2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-8424 | — | — | 59.6% | Nov 28, 2014 | ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authenticatio... |
| CVE-2014-8423 | — | — | 62.5% | Nov 28, 2014 | Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute ar... |
| CVE-2014-7850 | — | — | 1.9% | Nov 28, 2014 | Cross-site scripting (XSS) vulnerability in the Web UI in FreeIPA 4.x before 4.1.2 allows remote attackers to inject arb... |
| CVE-2014-7178 | — | — | 5.1% | Nov 28, 2014 | Enalean Tuleap before 7.5.99.6 allows remote attackers to execute arbitrary commands via the User-Agent header, which is... |
| CVE-2014-6075 | — | — | 1.2% | Nov 28, 2014 | IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnera... |
| CVE-2014-4883 | — | — | 0.6% | Nov 28, 2014 | resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values... |
| CVE-2014-4832 | — | — | 1.1% | Nov 28, 2014 | IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnera... |
| CVE-2014-4831 | — | — | 1.0% | Nov 28, 2014 | IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnera... |
| CVE-2014-4829 | — | — | 0.6% | Nov 28, 2014 | Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch... |
| CVE-2014-3407 | — | — | 1.7% | Nov 28, 2014 | The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) and earlier does not properly all... |
| CVE-2014-5426 | — | — | 1.3% | Nov 27, 2014 | MatrikonOPC OPC Server for DNP3 1.2.3 and earlier allows remote attackers to cause a denial of service (unhandled except... |
| CVE-2014-9104 | — | — | 0.9% | Nov 26, 2014 | Multiple cross-site request forgery (CSRF) vulnerabilities in the XML-RPC API in the Desktop Client in OpenVPN Access Se... |
| CVE-2014-9103 | — | — | 1.9% | Nov 26, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote attack... |
| CVE-2014-9102 | — | — | 1.7% | Nov 26, 2014 | Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote authenticated users... |
| CVE-2014-9101 | — | — | 2.4% | Nov 26, 2014 | Multiple cross-site request forgery (CSRF) vulnerabilities in Oxwall 1.7.0 (build 7907 and 7906) and SkaDate Lite 2.0 (b... |
| CVE-2014-9100 | — | — | 1.6% | Nov 26, 2014 | Cross-site scripting (XSS) vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows remote attackers to in... |
| CVE-2014-9099 | — | — | 2.7% | Nov 26, 2014 | Cross-site request forgery (CSRF) vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows remote attacker... |
| CVE-2014-9098 | — | — | 2.9% | Nov 26, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin ... |
| CVE-2014-9097 | — | — | 5.2% | Nov 26, 2014 | Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5, possibly... |
| CVE-2014-9096 | — | — | 2.4% | Nov 26, 2014 | Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute a... |
| CVE-2014-9095 | — | — | 2.3% | Nov 26, 2014 | Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary S... |
| CVE-2014-9094 | — | — | 7.3% | Nov 26, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in deploy/designer/preview.php in the Digital Zoom Studio (DZS) Vide... |
| CVE-2014-9093 | — | — | 4.1% | Nov 26, 2014 | LibreOffice before 4.3.5 allows remote attackers to cause a denial of service (invalid write operation and crash) and po... |
| CVE-2014-9028 | — | — | 9.8% | Nov 26, 2014 | Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code... |
| CVE-2014-8962 | — | — | 9.9% | Nov 26, 2014 | Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary cod... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now