# Vulnerabilities published in 2014


- [CVE-2014-0142](https://insights.sbomify.com/CVE-2014-0142/): Denial of service in qemu:qemu (medium 5.5)
- [CVE-2014-0141](https://insights.sbomify.com/CVE-2014-0141/): Cross-site scripting in redhat:satellite (medium 6.1)
- [CVE-2014-0140](https://insights.sbomify.com/CVE-2014-0140/): Missing authorization in redhat:cloudforms 3.0.1 management engine (medium 4.0)
- [CVE-2014-0139](https://insights.sbomify.com/CVE-2014-0139/): Security feature bypass in haxx:curl (medium 5.8)
- [CVE-2014-0138](https://insights.sbomify.com/CVE-2014-0138/): Auth bypass in debian:debian linux (medium 6.4)
- [CVE-2014-0137](https://insights.sbomify.com/CVE-2014-0137/): SQL injection in redhat:cloudforms 3.0 management engine (medium 6.5)
- [CVE-2014-0136](https://insights.sbomify.com/CVE-2014-0136/): Other in redhat:cloudforms 3.0 management engine (medium 5.0)
- [CVE-2014-0135](https://insights.sbomify.com/CVE-2014-0135/): Kafo allows local users to obtain passwords and other sensitive information by reading default_values.yaml (low 1.9)
- [CVE-2014-0134](https://insights.sbomify.com/CVE-2014-0134/): OpenStack Nova host data leak to vm instance in rescue mode (low 3.5)
- [CVE-2014-0133](https://insights.sbomify.com/CVE-2014-0133/): Memory corruption in f5:nginx (high 7.5)
- [CVE-2014-0132](https://insights.sbomify.com/CVE-2014-0132/): Auth bypass in fedoraproject:389 directory server (medium 6.5)
- [CVE-2014-0131](https://insights.sbomify.com/CVE-2014-0131/): Use after free in linux:linux kernel (low 2.9)
- [CVE-2014-0130](https://insights.sbomify.com/CVE-2014-0130/): Ruby on Rails Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2014-0129](https://insights.sbomify.com/CVE-2014-0129/): Moodle allows attackers to modify the visibility of a badge (medium 4.0)
- [CVE-2014-0128](https://insights.sbomify.com/CVE-2014-0128/): Denial of service in opensuse:opensuse (medium 5.0)
- [CVE-2014-0127](https://insights.sbomify.com/CVE-2014-0127/): Moodle's time-validation implementation allows bypassing intended restrictions (medium 4.9)
- [CVE-2014-0126](https://insights.sbomify.com/CVE-2014-0126/): Moodle cross-site request forgery (CSRF) vulnerability (medium 6.8)
- [CVE-2014-0125](https://insights.sbomify.com/CVE-2014-0125/): Moodle places a session key in a URL (medium 5.8)
- [CVE-2014-0124](https://insights.sbomify.com/CVE-2014-0124/): Moodle allows attackers to obtain sensitive information (medium 4.0)
- [CVE-2014-0123](https://insights.sbomify.com/CVE-2014-0123/): Moodle does not properly restrict access (medium 4.9)
- [CVE-2014-0122](https://insights.sbomify.com/CVE-2014-0122/): Moodle allows bypass of intended access restrictions (medium 4.9)
- [CVE-2014-0121](https://insights.sbomify.com/CVE-2014-0121/): Auth bypass in hawt:hawtio (critical 9.8)
- [CVE-2014-0120](https://insights.sbomify.com/CVE-2014-0120/): Cross-site request forgery in hawt:hawtio (high 8.8)
- [CVE-2014-0119](https://insights.sbomify.com/CVE-2014-0119/): Missing XML Validation in Apache Tomcat (medium 4.3)
- [CVE-2014-0118](https://insights.sbomify.com/CVE-2014-0118/): Denial of service in apache:http server (medium 4.3)
- [CVE-2014-0117](https://insights.sbomify.com/CVE-2014-0117/): Denial of service in apache:http server (medium 4.3)
- [CVE-2014-0116](https://insights.sbomify.com/CVE-2014-0116/): ClassLoader manipulation in Apache Struts (medium 5.8)
- [CVE-2014-0115](https://insights.sbomify.com/CVE-2014-0115/): Apache Storm log viewer path traversal vulnerability (high 7.5)
- [CVE-2014-0114](https://insights.sbomify.com/CVE-2014-0114/): Arbitrary code execution in Apache Commons BeanUtils (high 7.5)
- [CVE-2014-0113](https://insights.sbomify.com/CVE-2014-0113/): ClassLoader manipulation in Apache Struts (high 7.5)
- [CVE-2014-0112](https://insights.sbomify.com/CVE-2014-0112/): ClassLoader manipulation in Apache Struts (high 7.5)
- [CVE-2014-0111](https://insights.sbomify.com/CVE-2014-0111/): Apache Syncope JEXL Code Injection (medium 6.5)
- [CVE-2014-0110](https://insights.sbomify.com/CVE-2014-0110/): Uncontrolled Resource Consumption in Apache CXF (medium 4.3)
