# Vulnerabilities published in 2014


- [CVE-2014-10002](https://insights.sbomify.com/CVE-2014-10002/): Information disclosure in jetbrains:teamcity (medium 5.0)
- [CVE-2014-100019](https://insights.sbomify.com/CVE-2014-100019/): SQL injection in pomm-project:pomm (high 7.5)
- [CVE-2014-100018](https://insights.sbomify.com/CVE-2014-100018/): Cross-site scripting in unconfirmed project:unconfirmed (medium 4.3)
- [CVE-2014-100017](https://insights.sbomify.com/CVE-2014-100017/): Cross-site scripting in phponlinechat:phponlinechat (medium 4.3)
- [CVE-2014-100016](https://insights.sbomify.com/CVE-2014-100016/): Cross-site scripting in photocati media:photocrati (medium 4.3)
- [CVE-2014-100015](https://insights.sbomify.com/CVE-2014-100015/): Path traversal in solidworks:product data management (medium 6.4)
- [CVE-2014-100014](https://insights.sbomify.com/CVE-2014-100014/): Memory corruption in solidworks:product data management (high 7.5)
- [CVE-2014-100013](https://insights.sbomify.com/CVE-2014-100013/): Cross-site scripting in clientresponse project:clientresponse (medium 4.3)
- [CVE-2014-100012](https://insights.sbomify.com/CVE-2014-100012/): SQL injection in sendy:sendy (high 7.5)
- [CVE-2014-100011](https://insights.sbomify.com/CVE-2014-100011/): SQL injection in sendy:sendy (high 7.5)
- [CVE-2014-100010](https://insights.sbomify.com/CVE-2014-100010/): Cross-site scripting in csphere:clansphere (medium 4.3)
- [CVE-2014-10001](https://insights.sbomify.com/CVE-2014-10001/): Cross-site request forgery in phpjabbers:appointment scheduler (medium 6.8)
- [CVE-2014-100009](https://insights.sbomify.com/CVE-2014-100009/): Information disclosure in joomlaskin:js multi hotel (medium 5.0)
- [CVE-2014-100008](https://insights.sbomify.com/CVE-2014-100008/): Cross-site scripting in joomlaskin:js multi hotel (medium 4.3)
- [CVE-2014-100007](https://insights.sbomify.com/CVE-2014-100007/): Cross-site scripting in hk exif tags project:hk exif tags (medium 4.3)
- [CVE-2014-100006](https://insights.sbomify.com/CVE-2014-100006/): Cross-site scripting in webtrees:webtrees (medium 4.3)
- [CVE-2014-100005](https://insights.sbomify.com/CVE-2014-100005/): D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) (high 8.0, exploited in the wild)
- [CVE-2014-100004](https://insights.sbomify.com/CVE-2014-100004/): Cross-site scripting in sitecore:cms (medium 4.3)
- [CVE-2014-100003](https://insights.sbomify.com/CVE-2014-100003/): SQL injection in yourmembers project:yourmembers (high 7.5)
- [CVE-2014-100002](https://insights.sbomify.com/CVE-2014-100002/): Path traversal in zohocorp:manageengine supportcenter plus (medium 5.0)
- [CVE-2014-100001](https://insights.sbomify.com/CVE-2014-100001/): Cross-site request forgery in seopressor:seo plugin liveoptim (medium 6.8)
- [CVE-2014-0999](https://insights.sbomify.com/CVE-2014-0999/): Information disclosure in sendio:sendio (medium 5.0)
- [CVE-2014-0998](https://insights.sbomify.com/CVE-2014-0998/): Integer overflow in freebsd:freebsd (high 7.2)
- [CVE-2014-0997](https://insights.sbomify.com/CVE-2014-0997/): Denial of service in google:android (high 7.5)
- [CVE-2014-0995](https://insights.sbomify.com/CVE-2014-0995/): Denial of service in sap:netweaver (medium 5.0)
