2014 CVE Vulnerabilities

9,011 CVEs published in 2014.

CVE IDSeverityCVSSDescription
CVE-2014-3438——Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager...
CVE-2014-3437——The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read ar...
CVE-2014-2179——The Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180...
CVE-2014-2178——Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on R...
CVE-2014-2177——The network-diagnostics administration interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV...
CVE-2014-6030——Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1) remote attackers to exec...
CVE-2014-5451——Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in MODX Revolution 2.3.1-pl and earlier...
CVE-2014-5258——Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated ...
CVE-2014-8670——Open redirect vulnerability in go.php in vBulletin 4.2.1 allows remote attackers to redirect users to arbitrary web site...
CVE-2014-8669——The SAP Promotion Guidelines (CRM-MKT-MPL-TPM-PPG) module for SAP CRM allows remote attackers to execute arbitrary code ...
CVE-2014-8668——SQL injection vulnerability in SAP Contract Accounting allows remote attackers to execute arbitrary SQL commands via uns...
CVE-2014-8667——Cross-site scripting (XSS) vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to inject a...
CVE-2014-8666——The User & Server configuration, InfoView refresh, user rights (BI-BIP-ADM) component in SAP Business Intellignece allow...
CVE-2014-8665——The SAP Business Intelligence Development Workbench allows remote attackers to obtain sensitive information by reading u...
CVE-2014-8664——SQL injection vulnerability in Product Safety (EHS-SAF) component in SAP Environment, Health, and Safety Management allo...
CVE-2014-8663——SQL injection vulnerability in Data Basis (BW-WHM-DBA) in SAP NetWeaver Business Warehouse allows remote attackers to ex...
CVE-2014-8662——Unspecified vulnerability in SAP Payroll Process allows remote attackers to cause a denial of service via vectors relate...
CVE-2014-8661——The SAP CRM Internet Sales module allows remote attackers to execute arbitrary commands via unspecified vectors.
CVE-2014-8660——SAP Document Management Services allows local users to execute arbitrary commands via unspecified vectors.
CVE-2014-8659——Directory traversal vulnerability in SAP Environment, Health, and Safety allows remote attackers to read arbitrary files...
CVE-2014-8658——Cross-site scripting (XSS) vulnerability in RefinedWiki Original Theme 3.x before 3.5.13 and 4.x before 4.0.12 for Confl...
CVE-2014-8657——The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows r...
CVE-2014-8656——The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a d...
CVE-2014-8655——The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows r...
CVE-2014-8654——Multiple cross-site request forgery (CSRF) vulnerabilities in Compal Broadband Networks (CBN) CH6640E and CG6640E Wirele...

Check if your code is affected by 2014 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now