- [CVE-2014-0109](https://insights.sbomify.com/CVE-2014-0109/): Uncontrolled Resource Consumption in Apache CXF (medium 4.3)
- [CVE-2014-0107](https://insights.sbomify.com/CVE-2014-0107/): Improper Authorization in Apache Xalan-Java (high 7.5)
- [CVE-2014-0106](https://insights.sbomify.com/CVE-2014-0106/): Security feature bypass in apple:mac os x (medium 6.6)
- [CVE-2014-0105](https://insights.sbomify.com/CVE-2014-0105/): python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware (medium 6.0)
- [CVE-2014-0104](https://insights.sbomify.com/CVE-2014-0104/): Security feature bypass in fence-agents (medium 5.9)
- [CVE-2014-0103](https://insights.sbomify.com/CVE-2014-0103/): Information disclosure in fedoraproject:fedora (low 2.1)
- [CVE-2014-0102](https://insights.sbomify.com/CVE-2014-0102/): Denial of service in linux:linux kernel (medium 5.2)
- [CVE-2014-0101](https://insights.sbomify.com/CVE-2014-0101/): Null dereference in canonical:ubuntu linux (high 7.8)
- [CVE-2014-0100](https://insights.sbomify.com/CVE-2014-0100/): Use after free in linux:linux kernel (critical 9.3)
- [CVE-2014-0099](https://insights.sbomify.com/CVE-2014-0099/): Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat (medium 4.3)
- [CVE-2014-0098](https://insights.sbomify.com/CVE-2014-0098/): Denial of service in apache:http server (medium 5.0)
- [CVE-2014-0097](https://insights.sbomify.com/CVE-2014-0097/): Improper Authentication in Spring Security (high 7.3)
- [CVE-2014-0096](https://insights.sbomify.com/CVE-2014-0096/): Improper Input Validation in Apache Tomcat (medium 4.3)
- [CVE-2014-0095](https://insights.sbomify.com/CVE-2014-0095/): Denial of service in Apache Tomcat (medium 5.0)
- [CVE-2014-0094](https://insights.sbomify.com/CVE-2014-0094/): ClassLoader manipulation in Apache Struts (medium 5.0)
- [CVE-2014-0093](https://insights.sbomify.com/CVE-2014-0093/): Security feature bypass in redhat:jboss enterprise application platform (medium 5.8)
- [CVE-2014-0092](https://insights.sbomify.com/CVE-2014-0092/): Security feature bypass in gnu:gnutls (medium 5.8)
- [CVE-2014-0091](https://insights.sbomify.com/CVE-2014-0091/): Denial of service in Foreman (medium 5.3)
- [CVE-2014-0090](https://insights.sbomify.com/CVE-2014-0090/): Auth bypass in theforeman:foreman (medium 6.8)
- [CVE-2014-0089](https://insights.sbomify.com/CVE-2014-0089/): Cross-site scripting in theforeman:foreman (medium 4.3)
- [CVE-2014-0088](https://insights.sbomify.com/CVE-2014-0088/): Memory corruption in f5:nginx (high 7.5)
- [CVE-2014-0087](https://insights.sbomify.com/CVE-2014-0087/): Privilege escalation in redhat:cloudforms management engine (high 8.8)
- [CVE-2014-0086](https://insights.sbomify.com/CVE-2014-0086/): JBoss RichFaces Improper Input Validation vulnerability (medium 4.3)
- [CVE-2014-0085](https://insights.sbomify.com/CVE-2014-0085/): Exposure of Sensitive Information to an Unauthorized Actor in JBoss Fuse (low 2.1)
- [CVE-2014-0084](https://insights.sbomify.com/CVE-2014-0084/): openshift-origin-node Improper Input Validation vulnerability (medium 5.5)
- [CVE-2014-0083](https://insights.sbomify.com/CVE-2014-0083/): net-ldap has weak salt when generating passwords (medium 5.5)
- [CVE-2014-0082](https://insights.sbomify.com/CVE-2014-0082/): actionpack Improper Input Validation vulnerability (medium 5.0)
- [CVE-2014-0081](https://insights.sbomify.com/CVE-2014-0081/): Rails vulnerable to Cross-site Scripting (medium 4.3)
- [CVE-2014-0080](https://insights.sbomify.com/CVE-2014-0080/): Array data injection vulnerability in activerecord (medium 6.8)
- [CVE-2014-0079](https://insights.sbomify.com/CVE-2014-0079/): Null dereference in zarafa:zarafa (medium 5.0)
- [CVE-2014-0078](https://insights.sbomify.com/CVE-2014-0078/): Missing authorization in redhat:cloudforms 3.0 management engine (medium 4.0)
- [CVE-2014-0077](https://insights.sbomify.com/CVE-2014-0077/): Memory corruption in linux:linux kernel (medium 5.5)
- [CVE-2014-0076](https://insights.sbomify.com/CVE-2014-0076/): Weak cryptography in openssl:openssl (low 1.9)
