# Vulnerabilities published in 2014


- [CVE-2014-125046](https://insights.sbomify.com/CVE-2014-125046/): Seiji42 cub-scout-tracker databaseAccessFunctions.js sql injection (medium 5.5)
- [CVE-2014-125045](https://insights.sbomify.com/CVE-2014-125045/): meol1 index.php GetAnimal sql injection (medium 5.5)
- [CVE-2014-125044](https://insights.sbomify.com/CVE-2014-125044/): soshtolsus wing-tight index.php file inclusion (medium 6.3)
- [CVE-2014-125041](https://insights.sbomify.com/CVE-2014-125041/): Miccighel PR-CWT sql injection (medium 5.5)
- [CVE-2014-125040](https://insights.sbomify.com/CVE-2014-125040/): stevejagodzinski DevNewsAggregator RemoteHtmlContentDataAccess.php getByName sql injection (medium 5.5)
- [CVE-2014-125039](https://insights.sbomify.com/CVE-2014-125039/): kkokko NeoXplora Trainer cross site scripting (low 3.5)
- [CVE-2014-125038](https://insights.sbomify.com/CVE-2014-125038/): IS_Projecto2 NewsBean.java sql injection (medium 5.5)
- [CVE-2014-125037](https://insights.sbomify.com/CVE-2014-125037/): License to Kill injury.rb sql injection (medium 5.5)
- [CVE-2014-125036](https://insights.sbomify.com/CVE-2014-125036/): drybjed ansible-ntp main.yml amplification (low 2.6)
- [CVE-2014-125035](https://insights.sbomify.com/CVE-2014-125035/): Jobs-Plugin cross site scripting (low 3.5)
- [CVE-2014-125034](https://insights.sbomify.com/CVE-2014-125034/): stiiv contact_app View.php render cross site scripting (low 3.5)
- [CVE-2014-125033](https://insights.sbomify.com/CVE-2014-125033/): rails-cv-app uploaded_files_controller.rb path traversal (low 3.5)
- [CVE-2014-125032](https://insights.sbomify.com/CVE-2014-125032/): porpeeranut go-with-me add.php sql injection (medium 5.5)
- [CVE-2014-125031](https://insights.sbomify.com/CVE-2014-125031/): kirill2485 TekNet loggedin.php cross site scripting (low 3.5)
- [CVE-2014-125030](https://insights.sbomify.com/CVE-2014-125030/): taoeffect Empress hard-coded password (medium 6.3)
- [CVE-2014-125029](https://insights.sbomify.com/CVE-2014-125029/): ttskch PaginationServiceProvider Demo index.php sql injection (medium 5.5)
- [CVE-2014-125028](https://insights.sbomify.com/CVE-2014-125028/): valtech IDP Test Client main.py cross-site request forgery (medium 4.3)
- [CVE-2014-125027](https://insights.sbomify.com/CVE-2014-125027/): Yuna Scatari TBDev usersearch.php get_user_icons cross site scripting (low 3.5)
- [CVE-2014-125026](https://insights.sbomify.com/CVE-2014-125026/): Out-of-bounds write in github.com/cloudflare/golz4 (critical 9.8)
- [CVE-2014-125025](https://insights.sbomify.com/CVE-2014-125025/): FFmpeg decode_pulses memory corruption (medium 5.3)
- [CVE-2014-125024](https://insights.sbomify.com/CVE-2014-125024/): FFmpeg lag_decode_frame memory corruption (high 7.3)
- [CVE-2014-125023](https://insights.sbomify.com/CVE-2014-125023/): FFmpeg Truemotion1 truemotion1_decode_header memory corruption (medium 5.3)
- [CVE-2014-125022](https://insights.sbomify.com/CVE-2014-125022/): FFmpeg Bitstream Buffer shorten_decode_frame memory corruption (medium 5.3)
- [CVE-2014-125021](https://insights.sbomify.com/CVE-2014-125021/): FFmpeg cmv_process_header memory corruption (medium 5.3)