- [CVE-2014-0994](https://insights.sbomify.com/CVE-2014-0994/): Memory corruption in embarcadero:embarcadero c\+\+builder xe6 (medium 6.8)
- [CVE-2014-0993](https://insights.sbomify.com/CVE-2014-0993/): Memory corruption in embarcadero:embarcadero c\+\+builder xe6 (medium 6.8)
- [CVE-2014-0992](https://insights.sbomify.com/CVE-2014-0992/): Memory corruption in advantech:advantech webaccess (medium 6.8)
- [CVE-2014-0991](https://insights.sbomify.com/CVE-2014-0991/): Memory corruption in advantech:advantech webaccess (medium 6.8)
- [CVE-2014-0990](https://insights.sbomify.com/CVE-2014-0990/): Memory corruption in advantech:advantech webaccess (medium 6.8)
- [CVE-2014-0989](https://insights.sbomify.com/CVE-2014-0989/): Memory corruption in advantech:advantech webaccess (medium 6.8)
- [CVE-2014-0988](https://insights.sbomify.com/CVE-2014-0988/): Memory corruption in advantech:advantech webaccess (medium 6.8)
- [CVE-2014-0987](https://insights.sbomify.com/CVE-2014-0987/): Memory corruption in advantech:advantech webaccess (medium 6.8)
- [CVE-2014-0986](https://insights.sbomify.com/CVE-2014-0986/): Memory corruption in advantech:advantech webaccess (medium 6.8)
- [CVE-2014-0985](https://insights.sbomify.com/CVE-2014-0985/): Memory corruption in advantech:advantech webaccess (medium 6.8)
- [CVE-2014-0984](https://insights.sbomify.com/CVE-2014-0984/): Information disclosure in sap:router (medium 4.3)
- [CVE-2014-0983](https://insights.sbomify.com/CVE-2014-0983/): Memory corruption in oracle:vm virtualbox (medium 6.9)
- [CVE-2014-0981](https://insights.sbomify.com/CVE-2014-0981/): Memory corruption in oracle:vm virtualbox (medium 4.4)
- [CVE-2014-0980](https://insights.sbomify.com/CVE-2014-0980/): Memory corruption in poster software:publish it (critical 9.3)
- [CVE-2014-0979](https://insights.sbomify.com/CVE-2014-0979/): Null dereference in lightdm gtk\+ greeter project:lightdm gtk\+ greeter (low 2.1)
- [CVE-2014-0978](https://insights.sbomify.com/CVE-2014-0978/): Memory corruption in graphviz:graphviz (critical 9.3)
- [CVE-2014-0977](https://insights.sbomify.com/CVE-2014-0977/): Cross-site scripting in sixapart:movabletype (medium 4.3)
- [CVE-2014-0974](https://insights.sbomify.com/CVE-2014-0974/): Memory corruption in little kernel project:little kernel bootloader (low 1.9)
- [CVE-2014-0973](https://insights.sbomify.com/CVE-2014-0973/): Security feature bypass in little kernel project:little kernel bootloader (high 7.2)
- [CVE-2014-0972](https://insights.sbomify.com/CVE-2014-0972/): Memory corruption in codeaurora:android-msm (high 7.2)
- [CVE-2014-0970](https://insights.sbomify.com/CVE-2014-0970/): Other in ibm:infosphere master data management collaboration server (low 3.5)
- [CVE-2014-0969](https://insights.sbomify.com/CVE-2014-0969/): Cross-site request forgery in ibm:infosphere master data management (medium 6.8)
- [CVE-2014-0968](https://insights.sbomify.com/CVE-2014-0968/): Cross-site scripting in ibm:infosphere master data management collaboration server (low 3.5)
- [CVE-2014-0967](https://insights.sbomify.com/CVE-2014-0967/): Cross-site scripting in ibm:infosphere master data management collaboration server (low 3.5)
