# Vulnerabilities published in 2014


- [CVE-2014-10382](https://insights.sbomify.com/CVE-2014-10382/): Cross-site request forgery in pippinsplugins:featured comments (medium 4.3)
- [CVE-2014-10381](https://insights.sbomify.com/CVE-2014-10381/): Cross-site request forgery in user domain whitelist project:user domain whitelist (high 8.8)
- [CVE-2014-10380](https://insights.sbomify.com/CVE-2014-10380/): Cross-site scripting in cozmoslabs:profile builder (medium 6.1)
- [CVE-2014-10379](https://insights.sbomify.com/CVE-2014-10379/): SQL injection in duplicate post project:duplicate post (critical 9.8)
- [CVE-2014-10378](https://insights.sbomify.com/CVE-2014-10378/): Cross-site scripting in duplicate post project:duplicate post (medium 6.1)
- [CVE-2014-10377](https://insights.sbomify.com/CVE-2014-10377/): Cross-site scripting in cformsii project:cformsii (medium 6.1)
- [CVE-2014-10376](https://insights.sbomify.com/CVE-2014-10376/): SQL injection in themeist:i recommend this (critical 9.8)
- [CVE-2014-10375](https://insights.sbomify.com/CVE-2014-10375/): Integer overflow in gnu:exosip (high 7.5)
- [CVE-2014-10374](https://insights.sbomify.com/CVE-2014-10374/): Information disclosure in fitbit:charge 2 firmware (medium 6.5)
- [CVE-2014-10079](https://insights.sbomify.com/CVE-2014-10079/): Information disclosure in vembu:storegrid (medium 5.3)
- [CVE-2014-10078](https://insights.sbomify.com/CVE-2014-10078/): Cross-site scripting in vembu:storegrid (medium 6.1)
- [CVE-2014-10077](https://insights.sbomify.com/CVE-2014-10077/): i18n Vulnerable to Denial of Service Attack (high 7.5)
- [CVE-2014-10076](https://insights.sbomify.com/CVE-2014-10076/): Weak cryptography in wp-db-backup project:wp-db-backup (high 7.5)
- [CVE-2014-10075](https://insights.sbomify.com/CVE-2014-10075/): karo Metacharacter Handling Remote Command Execution (critical 9.8)
- [CVE-2014-10074](https://insights.sbomify.com/CVE-2014-10074/): File upload in umbraco:umbraco cms (critical 9.8)
- [CVE-2014-10073](https://insights.sbomify.com/CVE-2014-10073/): Path traversal in debian:debian linux (high 7.5)
- [CVE-2014-10072](https://insights.sbomify.com/CVE-2014-10072/): Memory corruption in zsh project:zsh (critical 9.8)
- [CVE-2014-10071](https://insights.sbomify.com/CVE-2014-10071/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2014-10070](https://insights.sbomify.com/CVE-2014-10070/): Privilege escalation in zsh project:zsh (high 7.8)
- [CVE-2014-10069](https://insights.sbomify.com/CVE-2014-10069/): Hardcoded credentials in hitrontech:cve-30360 firmware (high 7.5)
- [CVE-2014-10068](https://insights.sbomify.com/CVE-2014-10068/): Hidden Directories Always Served in inert (high 7.5)
- [CVE-2014-10067](https://insights.sbomify.com/CVE-2014-10067/): Validation Bypass in paypal-ipn (medium 5.9)
- [CVE-2014-10066](https://insights.sbomify.com/CVE-2014-10066/): Directory Traversal in fancy-server (high 7.5)
- [CVE-2014-10065](https://insights.sbomify.com/CVE-2014-10065/): Content Injection in remarkable (medium 6.1)
- [CVE-2014-10064](https://insights.sbomify.com/CVE-2014-10064/): Denial-of-Service Extended Event Loop Blocking in qs (high 7.5)
