2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-8626 | — | — | 5.8% | Nov 23, 2014 | Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allow... |
| CVE-2014-6183 | — | — | 1.8% | Nov 23, 2014 | IBM Security Network Protection 5.1 before 5.1.0.0 FP13, 5.1.1 before 5.1.1.0 FP8, 5.1.2 before 5.1.2.0 FP9, 5.1.2.1 bef... |
| CVE-2014-4807 | — | — | 1.2% | Nov 23, 2014 | Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 9.3.0 before FP8 allows remote authenticated use... |
| CVE-2014-8683 | — | — | 1.9% | Nov 21, 2014 | Cross-site scripting (XSS) vulnerability in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.... |
| CVE-2014-8682 | — | — | 34.3% | Nov 21, 2014 | Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow r... |
| CVE-2014-8681 | — | — | 4.6% | Nov 21, 2014 | SQL injection vulnerability in the GetIssues function in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.... |
| CVE-2014-8539 | — | — | 1.9% | Nov 21, 2014 | Cross-site scripting (XSS) vulnerability in Simple Email Form 1.8.5 and earlier allows remote attackers to inject arbitr... |
| CVE-2014-8469 | — | — | 3.2% | Nov 21, 2014 | Cross-site scripting (XSS) vulnerability in Guests/Boots in AdminCP in Moxi9 PHPFox before 4 Beta allows remote attacker... |
| CVE-2014-8090 | — | — | 5.6% | Nov 21, 2014 | The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 al... |
| CVE-2014-7871 | — | — | 1.6% | Nov 21, 2014 | SQL injection vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev36 and 7.6.x before 7.6.0-rev23 allows remote ... |
| CVE-2014-7137 | — | — | 1.7% | Nov 21, 2014 | Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM before 3.6.1 allow remote authenticated users to execute arbi... |
| CVE-2014-5395 | — | — | 0.9% | Nov 21, 2014 | Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3276 and E3236 TCPU before V200R002B470D13S... |
| CVE-2014-8388 | — | — | 1.1% | Nov 21, 2014 | Stack-based buffer overflow in Advantech WebAccess, formerly BroadWin WebAccess, before 8.0 allows remote attackers to e... |
| CVE-2014-8000 | — | — | 2.3% | Nov 21, 2014 | Cisco Unified Communications Manager IM and Presence Service 9.1(1) produces different returned messages for URL request... |
| CVE-2014-7195 | — | — | 0.9% | Nov 21, 2014 | Spotfire Web Player Engine in TIBCO Spotfire Web Player 6.0.x before 6.0.2 and 6.5.x before 6.5.2, Spotfire Deployment K... |
| CVE-2014-7194 | — | — | 1.1% | Nov 21, 2014 | TIBCO Managed File Transfer Internet Server before 7.2.4, Managed File Transfer Command Center before 7.2.4, Slingshot b... |
| CVE-2014-9027 | — | — | 0.9% | Nov 20, 2014 | Multiple cross-site request forgery (CSRF) vulnerabilities in ZTE ZXDSL 831CII allow remote attackers to hijack the auth... |
| CVE-2014-9026 | — | — | 0.9% | Nov 20, 2014 | The Ubercart module 7.x-3.x before 7.x-3.7 for Drupal does not properly protect the per-user order history view, which a... |
| CVE-2014-9025 | — | — | 1.2% | Nov 20, 2014 | The default checkout completion rule in the commerce_order module in the Drupal Commerce module 7.x-1.x before 7.x-1.10 ... |
| CVE-2014-9024 | — | — | 1.3% | Nov 20, 2014 | The Protected Pages module 7.x-2.x before 7.x-2.4 for Drupal allows remote attackers to bypass the password protection v... |
| CVE-2014-9023 | — | — | 1.0% | Nov 20, 2014 | The Twilio module 7.x-1.x before 7.x-1.9 for Drupal does not properly restrict access to the Twilio administration pages... |
| CVE-2014-9022 | — | — | 1.5% | Nov 20, 2014 | The Webform Component Roles module 6.x-1.x before 6.x-1.8 and 7.x-1.x before 7.x-1.8 for Drupal allows remote attackers ... |
| CVE-2014-9021 | — | — | 1.9% | Nov 20, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in ZTE ZXDSL 831 allow remote attackers to inject arbitrary web scri... |
| CVE-2014-9020 | — | — | 2.1% | Nov 20, 2014 | Cross-site scripting (XSS) vulnerability in the Quick Stats page (psilan.cgi) in ZTE ZXDSL 831 and 831CII allows remote ... |
| CVE-2014-9019 | — | — | 1.0% | Nov 20, 2014 | Multiple cross-site request forgery (CSRF) vulnerabilities in ZTE ZXDSL 831CII allow remote attackers to hijack the auth... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now