2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-6321 | — | — | 96.0% | Nov 11, 2014 | Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Win... |
| CVE-2014-6318 | — | — | 11.4% | Nov 11, 2014 | The audit logon feature in Remote Desktop Protocol (RDP) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 ... |
| CVE-2014-6317 | — | — | 18.4% | Nov 11, 2014 | Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Wind... |
| CVE-2014-4149 | — | — | 21.4% | Nov 11, 2014 | Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly perform TypeFilterLeve... |
| CVE-2014-4143 | — | — | 20.9% | Nov 11, 2014 | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service ... |
| CVE-2014-4118 | — | — | 13.7% | Nov 11, 2014 | XML Core Services (aka MSXML) 3.0 in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R... |
| CVE-2014-4116 | — | — | 8.8% | Nov 11, 2014 | Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2010 SP2 allows remote authenticated users t... |
| CVE-2014-4078 | — | — | 18.0% | Nov 11, 2014 | The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not properly process wildcard ... |
| CVE-2014-4077 | HIGH | 7.8 | 47.7% | Nov 11, 2014 | Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007... |
| CVE-2014-4076 | — | — | 22.7% | Nov 11, 2014 | Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2)... |
| CVE-2014-8709 | — | — | 4.5% | Nov 10, 2014 | The ieee80211_fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a cert... |
| CVE-2014-8652 | — | — | 2.7% | Nov 10, 2014 | Elipse E3 3.x and earlier allows remote attackers to cause a denial of service (application crash and plant outage) via ... |
| CVE-2014-8559 | MEDIUM | 5.5 | 0.7% | Nov 10, 2014 | The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename... |
| CVE-2014-8481 | — | — | 0.6% | Nov 10, 2014 | The instruction decoder in arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel before 3.18-rc2 does not prop... |
| CVE-2014-8480 | — | — | 0.6% | Nov 10, 2014 | The instruction decoder in arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel before 3.18-rc2 lacks intende... |
| CVE-2014-8369 | HIGH | 7.8 | 0.6% | Nov 10, 2014 | The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of page... |
| CVE-2014-7826 | HIGH | 7.8 | 0.6% | Nov 10, 2014 | kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during... |
| CVE-2014-7825 | HIGH | 7.8 | 0.6% | Nov 10, 2014 | kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during... |
| CVE-2014-7207 | — | — | 0.4% | Nov 10, 2014 | A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate ar... |
| CVE-2014-3690 | MEDIUM | 5.5 | 0.5% | Nov 10, 2014 | arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the v... |
| CVE-2014-3687 | HIGH | 7.5 | 8.6% | Nov 10, 2014 | The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through... |
| CVE-2014-3673 | HIGH | 7.5 | 7.5% | Nov 10, 2014 | The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system ... |
| CVE-2014-3647 | MEDIUM | 5.5 | 0.6% | Nov 10, 2014 | arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, wh... |
| CVE-2014-3646 | MEDIUM | 5.5 | 0.4% | Nov 10, 2014 | arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID... |
| CVE-2014-3645 | — | — | 0.4% | Nov 10, 2014 | arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT ins... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now