# Vulnerabilities published in 2014


- [CVE-2014-0038](https://insights.sbomify.com/CVE-2014-0038/): Privilege escalation in linux:linux kernel (medium 6.9)
- [CVE-2014-0037](https://insights.sbomify.com/CVE-2014-0037/): Null dereference in zarafa:zarafa (medium 5.0)
- [CVE-2014-0036](https://insights.sbomify.com/CVE-2014-0036/): rbovirt uses the rest-client gem with SSL verification disabled (medium 6.8)
- [CVE-2014-0035](https://insights.sbomify.com/CVE-2014-0035/): Cleartext Transmission of Sensitive Information in Apache CXF (medium 4.3)
- [CVE-2014-0034](https://insights.sbomify.com/CVE-2014-0034/): Improper Input Validation in Apache CXF (medium 4.3)
- [CVE-2014-0033](https://insights.sbomify.com/CVE-2014-0033/): Improper Input Validation in Apache Tomcat (medium 4.3)
- [CVE-2014-0032](https://insights.sbomify.com/CVE-2014-0032/): Denial of service in apache:subversion (medium 4.3)
- [CVE-2014-0031](https://insights.sbomify.com/CVE-2014-0031/): Missing authorization in apache:cloudstack (medium 4.0)
- [CVE-2014-0030](https://insights.sbomify.com/CVE-2014-0030/): XML external entity in apache:roller (critical 9.8)
- [CVE-2014-0029](https://insights.sbomify.com/CVE-2014-0029/): Cross-site scripting in redhat:subscription asset manager (medium 6.1)
- [CVE-2014-0028](https://insights.sbomify.com/CVE-2014-0028/): Missing authorization in redhat:libvirt (medium 4.3)
- [CVE-2014-0027](https://insights.sbomify.com/CVE-2014-0027/): Other in cmu:flite (low 3.3)
- [CVE-2014-0026](https://insights.sbomify.com/CVE-2014-0026/): Cross-site request forgery in katello-headpin (medium 6.5)
- [CVE-2014-0023](https://insights.sbomify.com/CVE-2014-0023/): Other in OpenShift (high 7.8)
- [CVE-2014-0022](https://insights.sbomify.com/CVE-2014-0022/): Security feature bypass in baseurl:yum (medium 5.0)
- [CVE-2014-0021](https://insights.sbomify.com/CVE-2014-0021/): Denial of service in Chrony (high 7.5)
- [CVE-2014-0020](https://insights.sbomify.com/CVE-2014-0020/): Denial of service in pidgin:pidgin (medium 5.0)
- [CVE-2014-0019](https://insights.sbomify.com/CVE-2014-0019/): Memory corruption in dest-unreach:socat (low 1.9)
- [CVE-2014-0018](https://insights.sbomify.com/CVE-2014-0018/): Missing authorization in redhat:jboss enterprise application platform (low 1.9)
- [CVE-2014-0017](https://insights.sbomify.com/CVE-2014-0017/): Information disclosure in libssh:libssh (low 1.9)
- [CVE-2014-0016](https://insights.sbomify.com/CVE-2014-0016/): Weak cryptography in stunnel:stunnel (medium 4.3)
- [CVE-2014-0015](https://insights.sbomify.com/CVE-2014-0015/): Auth bypass in haxx:curl (medium 4.0)
- [CVE-2014-0014](https://insights.sbomify.com/CVE-2014-0014/): ember-source Cross-site Scripting vulnerability (medium 5.4)
- [CVE-2014-0013](https://insights.sbomify.com/CVE-2014-0013/): Ember.js Cross-site Scripting vulnerability (medium 5.4)
- [CVE-2014-0012](https://insights.sbomify.com/CVE-2014-0012/): Insecure Temporary File in Jinja2 (medium 4.4)
- [CVE-2014-0011](https://insights.sbomify.com/CVE-2014-0011/): Memory corruption in TigerVNC (critical 9.8)
- [CVE-2014-0010](https://insights.sbomify.com/CVE-2014-0010/): Cross-site request forgery in fedoraproject:fedora (medium 6.8)
- [CVE-2014-0009](https://insights.sbomify.com/CVE-2014-0009/): Missing authorization in moodle:moodle (medium 5.5)
- [CVE-2014-0008](https://insights.sbomify.com/CVE-2014-0008/): Information disclosure in moodle:moodle (medium 4.0)
- [CVE-2014-0007](https://insights.sbomify.com/CVE-2014-0007/): Command injection in theforeman:foreman (high 7.5)
- [CVE-2014-0006](https://insights.sbomify.com/CVE-2014-0006/): OpenStack Swift Discloses Secret URLs to Timing Attack (medium 4.3)
- [CVE-2014-0005](https://insights.sbomify.com/CVE-2014-0005/): Privilege escalation in redhat:jboss enterprise application platform (low 3.6)
- [CVE-2014-0004](https://insights.sbomify.com/CVE-2014-0004/): Memory corruption in canonical:ubuntu linux (medium 6.9)
- [CVE-2014-0003](https://insights.sbomify.com/CVE-2014-0003/): Apache Camel's XSLT component allows remote attackers to execute arbitrary Java methods (high 7.5)
- [CVE-2014-0002](https://insights.sbomify.com/CVE-2014-0002/): Apache Camel's XSLT component allows remote attackers to read arbitrary files (high 7.5)
- [CVE-2014-0001](https://insights.sbomify.com/CVE-2014-0001/): Memory corruption in mariadb:mariadb (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/85/