://insights.sbomify.com/CVE-2014-1498/): Denial of service in mozilla:firefox (medium 5.0)
- [CVE-2014-1497](https://insights.sbomify.com/CVE-2014-1497/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2014-1496](https://insights.sbomify.com/CVE-2014-1496/): Privilege escalation in mozilla:firefox (medium 5.5)
- [CVE-2014-1494](https://insights.sbomify.com/CVE-2014-1494/): Memory corruption in mozilla:firefox (critical 9.3)
- [CVE-2014-1493](https://insights.sbomify.com/CVE-2014-1493/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2014-1492](https://insights.sbomify.com/CVE-2014-1492/): Security feature bypass in mozilla:network security services (medium 4.3)
- [CVE-2014-1491](https://insights.sbomify.com/CVE-2014-1491/): Weak cryptography in canonical:ubuntu linux (medium 4.3)
- [CVE-2014-1490](https://insights.sbomify.com/CVE-2014-1490/): Race condition in canonical:ubuntu linux (critical 9.3)
- [CVE-2014-1489](https://insights.sbomify.com/CVE-2014-1489/): Security feature bypass in canonical:ubuntu linux (medium 4.3)
- [CVE-2014-1488](https://insights.sbomify.com/CVE-2014-1488/): Memory corruption in canonical:ubuntu linux (critical 10.0)
- [CVE-2014-1487](https://insights.sbomify.com/CVE-2014-1487/): Security feature bypass in canonical:ubuntu linux (high 7.5)
- [CVE-2014-1486](https://insights.sbomify.com/CVE-2014-1486/): Use after free in canonical:ubuntu linux (critical 9.8)
- [CVE-2014-1485](https://insights.sbomify.com/CVE-2014-1485/): Security feature bypass in canonical:ubuntu linux (high 7.5)
- [CVE-2014-1484](https://insights.sbomify.com/CVE-2014-1484/): Information disclosure in mozilla:firefox (medium 5.0)
- [CVE-2014-1483](https://insights.sbomify.com/CVE-2014-1483/): Security feature bypass in canonical:ubuntu linux (medium 5.0)
- [CVE-2014-1482](https://insights.sbomify.com/CVE-2014-1482/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2014-1481](https://insights.sbomify.com/CVE-2014-1481/): Security feature bypass in canonical:ubuntu linux (high 7.5)
- [CVE-2014-1480](https://insights.sbomify.com/CVE-2014-1480/): Security feature bypass in canonical:ubuntu linux (medium 4.3)
- [CVE-2014-1479](https://insights.sbomify.com/CVE-2014-1479/): Security feature bypass in canonical:ubuntu linux (high 7.5)
- [CVE-2014-1478](https://insights.sbomify.com/CVE-2014-1478/): Memory corruption in canonical:ubuntu linux (critical 10.0)
- [CVE-2014-1477](https://insights.sbomify.com/CVE-2014-1477/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2014-1476](https://insights.sbomify.com/CVE-2014-1476/): Missing authorization in drupal:drupal (medium 4.0)
- [CVE-2014-1475](https://insights.sbomify.com/CVE-2014-1475/): Auth bypass in drupal:drupal (high 7.5)
- [CVE-2014-1474](https://insights.sbomify.com/CVE-2014-1474/): Denial of service in bestpractical:rt (medium 5.0)
- [CVE-2014-1473](https://insights.sbomify.com/CVE-2014-1473/): Cross-site request forgery in mcafee:vulnerability manager (medium 6.8)
- [CVE-2014-1472](https://insights.sbomify.com/CVE-2014-1472/): Cross-site scripting in mcafee:vulnerability manager (medium 4.3)
- [CVE-2014-1471](https://insights.sbomify.com/CVE-2014-1471/): SQL injection in otrs:otrs (high 7.5)
- [CVE-2014-1469](https://insights.sbomify.com/CVE-2014-1469/): Information disclosure in blackberry:blackberry enterprise service (medium 4.9)
- [CVE-2014-1467](https://insights.sbomify.com/CVE-2014-1467/): Information disclosure in blackberry:blackberry enterprise service (medium 5.0)
- [CVE-2014-1466](https://insights.sbomify.com/CVE-2014-1466/): SQL injection in csp mysql user manager project:csp mysql user manager (high 7.5)
- [CVE-2014-1459](https://insights.sbomify.com/CVE-2014-1459/): SQL injection in doorgets:doorgets cms (medium 6.5)
