2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-5439 | HIGH | 7.8 | 2.5% | Nov 19, 2019 | Multiple Stack-based Buffer Overflow vulnerabilities exists in Sniffit prior to 0.3.7 via a crafted configuration file t... |
| CVE-2014-5118 | MEDIUM | 5.5 | 0.4% | Nov 18, 2019 | Trusted Boot (tboot) before 1.8.2 has a 'loader.c' Security Bypass Vulnerability |
| CVE-2014-0023 | HIGH | 7.8 | 0.4% | Nov 15, 2019 | OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution |
| CVE-2014-0021 | HIGH | 7.5 | 3.8% | Nov 15, 2019 | Chrony before 1.29.1 has traffic amplification in cmdmon protocol |
| CVE-2014-1214 | HIGH | 8.8 | 4.3% | Nov 13, 2019 | views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attac... |
| CVE-2014-8167 | MEDIUM | 5.9 | 0.7% | Nov 13, 2019 | vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle at... |
| CVE-2014-3655 | MEDIUM | 4.3 | 0.5% | Nov 13, 2019 | JBoss KeyCloak is vulnerable to soft token deletion via CSRF |
| CVE-2014-3592 | MEDIUM | 6.1 | 0.7% | Nov 13, 2019 | OpenShift Origin: Improperly validated team names could allow stored XSS attacks |
| CVE-2014-7143 | HIGH | 7.5 | 2.6% | Nov 12, 2019 | Python Twisted 14.0 trustRoot is not respected in HTTP client |
| CVE-2014-3599 | MEDIUM | 6.5 | 1.2% | Nov 12, 2019 | HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy |
| CVE-2014-9014 | MEDIUM | 4.3 | 11.9% | Nov 6, 2019 | Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin b... |
| CVE-2014-9013 | HIGH | 8.8 | 47.9% | Nov 6, 2019 | The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows remote auth... |
| CVE-2014-3180 | CRITICAL | 9.1 | 0.9% | Nov 6, 2019 | In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible ... |
| CVE-2014-8181 | MEDIUM | 5.5 | 0.4% | Nov 6, 2019 | The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SG_IO buffer, which may leaking sensi... |
| CVE-2014-3649 | MEDIUM | 6.1 | 0.7% | Nov 4, 2019 | JBoss AeroGear has reflected XSS via the password field |
| CVE-2014-2304 | HIGH | 7.5 | 1.1% | Oct 23, 2019 | A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attac... |
| CVE-2014-10397 | HIGH | 7.5 | 3.2% | Sep 20, 2019 | The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts... |
| CVE-2014-10396 | HIGH | 7.5 | 3.2% | Sep 20, 2019 | The epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to includes/downl... |
| CVE-2014-10049 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2014-9992 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2014-9982 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2014-10061 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2014-10060 | — | — | — | Aug 30, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2014-10395 | — | — | 0.9% | Aug 27, 2019 | The cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list. |
| CVE-2014-10393 | — | — | 0.9% | Aug 22, 2019 | The cforms2 plugin before 10.5 for WordPress has XSS. |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now