Vulnerabilities published in 2014
8,436 vulnerabilities were published in 2014: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 74 of 85.
- CVE-2014-125046 Seiji42 cub-scout-tracker databaseAccessFunctions.js sql injection
- CVE-2014-125045 meol1 index.php GetAnimal sql injection
- CVE-2014-125044 soshtolsus wing-tight index.php file inclusion
- CVE-2014-125041 Miccighel PR-CWT sql injection
- CVE-2014-125040 stevejagodzinski DevNewsAggregator RemoteHtmlContentDataAccess.php getByName sql injection
- CVE-2014-125039 kkokko NeoXplora Trainer cross site scripting
- CVE-2014-125038 IS_Projecto2 NewsBean.java sql injection
- CVE-2014-125037 License to Kill injury.rb sql injection
- CVE-2014-125036 drybjed ansible-ntp main.yml amplification
- CVE-2014-125035 Jobs-Plugin cross site scripting
- CVE-2014-125034 stiiv contact_app View.php render cross site scripting
- CVE-2014-125033 rails-cv-app uploaded_files_controller.rb path traversal
- CVE-2014-125032 porpeeranut go-with-me add.php sql injection
- CVE-2014-125031 kirill2485 TekNet loggedin.php cross site scripting
- CVE-2014-125030 taoeffect Empress hard-coded password
- CVE-2014-125029 ttskch PaginationServiceProvider Demo index.php sql injection
- CVE-2014-125028 valtech IDP Test Client main.py cross-site request forgery
- CVE-2014-125027 Yuna Scatari TBDev usersearch.php get_user_icons cross site scripting
- CVE-2014-125026 Out-of-bounds write in github.com/cloudflare/golz4
- CVE-2014-125025 FFmpeg decode_pulses memory corruption
- CVE-2014-125024 FFmpeg lag_decode_frame memory corruption
- CVE-2014-125023 FFmpeg Truemotion1 truemotion1_decode_header memory corruption
- CVE-2014-125022 FFmpeg Bitstream Buffer shorten_decode_frame memory corruption
- CVE-2014-125021 FFmpeg cmv_process_header memory corruption
- CVE-2014-125020 FFmpeg decode_update_thread_context memory corruption
- CVE-2014-125019 FFmpeg Slice Segment decode_nal_unit memory corruption
- CVE-2014-125018 FFmpeg decode_slice_header memory corruption
- CVE-2014-125017 FFmpeg rpza_decode_stream memory corruption
- CVE-2014-125016 FFmpeg utils.c ff_init_buffer_info memory corruption
- CVE-2014-125015 FFmpeg read_var_block_data memory corruption
- CVE-2014-125014 FFmpeg HEVC Video Decoder memory corruption
- CVE-2014-125013 FFmpeg msrle.c msrle_decode_frame memory corruption
- CVE-2014-125012 FFmpeg dxtroy.c integer coercion
- CVE-2014-125011 FFmpeg ansi.c decode_frame integer coercion
- CVE-2014-125010 FFmpeg h64.c decode_slice_header memory corruption
- CVE-2014-125009 FFmpeg snow.h add_yblock memory corruption
- CVE-2014-125008 FFmpeg oggparsevorbis.c vorbis_header memory corruption
- CVE-2014-125007 FFmpeg hevcpred_template.c intra_pred memory corruption
- CVE-2014-125006 FFmpeg h264.c output_frame memory corruption
- CVE-2014-125005 FFmpeg mpeg4videodec.c decode_vol_header memory corruption
- CVE-2014-125004 FFmpeg vmnc.c decode_hextile memory corruption
- CVE-2014-125003 FFmpeg jpeg2000dec.c get_siz memory corruption
- CVE-2014-125002 FFmpeg dnxhdenc.c dnxhd_init_rc memory corruption
- CVE-2014-125001 Cardo Systems Scala Rider Q3 Cardo-Updater api privileges management
- CVE-2014-1250 Memory corruption in apple:quicktime
- CVE-2014-1249 Memory corruption in apple:quicktime
- CVE-2014-1248 Memory corruption in apple:quicktime
- CVE-2014-1247 Memory corruption in apple:quicktime
