2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-9470 | MEDIUM | 6.1 | 1.4% | Feb 8, 2020 | Cross-site scripting (XSS) vulnerability in the loadForm function in Frontend/Modules/Search/Actions/Index.php in Fork C... |
| CVE-2014-9127 | MEDIUM | 6.5 | 1.4% | Feb 8, 2020 | Open-School Community Edition 2.2 does not properly restrict access to the export functionality, which allows remote aut... |
| CVE-2014-9126 | MEDIUM | 6.1 | 1.1% | Feb 8, 2020 | Multiple cross-site scripting (XSS) vulnerabilities in Open-School Community Edition 2.2 allow remote attackers to injec... |
| CVE-2014-7863 | HIGH | 7.5 | 83.4% | Feb 8, 2020 | The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, O... |
| CVE-2014-2225 | HIGH | 8.8 | 1.3% | Feb 8, 2020 | Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remo... |
| CVE-2014-5278 | MEDIUM | 5.3 | 1.5% | Feb 7, 2020 | A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs. |
| CVE-2014-5091 | CRITICAL | 9.8 | 15.2% | Feb 7, 2020 | A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, wh... |
| CVE-2014-5087 | CRITICAL | 9.8 | 7.2% | Feb 7, 2020 | A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could l... |
| CVE-2014-5468 | HIGH | 8.8 | 52.6% | Feb 7, 2020 | A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cf... |
| CVE-2014-5288 | HIGH | 8.8 | 1.6% | Feb 7, 2020 | A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages. |
| CVE-2014-7224 | HIGH | 8.8 | 2.0% | Feb 7, 2020 | A Code Execution vulnerability exists in Android prior to 4.4.0 related to the addJavascriptInterface method and the acc... |
| CVE-2014-6413 | MEDIUM | 6.1 | 1.2% | Feb 7, 2020 | A Cross-site Scripting (XSS) vulnerability exists in WatchGuard XTM 11.8.3 via the poll_name parameter in the firewall/p... |
| CVE-2014-9530 | CRITICAL | 9.8 | 1.2% | Feb 7, 2020 | A vulnerability exists in nw.js before 0.11.3 when calling nw methods from normal frames, which has an unspecified impac... |
| CVE-2014-2875 | MEDIUM | 6.1 | 1.6% | Feb 6, 2020 | The session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2 uses weak session IDs generated based on OS time, which al... |
| CVE-2014-10400 | MEDIUM | 6.1 | 1.2% | Feb 6, 2020 | The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predi... |
| CVE-2014-10399 | MEDIUM | 6.1 | 1.3% | Feb 6, 2020 | The session.lua library in CGILua 5.1.x uses the same ID for each session, which allows remote attackers to hijack arbit... |
| CVE-2014-8271 | MEDIUM | 6.8 | 0.4% | Feb 6, 2020 | Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gain... |
| CVE-2014-2030 | HIGH | 8.8 | 11.1% | Feb 6, 2020 | Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remot... |
| CVE-2014-1958 | HIGH | 8.8 | 3.5% | Feb 6, 2020 | Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attacke... |
| CVE-2014-3893 | — | — | — | Feb 5, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-0114. Reason: This candidate is a duplicate of C... |
| CVE-2014-8328 | MEDIUM | 5.3 | 1.6% | Feb 3, 2020 | The default configuration in the Dynamic Content Elements (dce) extension before 0.11.5 for TYPO3 allows remote attacker... |
| CVE-2014-8141 | HIGH | 7.8 | 7.4% | Jan 31, 2020 | Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to exe... |
| CVE-2014-2025 | CRITICAL | 9.8 | 4.0% | Jan 31, 2020 | Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5... |
| CVE-2014-8338 | MEDIUM | 6.1 | 1.3% | Jan 31, 2020 | Cross-site scripting (XSS) vulnerability in vwrooms/js/jsor-jcarousel/examples/special_textscroller.php in the VideoWhis... |
| CVE-2014-8322 | CRITICAL | 9.8 | 23.9% | Jan 31, 2020 | Stack-based buffer overflow in the tcp_test function in aireplay-ng.c in Aircrack-ng before 1.2 RC 1 allows remote attac... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now