# Vulnerabilities published in 2014


- [CVE-2014-9194](https://insights.sbomify.com/CVE-2014-9194/): Arbiter Systems 1094B GPS Clock Insufficient Verification of Data Authenticity (medium 5.4)
- [CVE-2014-9193](https://insights.sbomify.com/CVE-2014-9193/): Innominate mGuard Improper Privilege Management (high 8.5)
- [CVE-2014-9192](https://insights.sbomify.com/CVE-2014-9192/): Trihedral Engineering Limited VTScada Integer Overflow (high 7.8)
- [CVE-2014-9191](https://insights.sbomify.com/CVE-2014-9191/): Denial of service in n/a (low 2.1)
- [CVE-2014-9190](https://insights.sbomify.com/CVE-2014-9190/): Schneider Electric Wonderware InTouch Access Anywhere Server Buffer Overflow (critical 10.0)
- [CVE-2014-9189](https://insights.sbomify.com/CVE-2014-9189/): Memory corruption in Experion PKS (critical 9.8)
- [CVE-2014-9188](https://insights.sbomify.com/CVE-2014-9188/): Schneider Electric ProClima Command Injection (critical 10.0)
- [CVE-2014-9187](https://insights.sbomify.com/CVE-2014-9187/): Memory corruption in Experion PKS (critical 9.8)
- [CVE-2014-9186](https://insights.sbomify.com/CVE-2014-9186/): File upload in Experion PKS (critical 9.8)
- [CVE-2014-9185](https://insights.sbomify.com/CVE-2014-9185/): Code injection in n/a (medium 6.5)
- [CVE-2014-9184](https://insights.sbomify.com/CVE-2014-9184/): Auth bypass in n/a (medium 5.0)
- [CVE-2014-9183](https://insights.sbomify.com/CVE-2014-9183/): Hardcoded credentials in n/a (critical 10.0)
- [CVE-2014-9182](https://insights.sbomify.com/CVE-2014-9182/): Other in n/a (medium 4.3)
- [CVE-2014-9181](https://insights.sbomify.com/CVE-2014-9181/): Path traversal in n/a (medium 5.0)
- [CVE-2014-9180](https://insights.sbomify.com/CVE-2014-9180/): Open redirect in n/a (medium 5.0)
- [CVE-2014-9179](https://insights.sbomify.com/CVE-2014-9179/): Cross-site scripting in n/a (medium 4.0)
- [CVE-2014-9178](https://insights.sbomify.com/CVE-2014-9178/): SQL injection in n/a (high 7.5)
- [CVE-2014-9177](https://insights.sbomify.com/CVE-2014-9177/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-9176](https://insights.sbomify.com/CVE-2014-9176/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9175](https://insights.sbomify.com/CVE-2014-9175/): SQL injection in n/a (high 7.5)
- [CVE-2014-9174](https://insights.sbomify.com/CVE-2014-9174/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9173](https://insights.sbomify.com/CVE-2014-9173/): SQL injection in n/a (high 7.5)
- [CVE-2014-9166](https://insights.sbomify.com/CVE-2014-9166/): Denial of service in n/a (medium 5.0)
- [CVE-2014-9165](https://insights.sbomify.com/CVE-2014-9165/): Use after free in n/a (critical 10.0)
- [CVE-2014-9164](https://insights.sbomify.com/CVE-2014-9164/): Memory corruption in n/a (critical 10.0)
- [CVE-2014-9163](https://insights.sbomify.com/CVE-2014-9163/): Adobe Flash Player Stack-Based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2014-9162](https://insights.sbomify.com/CVE-2014-9162/): Information disclosure in n/a (critical 10.0)
- [CVE-2014-9161](https://insights.sbomify.com/CVE-2014-9161/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-9160](https://insights.sbomify.com/CVE-2014-9160/): Memory corruption in n/a (critical 10.0)
- [CVE-2014-9159](https://insights.sbomify.com/CVE-2014-9159/): Memory corruption in n/a (critical 10.0)
- [CVE-2014-9158](https://insights.sbomify.com/CVE-2014-9158/): Code injection in n/a (critical 10.0)
- [CVE-2014-9157](https://insights.sbomify.com/CVE-2014-9157/): Other in n/a (high 7.5)
- [CVE-2014-9156](https://insights.sbomify.com/CVE-2014-9156/): Missing authorization in n/a (medium 4.0)