- [CVE-2014-125020](https://insights.sbomify.com/CVE-2014-125020/): FFmpeg decode_update_thread_context memory corruption (high 7.3)
- [CVE-2014-125019](https://insights.sbomify.com/CVE-2014-125019/): FFmpeg Slice Segment decode_nal_unit memory corruption (medium 5.3)
- [CVE-2014-125018](https://insights.sbomify.com/CVE-2014-125018/): FFmpeg decode_slice_header memory corruption (medium 5.3)
- [CVE-2014-125017](https://insights.sbomify.com/CVE-2014-125017/): FFmpeg rpza_decode_stream memory corruption (high 7.3)
- [CVE-2014-125016](https://insights.sbomify.com/CVE-2014-125016/): FFmpeg utils.c ff_init_buffer_info memory corruption (medium 5.3)
- [CVE-2014-125015](https://insights.sbomify.com/CVE-2014-125015/): FFmpeg read_var_block_data memory corruption (high 7.3)
- [CVE-2014-125014](https://insights.sbomify.com/CVE-2014-125014/): FFmpeg HEVC Video Decoder memory corruption (medium 5.3)
- [CVE-2014-125013](https://insights.sbomify.com/CVE-2014-125013/): FFmpeg msrle.c msrle_decode_frame memory corruption (medium 5.3)
- [CVE-2014-125012](https://insights.sbomify.com/CVE-2014-125012/): FFmpeg dxtroy.c integer coercion (medium 5.3)
- [CVE-2014-125011](https://insights.sbomify.com/CVE-2014-125011/): FFmpeg ansi.c decode_frame integer coercion (medium 5.3)
- [CVE-2014-125010](https://insights.sbomify.com/CVE-2014-125010/): FFmpeg h64.c decode_slice_header memory corruption (medium 5.3)
- [CVE-2014-125009](https://insights.sbomify.com/CVE-2014-125009/): FFmpeg snow.h add_yblock memory corruption (medium 5.3)
- [CVE-2014-125008](https://insights.sbomify.com/CVE-2014-125008/): FFmpeg oggparsevorbis.c vorbis_header memory corruption (medium 5.3)
- [CVE-2014-125007](https://insights.sbomify.com/CVE-2014-125007/): FFmpeg hevcpred_template.c intra_pred memory corruption (medium 5.3)
- [CVE-2014-125006](https://insights.sbomify.com/CVE-2014-125006/): FFmpeg h264.c output_frame memory corruption (medium 5.3)
- [CVE-2014-125005](https://insights.sbomify.com/CVE-2014-125005/): FFmpeg mpeg4videodec.c decode_vol_header memory corruption (medium 5.3)
- [CVE-2014-125004](https://insights.sbomify.com/CVE-2014-125004/): FFmpeg vmnc.c decode_hextile memory corruption (medium 5.3)
- [CVE-2014-125003](https://insights.sbomify.com/CVE-2014-125003/): FFmpeg jpeg2000dec.c get_siz memory corruption (medium 5.3)
- [CVE-2014-125002](https://insights.sbomify.com/CVE-2014-125002/): FFmpeg dnxhdenc.c dnxhd_init_rc memory corruption (medium 5.3)
- [CVE-2014-125001](https://insights.sbomify.com/CVE-2014-125001/): Cardo Systems Scala Rider Q3 Cardo-Updater api privileges management (high 8.1)
- [CVE-2014-1250](https://insights.sbomify.com/CVE-2014-1250/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2014-1249](https://insights.sbomify.com/CVE-2014-1249/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2014-1248](https://insights.sbomify.com/CVE-2014-1248/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2014-1247](https://insights.sbomify.com/CVE-2014-1247/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2014-1246](https://insights.sbomify.com/CVE-2014-1246/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2014-1245](https://insights.sbomify.com/CVE-2014-1245/): Integer overflow in apple:quicktime (critical 9.3)