- [CVE-2014-0075](https://insights.sbomify.com/CVE-2014-0075/): Integer Overflow or Wraparound in Apache Tomcat (medium 5.0)
- [CVE-2014-0074](https://insights.sbomify.com/CVE-2014-0074/): Auth bypass in apache:shiro (high 7.5)
- [CVE-2014-0073](https://insights.sbomify.com/CVE-2014-0073/): Code injection in apache:cordova (critical 9.8)
- [CVE-2014-0072](https://insights.sbomify.com/CVE-2014-0072/): Security feature bypass in apache:cordova (high 7.5)
- [CVE-2014-0071](https://insights.sbomify.com/CVE-2014-0071/): Misconfiguration in redhat:openstack (medium 6.4)
- [CVE-2014-0069](https://insights.sbomify.com/CVE-2014-0069/): Memory corruption in linux:linux kernel (high 7.2)
- [CVE-2014-0068](https://insights.sbomify.com/CVE-2014-0068/): Misconfiguration in openshift node-util (medium 5.5)
- [CVE-2014-0067](https://insights.sbomify.com/CVE-2014-0067/): Privilege escalation in apple:mac os x (medium 4.6)
- [CVE-2014-0066](https://insights.sbomify.com/CVE-2014-0066/): Null dereference in postgresql:postgresql (medium 4.0)
- [CVE-2014-0065](https://insights.sbomify.com/CVE-2014-0065/): Memory corruption in postgresql:postgresql (medium 6.5)
- [CVE-2014-0064](https://insights.sbomify.com/CVE-2014-0064/): Integer overflow in postgresql:postgresql (medium 6.5)
- [CVE-2014-0063](https://insights.sbomify.com/CVE-2014-0063/): Memory corruption in postgresql:postgresql (medium 6.5)
- [CVE-2014-0062](https://insights.sbomify.com/CVE-2014-0062/): Race condition in postgresql:postgresql (medium 4.9)
- [CVE-2014-0061](https://insights.sbomify.com/CVE-2014-0061/): Privilege escalation in postgresql:postgresql (medium 6.5)
- [CVE-2014-0060](https://insights.sbomify.com/CVE-2014-0060/): Privilege escalation in postgresql:postgresql (medium 4.0)
- [CVE-2014-0059](https://insights.sbomify.com/CVE-2014-0059/): Information disclosure in redhat:jboss enterprise application platform (low 2.1)
- [CVE-2014-0058](https://insights.sbomify.com/CVE-2014-0058/): Information disclosure in redhat:jboss enterprise application platform (low 1.9)
- [CVE-2014-0057](https://insights.sbomify.com/CVE-2014-0057/): Code injection in redhat:cloudforms (high 7.5)
- [CVE-2014-0056](https://insights.sbomify.com/CVE-2014-0056/): OpenStack Neutron Improper Authentication vulnerability (low 2.1)
- [CVE-2014-0055](https://insights.sbomify.com/CVE-2014-0055/): Denial of service in redhat:enterprise linux (medium 5.5)
- [CVE-2014-0054](https://insights.sbomify.com/CVE-2014-0054/): Cross-Site Request Forgery in Spring Framework (medium 6.8)
- [CVE-2014-0053](https://insights.sbomify.com/CVE-2014-0053/): Information disclosure in gopivotal:grails (medium 5.0)
- [CVE-2014-0050](https://insights.sbomify.com/CVE-2014-0050/): Commons FileUpload Denial of service vulnerability (high 7.5)
- [CVE-2014-0049](https://insights.sbomify.com/CVE-2014-0049/): Memory corruption in linux:linux kernel (high 7.4)
- [CVE-2014-0048](https://insights.sbomify.com/CVE-2014-0048/): Supply chain in docker.io (critical 9.8)
- [CVE-2014-0047](https://insights.sbomify.com/CVE-2014-0047/): Other in docker:docker (high 7.8)
- [CVE-2014-0046](https://insights.sbomify.com/CVE-2014-0046/): ember-source Cross-site Scripting vulnerability (low 2.6)
- [CVE-2014-0045](https://insights.sbomify.com/CVE-2014-0045/): Memory corruption in light speed gaming:mumble (high 7.5)
- [CVE-2014-0044](https://insights.sbomify.com/CVE-2014-0044/): Null dereference in light speed gaming:mumble (medium 5.0)
- [CVE-2014-0043](https://insights.sbomify.com/CVE-2014-0043/): Apache Wicket allows attackers to check for third-party libraries (medium 5.3)
- [CVE-2014-0042](https://insights.sbomify.com/CVE-2014-0042/): Security feature bypass in redhat:openstack (medium 4.3)
- [CVE-2014-0041](https://insights.sbomify.com/CVE-2014-0041/): Misconfiguration in redhat:openstack (medium 4.3)
- [CVE-2014-0040](https://insights.sbomify.com/CVE-2014-0040/): Weak cryptography in redhat:openstack (medium 4.3)
- [CVE-2014-0039](https://insights.sbomify.com/CVE-2014-0039/): Code injection in cipherdyne:fwsnort (medium 4.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/84/