2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-5140 | HIGH | 8.8 | 2.7% | Jan 3, 2020 | The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly ha... |
| CVE-2014-4196 | MEDIUM | 6.1 | 0.8% | Jan 3, 2020 | Cross-site scripting (XSS) vulnerability in bsi.dll in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allows remote attack... |
| CVE-2014-10398 | MEDIUM | 6.1 | 0.8% | Jan 3, 2020 | Multiple cross-site scripting (XSS) vulnerabilities in bsi.dll in Bank Soft Systems (BSS) RBS BS-Client. Private Client ... |
| CVE-2014-8182 | HIGH | 7.5 | 3.1% | Jan 2, 2020 | An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was con... |
| CVE-2014-6275 | MEDIUM | 5.9 | 0.9% | Jan 2, 2020 | FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by d... |
| CVE-2014-3590 | MEDIUM | 6.5 | 0.5% | Jan 2, 2020 | Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token in the logout action. Th... |
| CVE-2014-0245 | MEDIUM | 5.9 | 1.0% | Jan 2, 2020 | It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For ... |
| CVE-2014-0183 | MEDIUM | 6.1 | 0.7% | Jan 2, 2020 | Versions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a XSS via HTML in the syste... |
| CVE-2014-0169 | MEDIUM | 6.5 | 0.8% | Jan 2, 2020 | In JBoss EAP 6 a security domain is configured to use a cache that is shared between all applications that are in the se... |
| CVE-2014-0011 | CRITICAL | 9.8 | 2.5% | Jan 2, 2020 | Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, wh... |
| CVE-2014-4553 | MEDIUM | 6.1 | 1.2% | Jan 2, 2020 | Cross-site Scripting (XSS) in the spreadshirt-rss-3d-cube-flash-gallery plugin 2014 for WordPress allows remote attacker... |
| CVE-2014-0161 | MEDIUM | 5.9 | 0.4% | Jan 2, 2020 | ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of the remote endpoint matches the ... |
| CVE-2014-0104 | MEDIUM | 5.9 | 0.8% | Jan 2, 2020 | In fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py script which can potenti... |
| CVE-2014-0048 | CRITICAL | 9.8 | 6.5% | Jan 2, 2020 | An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed... |
| CVE-2014-6420 | MEDIUM | 6.1 | 1.8% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in Livefyre LiveComments 3.0 allows remote attackers to inject arbitrary web sc... |
| CVE-2014-5289 | CRITICAL | 9.8 | 12.0% | Dec 27, 2019 | Buffer overflow in Senkas Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a POST request... |
| CVE-2014-3136 | HIGH | 8.8 | 2.9% | Dec 27, 2019 | Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote a... |
| CVE-2014-4550 | MEDIUM | 6.1 | 3.9% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier... |
| CVE-2014-4536 | MEDIUM | 6.1 | 3.9% | Dec 27, 2019 | Multiple cross-site scripting (XSS) vulnerabilities in tests/notAuto_test_ContactService_pauseCampaign.php in the Infusi... |
| CVE-2014-4535 | MEDIUM | 6.1 | 4.0% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote a... |
| CVE-2014-4567 | MEDIUM | 6.1 | 1.2% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video Comments Webcam Recorder pl... |
| CVE-2014-4558 | MEDIUM | 6.1 | 4.1% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earli... |
| CVE-2014-4548 | MEDIUM | 6.1 | 1.2% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress ... |
| CVE-2014-4544 | MEDIUM | 6.1 | 3.8% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote att... |
| CVE-2014-4539 | MEDIUM | 6.1 | 4.0% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to i... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now