# Vulnerabilities published in 2014


- [CVE-2014-0793](https://insights.sbomify.com/CVE-2014-0793/): Cross-site scripting in stackideas:komento (medium 4.3)
- [CVE-2014-0792](https://insights.sbomify.com/CVE-2014-0792/): Deserialization in sonatype:nexus (high 7.5)
- [CVE-2014-0791](https://insights.sbomify.com/CVE-2014-0791/): Integer overflow in freerdp:freerdp (medium 6.8)
- [CVE-2014-0789](https://insights.sbomify.com/CVE-2014-0789/): Schneider Electric OPC Factory Server Buffer Overflow (medium 5.0)
- [CVE-2014-0787](https://insights.sbomify.com/CVE-2014-0787/): WellinTech KingSCADA Stack-based Buffer Overflow (critical 10.0)
- [CVE-2014-0786](https://insights.sbomify.com/CVE-2014-0786/): Ecava IntegraXor Information Exposure (high 7.5)
- [CVE-2014-0784](https://insights.sbomify.com/CVE-2014-0784/): Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow (high 8.3)
- [CVE-2014-0783](https://insights.sbomify.com/CVE-2014-0783/): Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow (critical 9.0)
- [CVE-2014-0782](https://insights.sbomify.com/CVE-2014-0782/): Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow (high 8.3)
- [CVE-2014-0781](https://insights.sbomify.com/CVE-2014-0781/): Yokogawa CENTUM CS 3000 Heap-based Buffer Overflow (critical 9.3)
- [CVE-2014-0780](https://insights.sbomify.com/CVE-2014-0780/): InduSoft Web Studio NTWebServer Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2014-0779](https://insights.sbomify.com/CVE-2014-0779/): Memory corruption in ClearSCADA (medium 6.8)
- [CVE-2014-0778](https://insights.sbomify.com/CVE-2014-0778/): Progea Movicon SCADA Exposure of Sensitive Information to an Unauthorized Actor (medium 4.3)
- [CVE-2014-0777](https://insights.sbomify.com/CVE-2014-0777/): OServer Out of Bounds Read (high 8.3)
- [CVE-2014-0774](https://insights.sbomify.com/CVE-2014-0774/): Schneider Electric OFS Stack Buffer Overflow (medium 6.8)
- [CVE-2014-0773](https://insights.sbomify.com/CVE-2014-0773/): Advantech WebAccess Command Injection (high 7.5)
- [CVE-2014-0772](https://insights.sbomify.com/CVE-2014-0772/): Advantech WebAccess File and Directory Information Exposure (medium 5.0)
- [CVE-2014-0771](https://insights.sbomify.com/CVE-2014-0771/): Advantech WebAccess File and Directory Information Exposure (high 7.5)
- [CVE-2014-0770](https://insights.sbomify.com/CVE-2014-0770/): Advantech WebAccess Stack-based Buffer Overflow (high 7.5)
- [CVE-2014-0769](https://insights.sbomify.com/CVE-2014-0769/): Festo CECX-X-(C1/M1) Controller Improper Authentication (critical 9.3)
- [CVE-2014-0768](https://insights.sbomify.com/CVE-2014-0768/): Advantech WebAccess Stack-based Buffer Overflow (high 7.5)
- [CVE-2014-0767](https://insights.sbomify.com/CVE-2014-0767/): Advantech WebAccess Stack-based Buffer Overflow (high 7.5)
- [CVE-2014-0766](https://insights.sbomify.com/CVE-2014-0766/): Advantech WebAccess Stack-based Buffer Overflow (high 7.5)
- [CVE-2014-0765](https://insights.sbomify.com/CVE-2014-0765/): Advantech WebAccess Stack-based Buffer Overflow (high 7.5)
- [CVE-2014-0764](https://insights.sbomify.com/CVE-2014-0764/): Advantech WebAccess Stack-based Buffer Overflow (high 7.5)
- [CVE-2014-0763](https://insights.sbomify.com/CVE-2014-0763/): Advantech WebAccess SQL Injection (high 7.5)