- [CVE-2014-0966](https://insights.sbomify.com/CVE-2014-0966/): SQL injection in ibm:infosphere master data management (medium 6.5)
- [CVE-2014-0965](https://insights.sbomify.com/CVE-2014-0965/): Information disclosure in ibm:websphere application server (medium 4.3)
- [CVE-2014-0964](https://insights.sbomify.com/CVE-2014-0964/): Denial of service in ibm:websphere application server (high 7.1)
- [CVE-2014-0963](https://insights.sbomify.com/CVE-2014-0963/): Denial of service in ibm:security access manager for web appliance (high 7.1)
- [CVE-2014-0961](https://insights.sbomify.com/CVE-2014-0961/): Cross-site request forgery in ibm:security identity manager (medium 6.0)
- [CVE-2014-0960](https://insights.sbomify.com/CVE-2014-0960/): Security feature bypass in ibm:pureapplication system (medium 6.6)
- [CVE-2014-0959](https://insights.sbomify.com/CVE-2014-0959/): Denial of service in ibm:websphere portal (medium 4.0)
- [CVE-2014-0958](https://insights.sbomify.com/CVE-2014-0958/): Open redirect in ibm:websphere portal (medium 5.8)
- [CVE-2014-0957](https://insights.sbomify.com/CVE-2014-0957/): Cross-site scripting in ibm:business process manager (medium 4.3)
- [CVE-2014-0956](https://insights.sbomify.com/CVE-2014-0956/): Cross-site scripting in ibm:websphere portal (medium 4.3)
- [CVE-2014-0955](https://insights.sbomify.com/CVE-2014-0955/): Cross-site scripting in ibm:websphere portal (medium 4.3)
- [CVE-2014-0954](https://insights.sbomify.com/CVE-2014-0954/): Security feature bypass in ibm:websphere portal (medium 6.8)
- [CVE-2014-0953](https://insights.sbomify.com/CVE-2014-0953/): Cross-site scripting in ibm:websphere portal (medium 4.3)
- [CVE-2014-0952](https://insights.sbomify.com/CVE-2014-0952/): Cross-site scripting in ibm:websphere portal (medium 4.3)
- [CVE-2014-0951](https://insights.sbomify.com/CVE-2014-0951/): Cross-site scripting in ibm:websphere portal (medium 4.3)
- [CVE-2014-0950](https://insights.sbomify.com/CVE-2014-0950/): XML external entity in ibm:rational clearquest (high 7.1)
- [CVE-2014-0949](https://insights.sbomify.com/CVE-2014-0949/): Denial of service in ibm:websphere portal (medium 5.0)
- [CVE-2014-0948](https://insights.sbomify.com/CVE-2014-0948/): Other in ibm:rational software architect design manager (medium 6.0)
- [CVE-2014-0947](https://insights.sbomify.com/CVE-2014-0947/): Code injection in ibm:rational software architect design manager (medium 6.0)
- [CVE-2014-0946](https://insights.sbomify.com/CVE-2014-0946/): Information disclosure in ibm:operational decision manager (medium 4.3)
- [CVE-2014-0945](https://insights.sbomify.com/CVE-2014-0945/): Cross-site scripting in ibm:operational decision manager (low 3.5)
- [CVE-2014-0944](https://insights.sbomify.com/CVE-2014-0944/): Cross-site request forgery in ibm:operational decision manager (medium 6.0)
- [CVE-2014-0943](https://insights.sbomify.com/CVE-2014-0943/): Denial of service in ibm:websphere commerce (high 7.1)
- [CVE-2014-0942](https://insights.sbomify.com/CVE-2014-0942/): Cross-site scripting in ibm:tivoli netcool\/omnibus (low 3.5)
- [CVE-2014-0941](https://insights.sbomify.com/CVE-2014-0941/): Cross-site scripting in ibm:tivoli netcool\/omnibus (low 3.5)
