Vulnerabilities published in 2014
8,436 vulnerabilities were published in 2014: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 84 of 85.
- CVE-2014-0142 Denial of service in qemu:qemu
- CVE-2014-0141 Cross-site scripting in redhat:satellite
- CVE-2014-0140 Missing authorization in redhat:cloudforms 3.0.1 management engine
- CVE-2014-0139 Security feature bypass in haxx:curl
- CVE-2014-0138 Auth bypass in debian:debian linux
- CVE-2014-0137 SQL injection in redhat:cloudforms 3.0 management engine
- CVE-2014-0136 Other in redhat:cloudforms 3.0 management engine
- CVE-2014-0135 Kafo allows local users to obtain passwords and other sensitive information by reading default_values.yaml
- CVE-2014-0134 OpenStack Nova host data leak to vm instance in rescue mode
- CVE-2014-0133 Memory corruption in f5:nginx
- CVE-2014-0132 Auth bypass in fedoraproject:389 directory server
- CVE-2014-0131 Use after free in linux:linux kernel
- CVE-2014-0130 Ruby on Rails Directory Traversal
- CVE-2014-0129 Moodle allows attackers to modify the visibility of a badge
- CVE-2014-0128 Denial of service in opensuse:opensuse
- CVE-2014-0127 Moodle's time-validation implementation allows bypassing intended restrictions
- CVE-2014-0126 Moodle cross-site request forgery (CSRF) vulnerability
- CVE-2014-0125 Moodle places a session key in a URL
- CVE-2014-0124 Moodle allows attackers to obtain sensitive information
- CVE-2014-0123 Moodle does not properly restrict access
- CVE-2014-0122 Moodle allows bypass of intended access restrictions
- CVE-2014-0121 Auth bypass in hawt:hawtio
- CVE-2014-0120 Cross-site request forgery in hawt:hawtio
- CVE-2014-0119 Missing XML Validation in Apache Tomcat
- CVE-2014-0118 Denial of service in apache:http server
- CVE-2014-0117 Denial of service in apache:http server
- CVE-2014-0116 ClassLoader manipulation in Apache Struts
- CVE-2014-0115 Apache Storm log viewer path traversal vulnerability
- CVE-2014-0114 Arbitrary code execution in Apache Commons BeanUtils
- CVE-2014-0113 ClassLoader manipulation in Apache Struts
- CVE-2014-0112 ClassLoader manipulation in Apache Struts
- CVE-2014-0111 Apache Syncope JEXL Code Injection
- CVE-2014-0110 Uncontrolled Resource Consumption in Apache CXF
- CVE-2014-0109 Uncontrolled Resource Consumption in Apache CXF
- CVE-2014-0107 Improper Authorization in Apache Xalan-Java
- CVE-2014-0106 Security feature bypass in apple:mac os x
- CVE-2014-0105 python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware
- CVE-2014-0104 Security feature bypass in fence-agents
- CVE-2014-0103 Information disclosure in fedoraproject:fedora
- CVE-2014-0102 Denial of service in linux:linux kernel
- CVE-2014-0101 Null dereference in canonical:ubuntu linux
- CVE-2014-0100 Use after free in linux:linux kernel
- CVE-2014-0099 Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat
- CVE-2014-0098 Denial of service in apache:http server
- CVE-2014-0097 Improper Authentication in Spring Security
- CVE-2014-0096 Improper Input Validation in Apache Tomcat
- CVE-2014-0095 Denial of service in Apache Tomcat
- CVE-2014-0094 ClassLoader manipulation in Apache Struts
- CVE-2014-0093 Security feature bypass in redhat:jboss enterprise application platform
- CVE-2014-0092 Security feature bypass in gnu:gnutls
- CVE-2014-0091 Denial of service in Foreman
- CVE-2014-0090 Auth bypass in theforeman:foreman
- CVE-2014-0089 Cross-site scripting in theforeman:foreman
- CVE-2014-0088 Memory corruption in f5:nginx
- CVE-2014-0087 Privilege escalation in redhat:cloudforms management engine
- CVE-2014-0086 JBoss RichFaces Improper Input Validation vulnerability
- CVE-2014-0085 Exposure of Sensitive Information to an Unauthorized Actor in JBoss Fuse
- CVE-2014-0084 openshift-origin-node Improper Input Validation vulnerability
- CVE-2014-0083 net-ldap has weak salt when generating passwords
- CVE-2014-0082 actionpack Improper Input Validation vulnerability
- CVE-2014-0081 Rails vulnerable to Cross-site Scripting
- CVE-2014-0080 Array data injection vulnerability in activerecord
- CVE-2014-0079 Null dereference in zarafa:zarafa
- CVE-2014-0078 Missing authorization in redhat:cloudforms 3.0 management engine
- CVE-2014-0077 Memory corruption in linux:linux kernel
- CVE-2014-0076 Weak cryptography in openssl:openssl
- CVE-2014-0075 Integer Overflow or Wraparound in Apache Tomcat
- CVE-2014-0074 Auth bypass in apache:shiro
- CVE-2014-0073 Code injection in apache:cordova
- CVE-2014-0072 Security feature bypass in apache:cordova
- CVE-2014-0071 Misconfiguration in redhat:openstack
- CVE-2014-0069 Memory corruption in linux:linux kernel
- CVE-2014-0068 Misconfiguration in openshift node-util
- CVE-2014-0067 Privilege escalation in apple:mac os x
- CVE-2014-0066 Null dereference in postgresql:postgresql
- CVE-2014-0065 Memory corruption in postgresql:postgresql
- CVE-2014-0064 Integer overflow in postgresql:postgresql
- CVE-2014-0063 Memory corruption in postgresql:postgresql
- CVE-2014-0062 Race condition in postgresql:postgresql
- CVE-2014-0061 Privilege escalation in postgresql:postgresql
- CVE-2014-0060 Privilege escalation in postgresql:postgresql
- CVE-2014-0059 Information disclosure in redhat:jboss enterprise application platform
- CVE-2014-0058 Information disclosure in redhat:jboss enterprise application platform
- CVE-2014-0057 Code injection in redhat:cloudforms
- CVE-2014-0056 OpenStack Neutron Improper Authentication vulnerability
- CVE-2014-0055 Denial of service in redhat:enterprise linux
- CVE-2014-0054 Cross-Site Request Forgery in Spring Framework
- CVE-2014-0053 Information disclosure in gopivotal:grails
- CVE-2014-0050 Commons FileUpload Denial of service vulnerability
- CVE-2014-0049 Memory corruption in linux:linux kernel
- CVE-2014-0048 Supply chain in docker.io
- CVE-2014-0047 Other in docker:docker
- CVE-2014-0046 ember-source Cross-site Scripting vulnerability
- CVE-2014-0045 Memory corruption in light speed gaming:mumble
- CVE-2014-0044 Null dereference in light speed gaming:mumble
- CVE-2014-0043 Apache Wicket allows attackers to check for third-party libraries
- CVE-2014-0042 Security feature bypass in redhat:openstack
- CVE-2014-0041 Misconfiguration in redhat:openstack
- CVE-2014-0040 Weak cryptography in redhat:openstack
- CVE-2014-0039 Code injection in cipherdyne:fwsnort