2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-0026 | MEDIUM | 6.5 | 0.4% | Dec 11, 2019 | katello-headpin is vulnerable to CSRF in REST API |
| CVE-2014-3656 | MEDIUM | 6.1 | 0.7% | Dec 10, 2019 | JBoss KeyCloak: XSS in login-status-iframe.html |
| CVE-2014-0242 | HIGH | 7.5 | 8.5% | Dec 9, 2019 | mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive info... |
| CVE-2014-9356 | HIGH | 8.6 | 4.9% | Dec 2, 2019 | Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a con... |
| CVE-2014-3591 | MEDIUM | 4.2 | 0.6% | Nov 29, 2019 | Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allo... |
| CVE-2014-3875 | MEDIUM | 6.1 | 1.7% | Nov 27, 2019 | The addto parameter to fup in Frams' Fast File EXchange (F*EX, aka fex) before fex-2014053 allows remote attackers to co... |
| CVE-2014-6311 | CRITICAL | 9.8 | 1.7% | Nov 22, 2019 | generate_doygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attacker... |
| CVE-2014-6310 | CRITICAL | 9.8 | 4.7% | Nov 22, 2019 | Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' funct... |
| CVE-2014-2214 | MEDIUM | 6.1 | 0.8% | Nov 22, 2019 | Multiple cross-site scripting (XSS) vulnerabilities in POSH (aka Posh portal or Portaneo) 3.0 through 3.2.1 allow remote... |
| CVE-2014-2213 | MEDIUM | 6.1 | 1.4% | Nov 22, 2019 | Open redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1 allows remote attackers to red... |
| CVE-2014-1238 | MEDIUM | 6.1 | 0.6% | Nov 22, 2019 | Cross-site scripting (XSS) vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier. |
| CVE-2014-3585 | CRITICAL | 9.8 | 1.1% | Nov 22, 2019 | redhat-upgrade-tool: Does not check GPG signatures when upgrading versions |
| CVE-2014-5255 | HIGH | 7 | 0.4% | Nov 21, 2019 | xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwr... |
| CVE-2014-5254 | MEDIUM | 4.7 | 0.3% | Nov 21, 2019 | xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwr... |
| CVE-2014-2904 | HIGH | 7.5 | 0.9% | Nov 21, 2019 | wolfssl before 3.2.0 has a server certificate that is not properly authorized for server authentication. |
| CVE-2014-2902 | HIGH | 7.5 | 0.8% | Nov 21, 2019 | wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates. |
| CVE-2014-2901 | HIGH | 7.5 | 0.6% | Nov 21, 2019 | wolfssl before 3.2.0 does not properly issue certificates for a server's hostname. |
| CVE-2014-8356 | HIGH | 8.8 | 5.6% | Nov 21, 2019 | The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended a... |
| CVE-2014-3700 | CRITICAL | 9.8 | 2.9% | Nov 21, 2019 | eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data |
| CVE-2014-1938 | MEDIUM | 5.5 | 0.4% | Nov 21, 2019 | python-rply before 0.7.4 insecurely creates temporary files. |
| CVE-2014-1937 | HIGH | 7.5 | 1.3% | Nov 21, 2019 | Gamera before 3.4.1 insecurely creates temporary files. |
| CVE-2014-1936 | HIGH | 7.5 | 1.3% | Nov 21, 2019 | rc before 1.7.1-5 insecurely creates temporary files. |
| CVE-2014-1935 | MEDIUM | 5.3 | 1.4% | Nov 21, 2019 | 9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames. |
| CVE-2014-0084 | MEDIUM | 5.5 | 0.3% | Nov 21, 2019 | Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of se... |
| CVE-2014-0083 | MEDIUM | 5.5 | 0.3% | Nov 21, 2019 | The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords. |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now