- [CVE-2014-0940](https://insights.sbomify.com/CVE-2014-0940/): Cross-site scripting in ibm:tivoli service automation manager (medium 4.3)
- [CVE-2014-0936](https://insights.sbomify.com/CVE-2014-0936/): Information disclosure in ibm:security appscan source (medium 4.3)
- [CVE-2014-0935](https://insights.sbomify.com/CVE-2014-0935/): Privilege escalation in ibm:smart analytics system 7700 (medium 4.6)
- [CVE-2014-0933](https://insights.sbomify.com/CVE-2014-0933/): Cross-site request forgery in ibm:infosphere information server metadata workbench (medium 6.8)
- [CVE-2014-0932](https://insights.sbomify.com/CVE-2014-0932/): Cross-site scripting in ibm:sterling order management (low 3.5)
- [CVE-2014-0931](https://insights.sbomify.com/CVE-2014-0931/): XML external entity in ibm:rational clearcase (critical 9.1)
- [CVE-2014-0930](https://insights.sbomify.com/CVE-2014-0930/): Memory corruption in ibm:aix (medium 4.7)
- [CVE-2014-0929](https://insights.sbomify.com/CVE-2014-0929/): Cross-site request forgery in ibm:connections (medium 6.0)
- [CVE-2014-0927](https://insights.sbomify.com/CVE-2014-0927/): Auth bypass in ibm:sterling b2b integrator (high 8.1)
- [CVE-2014-0925](https://insights.sbomify.com/CVE-2014-0925/): Open redirect in ibm:sterling control center (low 3.5)
- [CVE-2014-0924](https://insights.sbomify.com/CVE-2014-0924/): Auth bypass in ibm:messagesight (medium 4.6)
- [CVE-2014-0923](https://insights.sbomify.com/CVE-2014-0923/): Denial of service in ibm:messagesight (medium 4.3)
- [CVE-2014-0922](https://insights.sbomify.com/CVE-2014-0922/): Denial of service in ibm:messagesight (medium 4.3)
- [CVE-2014-0921](https://insights.sbomify.com/CVE-2014-0921/): Denial of service in ibm:messagesight (medium 4.3)
- [CVE-2014-0920](https://insights.sbomify.com/CVE-2014-0920/): Information disclosure in ibm:spss analytic server (medium 4.0)
- [CVE-2014-0919](https://insights.sbomify.com/CVE-2014-0919/): Information disclosure in ibm:db2 (medium 4.0)
- [CVE-2014-0918](https://insights.sbomify.com/CVE-2014-0918/): Path traversal in ibm:websphere portal (high 7.1)
- [CVE-2014-0917](https://insights.sbomify.com/CVE-2014-0917/): Cross-site scripting in ibm:websphere portal (medium 4.3)
- [CVE-2014-0915](https://insights.sbomify.com/CVE-2014-0915/): Cross-site scripting in ibm:maximo asset management (low 3.5)
- [CVE-2014-0914](https://insights.sbomify.com/CVE-2014-0914/): Cross-site scripting in ibm:maximo asset management (low 3.5)
- [CVE-2014-0913](https://insights.sbomify.com/CVE-2014-0913/): Cross-site scripting in ibm:lotus domino (medium 4.3)
- [CVE-2014-0912](https://insights.sbomify.com/CVE-2014-0912/): Information disclosure in ibm:sterling b2b integrator (medium 5.3)
- [CVE-2014-0911](https://insights.sbomify.com/CVE-2014-0911/): Denial of service in ibm:websphere mq (medium 4.3)
- [CVE-2014-0910](https://insights.sbomify.com/CVE-2014-0910/): Cross-site scripting in ibm:websphere portal (low 3.5)
- [CVE-2014-0909](https://insights.sbomify.com/CVE-2014-0909/): Information disclosure in ibm:rational license key server (medium 5.0)
- [CVE-2014-0908](https://insights.sbomify.com/CVE-2014-0908/): Missing authorization in ibm:business process manager (medium 6.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/76/