2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-2682 | — | — | 2.2% | Nov 16, 2014 | Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendSe... |
| CVE-2014-2681 | — | — | 2.6% | Nov 16, 2014 | Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendSe... |
| CVE-2014-8566 | — | — | 2.7% | Nov 15, 2014 | The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of ser... |
| CVE-2014-8565 | — | — | — | Nov 15, 2014 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-8518. Reason: This candidate is a duplicate of... |
| CVE-2014-5388 | — | — | 0.4% | Nov 15, 2014 | Off-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in QEMU allows local guest... |
| CVE-2014-3502 | — | — | 5.0% | Nov 15, 2014 | Apache Cordova Android before 3.5.1 allows remote attackers to open and send data to arbitrary applications via a URL wi... |
| CVE-2014-3501 | — | — | 3.7% | Nov 15, 2014 | Apache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and connect to arbitrary server... |
| CVE-2014-3500 | — | — | 4.1% | Nov 15, 2014 | Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL. |
| CVE-2014-3158 | — | — | 3.5% | Nov 15, 2014 | Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before 2.4.7 allows attackers ... |
| CVE-2014-4975 | — | — | 3.9% | Nov 15, 2014 | Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain ... |
| CVE-2014-3707 | — | — | 5.1% | Nov 15, 2014 | The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, ... |
| CVE-2014-7998 | — | — | 1.5% | Nov 15, 2014 | Cisco IOS on Aironet access points, when "dot11 aaa authenticator" debugging is enabled, allows remote attackers to caus... |
| CVE-2014-7997 | — | — | 0.7% | Nov 15, 2014 | The DHCP implementation in Cisco IOS on Aironet access points does not properly handle error conditions with short lease... |
| CVE-2014-7248 | — | — | 1.1% | Nov 15, 2014 | Cross-site scripting (XSS) vulnerability in IPA iLogScanner 4.0 allows remote attackers to inject arbitrary web script o... |
| CVE-2014-8567 | — | — | 3.6% | Nov 14, 2014 | The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) ... |
| CVE-2014-7815 | — | — | 3.7% | Nov 14, 2014 | The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a sma... |
| CVE-2014-3689 | — | — | 0.4% | Nov 14, 2014 | The vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu memory locations and g... |
| CVE-2014-7991 | — | — | 0.7% | Nov 14, 2014 | The Remote Mobile Access Subsystem in Cisco Unified Communications Manager (CM) 10.0(1) and earlier does not properly va... |
| CVE-2014-7878 | — | — | 10.3% | Nov 14, 2014 | The Application Lifecycle Service (ALS) in HP Helion Cloud Development Platform 1.0, when a virtual machine is derived f... |
| CVE-2014-7246 | — | — | 1.1% | Nov 14, 2014 | The Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0 through 10.0.2, 10.1.0-Xpress, and 11.0.0 through 11.0.2, when dep... |
| CVE-2014-5424 | — | — | 11.0% | Nov 14, 2014 | Rockwell Automation Connected Components Workbench (CCW) before 7.00.00 allows remote attackers to cause a denial of ser... |
| CVE-2014-8770 | — | — | 6.5% | Nov 13, 2014 | Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a an... |
| CVE-2014-8564 | — | — | 3.3% | Nov 13, 2014 | The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x be... |
| CVE-2014-8557 | — | — | 1.9% | Nov 13, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in JExperts Channel Platform 5.0.33_CCB allow remote attackers to in... |
| CVE-2014-8554 | — | — | 2.4% | Nov 13, 2014 | SQL injection vulnerability in the mc_project_get_attachments function in api/soap/mc_project_api.php in MantisBT before... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now