2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-8321 | HIGH | 7.8 | 0.8% | Jan 31, 2020 | Stack-based buffer overflow in the gps_tracker function in airodump-ng.c in Aircrack-ng before 1.2 RC 1 allows local use... |
| CVE-2014-8140 | HIGH | 7.8 | 7.4% | Jan 31, 2020 | Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to ex... |
| CVE-2014-8139 | HIGH | 7.8 | 7.4% | Jan 31, 2020 | Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execut... |
| CVE-2014-8126 | HIGH | 8.8 | 3.1% | Jan 31, 2020 | The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code. |
| CVE-2014-5236 | HIGH | 7.5 | 3.8% | Jan 31, 2020 | Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 a... |
| CVE-2014-5039 | CRITICAL | 9.6 | 1.2% | Jan 31, 2020 | Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0.2 allows remote attacke... |
| CVE-2014-3868 | HIGH | 8.8 | 2.5% | Jan 31, 2020 | Multiple SQL injection vulnerabilities in ZeusCart 4.x. |
| CVE-2014-3809 | MEDIUM | 6.1 | 0.9% | Jan 31, 2020 | Cross-site scripting (XSS) vulnerability in the management interface in Alcatel-Lucent 1830 Photonic Service Switch (PSS... |
| CVE-2014-3119 | HIGH | 8.8 | 1.7% | Jan 31, 2020 | Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitr... |
| CVE-2014-2843 | MEDIUM | 6.1 | 1.0% | Jan 31, 2020 | Cross-site scripting (XSS) vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows ... |
| CVE-2014-4860 | MEDIUM | 6.8 | 0.5% | Jan 31, 2020 | Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI impl... |
| CVE-2014-4859 | MEDIUM | 6.8 | 0.6% | Jan 31, 2020 | Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation... |
| CVE-2014-3719 | CRITICAL | 9.8 | 2.0% | Jan 30, 2020 | Multiple SQL injection vulnerabilities in cgi-bin/review_m.cgi in Ex Libris ALEPH 500 (Integrated library management sys... |
| CVE-2014-3718 | MEDIUM | 6.1 | 1.0% | Jan 30, 2020 | Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/tag_m.cgi in Ex Libris ALEPH 500 (Integrated library mana... |
| CVE-2014-8490 | MEDIUM | 6.1 | 0.8% | Jan 28, 2020 | Cross-site scripting (XSS) vulnerability in TennisConnect COMPONENTS 9.927 allows remote attackers to inject arbitrary w... |
| CVE-2014-3856 | HIGH | 7 | 0.3% | Jan 28, 2020 | The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows ... |
| CVE-2014-3230 | MEDIUM | 5.9 | 1.6% | Jan 28, 2020 | The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket cla... |
| CVE-2014-2914 | CRITICAL | 9.8 | 3.2% | Jan 28, 2020 | fish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to the configuration service (aka fish_config), which ... |
| CVE-2014-2906 | HIGH | 7 | 0.3% | Jan 28, 2020 | The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary files, which allows lo... |
| CVE-2014-2898 | CRITICAL | 9.8 | 2.8% | Jan 28, 2020 | wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read fun... |
| CVE-2014-2897 | CRITICAL | 9.8 | 2.8% | Jan 28, 2020 | The SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding length when verification fa... |
| CVE-2014-2896 | CRITICAL | 9.8 | 2.8% | Jan 28, 2020 | The DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers ... |
| CVE-2014-3445 | CRITICAL | 9.8 | 5.3% | Jan 28, 2020 | backup.php in HandsomeWeb SOS Webpages before 1.1.12 does not require knowledge of the cleartext password, which allows ... |
| CVE-2014-2581 | HIGH | 7.5 | 2.6% | Jan 28, 2020 | Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Addition... |
| CVE-2014-8563 | CRITICAL | 9.8 | 2.5% | Jan 27, 2020 | Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS. |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now