2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-9358 | — | — | 2.5% | Dec 16, 2014 | Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attack... |
| CVE-2014-9357 | — | — | 6.5% | Dec 16, 2014 | Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build... |
| CVE-2014-9323 | — | — | 2.9% | Dec 16, 2014 | The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a de... |
| CVE-2014-9057 | — | — | 2.0% | Dec 16, 2014 | SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5.2.11, and 6.x before 6.... |
| CVE-2014-8964 | — | — | 6.5% | Dec 16, 2014 | Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have... |
| CVE-2014-8751 | — | — | 1.4% | Dec 16, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in goYWP WebPress 13.00.06 allow remote attackers to inject arbitrar... |
| CVE-2014-8583 | — | — | 0.4% | Dec 16, 2014 | mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges c... |
| CVE-2014-8340 | — | — | 1.8% | Dec 16, 2014 | SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and earlier allows remote attackers to ... |
| CVE-2014-8118 | — | — | 7.6% | Dec 16, 2014 | Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in ... |
| CVE-2014-5466 | — | — | 0.9% | Dec 16, 2014 | Cross-site scripting (XSS) vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x b... |
| CVE-2014-5359 | — | — | 3.8% | Dec 16, 2014 | Directory traversal vulnerability in SafeNet Authentication Service (SAS) Outlook Web Access Agent (formerly CRYPTOCard)... |
| CVE-2014-4936 | — | — | 16.8% | Dec 16, 2014 | The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE)... |
| CVE-2014-9386 | — | — | 2.0% | Dec 15, 2014 | Zenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes it easier for remote att... |
| CVE-2014-9385 | — | — | 1.2% | Dec 15, 2014 | Cross-site request forgery (CSRF) vulnerability in Zenoss Core through 5 Beta 3 allows remote attackers to hijack the au... |
| CVE-2014-9252 | — | — | 0.4% | Dec 15, 2014 | Zenoss Core through 5 Beta 3 stores cleartext passwords in the session database, which might allow local users to obtain... |
| CVE-2014-9251 | — | — | 1.3% | Dec 15, 2014 | Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for context-dependent attack... |
| CVE-2014-9250 | — | — | 1.5% | Dec 15, 2014 | Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the authentication cookie, wh... |
| CVE-2014-9249 | — | — | 1.6% | Dec 15, 2014 | The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by conn... |
| CVE-2014-9248 | — | — | 1.2% | Dec 15, 2014 | Zenoss Core through 5 Beta 3 does not require complex passwords, which makes it easier for remote attackers to obtain ac... |
| CVE-2014-9247 | — | — | 1.1% | Dec 15, 2014 | Zenoss Core through 5 Beta 3 allows remote authenticated users to obtain sensitive (1) user account, (2) e-mail address,... |
| CVE-2014-9246 | — | — | — | Dec 15, 2014 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9385, CVE-2014-9386. Reason: this ID was inten... |
| CVE-2014-9245 | — | — | 1.4% | Dec 15, 2014 | Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by attempting a product-rename acti... |
| CVE-2014-8967 | — | — | 12.4% | Dec 15, 2014 | Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a craf... |
| CVE-2014-8610 | — | — | 0.3% | Dec 15, 2014 | AndroidManifest.xml in Android before 5.0.0 does not require the SEND_SMS permission for the SmsReceiver receiver, which... |
| CVE-2014-8609 | — | — | 0.6% | Dec 15, 2014 | The addAccount method in src/com/android/settings/accounts/AddAccountSettings.java in the Settings application in Androi... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now