- [CVE-2014-0762](https://insights.sbomify.com/CVE-2014-0762/): CG Automation ePAQ-9410 Substation Gateway Improper Input Validation (medium 4.7)
- [CVE-2014-0761](https://insights.sbomify.com/CVE-2014-0761/): CG Automation ePAQ-9410 Substation Gateway Improper Input Validation (high 7.1)
- [CVE-2014-0760](https://insights.sbomify.com/CVE-2014-0760/): Festo CECX-X-(C1/M1) Controller Improper Authentication (critical 9.3)
- [CVE-2014-0759](https://insights.sbomify.com/CVE-2014-0759/): Schneider Electric Floating License Manager Unquoted Search Path or Element (medium 6.9)
- [CVE-2014-0758](https://insights.sbomify.com/CVE-2014-0758/): ICONICS GENESIS32 Exposed Dangerous Method or Function (critical 9.3)
- [CVE-2014-0757](https://insights.sbomify.com/CVE-2014-0757/): Smart Software Solutions (3S) CoDeSys Runtime Toolkit NULL Pointer Dereference (high 7.1)
- [CVE-2014-0755](https://insights.sbomify.com/CVE-2014-0755/): Rockwell RSLogix 5000 Insufficiently Protected Credentials (medium 6.3)
- [CVE-2014-0754](https://insights.sbomify.com/CVE-2014-0754/): Schneider Electric (critical 10.0)
- [CVE-2014-0753](https://insights.sbomify.com/CVE-2014-0753/): Ecava IntegraXor Stack-based Buffer Overflow (high 7.8)
- [CVE-2014-0752](https://insights.sbomify.com/CVE-2014-0752/): Ecava IntegraXor Exposure of Access Control List Files to an Unauthorized Control Sphere (high 7.5)
- [CVE-2014-0751](https://insights.sbomify.com/CVE-2014-0751/): GE Proficy HMI/SCADA Path Traversal (medium 6.8)
- [CVE-2014-0750](https://insights.sbomify.com/CVE-2014-0750/): GE Proficy HMI/SCADA Path Traversal (high 7.5)
- [CVE-2014-0749](https://insights.sbomify.com/CVE-2014-0749/): Memory corruption in adaptivecomputing:torque resource manager (critical 10.0)
- [CVE-2014-0748](https://insights.sbomify.com/CVE-2014-0748/): Privilege escalation in cray:cray linux environment (high 7.2)
- [CVE-2014-0747](https://insights.sbomify.com/CVE-2014-0747/): Command injection in cisco:unified communications manager (medium 6.8)
- [CVE-2014-0746](https://insights.sbomify.com/CVE-2014-0746/): Information disclosure in cisco:unified contact center express editor software (medium 4.0)
- [CVE-2014-0745](https://insights.sbomify.com/CVE-2014-0745/): Cross-site request forgery in cisco:unified contact center express editor software (medium 6.8)
- [CVE-2014-0743](https://insights.sbomify.com/CVE-2014-0743/): Auth bypass in cisco:unified communications manager (medium 5.0)
- [CVE-2014-0742](https://insights.sbomify.com/CVE-2014-0742/): Path traversal in cisco:unified communications manager (medium 6.2)
- [CVE-2014-0741](https://insights.sbomify.com/CVE-2014-0741/): Path traversal in cisco:unified communications manager (medium 6.2)
- [CVE-2014-0740](https://insights.sbomify.com/CVE-2014-0740/): Cross-site request forgery in cisco:unified communications manager (medium 6.8)
- [CVE-2014-0739](https://insights.sbomify.com/CVE-2014-0739/): Race condition in cisco:adaptive security appliance software (medium 4.3)
- [CVE-2014-0738](https://insights.sbomify.com/CVE-2014-0738/): Auth bypass in cisco:adaptive security appliance software (medium 4.3)
- [CVE-2014-0737](https://insights.sbomify.com/CVE-2014-0737/): Auth bypass in cisco:unified ip phone 7960g (medium 4.3)