- [CVE-2014-10063](https://insights.sbomify.com/CVE-2014-10063/): Security feature bypass in Snapdragon Mobile (high 7.5)
- [CVE-2014-10062](https://insights.sbomify.com/CVE-2014-10062/): Missing authorization in Snapdragon Mobile, Snapdragon Wear (high 7.5)
- [CVE-2014-10059](https://insights.sbomify.com/CVE-2014-10059/): Missing authorization in Snapdragon Mobile (critical 9.8)
- [CVE-2014-10058](https://insights.sbomify.com/CVE-2014-10058/): Missing authorization in Snapdragon Mobile (high 7.5)
- [CVE-2014-10057](https://insights.sbomify.com/CVE-2014-10057/): Misconfiguration in Snapdragon Mobile (critical 9.8)
- [CVE-2014-10056](https://insights.sbomify.com/CVE-2014-10056/): Memory corruption in Snapdragon Mobile (critical 9.8)
- [CVE-2014-10055](https://insights.sbomify.com/CVE-2014-10055/): Information disclosure in Snapdragon Mobile (high 7.5)
- [CVE-2014-10054](https://insights.sbomify.com/CVE-2014-10054/): Privilege escalation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2014-10053](https://insights.sbomify.com/CVE-2014-10053/): Security feature bypass in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2014-10052](https://insights.sbomify.com/CVE-2014-10052/): Memory corruption in Snapdragon Mobile, Snapdragon Wear, Small Cell SoC (critical 9.8)
- [CVE-2014-10051](https://insights.sbomify.com/CVE-2014-10051/): Other in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2014-10050](https://insights.sbomify.com/CVE-2014-10050/): Security feature bypass in Snapdragon Mobile (critical 9.8)
- [CVE-2014-10048](https://insights.sbomify.com/CVE-2014-10048/): Memory corruption in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2014-10047](https://insights.sbomify.com/CVE-2014-10047/): Information disclosure in Snapdragon Mobile (high 7.5)
- [CVE-2014-10046](https://insights.sbomify.com/CVE-2014-10046/): Use after free in Snapdragon Mobile (critical 9.8)
- [CVE-2014-10045](https://insights.sbomify.com/CVE-2014-10045/): Memory corruption in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2014-10044](https://insights.sbomify.com/CVE-2014-10044/): Memory corruption in Snapdragon Mobile (high 7.5)
- [CVE-2014-10043](https://insights.sbomify.com/CVE-2014-10043/): Memory corruption in Snapdragon Mobile, Snapdragon Wear (high 7.5)
- [CVE-2014-10039](https://insights.sbomify.com/CVE-2014-10039/): Memory corruption in Snapdragon Mobile (critical 9.8)
- [CVE-2014-10038](https://insights.sbomify.com/CVE-2014-10038/): SQL injection in domphp:domphp (high 7.5)
- [CVE-2014-10037](https://insights.sbomify.com/CVE-2014-10037/): Path traversal in domphp:domphp (high 7.5)
- [CVE-2014-10036](https://insights.sbomify.com/CVE-2014-10036/): Cross-site scripting in jetbrains:teamcity (medium 4.3)
- [CVE-2014-10035](https://insights.sbomify.com/CVE-2014-10035/): Cross-site scripting in couponphp:couponphp (medium 4.3)
- [CVE-2014-10034](https://insights.sbomify.com/CVE-2014-10034/): SQL injection in couponphp:couponphp (medium 6.5)
- [CVE-2014-10033](https://insights.sbomify.com/CVE-2014-10033/): SQL injection in oscommerce:online merchant (medium 6.5)
- [CVE-2014-10032](https://insights.sbomify.com/CVE-2014-10032/): SQL injection in scriptbrasil:taboada macronews (medium 6.5)
