2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-125138 | HIGH | 8.8 | 0.4% | Oct 28, 2026 | C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted ... |
| CVE-2014-125137 | MEDIUM | 6.5 | 0.7% | Oct 28, 2026 | C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain a local file inc... |
| CVE-2014-125136 | MEDIUM | 5.9 | 0.4% | Oct 28, 2026 | C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an information d... |
| CVE-2014-125135 | HIGH | 7.3 | — | Oct 26, 2026 | A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown function of the component Fl... |
| CVE-2014-125134 | HIGH | 7.5 | 0.6% | Oct 20, 2026 | ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers t... |
| CVE-2014-125133 | HIGH | 7.5 | 0.7% | Oct 20, 2026 | NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attack... |
| CVE-2014-125132 | MEDIUM | 6.1 | 0.2% | Oct 20, 2026 | Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unaut... |
| CVE-2014-125131 | MEDIUM | 6.1 | 0.2% | Oct 20, 2026 | DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inj... |
| CVE-2014-125130 | HIGH | 7.5 | 0.5% | Oct 2, 2026 | CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11 contains an unauthenticate... |
| CVE-2014-125120 | — | — | — | Apr 22, 2026 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. |
| CVE-2014-125112 | CRITICAL | 9.8 | 0.8% | Mar 26, 2026 | Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Sess... |
| CVE-2014-125128 | MEDIUM | 6.1 | 0.3% | Sep 8, 2025 | 'sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS). The function 'naughtyHref' doesn't p... |
| CVE-2014-125127 | HIGH | 7.5 | 0.4% | Sep 3, 2025 | The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service (DoS) attacks due to eager... |
| CVE-2014-125113 | CRITICAL | 9.3 | 1.0% | Aug 5, 2025 | An unrestricted file upload vulnerability exists in Dell (acquired by Quest) KACE K1000 System Management Appliance vers... |
| CVE-2014-125126 | CRITICAL | 9.2 | 1.5% | Jul 31, 2025 | An unrestricted file upload vulnerability exists in Simple E-Document versions 3.0 to 3.1 that allows an unauthenticated... |
| CVE-2014-125125 | HIGH | 8.8 | 1.9% | Jul 31, 2025 | A path traversal vulnerability exists in A10 Networks AX Loadbalancer versions 2.6.1-GR1-P5, 2.7.0, and earlier. The vul... |
| CVE-2014-125124 | CRITICAL | 10 | 1.8% | Jul 31, 2025 | An unauthenticated remote command execution vulnerability exists in Pandora FMS versions up to and including 5.0RC1 via ... |
| CVE-2014-125123 | CRITICAL | 10 | 0.7% | Jul 31, 2025 | An unauthenticated SQL injection vulnerability exists in the Kloxo web hosting control panel (developed by LXCenter) pri... |
| CVE-2014-125122 | MEDIUM | 5.3 | 0.7% | Jul 31, 2025 | A stack-based buffer overflow vulnerability exists in the tmUnblock.cgi endpoint of the Linksys WRT120N wireless router.... |
| CVE-2014-125121 | CRITICAL | 10 | 0.8% | Jul 31, 2025 | Array Networks vAPV (version 8.3.2.17) and vxAG (version 9.2.0.34) appliances are affected by a privilege escalation vul... |
| CVE-2014-125119 | HIGH | 8.4 | 1.5% | Jul 25, 2025 | A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to ... |
| CVE-2014-125118 | CRITICAL | 9.4 | 3.3% | Jul 25, 2025 | A command injection vulnerability exists in the eScan Web Management Console version 5.5-2. The application fails to pro... |
| CVE-2014-125117 | CRITICAL | 9.8 | 5.0% | Jul 25, 2025 | A stack-based buffer overflow vulnerability in the my_cgi.cgi component of certain D-Link devices, including the DSP-W21... |
| CVE-2014-125116 | CRITICAL | 9.3 | 1.6% | Jul 25, 2025 | A remote code execution vulnerability exists in HybridAuth versions 2.0.9 through 2.2.2 due to insecure use of the insta... |
| CVE-2014-125115 | CRITICAL | 10 | 1.7% | Jul 25, 2025 | An unauthenticated SQL injection vulnerability exists in Pandora FMS version 5.0 SP2 and earlier. The mobile/index.php e... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now