2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-2478 | — | — | 1.5% | Oct 15, 2014 | Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0... |
| CVE-2014-2476 | — | — | 1.3% | Oct 15, 2014 | Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remo... |
| CVE-2014-2475 | — | — | 1.8% | Oct 15, 2014 | Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.... |
| CVE-2014-2474 | — | — | 1.3% | Oct 15, 2014 | Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remo... |
| CVE-2014-2473 | — | — | 1.3% | Oct 15, 2014 | Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remo... |
| CVE-2014-2472 | — | — | 1.3% | Oct 15, 2014 | Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remo... |
| CVE-2014-8750 | — | — | 2.0% | Oct 15, 2014 | Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remot... |
| CVE-2014-8295 | — | — | 2.3% | Oct 15, 2014 | SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL command... |
| CVE-2014-8294 | — | — | 1.3% | Oct 15, 2014 | Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers to execute arbitrary SQL... |
| CVE-2014-8293 | — | — | 1.0% | Oct 15, 2014 | Cross-site scripting (XSS) vulnerability in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to inject arbitrary w... |
| CVE-2014-7206 | — | — | 0.4% | Oct 15, 2014 | The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a symlink attack on the c... |
| CVE-2014-6312 | — | — | 4.2% | Oct 15, 2014 | Cross-site request forgery (CSRF) vulnerability in the Login Widget With Shortcode (login-sidebar-widget) plugin before ... |
| CVE-2014-3681 | — | — | 2.1% | Oct 15, 2014 | Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to injec... |
| CVE-2014-3664 | — | — | 2.5% | Oct 15, 2014 | Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with ... |
| CVE-2014-3593 | — | — | 1.4% | Oct 15, 2014 | Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitr... |
| CVE-2014-2927 | — | — | 7.9% | Oct 15, 2014 | The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before... |
| CVE-2014-2576 | — | — | 2.0% | Oct 15, 2014 | plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name field... |
| CVE-2014-2022 | — | — | 2.7% | Oct 15, 2014 | SQL injection vulnerability in includes/api/4/breadcrumbs_create.php in vBulletin 4.2.2, 4.2.1, 4.2.0 PL2, and earlier a... |
| CVE-2014-1830 | — | — | 2.0% | Oct 15, 2014 | Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-A... |
| CVE-2014-1829 | — | — | 2.2% | Oct 15, 2014 | Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorizatio... |
| CVE-2014-6952 | — | — | 0.3% | Oct 15, 2014 | The Manga Facts (aka app.mangafacts.ar) application 1.0 for Android does not verify X.509 certificates from SSL servers,... |
| CVE-2014-6951 | — | — | 0.3% | Oct 15, 2014 | The OneFile Ignite (aka uk.co.onefile.ignite) application 1.19 for Android does not verify X.509 certificates from SSL s... |
| CVE-2014-6950 | — | — | 0.3% | Oct 15, 2014 | The Mt. Airy News (aka com.soln.SBE4A803AD6430A6E9DBA5688AA644148) application 1.0069.b0069 for Android does not verify ... |
| CVE-2014-6949 | — | — | 0.3% | Oct 15, 2014 | The Akne Ernahrung (aka com.rareartifact.akneernahrung72010074) application 1.0 for Android does not verify X.509 certif... |
| CVE-2014-6948 | — | — | 0.3% | Oct 15, 2014 | The TH3 professional Al Mohtarif (aka com.th3professional.almohtarif) application 1.0 for Android does not verify X.509 ... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now