- [CVE-2014-9155](https://insights.sbomify.com/CVE-2014-9155/): Path traversal in n/a (medium 4.0)
- [CVE-2014-9154](https://insights.sbomify.com/CVE-2014-9154/): Information disclosure in n/a (medium 4.0)
- [CVE-2014-9153](https://insights.sbomify.com/CVE-2014-9153/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9152](https://insights.sbomify.com/CVE-2014-9152/): Weak cryptography in n/a (high 7.5)
- [CVE-2014-9151](https://insights.sbomify.com/CVE-2014-9151/): Auth bypass in n/a (high 7.5)
- [CVE-2014-9150](https://insights.sbomify.com/CVE-2014-9150/): Race condition in n/a (medium 6.4)
- [CVE-2014-9148](https://insights.sbomify.com/CVE-2014-9148/): Missing authorization in n/a (critical 9.8)
- [CVE-2014-9147](https://insights.sbomify.com/CVE-2014-9147/): Information disclosure in n/a (high 7.5)
- [CVE-2014-9146](https://insights.sbomify.com/CVE-2014-9146/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9145](https://insights.sbomify.com/CVE-2014-9145/): SQL injection in n/a (high 7.5)
- [CVE-2014-9144](https://insights.sbomify.com/CVE-2014-9144/): Command injection in n/a (high 7.5)
- [CVE-2014-9143](https://insights.sbomify.com/CVE-2014-9143/): Open redirect in n/a (medium 4.3)
- [CVE-2014-9142](https://insights.sbomify.com/CVE-2014-9142/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9141](https://insights.sbomify.com/CVE-2014-9141/): Privilege escalation in n/a (high 7.2)
- [CVE-2014-9140](https://insights.sbomify.com/CVE-2014-9140/): Memory corruption in n/a (medium 5.0)
- [CVE-2014-9137](https://insights.sbomify.com/CVE-2014-9137/): Cross-site request forgery in USG9500,USG2100,USG2200,USG5100,USG5500, USG9500 V200R001C01SPC800 and earlier versions, All V300R001C00 versions,USG2100 V300R001C00SPC900 and earlier versions,USG2200 V300R001C00SPC900,USG5100 V300R001C00SPC900, (high 8.8)
- [CVE-2014-9136](https://insights.sbomify.com/CVE-2014-9136/): Cross-site request forgery in FusionManager FusionManager All V100R002C03 versions, All V100R003C00 versions, (high 8.8)
- [CVE-2014-9135](https://insights.sbomify.com/CVE-2014-9135/): Security feature bypass in n/a (medium 4.3)
- [CVE-2014-9134](https://insights.sbomify.com/CVE-2014-9134/): File upload in n/a (critical 10.0)
- [CVE-2014-9130](https://insights.sbomify.com/CVE-2014-9130/): Denial of service in n/a (medium 5.0)
- [CVE-2014-9129](https://insights.sbomify.com/CVE-2014-9129/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-9127](https://insights.sbomify.com/CVE-2014-9127/): Information disclosure in n/a (medium 6.5)
- [CVE-2014-9126](https://insights.sbomify.com/CVE-2014-9126/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2014-9120](https://insights.sbomify.com/CVE-2014-9120/): Subrion CMS Cross-site scripting in search (medium 4.3)
- [CVE-2014-9119](https://insights.sbomify.com/CVE-2014-9119/): Path traversal in n/a (medium 5.0)
- [CVE-2014-9118](https://insights.sbomify.com/CVE-2014-9118/): Command injection in n/a (high 8.8)
- [CVE-2014-9117](https://insights.sbomify.com/CVE-2014-9117/): Security feature bypass in n/a (medium 5.0)
- [CVE-2014-9116](https://insights.sbomify.com/CVE-2014-9116/): Memory corruption in n/a (medium 5.0)
- [CVE-2014-9115](https://insights.sbomify.com/CVE-2014-9115/): SQL injection in n/a (high 7.5)
- [CVE-2014-9114](https://insights.sbomify.com/CVE-2014-9114/): Command injection in n/a (high 7.8)
- [CVE-2014-9113](https://insights.sbomify.com/CVE-2014-9113/): Privilege escalation in n/a (high 7.2)
- [CVE-2014-9112](https://insights.sbomify.com/CVE-2014-9112/): Memory corruption in n/a (medium 5.0)