- [CVE-2014-0736](https://insights.sbomify.com/CVE-2014-0736/): Cross-site request forgery in cisco:unified communications manager (medium 6.8)
- [CVE-2014-0735](https://insights.sbomify.com/CVE-2014-0735/): Cross-site scripting in cisco:unified communications manager (medium 4.3)
- [CVE-2014-0734](https://insights.sbomify.com/CVE-2014-0734/): SQL injection in cisco:unified communications manager (high 7.5)
- [CVE-2014-0733](https://insights.sbomify.com/CVE-2014-0733/): Auth bypass in cisco:unified communications manager (medium 5.0)
- [CVE-2014-0732](https://insights.sbomify.com/CVE-2014-0732/): Auth bypass in cisco:unified communications manager (medium 5.0)
- [CVE-2014-0731](https://insights.sbomify.com/CVE-2014-0731/): Auth bypass in cisco:unified communications manager (medium 5.0)
- [CVE-2014-0730](https://insights.sbomify.com/CVE-2014-0730/): Privilege escalation in cisco:unified computing system central software (medium 6.8)
- [CVE-2014-0729](https://insights.sbomify.com/CVE-2014-0729/): SQL injection in cisco:unified communications manager (high 7.5)
- [CVE-2014-0728](https://insights.sbomify.com/CVE-2014-0728/): SQL injection in cisco:unified communications manager (high 7.5)
- [CVE-2014-0727](https://insights.sbomify.com/CVE-2014-0727/): SQL injection in cisco:unified communications manager (high 7.5)
- [CVE-2014-0726](https://insights.sbomify.com/CVE-2014-0726/): SQL injection in cisco:unified communications manager (high 7.5)
- [CVE-2014-0725](https://insights.sbomify.com/CVE-2014-0725/): Missing authorization in cisco:unified communications manager (medium 5.0)
- [CVE-2014-0724](https://insights.sbomify.com/CVE-2014-0724/): Auth bypass in cisco:unified communications manager (medium 4.0)
- [CVE-2014-0723](https://insights.sbomify.com/CVE-2014-0723/): Cross-site scripting in cisco:unified communications manager (medium 4.3)
- [CVE-2014-0722](https://insights.sbomify.com/CVE-2014-0722/): Auth bypass in cisco:unified communications manager (medium 5.0)
- [CVE-2014-0721](https://insights.sbomify.com/CVE-2014-0721/): Auth bypass in cisco:unified sip phone 3905 (critical 10.0)
- [CVE-2014-0720](https://insights.sbomify.com/CVE-2014-0720/): Denial of service in cisco:ips sensor software (high 7.1)
- [CVE-2014-0719](https://insights.sbomify.com/CVE-2014-0719/): Denial of service in cisco:ips sensor software (high 7.8)
- [CVE-2014-0718](https://insights.sbomify.com/CVE-2014-0718/): Denial of service in cisco:ips sensor software (high 7.1)
- [CVE-2014-0710](https://insights.sbomify.com/CVE-2014-0710/): Race condition in cisco:firewall services module software (high 7.1)
- [CVE-2014-0709](https://insights.sbomify.com/CVE-2014-0709/): Hardcoded credentials in cisco:ucs director (critical 9.3)
- [CVE-2014-0708](https://insights.sbomify.com/CVE-2014-0708/): Information disclosure in cisco:webex meeting center (medium 5.0)
- [CVE-2014-0707](https://insights.sbomify.com/CVE-2014-0707/): Denial of service in cisco:wireless lan controller (high 7.8)
- [CVE-2014-0706](https://insights.sbomify.com/CVE-2014-0706/): Denial of service in cisco:wireless lan controller (high 7.8)
- [CVE-2014-0705](https://insights.sbomify.com/CVE-2014-0705/): Denial of service in cisco:wireless lan controller (high 7.1)
