2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-9236 | — | — | 2.6% | Dec 3, 2014 | Cross-site scripting (XSS) vulnerability in php/edit_photos.php in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier al... |
| CVE-2014-9235 | — | — | 2.1% | Dec 3, 2014 | Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allow remote authenticated ... |
| CVE-2014-9234 | — | — | 2.8% | Dec 3, 2014 | Directory traversal vulnerability in cgi-bin/sddownload.cgi in D-link IP camera DCS-2103 with firmware 1.0.0 allows remo... |
| CVE-2014-9157 | — | — | 5.6% | Dec 3, 2014 | Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have uns... |
| CVE-2014-9134 | — | — | 2.5% | Dec 3, 2014 | Unrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before V100R001C02B222 allows remote ... |
| CVE-2014-9018 | — | — | 3.0% | Dec 3, 2014 | Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensiti... |
| CVE-2014-8775 | — | — | 2.8% | Dec 3, 2014 | MODX Revolution 2.x before 2.2.15 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, whic... |
| CVE-2014-8774 | — | — | 1.5% | Dec 3, 2014 | Cross-site scripting (XSS) vulnerability in manager/index.php in MODX Revolution 2.x before 2.2.15 allows remote attacke... |
| CVE-2014-8773 | — | — | 1.1% | Dec 3, 2014 | MODX Revolution 2.x before 2.2.15 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mec... |
| CVE-2014-8772 | — | — | 0.8% | Dec 3, 2014 | Cross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and 0.5.1.1 allows remote authenticate... |
| CVE-2014-8771 | — | — | 0.6% | Dec 3, 2014 | Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote at... |
| CVE-2014-8104 | — | — | 3.5% | Dec 3, 2014 | OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause ... |
| CVE-2014-9220 | — | — | 2.1% | Dec 3, 2014 | SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbi... |
| CVE-2014-9141 | — | — | 1.2% | Dec 3, 2014 | The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which all... |
| CVE-2014-3988 | — | — | 1.4% | Dec 3, 2014 | Cross-site scripting (XSS) vulnerability in index.php in SunHater KCFinder 3.11 and earlier allows remote attackers to i... |
| CVE-2014-9184 | — | — | 2.2% | Dec 2, 2014 | ZTE ZXDSL 831CII allows remote attackers to bypass authentication via a direct request to (1) main.cgi, (2) adminpasswd.... |
| CVE-2014-9183 | — | — | 3.6% | Dec 2, 2014 | ZTE ZXDSL 831CII has a default password of admin for the admin account, which allows remote attackers to gain administra... |
| CVE-2014-9182 | — | — | 1.0% | Dec 2, 2014 | models/comment.php in Anchor CMS 0.9.2 and earlier allows remote attackers to inject arbitrary headers into mail message... |
| CVE-2014-9181 | — | — | 9.5% | Dec 2, 2014 | Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrar... |
| CVE-2014-9180 | — | — | 4.4% | Dec 2, 2014 | Open redirect vulnerability in go.php in Eleanor CMS allows remote attackers to redirect users to arbitrary web sites an... |
| CVE-2014-9179 | — | — | 3.7% | Dec 2, 2014 | Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authe... |
| CVE-2014-9178 | — | — | 4.7% | Dec 2, 2014 | Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plu... |
| CVE-2014-9177 | — | — | 2.6% | Dec 2, 2014 | The HTML5 MP3 Player with Playlist Free plugin before 2.7 for WordPress allows remote attackers to obtain the installati... |
| CVE-2014-9176 | — | — | 2.0% | Dec 2, 2014 | Cross-site scripting (XSS) vulnerability in the InstaSqueeze Sexy Squeeze Pages plugin for WordPress allows remote attac... |
| CVE-2014-9175 | — | — | 4.7% | Dec 2, 2014 | SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now