# Vulnerabilities published in 2014


- [CVE-2014-0244](https://insights.sbomify.com/CVE-2014-0244/): Denial of service in samba:samba (low 3.3)
- [CVE-2014-0243](https://insights.sbomify.com/CVE-2014-0243/): Path traversal in check mk project:check mk (medium 5.5)
- [CVE-2014-0242](https://insights.sbomify.com/CVE-2014-0242/): Information disclosure in mod wsgi (high 7.5)
- [CVE-2014-0241](https://insights.sbomify.com/CVE-2014-0241/): Misconfiguration in rubygem-hammer cli foreman (medium 5.5)
- [CVE-2014-0240](https://insights.sbomify.com/CVE-2014-0240/): Privilege escalation in modwsgi:mod wsgi (medium 6.2)
- [CVE-2014-0239](https://insights.sbomify.com/CVE-2014-0239/): Denial of service in samba:samba (medium 5.0)
- [CVE-2014-0238](https://insights.sbomify.com/CVE-2014-0238/): Memory corruption in debian:debian linux (medium 5.0)
- [CVE-2014-0237](https://insights.sbomify.com/CVE-2014-0237/): Denial of service in debian:debian linux (medium 5.0)
- [CVE-2014-0236](https://insights.sbomify.com/CVE-2014-0236/): Null dereference in php:php (high 7.5)
- [CVE-2014-0234](https://insights.sbomify.com/CVE-2014-0234/): Hardcoded credentials in Red Hat OpenShift Enterprise (critical 9.8)
- [CVE-2014-0233](https://insights.sbomify.com/CVE-2014-0233/): Command injection in redhat:openshift (medium 6.5)
- [CVE-2014-0232](https://insights.sbomify.com/CVE-2014-0232/): Cross-site scripting in apache:ofbiz (medium 4.3)
- [CVE-2014-0231](https://insights.sbomify.com/CVE-2014-0231/): Denial of service in apache:http server (medium 5.0)
- [CVE-2014-0230](https://insights.sbomify.com/CVE-2014-0230/): Uncontrolled Resource Consumption in Apache Tomcat (high 7.8)
- [CVE-2014-0229](https://insights.sbomify.com/CVE-2014-0229/): Improper Authentication in Apache Hadoop (medium 6.5)
- [CVE-2014-0228](https://insights.sbomify.com/CVE-2014-0228/): Low severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service (low 3.5)
- [CVE-2014-0227](https://insights.sbomify.com/CVE-2014-0227/): Improper Input Validation in Apache Tomcat (medium 6.4)
- [CVE-2014-0226](https://insights.sbomify.com/CVE-2014-0226/): Race condition in apache:http server (medium 6.8)
- [CVE-2014-0225](https://insights.sbomify.com/CVE-2014-0225/): Improper Restriction of XML External Entity Reference in Spring Framework (high 8.8)
- [CVE-2014-0224](https://insights.sbomify.com/CVE-2014-0224/): Weak cryptography in fedoraproject:fedora (high 7.4)
- [CVE-2014-0223](https://insights.sbomify.com/CVE-2014-0223/): Integer overflow in qemu:qemu (medium 4.6)
- [CVE-2014-0222](https://insights.sbomify.com/CVE-2014-0222/): Integer overflow in qemu:qemu (high 7.5)
- [CVE-2014-0221](https://insights.sbomify.com/CVE-2014-0221/): Denial of service in fedoraproject:fedora (medium 4.3)
- [CVE-2014-0220](https://insights.sbomify.com/CVE-2014-0220/): Information disclosure in cloudera:cloudera manager (medium 4.0)
- [CVE-2014-0219](https://insights.sbomify.com/CVE-2014-0219/): Improper Input Validation in Apache Karaf (medium 5.5)
- [CVE-2014-0218](https://insights.sbomify.com/CVE-2014-0218/): Moodle cross-site scripting (XSS) vulnerability (medium 4.3)
- [CVE-2014-0217](https://insights.sbomify.com/CVE-2014-0217/): Moodle does not check for the moodle/course:viewhiddencourses capability (medium 4.3)
- [CVE-2014-0216](https://insights.sbomify.com/CVE-2014-0216/): Moodle does not properly restrict file access (medium 5.0)
- [CVE-2014-0215](https://insights.sbomify.com/CVE-2014-0215/): Moodle Reveals Student Information Meant To Be Anonymous (medium 4.0)
- [CVE-2014-0214](https://insights.sbomify.com/CVE-2014-0214/): Moodle creates a MoodleMobile web-service token with an infinite lifetime (medium 6.8)
- [CVE-2014-0213](https://insights.sbomify.com/CVE-2014-0213/): Moodle multiple cross-site request forgery (CSRF) vulnerabilities (medium 6.8)
- [CVE-2014-0212](https://insights.sbomify.com/CVE-2014-0212/): Denial of service in qpid-cpp (high 7.5)
- [CVE-2014-0211](https://insights.sbomify.com/CVE-2014-0211/): Integer overflow in canonical:ubuntu linux (high 7.5)