- [CVE-2014-1458](https://insights.sbomify.com/CVE-2014-1458/): Cross-site scripting in fortinet:fortiweb (low 3.5)
- [CVE-2014-1457](https://insights.sbomify.com/CVE-2014-1457/): Cross-site request forgery in openwebanalytics:open web analytics (high 8.8)
- [CVE-2014-1456](https://insights.sbomify.com/CVE-2014-1456/): Cross-site scripting in openwebanalytics:open web analytics (medium 4.3)
- [CVE-2014-1455](https://insights.sbomify.com/CVE-2014-1455/): SQL injection in pearson:esis enterprise student information system (high 7.5)
- [CVE-2014-1454](https://insights.sbomify.com/CVE-2014-1454/): Cross-site scripting in pearson:esis enterprise student information system (medium 4.8)
- [CVE-2014-1453](https://insights.sbomify.com/CVE-2014-1453/): Race condition in freebsd:freebsd (medium 4.0)
- [CVE-2014-1452](https://insights.sbomify.com/CVE-2014-1452/): Memory corruption in freebsd:freebsd (medium 5.8)
- [CVE-2014-1449](https://insights.sbomify.com/CVE-2014-1449/): Security feature bypass in maxthon:maxthon cloud browser (medium 5.0)
- [CVE-2014-1447](https://insights.sbomify.com/CVE-2014-1447/): Race condition in redhat:libvirt (low 3.3)
- [CVE-2014-1446](https://insights.sbomify.com/CVE-2014-1446/): Information disclosure in linux:linux kernel (low 1.9)
- [CVE-2014-1445](https://insights.sbomify.com/CVE-2014-1445/): Information disclosure in linux:linux kernel (low 2.1)
- [CVE-2014-1444](https://insights.sbomify.com/CVE-2014-1444/): Information disclosure in linux:linux kernel (low 1.7)
- [CVE-2014-1443](https://insights.sbomify.com/CVE-2014-1443/): Information disclosure in coreftp:core ftp (medium 4.0)
- [CVE-2014-1442](https://insights.sbomify.com/CVE-2014-1442/): Path traversal in coreftp:core ftp (medium 4.0)
- [CVE-2014-1441](https://insights.sbomify.com/CVE-2014-1441/): Denial of service in coreftp:core ftp (medium 4.3)
- [CVE-2014-1439](https://insights.sbomify.com/CVE-2014-1439/): XML external entity in hiphop virtual machine for php project:hiphop virtual machine for php (medium 5.0)
- [CVE-2014-1438](https://insights.sbomify.com/CVE-2014-1438/): Privilege escalation in linux:linux kernel (medium 4.7)
- [CVE-2014-1428](https://insights.sbomify.com/CVE-2014-1428/): uuid.uuid1() is not suitable as an unguessable identifier/token (low 2.0)
- [CVE-2014-1427](https://insights.sbomify.com/CVE-2014-1427/): MAAS API vulnerable to CSRF attack (critical 9.6)
- [CVE-2014-1426](https://insights.sbomify.com/CVE-2014-1426/): get_file_by_name does not check owner (high 8.6)
- [CVE-2014-1425](https://insights.sbomify.com/CVE-2014-1425/): Privilege escalation in canonical:ubuntu linux (low 2.1)
- [CVE-2014-1424](https://insights.sbomify.com/CVE-2014-1424/): Security feature bypass in canonical:ubuntu (medium 6.4)
- [CVE-2014-1423](https://insights.sbomify.com/CVE-2014-1423/): Online Accounts Signon daemon gives out all oauth tokens to any app (medium 5.9)
- [CVE-2014-1422](https://insights.sbomify.com/CVE-2014-1422/): Location service uses cached authorization even after revocation (medium 5.0)
- [CVE-2014-1421](https://insights.sbomify.com/CVE-2014-1421/): Misconfiguration in canonical:ubuntu linux (high 7.2)
- [CVE-2014-1420](https://insights.sbomify.com/CVE-2014-1420/): Insecure temp file usage in Ubuntu UI toolkit (low 3.8)
- [CVE-2014-1419](https://insights.sbomify.com/CVE-2014-1419/): Race condition in canonical:acpi-support (medium 6.9)
- [CVE-2014-1418](https://insights.sbomify.com/CVE-2014-1418/): Django Vulnerable to Cache Poisoning (medium 6.4)
- [CVE-2014-1409](https://insights.sbomify.com/CVE-2014-1409/): Hardcoded credentials in mobileiron:sentry (critical 9.1)
