2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-6624 | — | — | 1.3% | Nov 19, 2014 | The Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to ... |
| CVE-2014-6622 | — | — | 1.2% | Nov 19, 2014 | Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to determine the validity of filena... |
| CVE-2014-6621 | — | — | 1.2% | Nov 19, 2014 | Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not disable the troubleshooting and diagnostics page i... |
| CVE-2014-5342 | — | — | 2.7% | Nov 19, 2014 | Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via u... |
| CVE-2014-8629 | — | — | 1.9% | Nov 19, 2014 | Cross-site scripting (XSS) vulnerability in the Page visualization agents in Pandora FMS 5.1 SP1 and earlier allows remo... |
| CVE-2014-7290 | — | — | 1.9% | Nov 19, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Atlas Systems Aeon 3.5 and 3.6 allow remote attackers to inject a... |
| CVE-2014-7910 | — | — | 7.9% | Nov 19, 2014 | Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o... |
| CVE-2014-7909 | — | — | 1.6% | Nov 19, 2014 | effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitiali... |
| CVE-2014-7908 | — | — | 1.6% | Nov 19, 2014 | Multiple integer overflows in the CheckMov function in media/base/container_names.cc in Google Chrome before 39.0.2171.6... |
| CVE-2014-7907 | — | — | 1.6% | Nov 19, 2014 | Multiple use-after-free vulnerabilities in modules/screen_orientation/ScreenOrientationController.cpp in Blink, as used ... |
| CVE-2014-7906 | — | — | 2.0% | Nov 19, 2014 | Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause... |
| CVE-2014-7905 | — | — | 1.1% | Nov 19, 2014 | Google Chrome before 39.0.2171.65 on Android does not prevent navigation to a URL in cases where an intent for the URL l... |
| CVE-2014-7904 | — | — | 1.6% | Nov 19, 2014 | Buffer overflow in Skia, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of serv... |
| CVE-2014-7903 | — | — | 1.5% | Nov 19, 2014 | Buffer overflow in OpenJPEG before r2911 in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attacker... |
| CVE-2014-7902 | — | — | 1.2% | Nov 19, 2014 | Use-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a... |
| CVE-2014-7901 | — | — | 1.4% | Nov 19, 2014 | Integer overflow in the opj_t2_read_packet_data function in fxcodec/fx_libopenjpeg/libopenjpeg20/t2.c in OpenJPEG in PDF... |
| CVE-2014-7900 | — | — | 1.4% | Nov 19, 2014 | Use-after-free vulnerability in the CPDF_Parser::IsLinearizedFile function in fpdfapi/fpdf_parser/fpdf_parser_parser.cpp... |
| CVE-2014-7899 | — | — | 1.3% | Nov 19, 2014 | Google Chrome before 38.0.2125.101 allows remote attackers to spoof the address bar by placing a blob: substring at the ... |
| CVE-2014-7996 | — | — | 0.6% | Nov 18, 2014 | Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Integrated Management Controller in Cisco ... |
| CVE-2014-7829 | — | — | 4.2% | Nov 18, 2014 | Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails... |
| CVE-2014-6324 | HIGH | 8.8 | 87.4% | Nov 18, 2014 | The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 ... |
| CVE-2014-4817 | — | — | 0.6% | Nov 18, 2014 | The server in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attack... |
| CVE-2014-8598 | — | — | 39.4% | Nov 18, 2014 | The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arb... |
| CVE-2014-8475 | — | — | 1.7% | Nov 18, 2014 | FreeBSD 9.1, 9.2, and 10.0, when compiling OpenSSH with Kerberos support, uses incorrect library ordering when linking s... |
| CVE-2014-7824 | — | — | 0.6% | Nov 18, 2014 | D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to cause a denia... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now