- [CVE-2014-10031](https://insights.sbomify.com/CVE-2014-10031/): Memory corruption in qualcomm:eudora worldmail (high 7.5)
- [CVE-2014-10030](https://insights.sbomify.com/CVE-2014-10030/): Open redirect in fluxbb:fluxbb (medium 5.8)
- [CVE-2014-10029](https://insights.sbomify.com/CVE-2014-10029/): SQL injection in fluxbb:fluxbb (high 7.5)
- [CVE-2014-10028](https://insights.sbomify.com/CVE-2014-10028/): Cross-site scripting in dlink:dap-1360 firmware (medium 4.3)
- [CVE-2014-10027](https://insights.sbomify.com/CVE-2014-10027/): Cross-site request forgery in dlink:dap-1360 firmware (medium 6.8)
- [CVE-2014-10026](https://insights.sbomify.com/CVE-2014-10026/): Auth bypass in dlink:dap-1360 firmware (medium 5.0)
- [CVE-2014-10025](https://insights.sbomify.com/CVE-2014-10025/): Cross-site request forgery in dlink:dap-1360 firmware (medium 6.8)
- [CVE-2014-10024](https://insights.sbomify.com/CVE-2014-10024/): Integer overflow in divx:directshowdemuxfilter (high 7.5)
- [CVE-2014-10023](https://insights.sbomify.com/CVE-2014-10023/): SQL injection in topicsviewer:topicsviewer (high 7.5)
- [CVE-2014-10022](https://insights.sbomify.com/CVE-2014-10022/): Memory corruption in apache:traffic server (medium 5.0)
- [CVE-2014-10021](https://insights.sbomify.com/CVE-2014-10021/): File upload in wpsymposiumpro:wp symposium (high 7.5)
- [CVE-2014-10020](https://insights.sbomify.com/CVE-2014-10020/): SQL injection in tecorange:simple e-document (high 7.5)
- [CVE-2014-10019](https://insights.sbomify.com/CVE-2014-10019/): Cross-site request forgery in teracom:t2-b-gawv1.4u10y-bi (medium 6.8)
- [CVE-2014-10018](https://insights.sbomify.com/CVE-2014-10018/): Cross-site scripting in teracom:t2-b-gawv1.4u10y-bi (medium 4.3)
- [CVE-2014-10017](https://insights.sbomify.com/CVE-2014-10017/): SQL injection in welcart:e-commerce (high 7.5)
- [CVE-2014-10016](https://insights.sbomify.com/CVE-2014-10016/): Cross-site scripting in welcart:e-commerce (medium 4.3)
- [CVE-2014-10015](https://insights.sbomify.com/CVE-2014-10015/): SQL injection in phpjabbers:event booking calendar (high 7.5)
- [CVE-2014-10014](https://insights.sbomify.com/CVE-2014-10014/): Cross-site request forgery in phpjabbers:event booking calendar (medium 6.8)
- [CVE-2014-10013](https://insights.sbomify.com/CVE-2014-10013/): SQL injection in strategy11:awp classifieds (high 7.5)
- [CVE-2014-10012](https://insights.sbomify.com/CVE-2014-10012/): Cross-site scripting in strategy11:awp classifieds (medium 4.3)
- [CVE-2014-10011](https://insights.sbomify.com/CVE-2014-10011/): Memory corruption in trendnet:tv-ip422w (high 7.5)
- [CVE-2014-10010](https://insights.sbomify.com/CVE-2014-10010/): Path traversal in phpjabbers:appointment scheduler (medium 5.0)
- [CVE-2014-10009](https://insights.sbomify.com/CVE-2014-10009/): Cross-site scripting in iwcn:stark crm (medium 4.3)
- [CVE-2014-10008](https://insights.sbomify.com/CVE-2014-10008/): Cross-site request forgery in iwcn:stark crm (medium 6.8)
- [CVE-2014-10007](https://insights.sbomify.com/CVE-2014-10007/): Cross-site scripting in maianscriptworld:maian weblog (medium 4.3)
