2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-5500 | MEDIUM | 6.1 | 0.8% | Jan 27, 2020 | Synacor Zimbra Collaboration before 8.0.8 has XSS. |
| CVE-2014-8742 | HIGH | 7.5 | 4.4% | Jan 27, 2020 | Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allow... |
| CVE-2014-8741 | CRITICAL | 9.8 | 77.2% | Jan 27, 2020 | Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allo... |
| CVE-2014-7303 | HIGH | 7.8 | 0.7% | Jan 27, 2020 | SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain pas... |
| CVE-2014-7302 | HIGH | 7.8 | 0.6% | Jan 27, 2020 | SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to change the... |
| CVE-2014-7301 | MEDIUM | 6.6 | 0.5% | Jan 27, 2020 | SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain pas... |
| CVE-2014-3979 | HIGH | 7.5 | 2.5% | Jan 27, 2020 | Bytemark Symbiosis allows remote attackers to cause a denial of service via a crafted username, which triggers the firew... |
| CVE-2014-9481 | MEDIUM | 5.9 | 1.3% | Jan 27, 2020 | The Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and possibly other sensitive ... |
| CVE-2014-8161 | MEDIUM | 4.3 | 2.5% | Jan 27, 2020 | PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows re... |
| CVE-2014-4156 | MEDIUM | 5.3 | 1.2% | Jan 27, 2020 | Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability |
| CVE-2014-9630 | HIGH | 7.8 | 1.5% | Jan 24, 2020 | The rtp_packetize_xiph_config function in modules/stream_out/rtpfmt.c in VideoLAN VLC media player before 2.1.6 uses a s... |
| CVE-2014-9629 | HIGH | 7.8 | 2.4% | Jan 24, 2020 | Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2.... |
| CVE-2014-9628 | HIGH | 7.8 | 2.2% | Jan 24, 2020 | The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote at... |
| CVE-2014-9627 | HIGH | 7.8 | 1.1% | Jan 24, 2020 | The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an inco... |
| CVE-2014-9626 | HIGH | 7.8 | 1.5% | Jan 24, 2020 | Integer underflow in the MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2... |
| CVE-2014-9625 | HIGH | 7.8 | 2.4% | Jan 24, 2020 | The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorre... |
| CVE-2014-4172 | CRITICAL | 9.8 | 6.1% | Jan 24, 2020 | A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasi... |
| CVE-2014-9720 | MEDIUM | 6.5 | 2.5% | Jan 24, 2020 | Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, wh... |
| CVE-2014-1925 | CRITICAL | 9.8 | 2.0% | Jan 24, 2020 | SQL injection vulnerability in the MARC framework import/export function (admin/import_export_framework.pl) in Koha befo... |
| CVE-2014-1924 | CRITICAL | 9.8 | 2.0% | Jan 24, 2020 | The MARC framework import/export function (admin/import_export_framework.pl) in Koha before 3.8.23, 3.10.x before 3.10.1... |
| CVE-2014-1923 | HIGH | 7.5 | 3.5% | Jan 24, 2020 | Multiple directory traversal vulnerabilities in the (1) staff interface help editor (edithelp.pl) or (2) member-picuploa... |
| CVE-2014-1922 | HIGH | 7.5 | 2.3% | Jan 24, 2020 | Absolute path traversal vulnerability in tools/pdfViewer.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before ... |
| CVE-2014-2050 | MEDIUM | 6.5 | 1.5% | Jan 23, 2020 | Cross-site request forgery (CSRF) vulnerability in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote at... |
| CVE-2014-3606 | — | — | — | Jan 23, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2014-7238 | MEDIUM | 6.1 | 1.1% | Jan 23, 2020 | The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now