- [CVE-2014-1244](https://insights.sbomify.com/CVE-2014-1244/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2014-1243](https://insights.sbomify.com/CVE-2014-1243/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2014-1242](https://insights.sbomify.com/CVE-2014-1242/): Weak cryptography in apple:itunes (medium 5.8)
- [CVE-2014-1238](https://insights.sbomify.com/CVE-2014-1238/): Cross-site scripting in ideagen:q-pulse (medium 6.1)
- [CVE-2014-1237](https://insights.sbomify.com/CVE-2014-1237/): Cross-site scripting in i-doit:i-doit (medium 4.3)
- [CVE-2014-1236](https://insights.sbomify.com/CVE-2014-1236/): Memory corruption in graphviz:graphviz (critical 10.0)
- [CVE-2014-1235](https://insights.sbomify.com/CVE-2014-1235/): Memory corruption in graphviz:graphviz (high 7.8)
- [CVE-2014-1234](https://insights.sbomify.com/CVE-2014-1234/): Paratrooper-newrelic Exposes of Sensitive Information to an Unauthorized Actor (low 2.1)
- [CVE-2014-1233](https://insights.sbomify.com/CVE-2014-1233/): Local API Login Credentials Disclosure in paratrooper-pingdom (low 2.1)
- [CVE-2014-1232](https://insights.sbomify.com/CVE-2014-1232/): Cross-site scripting in foliovision:foliopress wysiwyg (medium 4.3)
- [CVE-2014-1226](https://insights.sbomify.com/CVE-2014-1226/): Privilege escalation in s3dvt project:s3dvt (high 7.8)
- [CVE-2014-1224](https://insights.sbomify.com/CVE-2014-1224/): Cross-site scripting in rexx-systems:recruitment (medium 4.3)
- [CVE-2014-1223](https://insights.sbomify.com/CVE-2014-1223/): Cross-site scripting in telligent:evolution (medium 4.3)
- [CVE-2014-1222](https://insights.sbomify.com/CVE-2014-1222/): Path traversal in vtiger:vtiger crm (medium 4.0)
- [CVE-2014-1219](https://insights.sbomify.com/CVE-2014-1219/): Auth bypass in broadcom:2e web option (medium 5.1)
- [CVE-2014-1217](https://insights.sbomify.com/CVE-2014-1217/): Missing authorization in livetecs:timeline (high 7.5)
- [CVE-2014-1216](https://insights.sbomify.com/CVE-2014-1216/): Improper Neutralization of Special Elements used in a Command in FitNesse Wiki (high 7.5)
- [CVE-2014-1215](https://insights.sbomify.com/CVE-2014-1215/): Memory corruption in coreftp:core ftp (high 7.8)
- [CVE-2014-1214](https://insights.sbomify.com/CVE-2014-1214/): File upload in projoom:smart flash header (high 8.8)
- [CVE-2014-1213](https://insights.sbomify.com/CVE-2014-1213/): Missing authorization in sophos:scanning engine (medium 5.6)
- [CVE-2014-1211](https://insights.sbomify.com/CVE-2014-1211/): Cross-site request forgery in vmware:vcloud director (medium 6.8)
- [CVE-2014-1210](https://insights.sbomify.com/CVE-2014-1210/): Weak cryptography in vmware:vsphere client (medium 5.8)
- [CVE-2014-1209](https://insights.sbomify.com/CVE-2014-1209/): Security feature bypass in vmware:vsphere client (critical 9.3)
- [CVE-2014-1208](https://insights.sbomify.com/CVE-2014-1208/): Denial of service in vmware:esx (low 3.3)
- [CVE-2014-1207](https://insights.sbomify.com/CVE-2014-1207/): Null dereference in vmware:esx (medium 4.3)
- [CVE-2014-1206](https://insights.sbomify.com/CVE-2014-1206/): SQL injection in openwebanalytics:open web analytics (high 7.5)