- [CVE-2014-0210](https://insights.sbomify.com/CVE-2014-0210/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2014-0209](https://insights.sbomify.com/CVE-2014-0209/): Integer overflow in canonical:ubuntu linux (medium 4.6)
- [CVE-2014-0208](https://insights.sbomify.com/CVE-2014-0208/): Cross-site scripting in theforeman:foreman (medium 5.4)
- [CVE-2014-0207](https://insights.sbomify.com/CVE-2014-0207/): Denial of service in christos zoulas:file (medium 6.5)
- [CVE-2014-0206](https://insights.sbomify.com/CVE-2014-0206/): Information disclosure in linux:linux kernel (low 2.1)
- [CVE-2014-0205](https://insights.sbomify.com/CVE-2014-0205/): Use after free in linux:linux kernel (medium 6.9)
- [CVE-2014-0204](https://insights.sbomify.com/CVE-2014-0204/): OpenStack Identity Keystone Improper Privilege Management (medium 6.5)
- [CVE-2014-0203](https://insights.sbomify.com/CVE-2014-0203/): Use after free in linux:linux kernel (medium 5.5)
- [CVE-2014-0202](https://insights.sbomify.com/CVE-2014-0202/): Information disclosure in redhat:rhevm-dwh (low 2.1)
- [CVE-2014-0201](https://insights.sbomify.com/CVE-2014-0201/): Misconfiguration in redhat:rhevm-reports (low 2.1)
- [CVE-2014-0200](https://insights.sbomify.com/CVE-2014-0200/): Misconfiguration in redhat:rhevm-reports (low 2.1)
- [CVE-2014-0199](https://insights.sbomify.com/CVE-2014-0199/): Information disclosure in redhat:rhevm-reports (low 2.1)
- [CVE-2014-0198](https://insights.sbomify.com/CVE-2014-0198/): Null dereference in debian:debian linux (medium 4.3)
- [CVE-2014-0197](https://insights.sbomify.com/CVE-2014-0197/): Cross-site request forgery in CFME (high 8.8)
- [CVE-2014-0196](https://insights.sbomify.com/CVE-2014-0196/): Linux Kernel Race Condition (medium 5.5, exploited in the wild)
- [CVE-2014-0195](https://insights.sbomify.com/CVE-2014-0195/): Memory corruption in fedoraproject:fedora (medium 6.8)
- [CVE-2014-0193](https://insights.sbomify.com/CVE-2014-0193/): Netty denial of service vulnerability (medium 5.0)
- [CVE-2014-0192](https://insights.sbomify.com/CVE-2014-0192/): Missing authorization in theforeman:foreman (medium 5.0)
- [CVE-2014-0191](https://insights.sbomify.com/CVE-2014-0191/): XML external entity in oracle:fusion middleware (medium 4.3)
- [CVE-2014-0190](https://insights.sbomify.com/CVE-2014-0190/): Null dereference in canonical:ubuntu linux (medium 4.3)
- [CVE-2014-0189](https://insights.sbomify.com/CVE-2014-0189/): Misconfiguration in redhat:enterprise linux desktop (low 2.1)
- [CVE-2014-0188](https://insights.sbomify.com/CVE-2014-0188/): Auth bypass in redhat:openshift (high 7.5)
- [CVE-2014-0187](https://insights.sbomify.com/CVE-2014-0187/): Security feature bypass in canonical:ubuntu linux (critical 9.0)
- [CVE-2014-0186](https://insights.sbomify.com/CVE-2014-0186/): Denial of service in redhat:enterprise linux (medium 5.0)
- [CVE-2014-0185](https://insights.sbomify.com/CVE-2014-0185/): Misconfiguration in php:php (high 7.2)
- [CVE-2014-0184](https://insights.sbomify.com/CVE-2014-0184/): Information disclosure in redhat:cloudforms 3.0 management engine (medium 4.9)
- [CVE-2014-0183](https://insights.sbomify.com/CVE-2014-0183/): Cross-site scripting in Katello (medium 6.1)
- [CVE-2014-0182](https://insights.sbomify.com/CVE-2014-0182/): Memory corruption in qemu:qemu (high 7.5)
- [CVE-2014-0181](https://insights.sbomify.com/CVE-2014-0181/): Security feature bypass in linux:linux kernel (low 2.1)
- [CVE-2014-0180](https://insights.sbomify.com/CVE-2014-0180/): Denial of service in redhat:cloudforms 3.0 management engine (medium 5.0)
- [CVE-2014-0179](https://insights.sbomify.com/CVE-2014-0179/): XML external entity in opensuse:opensuse (low 1.9)
- [CVE-2014-0178](https://insights.sbomify.com/CVE-2014-0178/): Information disclosure in samba:samba (low 3.5)
- [CVE-2014-0177](https://insights.sbomify.com/CVE-2014-0177/): Hub Package Arbitrary File Overwrite (low 3.6)
