2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-4801 | — | — | 0.8% | Dec 19, 2014 | Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x through 2.0.1.1, 3.x before 3.0.1.6 iFix 4,... |
| CVE-2014-8901 | — | — | 2.2% | Dec 18, 2014 | IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 allows remote authent... |
| CVE-2014-8890 | — | — | 2.3% | Dec 18, 2014 | IBM WebSphere Application Server Liberty Profile 8.5.x before 8.5.5.4 allows remote attackers to gain privileges by leve... |
| CVE-2014-8014 | — | — | 1.2% | Dec 18, 2014 | Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, aka... |
| CVE-2014-8012 | — | — | 0.9% | Dec 18, 2014 | Cross-site scripting (XSS) vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance (ASA) Soft... |
| CVE-2014-6174 | — | — | 1.5% | Dec 18, 2014 | IBM WebSphere Application Server 7.x before 7.0.0.37, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.4 allows remote atta... |
| CVE-2014-6167 | — | — | 1.8% | Dec 18, 2014 | Cross-site scripting (XSS) vulnerability in the URL rewriting feature in IBM WebSphere Application Server 7.x before 7.0... |
| CVE-2014-6166 | — | — | 2.0% | Dec 18, 2014 | The Communications Enabled Applications (CEA) service in IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.... |
| CVE-2014-6164 | — | — | 2.1% | Dec 18, 2014 | IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote attackers to spoof OpenID ... |
| CVE-2014-6089 | — | — | 1.3% | Dec 18, 2014 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.... |
| CVE-2014-6088 | — | — | 1.4% | Dec 18, 2014 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.... |
| CVE-2014-6087 | — | — | 1.4% | Dec 18, 2014 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.... |
| CVE-2014-6086 | — | — | 1.4% | Dec 18, 2014 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.... |
| CVE-2014-6084 | — | — | 1.4% | Dec 18, 2014 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.... |
| CVE-2014-6083 | — | — | 1.4% | Dec 18, 2014 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.... |
| CVE-2014-6082 | — | — | 1.4% | Dec 18, 2014 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.... |
| CVE-2014-6080 | — | — | 1.0% | Dec 18, 2014 | SQL injection vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for W... |
| CVE-2014-6078 | — | — | 1.4% | Dec 18, 2014 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.... |
| CVE-2014-6077 | — | — | 0.6% | Dec 18, 2014 | Cross-site request forgery (CSRF) vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security ... |
| CVE-2014-6076 | — | — | 1.0% | Dec 18, 2014 | IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.... |
| CVE-2014-9406 | — | — | 2.1% | Dec 18, 2014 | ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for... |
| CVE-2014-8120 | — | — | 0.3% | Dec 18, 2014 | The agent in Thermostat before 1.0.6, when using unspecified configurations, allows local users to obtain the JMX manage... |
| CVE-2014-8108 | — | — | 9.7% | Dec 18, 2014 | The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remot... |
| CVE-2014-3580 | — | — | 10.7% | Dec 18, 2014 | The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote ... |
| CVE-2014-9388 | — | — | 2.0% | Dec 17, 2014 | bug_report.php in MantisBT before 1.2.18 allows remote attackers to assign arbitrary issues via the handler_id parameter... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now