# Vulnerabilities published in 2014


- [CVE-2014-9036](https://insights.sbomify.com/CVE-2014-9036/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9035](https://insights.sbomify.com/CVE-2014-9035/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9034](https://insights.sbomify.com/CVE-2014-9034/): Denial of service in n/a (medium 5.0)
- [CVE-2014-9033](https://insights.sbomify.com/CVE-2014-9033/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-9032](https://insights.sbomify.com/CVE-2014-9032/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9031](https://insights.sbomify.com/CVE-2014-9031/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9030](https://insights.sbomify.com/CVE-2014-9030/): Denial of service in n/a (high 7.1)
- [CVE-2014-9029](https://insights.sbomify.com/CVE-2014-9029/): Memory corruption in n/a (high 7.5)
- [CVE-2014-9028](https://insights.sbomify.com/CVE-2014-9028/): Memory corruption in n/a (high 7.5)
- [CVE-2014-9027](https://insights.sbomify.com/CVE-2014-9027/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-9026](https://insights.sbomify.com/CVE-2014-9026/): Missing authorization in n/a (medium 4.0)
- [CVE-2014-9025](https://insights.sbomify.com/CVE-2014-9025/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-9024](https://insights.sbomify.com/CVE-2014-9024/): Auth bypass in n/a (high 7.5)
- [CVE-2014-9023](https://insights.sbomify.com/CVE-2014-9023/): Missing authorization in n/a (medium 5.5)
- [CVE-2014-9022](https://insights.sbomify.com/CVE-2014-9022/): Missing authorization in n/a (medium 6.4)
- [CVE-2014-9021](https://insights.sbomify.com/CVE-2014-9021/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9020](https://insights.sbomify.com/CVE-2014-9020/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9019](https://insights.sbomify.com/CVE-2014-9019/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-9018](https://insights.sbomify.com/CVE-2014-9018/): Information disclosure in n/a (medium 5.0)
- [CVE-2014-9017](https://insights.sbomify.com/CVE-2014-9017/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-9016](https://insights.sbomify.com/CVE-2014-9016/): Denial of service in n/a (medium 5.0)
- [CVE-2014-9015](https://insights.sbomify.com/CVE-2014-9015/): Auth bypass in n/a (medium 6.8)
- [CVE-2014-9014](https://insights.sbomify.com/CVE-2014-9014/): Path traversal in n/a (medium 4.3)
- [CVE-2014-9013](https://insights.sbomify.com/CVE-2014-9013/): Privilege escalation in n/a (high 8.8)
- [CVE-2014-9006](https://insights.sbomify.com/CVE-2014-9006/): Security feature bypass in n/a (medium 5.0)
- [CVE-2014-9005](https://insights.sbomify.com/CVE-2014-9005/): SQL injection in n/a (high 7.5)
- [CVE-2014-9004](https://insights.sbomify.com/CVE-2014-9004/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-9003](https://insights.sbomify.com/CVE-2014-9003/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-9002](https://insights.sbomify.com/CVE-2014-9002/): Command injection in n/a (critical 10.0)
- [CVE-2014-9001](https://insights.sbomify.com/CVE-2014-9001/): Command injection in n/a (medium 6.5)
- [CVE-2014-9000](https://insights.sbomify.com/CVE-2014-9000/): Privilege escalation in n/a (medium 6.5)
- [CVE-2014-8999](https://insights.sbomify.com/CVE-2014-8999/): SQL injection in n/a (medium 6.5)
- [CVE-2014-8998](https://insights.sbomify.com/CVE-2014-8998/): Code injection in n/a (medium 6.5)
- [CVE-2014-8997](https://insights.sbomify.com/CVE-2014-8997/): File upload in n/a (high 7.5)
- [CVE-2014-8996](https://insights.sbomify.com/CVE-2014-8996/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-8995](https://insights.sbomify.com/CVE-2014-8995/): SQL injection in n/a (medium 5.0)
- [CVE-2014-8994](https://insights.sbomify.com/CVE-2014-8994/): Path traversal in n/a (low 3.6)
- [CVE-2014-8993](https://insights.sbomify.com/CVE-2014-8993/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-8992](https://insights.sbomify.com/CVE-2014-8992/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-8991](https://insights.sbomify.com/CVE-2014-8991/): pip lack of randomness in build directory (low 2.1)
- [CVE-2014-8990](https://insights.sbomify.com/CVE-2014-8990/): Command injection in n/a (high 7.5)
- [CVE-2014-8989](https://insights.sbomify.com/CVE-2014-8989/): Privilege escalation in n/a (medium 4.6)
- [CVE-2014-8988](https://insights.sbomify.com/CVE-2014-8988/): Missing authorization in n/a (medium 4.0)
- [CVE-2014-8987](https://insights.sbomify.com/CVE-2014-8987/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-8986](https://insights.sbomify.com/CVE-2014-8986/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-8985](https://insights.sbomify.com/CVE-2014-8985/): Memory corruption in n/a (high 7.5)
- [CVE-2014-8967](https://insights.sbomify.com/CVE-2014-8967/): Use after free in n/a (medium 6.8)
- [CVE-2014-8966](https://insights.sbomify.com/CVE-2014-8966/): Memory corruption in n/a (critical 9.3)
- [CVE-2014-8964](https://insights.sbomify.com/CVE-2014-8964/): Memory corruption in n/a (medium 5.0)
- [CVE-2014-8962](https://insights.sbomify.com/CVE-2014-8962/): Memory corruption in n/a (high 7.5)