- [CVE-2014-9104](https://insights.sbomify.com/CVE-2014-9104/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-9103](https://insights.sbomify.com/CVE-2014-9103/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9102](https://insights.sbomify.com/CVE-2014-9102/): SQL injection in n/a (medium 6.5)
- [CVE-2014-9101](https://insights.sbomify.com/CVE-2014-9101/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-9100](https://insights.sbomify.com/CVE-2014-9100/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9099](https://insights.sbomify.com/CVE-2014-9099/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-9098](https://insights.sbomify.com/CVE-2014-9098/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-9097](https://insights.sbomify.com/CVE-2014-9097/): SQL injection in n/a (high 7.5)
- [CVE-2014-9096](https://insights.sbomify.com/CVE-2014-9096/): SQL injection in n/a (high 7.5)
- [CVE-2014-9095](https://insights.sbomify.com/CVE-2014-9095/): SQL injection in n/a (high 7.5)
- [CVE-2014-9094](https://insights.sbomify.com/CVE-2014-9094/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9093](https://insights.sbomify.com/CVE-2014-9093/): Memory corruption in n/a (high 7.5)
- [CVE-2014-9092](https://insights.sbomify.com/CVE-2014-9092/): Denial of service in n/a (medium 6.5)
- [CVE-2014-9091](https://insights.sbomify.com/CVE-2014-9091/): Privilege escalation in n/a (medium 4.6)
- [CVE-2014-9090](https://insights.sbomify.com/CVE-2014-9090/): Denial of service in n/a (medium 4.9)
- [CVE-2014-9089](https://insights.sbomify.com/CVE-2014-9089/): SQL injection in n/a (high 7.5)
- [CVE-2014-9087](https://insights.sbomify.com/CVE-2014-9087/): Integer overflow in n/a (high 7.5)
- [CVE-2014-9066](https://insights.sbomify.com/CVE-2014-9066/): Denial of service in n/a (medium 4.7)
- [CVE-2014-9065](https://insights.sbomify.com/CVE-2014-9065/): Denial of service in n/a (medium 4.4)
- [CVE-2014-9060](https://insights.sbomify.com/CVE-2014-9060/): Moodle allows attackers to trigger the generation of arbitrary messages (medium 5.0)
- [CVE-2014-9059](https://insights.sbomify.com/CVE-2014-9059/): Moodle does not provide charset information in HTTP headers (medium 4.3)
- [CVE-2014-9057](https://insights.sbomify.com/CVE-2014-9057/): SQL injection in n/a (high 7.5)
- [CVE-2014-9050](https://insights.sbomify.com/CVE-2014-9050/): Memory corruption in n/a (medium 5.0)
- [CVE-2014-9049](https://insights.sbomify.com/CVE-2014-9049/): Information disclosure in n/a (medium 4.0)
- [CVE-2014-9048](https://insights.sbomify.com/CVE-2014-9048/): Auth bypass in n/a (medium 5.0)
- [CVE-2014-9047](https://insights.sbomify.com/CVE-2014-9047/): Path traversal in n/a (medium 4.3)
- [CVE-2014-9046](https://insights.sbomify.com/CVE-2014-9046/): Server-side request forgery in n/a (medium 5.0)
- [CVE-2014-9045](https://insights.sbomify.com/CVE-2014-9045/): Auth bypass in n/a (medium 5.0)
- [CVE-2014-9044](https://insights.sbomify.com/CVE-2014-9044/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-9043](https://insights.sbomify.com/CVE-2014-9043/): Auth bypass in n/a (medium 5.0)
- [CVE-2014-9042](https://insights.sbomify.com/CVE-2014-9042/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-9041](https://insights.sbomify.com/CVE-2014-9041/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-9039](https://insights.sbomify.com/CVE-2014-9039/): Business logic in n/a (medium 4.3)
- [CVE-2014-9038](https://insights.sbomify.com/CVE-2014-9038/): Server-side request forgery in n/a (medium 6.4)
- [CVE-2014-9037](https://insights.sbomify.com/CVE-2014-9037/): Auth bypass in n/a (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/8/