- [CVE-2014-0176](https://insights.sbomify.com/CVE-2014-0176/): Cross-site scripting in redhat:cloudforms 3.0 management engine (medium 4.3)
- [CVE-2014-0175](https://insights.sbomify.com/CVE-2014-0175/): Hardcoded credentials in mcollective (critical 9.8)
- [CVE-2014-0174](https://insights.sbomify.com/CVE-2014-0174/): Information disclosure in redhat:enterprise mrg (medium 4.3)
- [CVE-2014-0173](https://insights.sbomify.com/CVE-2014-0173/): Missing authorization in automattic:jetpack (medium 5.8)
- [CVE-2014-0172](https://insights.sbomify.com/CVE-2014-0172/): Integer overflow in elfutils project:elfutils (medium 6.8)
- [CVE-2014-0171](https://insights.sbomify.com/CVE-2014-0171/): XML external entity in odata4j project:odata4j (medium 5.0)
- [CVE-2014-0170](https://insights.sbomify.com/CVE-2014-0170/): XML external entity in jboss:teiid (medium 4.3)
- [CVE-2014-0169](https://insights.sbomify.com/CVE-2014-0169/): Missing authorization in JBoss EAP (medium 6.5)
- [CVE-2014-0168](https://insights.sbomify.com/CVE-2014-0168/): Cross-Site Request Forgery in Jolokia (medium 6.8)
- [CVE-2014-0167](https://insights.sbomify.com/CVE-2014-0167/): OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests (medium 6.0)
- [CVE-2014-0166](https://insights.sbomify.com/CVE-2014-0166/): Auth bypass in wordpress:wordpress (medium 6.4)
- [CVE-2014-0165](https://insights.sbomify.com/CVE-2014-0165/): Privilege escalation in wordpress:wordpress (medium 4.0)
- [CVE-2014-0164](https://insights.sbomify.com/CVE-2014-0164/): Misconfiguration in redhat:openshift (low 2.1)
- [CVE-2014-0163](https://insights.sbomify.com/CVE-2014-0163/): Command injection in Openshift (high 8.8)
- [CVE-2014-0162](https://insights.sbomify.com/CVE-2014-0162/): OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability (medium 6.0)
- [CVE-2014-0161](https://insights.sbomify.com/CVE-2014-0161/): ovirt-engine-sdk-python improper validation of hostname in x.509 certificate (medium 5.9)
- [CVE-2014-0160](https://insights.sbomify.com/CVE-2014-0160/): OpenSSL Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2014-0159](https://insights.sbomify.com/CVE-2014-0159/): Memory corruption in debian:debian linux (medium 5.0)
- [CVE-2014-0158](https://insights.sbomify.com/CVE-2014-0158/): Memory corruption in opensuse:opensuse (high 8.8)
- [CVE-2014-0157](https://insights.sbomify.com/CVE-2014-0157/): OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting (medium 4.3)
- [CVE-2014-0156](https://insights.sbomify.com/CVE-2014-0156/): OS Command Injection in awesome spawn (critical 9.8)
- [CVE-2014-0155](https://insights.sbomify.com/CVE-2014-0155/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2014-0154](https://insights.sbomify.com/CVE-2014-0154/): Information disclosure in ovirt:ovirt (medium 5.0)
- [CVE-2014-0153](https://insights.sbomify.com/CVE-2014-0153/): Information disclosure in ovirt:ovirt (medium 4.3)
- [CVE-2014-0152](https://insights.sbomify.com/CVE-2014-0152/): Auth bypass in ovirt:ovirt (medium 6.8)
- [CVE-2014-0151](https://insights.sbomify.com/CVE-2014-0151/): Cross-site request forgery in redhat:ovirt-engine (medium 6.8)
- [CVE-2014-0150](https://insights.sbomify.com/CVE-2014-0150/): Integer overflow in qemu:qemu (medium 4.9)
- [CVE-2014-0149](https://insights.sbomify.com/CVE-2014-0149/): Cross-site scripting in redhat:jboss web framework kit (medium 4.3)
- [CVE-2014-0148](https://insights.sbomify.com/CVE-2014-0148/): Denial of service in Qemu (medium 5.5)
- [CVE-2014-0147](https://insights.sbomify.com/CVE-2014-0147/): Integer overflow in Qemu (medium 6.2)
- [CVE-2014-0146](https://insights.sbomify.com/CVE-2014-0146/): Null dereference in qemu:qemu (medium 5.5)
- [CVE-2014-0145](https://insights.sbomify.com/CVE-2014-0145/): Memory corruption in qemu:qemu (high 7.8)
- [CVE-2014-0144](https://insights.sbomify.com/CVE-2014-0144/): Memory corruption in qemu:qemu (high 8.6)
- [CVE-2014-0143](https://insights.sbomify.com/CVE-2014-0143/): Integer overflow in qemu:qemu (high 7.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/83/