2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-8732 | — | — | 2.0% | Nov 17, 2014 | Cross-site scripting (XSS) vulnerability in phpMemcachedAdmin 1.2.2 and earlier allows remote attackers to inject arbitr... |
| CVE-2014-8727 | — | — | 1.0% | Nov 17, 2014 | Multiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with the "Resource Administrat... |
| CVE-2014-8596 | — | — | 3.3% | Nov 17, 2014 | Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL c... |
| CVE-2014-8517 | — | — | 69.9% | Nov 17, 2014 | The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 thro... |
| CVE-2014-8499 | — | — | 33.6% | Nov 17, 2014 | Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Servi... |
| CVE-2014-8498 | — | — | 12.7% | Nov 17, 2014 | SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP) and Password Manager P... |
| CVE-2014-5277 | — | — | 1.9% | Nov 17, 2014 | Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which ... |
| CVE-2014-3629 | — | — | 6.9% | Nov 17, 2014 | XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause ... |
| CVE-2014-8952 | — | — | 1.5% | Nov 16, 2014 | Multiple unspecified vulnerabilities in Check Point Security Gateway R75.40VS, R75.45, R75.46, R75.47, R76, R77, and R77... |
| CVE-2014-8951 | — | — | 1.5% | Nov 16, 2014 | Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the (... |
| CVE-2014-8950 | — | — | 1.5% | Nov 16, 2014 | Unspecified vulnerability in Check Point Security Gateway R77 and R77.10, when the (1) URL Filtering or (2) Identity Awa... |
| CVE-2014-3916 | — | — | 1.4% | Nov 16, 2014 | The str_buf_cat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent attackers to cause a denial ... |
| CVE-2014-3248 | — | — | 0.5% | Nov 16, 2014 | Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Fa... |
| CVE-2014-0250 | — | — | 3.7% | Nov 16, 2014 | Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact v... |
| CVE-2014-0228 | — | — | 3.5% | Nov 16, 2014 | Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions ... |
| CVE-2014-8949 | — | — | 7.5% | Nov 16, 2014 | The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated administrators to execute arbitr... |
| CVE-2014-8948 | — | — | 3.7% | Nov 16, 2014 | Cross-site request forgery (CSRF) vulnerability in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows re... |
| CVE-2014-3756 | — | — | 1.5% | Nov 16, 2014 | The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a den... |
| CVE-2014-3755 | — | — | 2.5% | Nov 16, 2014 | The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of ser... |
| CVE-2014-0233 | — | — | 1.7% | Nov 16, 2014 | Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to execute arbitrary comm... |
| CVE-2014-3209 | — | — | 0.4% | Nov 16, 2014 | The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow lo... |
| CVE-2014-2667 | — | — | 0.4% | Nov 16, 2014 | Race condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when exist_ok is set to true and... |
| CVE-2014-2268 | — | — | 31.2% | Nov 16, 2014 | views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which all... |
| CVE-2014-2684 | — | — | 1.6% | Nov 16, 2014 | The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_Consumer class in Zen... |
| CVE-2014-2683 | — | — | 2.4% | Nov 16, 2014 | Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendSe... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now