- CVE-2014-1246 Memory corruption in apple:quicktime
- CVE-2014-1245 Integer overflow in apple:quicktime
- CVE-2014-1244 Memory corruption in apple:quicktime
- CVE-2014-1243 Memory corruption in apple:quicktime
- CVE-2014-1242 Weak cryptography in apple:itunes
- CVE-2014-1238 Cross-site scripting in ideagen:q-pulse
- CVE-2014-1237 Cross-site scripting in i-doit:i-doit
- CVE-2014-1236 Memory corruption in graphviz:graphviz
- CVE-2014-1235 Memory corruption in graphviz:graphviz
- CVE-2014-1234 Paratrooper-newrelic Exposes of Sensitive Information to an Unauthorized Actor
- CVE-2014-1233 Local API Login Credentials Disclosure in paratrooper-pingdom
- CVE-2014-1232 Cross-site scripting in foliovision:foliopress wysiwyg
- CVE-2014-1226 Privilege escalation in s3dvt project:s3dvt
- CVE-2014-1224 Cross-site scripting in rexx-systems:recruitment
- CVE-2014-1223 Cross-site scripting in telligent:evolution
- CVE-2014-1222 Path traversal in vtiger:vtiger crm
- CVE-2014-1219 Auth bypass in broadcom:2e web option
- CVE-2014-1217 Missing authorization in livetecs:timeline
- CVE-2014-1216 Improper Neutralization of Special Elements used in a Command in FitNesse Wiki
- CVE-2014-1215 Memory corruption in coreftp:core ftp
- CVE-2014-1214 File upload in projoom:smart flash header
- CVE-2014-1213 Missing authorization in sophos:scanning engine
- CVE-2014-1211 Cross-site request forgery in vmware:vcloud director
- CVE-2014-1210 Weak cryptography in vmware:vsphere client
- CVE-2014-1209 Security feature bypass in vmware:vsphere client
- CVE-2014-1208 Denial of service in vmware:esx
- CVE-2014-1207 Null dereference in vmware:esx
- CVE-2014-1206 SQL injection in openwebanalytics:open web analytics
- CVE-2014-1204 SQL injection in tableausoftware:tableau server
- CVE-2014-1203 Command injection in eyou:eyou
- CVE-2014-1202 Code injection via property expansion in SoapUI
- CVE-2014-1201 Memory corruption in lorex technology:edge2 lh330 firmware
- CVE-2014-10402 Path traversal in perl:dbi
- CVE-2014-10401 Path traversal in perl:dbi
- CVE-2014-10400 Weak cryptography in keplerproject:cgilua
- CVE-2014-10399 Auth bypass in keplerproject:cgilua
- CVE-2014-10398 Cross-site scripting in bssys:rbs bs-client. retail client
- CVE-2014-10397 Path traversal in para:antioch
- CVE-2014-10396 Path traversal in organizedthemes:epic
- CVE-2014-10395 Cross-site scripting in codepeople:polls cp
- CVE-2014-10394 Cross-site scripting in saschart:rich counter
- CVE-2014-10393 Cross-site scripting in cformsii project:cformsii
- CVE-2014-10392 Cross-site scripting in cformsii project:cformsii
- CVE-2014-10391 Cross-site scripting in wpsupportplus:wp support plus responsive ticket system
- CVE-2014-10390 Path traversal in wpsupportplus:wp support plus responsive ticket system
- CVE-2014-10389 Auth bypass in wpsupportplus:wp support plus responsive ticket system
- CVE-2014-10388 Information disclosure in wpsupportplus:wp support plus responsive ticket system
- CVE-2014-10387 SQL injection in wpsupportplus:wp support plus responsive ticket system
- CVE-2014-10386 Cross-site scripting in 3cx:live chat
- CVE-2014-10385 Cross-site scripting in memphis documents library project:memphis documents library
- CVE-2014-10384 Path traversal in memphis documents library project:memphis documents library
- CVE-2014-10383 Code injection in memphis documents library project:memphis documents library