- [CVE-2014-10006](https://insights.sbomify.com/CVE-2014-10006/): Cross-site request forgery in maianscriptworld:maian uploader (medium 6.8)
- [CVE-2014-10005](https://insights.sbomify.com/CVE-2014-10005/): Information disclosure in maianscriptworld:maian uploader (medium 5.0)
- [CVE-2014-10004](https://insights.sbomify.com/CVE-2014-10004/): SQL injection in maianscriptworld:maian uploader (high 7.5)
- [CVE-2014-100039](https://insights.sbomify.com/CVE-2014-100039/): Memory corruption in malwarebytes:malwarebytes anti-exploit (low 2.1)
- [CVE-2014-100038](https://insights.sbomify.com/CVE-2014-100038/): Cross-site scripting in storytlr:storytlr (medium 4.3)
- [CVE-2014-100037](https://insights.sbomify.com/CVE-2014-100037/): Cross-site scripting in storytlr:storytlr (medium 4.3)
- [CVE-2014-100036](https://insights.sbomify.com/CVE-2014-100036/): Cross-site scripting in flatpress:flatpress (medium 4.3)
- [CVE-2014-100035](https://insights.sbomify.com/CVE-2014-100035/): SQL injection in licensepal:arcticdesk (high 7.5)
- [CVE-2014-100034](https://insights.sbomify.com/CVE-2014-100034/): Cross-site scripting in licensepal:arcticdesk (medium 4.3)
- [CVE-2014-100033](https://insights.sbomify.com/CVE-2014-100033/): Path traversal in licensepal:arcticdesk (medium 5.0)
- [CVE-2014-100032](https://insights.sbomify.com/CVE-2014-100032/): Cross-site scripting in airties:air 6372 (medium 4.3)
- [CVE-2014-100031](https://insights.sbomify.com/CVE-2014-100031/): SQL injection in ismail fahmi:ganesha digital library (high 7.5)
- [CVE-2014-100030](https://insights.sbomify.com/CVE-2014-100030/): Cross-site scripting in ganesha digital library project:ganesha digital library (medium 4.3)
- [CVE-2014-10003](https://insights.sbomify.com/CVE-2014-10003/): Cross-site scripting in maian script world:maian uploader (medium 4.3)
- [CVE-2014-100029](https://insights.sbomify.com/CVE-2014-100029/): Path traversal in ganesha digital library project:ganesha digital library (medium 5.0)
- [CVE-2014-100028](https://insights.sbomify.com/CVE-2014-100028/): Cross-site scripting in webcrafted project:webcrafted (medium 4.3)
- [CVE-2014-100027](https://insights.sbomify.com/CVE-2014-100027/): Cross-site scripting in getusedtoit:wp slimstat (medium 4.3)
- [CVE-2014-100026](https://insights.sbomify.com/CVE-2014-100026/): Cross-site scripting in april\'s super functions pack project:april\'s super functions pack (medium 4.3)
- [CVE-2014-100025](https://insights.sbomify.com/CVE-2014-100025/): Cross-site request forgery in savsoft technologies:savsoft quiz (medium 6.8)
- [CVE-2014-100024](https://insights.sbomify.com/CVE-2014-100024/): Cross-site scripting in seopanel:seo panel (medium 4.3)
- [CVE-2014-100023](https://insights.sbomify.com/CVE-2014-100023/): Cross-site scripting in mtouch quiz project:mtouch quiz (medium 4.3)
- [CVE-2014-100022](https://insights.sbomify.com/CVE-2014-100022/): SQL injection in mtouch quiz project:mtouch quiz (high 7.5)
- [CVE-2014-100021](https://insights.sbomify.com/CVE-2014-100021/): Cross-site scripting in orangehrm:orangehrm (medium 4.3)
- [CVE-2014-100020](https://insights.sbomify.com/CVE-2014-100020/): SQL injection in itechscripts:itechclassifieds (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/75/