2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-8419 | — | — | 0.5% | Nov 26, 2014 | Wibu-Systems CodeMeter Runtime before 5.20 uses weak permissions (read and write access for all users) for codemeter.exe... |
| CVE-2014-7142 | — | — | 24.9% | Nov 26, 2014 | The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of servic... |
| CVE-2014-7141 | — | — | 76.1% | Nov 26, 2014 | The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of servic... |
| CVE-2014-6610 | — | — | 1.5% | Nov 26, 2014 | Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when usin... |
| CVE-2014-6609 | — | — | 3.6% | Nov 26, 2014 | The res_pjsip_pubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a deni... |
| CVE-2014-2037 | — | — | 2.4% | Nov 26, 2014 | Openswan 2.6.40 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) v... |
| CVE-2014-8552 | — | — | 2.0% | Nov 26, 2014 | The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7... |
| CVE-2014-8551 | — | — | 5.3% | Nov 26, 2014 | The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7... |
| CVE-2014-8005 | — | — | 1.2% | Nov 26, 2014 | Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows ... |
| CVE-2014-7247 | — | — | 5.3% | Nov 26, 2014 | Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ich... |
| CVE-2014-6196 | — | — | 1.4% | Nov 26, 2014 | Cross-site scripting (XSS) vulnerability in IBM Web Experience Factory (WEF) 6.1.5 through 8.5.0.1, as used in WebSphere... |
| CVE-2014-6093 | — | — | 1.5% | Nov 26, 2014 | Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.x before 7.0.0.2 CF29, 8.0.x through 8.0.0.1 CF14, ... |
| CVE-2014-9039 | — | — | 2.4% | Nov 25, 2014 | wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote ... |
| CVE-2014-9038 | — | — | 3.8% | Nov 25, 2014 | wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remo... |
| CVE-2014-9037 | — | — | 2.6% | Nov 25, 2014 | WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obt... |
| CVE-2014-9036 | — | — | 2.3% | Nov 25, 2014 | Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x befo... |
| CVE-2014-9035 | — | — | 2.3% | Nov 25, 2014 | Cross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3... |
| CVE-2014-9034 | — | — | 83.2% | Nov 25, 2014 | wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 all... |
| CVE-2014-9033 | — | — | 2.0% | Nov 25, 2014 | Cross-site request forgery (CSRF) vulnerability in wp-login.php in WordPress 3.7.4, 3.8.4, 3.9.2, and 4.0 allows remote ... |
| CVE-2014-9032 | — | — | 2.8% | Nov 25, 2014 | Cross-site scripting (XSS) vulnerability in the media-playlists feature in WordPress before 3.9.x before 3.9.3 and 4.x b... |
| CVE-2014-9031 | — | — | 5.0% | Nov 25, 2014 | Cross-site scripting (XSS) vulnerability in the wptexturize function in WordPress before 3.7.5, 3.8.x before 3.8.5, and ... |
| CVE-2014-8439 | HIGH | 8.8 | 20.0% | Nov 25, 2014 | Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on ... |
| CVE-2014-3605 | — | — | — | Nov 25, 2014 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6407. Reason: This candidate is a reservation du... |
| CVE-2014-8004 | — | — | 1.6% | Nov 25, 2014 | Cisco IOS XR allows remote attackers to cause a denial of service (LISP process reload) by establishing many LISP TCP se... |
| CVE-2014-8002 | — | — | 2.2% | Nov 25, 2014 | Use-after-free vulnerability in decode_slice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute ... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now