2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-5011 | MEDIUM | 6.5 | 1.6% | Jan 10, 2020 | DOMPDF before 0.6.2 allows Information Disclosure. |
| CVE-2014-3753 | MEDIUM | 5.5 | 0.9% | Jan 9, 2020 | AgileBits 1Password through 1.0.9.340 allows security feature bypass |
| CVE-2014-3449 | CRITICAL | 9.8 | 2.7% | Jan 9, 2020 | BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability |
| CVE-2014-3448 | CRITICAL | 9.8 | 4.0% | Jan 9, 2020 | BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload |
| CVE-2014-3447 | HIGH | 7.5 | 1.8% | Jan 9, 2020 | BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability |
| CVE-2014-3211 | HIGH | 7.5 | 1.1% | Jan 9, 2020 | Publify before 8.0.1 is vulnerable to a Denial of Service attack |
| CVE-2014-2686 | HIGH | 7.5 | 1.2% | Jan 9, 2020 | Ansible prior to 1.5.4 mishandles the evaluation of some strings. |
| CVE-2014-2651 | CRITICAL | 9.8 | 1.7% | Jan 9, 2020 | Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Wo... |
| CVE-2014-2650 | CRITICAL | 9.8 | 2.6% | Jan 9, 2020 | Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web bas... |
| CVE-2014-5287 | HIGH | 8.8 | 8.1% | Jan 8, 2020 | A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input i... |
| CVE-2014-2072 | CRITICAL | 9.8 | 7.4% | Jan 8, 2020 | Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks |
| CVE-2014-1860 | CRITICAL | 9.8 | 3.6% | Jan 8, 2020 | Contao CMS through 3.2.4 has PHP Object Injection Vulnerabilities |
| CVE-2014-1409 | CRITICAL | 9.1 | 4.0% | Jan 8, 2020 | MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due ... |
| CVE-2014-9908 | MEDIUM | 6.5 | 0.4% | Jan 8, 2020 | A Denial of Service vulnerability exists in Google Android 4.4.4, 5.0.2, and 5.1.1, which allows malicious users to bloc... |
| CVE-2014-1598 | CRITICAL | 9.8 | 1.5% | Jan 8, 2020 | centurystar 7.12 ActiveX Control has a Stack Buffer Overflow |
| CVE-2014-1454 | MEDIUM | 4.8 | 0.6% | Jan 8, 2020 | Pearson eSIS (Enterprise Student Information System) message board has stored XSS due to improper validation of user inp... |
| CVE-2014-5209 | MEDIUM | 5.3 | 2.5% | Jan 8, 2020 | An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control me... |
| CVE-2014-8673 | CRITICAL | 9.8 | 11.9% | Jan 7, 2020 | Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in... |
| CVE-2014-9405 | MEDIUM | 5.4 | 1.5% | Jan 6, 2020 | A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebo... |
| CVE-2014-8674 | MEDIUM | 5.4 | 2.6% | Jan 6, 2020 | Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning) before 1.33 via the doc... |
| CVE-2014-3743 | MEDIUM | 6.1 | 1.7% | Jan 6, 2020 | Multiple cross-site scripting (XSS) vulnerabilities in the Marked module before 0.3.1 for Node.js allow remote attackers... |
| CVE-2014-1850 | — | — | — | Jan 6, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-3743. Reason: This candidate is a duplicate of C... |
| CVE-2014-8516 | CRITICAL | 9.8 | 81.7% | Jan 3, 2020 | Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary co... |
| CVE-2014-8337 | CRITICAL | 9.8 | 4.8% | Jan 3, 2020 | Unrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php in HelpDEZk 1.0.1 and earlier ... |
| CVE-2014-5516 | MEDIUM | 6.5 | 1.3% | Jan 3, 2020 | Cross-site request forgery (CSRF) vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now