2014 CVE Vulnerabilities
9,002 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-8756 | — | — | 3.7% | Oct 17, 2014 | The NcrCtl4.NcrNet.1 control in Panasonic Network Camera Recorder before 4.04R03 allows remote attackers to execute arbi... |
| CVE-2014-8755 | — | — | 2.6% | Oct 17, 2014 | Panasonic Network Camera View 3 and 4 allows remote attackers to execute arbitrary code via a crafted page, which trigge... |
| CVE-2014-8074 | — | — | 3.4% | Oct 17, 2014 | Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 bef... |
| CVE-2014-7960 | — | — | 3.0% | Oct 17, 2014 | OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other m... |
| CVE-2014-2068 | — | — | 1.4% | Oct 17, 2014 | The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 al... |
| CVE-2014-2066 | — | — | 2.1% | Oct 17, 2014 | Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sess... |
| CVE-2014-2065 | — | — | 1.8% | Oct 17, 2014 | Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to injec... |
| CVE-2014-2064 | — | — | 3.0% | Oct 17, 2014 | The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS befor... |
| CVE-2014-2063 | — | — | 2.3% | Oct 17, 2014 | Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vect... |
| CVE-2014-2062 | — | — | 1.7% | Oct 17, 2014 | Jenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted, which allows remot... |
| CVE-2014-2061 | — | — | 2.0% | Oct 17, 2014 | The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers ... |
| CVE-2014-2060 | — | — | 1.5% | Oct 17, 2014 | The Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack sessions... |
| CVE-2014-2058 | — | — | 1.8% | Oct 17, 2014 | BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restricti... |
| CVE-2014-8320 | — | — | 1.1% | Oct 17, 2014 | Cross-site scripting (XSS) vulnerability in the Custom Search module 6.x-1.x before 6.x-1.12 and 7.x-1.x before 7.x-1.14... |
| CVE-2014-8319 | — | — | 1.0% | Oct 17, 2014 | Cross-site scripting (XSS) vulnerability in the easy_social_admin_summary function in the Easy Social module 7.x-2.x bef... |
| CVE-2014-8318 | — | — | 1.1% | Oct 17, 2014 | Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.20, 7.x-3.x before 7.x-3.20, and 7.x... |
| CVE-2014-8317 | — | — | 1.0% | Oct 17, 2014 | Cross-site scripting (XSS) vulnerability in the Webform Validation module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-... |
| CVE-2014-8316 | — | — | 2.8% | Oct 16, 2014 | XML External Entity (XXE) vulnerability in polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows remo... |
| CVE-2014-8315 | — | — | 1.5% | Oct 16, 2014 | polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connec... |
| CVE-2014-8314 | — | — | 2.2% | Oct 16, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA Developer Edition Revision 70 allow remote attackers to ... |
| CVE-2014-8313 | — | — | 2.1% | Oct 16, 2014 | Eval injection in ide/core/base/server/net.xsjs in the Developer Workbench in SAP HANA allows remote attackers to execut... |
| CVE-2014-8312 | — | — | 2.1% | Oct 16, 2014 | Business Warehouse (BW) in SAP Netweaver AS ABAP 7.31 allows remote authenticated users to obtain sensitive information ... |
| CVE-2014-8311 | — | — | 1.8% | Oct 16, 2014 | SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information via an InfoStore query to a CORBA l... |
| CVE-2014-8310 | — | — | 2.9% | Oct 16, 2014 | The CMS CORBA listener in SAP BusinessObjects BI Edge 4.0 allows remote attackers to cause a denial of service (server s... |
| CVE-2014-8309 | — | — | 1.7% | Oct 16, 2014 | SAP BusinessObjects 4.0 and BusinessObjects XI (BOXI) R2 and 3.1 generates error messages for a failed logon attempt wit... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now