- [CVE-2014-1204](https://insights.sbomify.com/CVE-2014-1204/): SQL injection in tableausoftware:tableau server (high 7.5)
- [CVE-2014-1203](https://insights.sbomify.com/CVE-2014-1203/): Command injection in eyou:eyou (critical 9.8)
- [CVE-2014-1202](https://insights.sbomify.com/CVE-2014-1202/): Code injection via property expansion in SoapUI (critical 9.3)
- [CVE-2014-1201](https://insights.sbomify.com/CVE-2014-1201/): Memory corruption in lorex technology:edge2 lh330 firmware (critical 10.0)
- [CVE-2014-10402](https://insights.sbomify.com/CVE-2014-10402/): Path traversal in perl:dbi (medium 6.1)
- [CVE-2014-10401](https://insights.sbomify.com/CVE-2014-10401/): Path traversal in perl:dbi (medium 6.1)
- [CVE-2014-10400](https://insights.sbomify.com/CVE-2014-10400/): Weak cryptography in keplerproject:cgilua (medium 6.1)
- [CVE-2014-10399](https://insights.sbomify.com/CVE-2014-10399/): Auth bypass in keplerproject:cgilua (medium 6.1)
- [CVE-2014-10398](https://insights.sbomify.com/CVE-2014-10398/): Cross-site scripting in bssys:rbs bs-client. retail client (medium 6.1)
- [CVE-2014-10397](https://insights.sbomify.com/CVE-2014-10397/): Path traversal in para:antioch (high 7.5)
- [CVE-2014-10396](https://insights.sbomify.com/CVE-2014-10396/): Path traversal in organizedthemes:epic (high 7.5)
- [CVE-2014-10395](https://insights.sbomify.com/CVE-2014-10395/): Cross-site scripting in codepeople:polls cp (medium 6.1)
- [CVE-2014-10394](https://insights.sbomify.com/CVE-2014-10394/): Cross-site scripting in saschart:rich counter (medium 6.1)
- [CVE-2014-10393](https://insights.sbomify.com/CVE-2014-10393/): Cross-site scripting in cformsii project:cformsii (medium 6.1)
- [CVE-2014-10392](https://insights.sbomify.com/CVE-2014-10392/): Cross-site scripting in cformsii project:cformsii (medium 6.1)
- [CVE-2014-10391](https://insights.sbomify.com/CVE-2014-10391/): Cross-site scripting in wpsupportplus:wp support plus responsive ticket system (medium 6.1)
- [CVE-2014-10390](https://insights.sbomify.com/CVE-2014-10390/): Path traversal in wpsupportplus:wp support plus responsive ticket system (critical 9.1)
- [CVE-2014-10389](https://insights.sbomify.com/CVE-2014-10389/): Auth bypass in wpsupportplus:wp support plus responsive ticket system (critical 9.8)
- [CVE-2014-10388](https://insights.sbomify.com/CVE-2014-10388/): Information disclosure in wpsupportplus:wp support plus responsive ticket system (medium 5.3)
- [CVE-2014-10387](https://insights.sbomify.com/CVE-2014-10387/): SQL injection in wpsupportplus:wp support plus responsive ticket system (critical 9.8)
- [CVE-2014-10386](https://insights.sbomify.com/CVE-2014-10386/): Cross-site scripting in 3cx:live chat (medium 6.1)
- [CVE-2014-10385](https://insights.sbomify.com/CVE-2014-10385/): Cross-site scripting in memphis documents library project:memphis documents library (medium 6.1)
- [CVE-2014-10384](https://insights.sbomify.com/CVE-2014-10384/): Path traversal in memphis documents library project:memphis documents library (critical 9.8)
- [CVE-2014-10383](https://insights.sbomify.com/CVE-2014-10383/): Code injection in memphis documents library project:memphis documents library (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/74/