2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-4198 | CRITICAL | 9.1 | 1.3% | Feb 13, 2020 | A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that ... |
| CVE-2014-4170 | CRITICAL | 9.8 | 14.1% | Feb 13, 2020 | A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restric... |
| CVE-2014-3919 | CRITICAL | 9.3 | 0.9% | Feb 13, 2020 | A vulnerability exists in Netgear CG3100 devices before 3.9.2421.13.mp3 V0027 via an embed malicious script in an unspec... |
| CVE-2014-3860 | HIGH | 7.8 | 0.7% | Feb 12, 2020 | Xilisoft Video Converter Ultimate 7.8.1 build-20140505 has a DLL Hijacking vulnerability |
| CVE-2014-4607 | HIGH | 8.8 | 5.3% | Feb 12, 2020 | Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow... |
| CVE-2014-2560 | HIGH | 7.5 | 1.7% | Feb 12, 2020 | The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which... |
| CVE-2014-8128 | MEDIUM | 6.5 | 3.8% | Feb 12, 2020 | LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attack... |
| CVE-2014-9390 | CRITICAL | 9.8 | 63.2% | Feb 12, 2020 | Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS... |
| CVE-2014-6262 | HIGH | 7.5 | 7.1% | Feb 12, 2020 | Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other pr... |
| CVE-2014-4968 | HIGH | 8.8 | 6.1% | Feb 12, 2020 | The WebView class and use of the WebView.addJavascriptInterface method in the Boat Browser application 8.0 and 8.0.1 for... |
| CVE-2014-2595 | CRITICAL | 9.8 | 16.5% | Feb 12, 2020 | Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a perm... |
| CVE-2014-0234 | CRITICAL | 9.8 | 3.7% | Feb 12, 2020 | The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a M... |
| CVE-2014-3827 | MEDIUM | 5.4 | 0.6% | Feb 11, 2020 | Multiple cross-site scripting (XSS) vulnerabilities in the MyBB (aka MyBulletinBoard) before 1.8.4 allow remote authenti... |
| CVE-2014-3826 | MEDIUM | 5.4 | 0.6% | Feb 11, 2020 | Cross-site scripting (XSS) vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web... |
| CVE-2014-9753 | CRITICAL | 9.8 | 2.9% | Feb 11, 2020 | confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing us... |
| CVE-2014-7969 | — | — | — | Feb 11, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-8739. Reason: This candidate is a duplicate of C... |
| CVE-2014-9748 | HIGH | 8.1 | 2.5% | Feb 11, 2020 | The uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent t... |
| CVE-2014-6447 | HIGH | 7.1 | 0.8% | Feb 11, 2020 | Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting (XSS) issues ... |
| CVE-2014-2052 | CRITICAL | 9.8 | 2.5% | Feb 11, 2020 | Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitra... |
| CVE-2014-8347 | HIGH | 7.8 | 1.4% | Feb 11, 2020 | An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 a... |
| CVE-2014-5086 | HIGH | 8.8 | 9.8% | Feb 10, 2020 | A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite... |
| CVE-2014-5085 | HIGH | 8.8 | 5.8% | Feb 10, 2020 | A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, whi... |
| CVE-2014-5084 | HIGH | 8.8 | 7.7% | Feb 10, 2020 | A Command Execution vulnerability exists in Sphider Pro 3.2 due to insufficient sanitization of fwrite, which could let ... |
| CVE-2014-5083 | HIGH | 8.8 | 5.8% | Feb 10, 2020 | A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php,... |
| CVE-2014-8739 | CRITICAL | 9.8 | 91.7% | Feb 8, 2020 | Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now