2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-9115 | — | — | 2.7% | Dec 23, 2014 | SQL injection vulnerability in the rate_picture function in include/functions_rate.inc.php in Piwigo before 2.5.5, 2.6.x... |
| CVE-2014-5217 | — | — | 1.4% | Dec 23, 2014 | Cross-site request forgery (CSRF) vulnerability in nps/servlet/webacc in the Administration Console server in NetIQ Acce... |
| CVE-2014-5216 | — | — | 3.2% | Dec 23, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote atta... |
| CVE-2014-5215 | — | — | 1.8% | Dec 23, 2014 | NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account p... |
| CVE-2014-5214 | — | — | 1.9% | Dec 23, 2014 | nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 a... |
| CVE-2014-8026 | — | — | 1.8% | Dec 23, 2014 | Cross-site scripting (XSS) vulnerability in the Guest Server in Cisco Jabber allows remote attackers to inject arbitrary... |
| CVE-2014-8025 | — | — | 1.8% | Dec 23, 2014 | The API in the Guest Server in Cisco Jabber, when HTML5 is used, allows remote attackers to obtain sensitive information... |
| CVE-2014-8024 | — | — | 1.8% | Dec 23, 2014 | The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers to obtain sens... |
| CVE-2014-6135 | — | — | 1.2% | Dec 23, 2014 | IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.... |
| CVE-2014-6122 | — | — | 1.5% | Dec 23, 2014 | IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.... |
| CVE-2014-6121 | — | — | 0.9% | Dec 23, 2014 | Cross-site scripting (XSS) vulnerability in IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix... |
| CVE-2014-6119 | — | — | 3.6% | Dec 23, 2014 | IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.... |
| CVE-2014-8992 | — | — | 1.4% | Dec 22, 2014 | Cross-site scripting (XSS) vulnerability in manager/assets/fileapi/FileAPI.flash.image.swf in MODX Revolution 2.3.2-pl a... |
| CVE-2014-8018 | — | — | 1.8% | Dec 22, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Business Voice Services Manager (BVSM) pages in the Application S... |
| CVE-2014-8017 | — | — | 1.2% | Dec 22, 2014 | The periodic-backup feature in Cisco Identity Services Engine (ISE) allows remote attackers to discover backup-encryptio... |
| CVE-2014-8015 | — | — | 1.2% | Dec 22, 2014 | The Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated users to obtain access to an arbi... |
| CVE-2014-5208 | — | — | 23.1% | Dec 22, 2014 | BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00... |
| CVE-2014-8899 | — | — | 0.8% | Dec 22, 2014 | Cross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for... |
| CVE-2014-8898 | — | — | 0.8% | Dec 22, 2014 | Cross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for... |
| CVE-2014-8897 | — | — | 0.8% | Dec 22, 2014 | Cross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for... |
| CVE-2014-8896 | — | — | 0.8% | Dec 22, 2014 | The Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through ... |
| CVE-2014-7286 | — | — | 1.2% | Dec 22, 2014 | Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local us... |
| CVE-2014-8142 | — | — | 53.2% | Dec 20, 2014 | Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.3... |
| CVE-2014-9296 | — | — | 16.2% | Dec 20, 2014 | The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentic... |
| CVE-2014-9295 | — | — | 78.1% | Dec 20, 2014 | Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now