- [CVE-2014-1408](https://insights.sbomify.com/CVE-2014-1408/): Hardcoded credentials in conceptronic:c54apm (high 7.8)
- [CVE-2014-1407](https://insights.sbomify.com/CVE-2014-1407/): Cross-site scripting in conceptronic:c54apm (medium 4.3)
- [CVE-2014-1406](https://insights.sbomify.com/CVE-2014-1406/): Other in conceptronic:c54apm (medium 4.3)
- [CVE-2014-1405](https://insights.sbomify.com/CVE-2014-1405/): Open redirect in conceptronic:c54apm (medium 5.8)
- [CVE-2014-1403](https://insights.sbomify.com/CVE-2014-1403/): Cross-site scripting in easyxdm:easyxdm (medium 4.3)
- [CVE-2014-1402](https://insights.sbomify.com/CVE-2014-1402/): Incorrect Privilege Assignment in Jinja2 (medium 4.4)
- [CVE-2014-1401](https://insights.sbomify.com/CVE-2014-1401/): SQL injection in auracms:auracms (medium 6.5)
- [CVE-2014-1400](https://insights.sbomify.com/CVE-2014-1400/): Missing authorization in entity api project:entity api (medium 6.5)
- [CVE-2014-1399](https://insights.sbomify.com/CVE-2014-1399/): Missing authorization in entity api project:entity api (medium 6.5)
- [CVE-2014-1398](https://insights.sbomify.com/CVE-2014-1398/): Missing authorization in entity api project:entity api (medium 6.5)
- [CVE-2014-1391](https://insights.sbomify.com/CVE-2014-1391/): Memory corruption in apple:mac os x (medium 6.8)
- [CVE-2014-1390](https://insights.sbomify.com/CVE-2014-1390/): Memory corruption in apple:safari (medium 6.8)
- [CVE-2014-1389](https://insights.sbomify.com/CVE-2014-1389/): Memory corruption in apple:safari (medium 6.8)
- [CVE-2014-1388](https://insights.sbomify.com/CVE-2014-1388/): Memory corruption in apple:safari (medium 6.8)
- [CVE-2014-1387](https://insights.sbomify.com/CVE-2014-1387/): Memory corruption in apple:safari (medium 6.8)
- [CVE-2014-1386](https://insights.sbomify.com/CVE-2014-1386/): Memory corruption in apple:safari (medium 6.8)
- [CVE-2014-1385](https://insights.sbomify.com/CVE-2014-1385/): Memory corruption in apple:safari (medium 6.8)
- [CVE-2014-1384](https://insights.sbomify.com/CVE-2014-1384/): Memory corruption in apple:safari (medium 6.8)
- [CVE-2014-1383](https://insights.sbomify.com/CVE-2014-1383/): Auth bypass in apple:tvos (medium 5.5)
- [CVE-2014-1382](https://insights.sbomify.com/CVE-2014-1382/): Memory corruption in apple:iphone os (medium 6.8)
- [CVE-2014-1381](https://insights.sbomify.com/CVE-2014-1381/): Memory corruption in apple:mac os x (critical 10.0)
- [CVE-2014-1380](https://insights.sbomify.com/CVE-2014-1380/): Security feature bypass in apple:mac os x (low 2.6)
- [CVE-2014-1379](https://insights.sbomify.com/CVE-2014-1379/): Null dereference in apple:mac os x (critical 10.0)
- [CVE-2014-1378](https://insights.sbomify.com/CVE-2014-1378/): Security feature bypass in apple:mac os x (low 2.1)
- [CVE-2014-1377](https://insights.sbomify.com/CVE-2014-1377/): Memory corruption in apple:mac os x (critical 10.0)
- [CVE-2014-1376](https://insights.sbomify.com/CVE-2014-1376/): Privilege escalation in apple:mac os x (critical 10.0)
- [CVE-2014-1375](https://insights.sbomify.com/CVE-2014-1375/): Security feature bypass in apple:mac os x (low 2.1)
- [CVE-2014-1373](https://insights.sbomify.com/CVE-2014-1373/): Privilege escalation in apple:mac os x (critical 10.0)
- [CVE-2014-1372](https://insights.sbomify.com/CVE-2014-1372/): Information disclosure in apple:mac os x (medium 4.9)
- [CVE-2014-1371](https://insights.sbomify.com/CVE-2014-1371/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2014-1370](https://insights.sbomify.com/CVE-2014-1370/): Memory corruption in apple:mac os x (medium 6.8)
- [CVE-2014-1369](https://insights.sbomify.com/CVE-2014-1369/): Security feature bypass in apple:safari (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/71/