2014 CVE Vulnerabilities

9,002 CVEs published in 2014.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2014-9944——In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflo...
CVE-2014-9943——In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could p...
CVE-2014-9942——In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could pot...
CVE-2014-9941——In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Co...
CVE-2014-9930——In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist...
CVE-2014-9929——In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability cou...
CVE-2014-9928——In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerabi...
CVE-2014-9927——In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerabili...
CVE-2014-9926——In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.
CVE-2014-9925——In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerabili...
CVE-2014-9924——In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially o...
CVE-2014-9923——In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerabili...
CVE-2014-9983——Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks conta...
CVE-2014-3527——When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick ano...
CVE-2014-0225——When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier u...
CVE-2014-0097——The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password le...
CVE-2014-9970——jasypt before 1.9.2 allows a timing attack against the password hash comparison.
CVE-2014-9937——In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF usi...
CVE-2014-9936——In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Andr...
CVE-2014-9935——In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in ...
CVE-2014-9934——A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check paddi...
CVE-2014-9933——Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for whi...
CVE-2014-9932——In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux k...
CVE-2014-9931——A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM ...
CVE-2014-0051——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ...

Check if your code is affected by 2014 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now