2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-7146 | — | — | 51.6% | Nov 18, 2014 | The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a cr... |
| CVE-2014-3620 | — | — | 4.9% | Nov 18, 2014 | cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sit... |
| CVE-2014-3613 | — | — | 7.4% | Nov 18, 2014 | cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attacke... |
| CVE-2014-4463 | — | — | 0.3% | Nov 18, 2014 | Apple iOS before 8.1.1 allows physically proximate attackers to bypass the lock-screen protection mechanism, and view or... |
| CVE-2014-4462 | — | — | 1.3% | Nov 18, 2014 | WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code o... |
| CVE-2014-4461 | — | — | 3.4% | Nov 18, 2014 | The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metad... |
| CVE-2014-4460 | — | — | 0.4% | Nov 18, 2014 | CFNetwork in Apple iOS before 8.1.1 and OS X before 10.10.1 does not properly clear the browsing cache upon a transition... |
| CVE-2014-4459 | — | — | 4.6% | Nov 18, 2014 | Use-after-free vulnerability in WebKit, as used in Apple OS X before 10.10.1, allows remote attackers to execute arbitra... |
| CVE-2014-4458 | — | — | 1.5% | Nov 18, 2014 | The "System Profiler About This Mac" component in Apple OS X before 10.10.1 includes extraneous cookie data in system-mo... |
| CVE-2014-4457 | — | — | 2.6% | Nov 18, 2014 | The Sandbox Profiles subsystem in Apple iOS before 8.1.1 does not properly implement the debugserver sandbox, which allo... |
| CVE-2014-4455 | — | — | 0.4% | Nov 18, 2014 | dyld in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly handle overlapping segments in Mach-O executa... |
| CVE-2014-4453 | — | — | 1.8% | Nov 18, 2014 | Apple iOS before 8.1.1 and OS X before 10.10.1 include location data during establishment of a Spotlight Suggestions ser... |
| CVE-2014-4452 | — | — | 1.3% | Nov 18, 2014 | WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code o... |
| CVE-2014-4451 | — | — | 0.4% | Nov 18, 2014 | Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proxima... |
| CVE-2014-7992 | — | — | 27.2% | Nov 18, 2014 | The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote attackers to obtain sensiti... |
| CVE-2014-6110 | — | — | 0.6% | Nov 18, 2014 | IBM Security Identity Manager 6.x before 6.0.0.3 IF14 does not properly perform logout actions, which allows remote atta... |
| CVE-2014-6107 | — | — | 2.4% | Nov 18, 2014 | IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to obtain sensitive cookie information by ... |
| CVE-2014-6105 | — | — | 2.4% | Nov 18, 2014 | IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to conduct clickjacking attacks via unspec... |
| CVE-2014-6098 | — | — | 2.7% | Nov 18, 2014 | IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to discover cleartext passwords via a craf... |
| CVE-2014-6096 | — | — | 2.3% | Nov 18, 2014 | Cross-site scripting (XSS) vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attacker... |
| CVE-2014-6095 | — | — | 3.5% | Nov 18, 2014 | Directory traversal vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to re... |
| CVE-2014-0059 | — | — | 0.3% | Nov 17, 2014 | JBoss SX and PicketBox, as used in Red Hat JBoss Enterprise Application Platform (EAP) before 6.2.3, use world-readable ... |
| CVE-2014-8955 | — | — | 1.6% | Nov 17, 2014 | Cross-site scripting (XSS) vulnerability in the Contact Form Clean and Simple (clean-and-simple-contact-form-by-meg-nich... |
| CVE-2014-8954 | — | — | 3.2% | Nov 17, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web scr... |
| CVE-2014-8953 | — | — | 2.3% | Nov 17, 2014 | Multiple cross-site request forgery (CSRF) vulnerabilities in Php Scriptlerim Who's Who script allow remote attackers to... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now