- [CVE-2014-0704](https://insights.sbomify.com/CVE-2014-0704/): Memory corruption in cisco:wireless lan controller (high 7.1)
- [CVE-2014-0703](https://insights.sbomify.com/CVE-2014-0703/): Race condition in cisco:wireless lan controller (critical 10.0)
- [CVE-2014-0701](https://insights.sbomify.com/CVE-2014-0701/): Denial of service in cisco:wireless lan controller software (high 7.8)
- [CVE-2014-0694](https://insights.sbomify.com/CVE-2014-0694/): Hardcoded credentials in cisco:cloud portal (medium 5.0)
- [CVE-2014-0691](https://insights.sbomify.com/CVE-2014-0691/): Weak cryptography in cisco:webex meetings server (high 7.3)
- [CVE-2014-0686](https://insights.sbomify.com/CVE-2014-0686/): Misconfiguration in cisco:unified communications manager (medium 6.0)
- [CVE-2014-0685](https://insights.sbomify.com/CVE-2014-0685/): Security feature bypass in cisco:cisco nexus 1000v intercloud (medium 5.0)
- [CVE-2014-0684](https://insights.sbomify.com/CVE-2014-0684/): Denial of service in cisco:nexus 7000 (medium 4.6)
- [CVE-2014-0683](https://insights.sbomify.com/CVE-2014-0683/): Auth bypass in cisco:cvr100w (critical 10.0)
- [CVE-2014-0682](https://insights.sbomify.com/CVE-2014-0682/): Missing authorization in cisco:webex meetings server (medium 4.9)
- [CVE-2014-0681](https://insights.sbomify.com/CVE-2014-0681/): Cross-site scripting in cisco:identity services engine software (medium 4.3)
- [CVE-2014-0680](https://insights.sbomify.com/CVE-2014-0680/): Cross-site scripting in cisco:identity services engine (medium 4.3)
- [CVE-2014-0679](https://insights.sbomify.com/CVE-2014-0679/): Command injection in cisco:prime infrastructure (critical 9.0)
- [CVE-2014-0678](https://insights.sbomify.com/CVE-2014-0678/): Auth bypass in cisco:secure access control system (medium 5.5)
- [CVE-2014-0677](https://insights.sbomify.com/CVE-2014-0677/): Denial of service in cisco:nx-os (medium 5.0)
- [CVE-2014-0676](https://insights.sbomify.com/CVE-2014-0676/): Security feature bypass in cisco:nx-os (medium 6.8)
- [CVE-2014-0675](https://insights.sbomify.com/CVE-2014-0675/): Hardcoded credentials in cisco:telepresence video communication server (medium 6.4)
- [CVE-2014-0674](https://insights.sbomify.com/CVE-2014-0674/): Auth bypass in cisco:video surveillance operations manager (medium 6.8)
- [CVE-2014-0673](https://insights.sbomify.com/CVE-2014-0673/): Cross-site scripting in cisco:video surveillance indoor fixed dome ip hd camera (medium 4.3)
- [CVE-2014-0672](https://insights.sbomify.com/CVE-2014-0672/): Missing authorization in cisco:mediasense (medium 4.0)
- [CVE-2014-0671](https://insights.sbomify.com/CVE-2014-0671/): Open redirect in cisco:mediasense (medium 5.8)
- [CVE-2014-0670](https://insights.sbomify.com/CVE-2014-0670/): Cross-site scripting in cisco:mediasense (medium 4.3)
- [CVE-2014-0669](https://insights.sbomify.com/CVE-2014-0669/): Business logic in cisco:asr 5000 series software (medium 5.0)
- [CVE-2014-0668](https://insights.sbomify.com/CVE-2014-0668/): Cross-site scripting in cisco:secure access control system (medium 4.3)
- [CVE-2014-0667](https://insights.sbomify.com/CVE-2014-0667/): Missing authorization in cisco:secure access control system (medium 6.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/78/