- [CVE-2014-8961](https://insights.sbomify.com/CVE-2014-8961/): Path traversal in n/a (medium 4.0)
- [CVE-2014-8960](https://insights.sbomify.com/CVE-2014-8960/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-8959](https://insights.sbomify.com/CVE-2014-8959/): Path traversal in n/a (medium 6.5)
- [CVE-2014-8958](https://insights.sbomify.com/CVE-2014-8958/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-8957](https://insights.sbomify.com/CVE-2014-8957/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2014-8956](https://insights.sbomify.com/CVE-2014-8956/): Memory corruption in n/a (high 7.2)
- [CVE-2014-8955](https://insights.sbomify.com/CVE-2014-8955/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-8954](https://insights.sbomify.com/CVE-2014-8954/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-8953](https://insights.sbomify.com/CVE-2014-8953/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-8952](https://insights.sbomify.com/CVE-2014-8952/): Denial of service in n/a (high 7.1)
- [CVE-2014-8951](https://insights.sbomify.com/CVE-2014-8951/): Denial of service in n/a (high 7.1)
- [CVE-2014-8950](https://insights.sbomify.com/CVE-2014-8950/): Denial of service in n/a (high 7.1)
- [CVE-2014-8949](https://insights.sbomify.com/CVE-2014-8949/): Command injection in n/a (medium 6.0)
- [CVE-2014-8948](https://insights.sbomify.com/CVE-2014-8948/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-8945](https://insights.sbomify.com/CVE-2014-8945/): Command injection in n/a (critical 9.8)
- [CVE-2014-8944](https://insights.sbomify.com/CVE-2014-8944/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2014-8943](https://insights.sbomify.com/CVE-2014-8943/): Server-side request forgery in n/a (high 8.8)
- [CVE-2014-8942](https://insights.sbomify.com/CVE-2014-8942/): Lexiglot through 2014-11-20 allows CSRF. (high 8.8)
- [CVE-2014-8941](https://insights.sbomify.com/CVE-2014-8941/): SQL injection in n/a (critical 9.8)
- [CVE-2014-8940](https://insights.sbomify.com/CVE-2014-8940/): Information disclosure in n/a (medium 5.3)
- [CVE-2014-8939](https://insights.sbomify.com/CVE-2014-8939/): Information disclosure in n/a (medium 5.3)
- [CVE-2014-8938](https://insights.sbomify.com/CVE-2014-8938/): Information disclosure in n/a (high 7.8)
- [CVE-2014-8937](https://insights.sbomify.com/CVE-2014-8937/): Denial of service in n/a (high 7.5)
- [CVE-2014-8927](https://insights.sbomify.com/CVE-2014-8927/): Denial of service in n/a (medium 5.0)
- [CVE-2014-8926](https://insights.sbomify.com/CVE-2014-8926/): Denial of service in n/a (medium 5.0)
- [CVE-2014-8925](https://insights.sbomify.com/CVE-2014-8925/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2014-8924](https://insights.sbomify.com/CVE-2014-8924/): XML external entity in n/a (medium 6.4)
- [CVE-2014-8923](https://insights.sbomify.com/CVE-2014-8923/): Information disclosure in n/a (low 1.9)
- [CVE-2014-8921](https://insights.sbomify.com/CVE-2014-8921/): Information disclosure in n/a (medium 4.3)
- [CVE-2014-8920](https://insights.sbomify.com/CVE-2014-8920/): Memory corruption in n/a (high 7.2)
- [CVE-2014-8918](https://insights.sbomify.com/CVE-2014-8918/): Weak cryptography in n/a (medium 5.8)
- [CVE-2014-8917](https://insights.sbomify.com/CVE-2014-8917/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-8916](https://insights.sbomify.com/CVE-2014-8916/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-8914](https://insights.sbomify.com/CVE-2014-8914/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-8913](https://insights.sbomify.com/CVE-2014-8913/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-8912](https://insights.sbomify.com/CVE-2014-8912/): Missing authorization in n/a (medium 5.0)
- [CVE-2014-8911](https://insights.sbomify.com/CVE-2014-8911/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-8910](https://insights.sbomify.com/CVE-2014-8910/): Information disclosure in n/a (medium 4.0)
- [CVE-2014-8909](https://insights.sbomify.com/CVE-2014-8909/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-8904](https://insights.sbomify.com/CVE-2014-8904/): Privilege escalation in n/a (high 7.2)
- [CVE-2014-8903](https://insights.sbomify.com/CVE-2014-8903/): Code injection in n/a (high 8.8)
- [CVE-2014-8902](https://insights.sbomify.com/CVE-2014-8902/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2014-8901](https://insights.sbomify.com/CVE-2014-8901/): Denial of service in n/a (medium 4.0)
- [CVE-2014-8900](https://insights.sbomify.com/CVE-2014-8900/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2014-8899](https://insights.sbomify.com/CVE-2014-8899/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-8898](https://insights.sbomify.com/CVE-2014-8898/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-8897](https://insights.sbomify.com/CVE-2014-8897/): Cross-site scripting in n/a (low 3.5)
- [CVE-2014-8896](https://insights.sbomify.com/CVE-2014-8896/): Privilege escalation in n/a (medium 4.0)
- [CVE-2014-8895](https://insights.sbomify.com/CVE-2014-8895/): Missing authorization in n/a (medium 4.3)
- [CVE-2014-8894](https://insights.sbomify.com/CVE-2014-8894/): Open redirect in n/a (medium 4.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2014/page/9/