2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-9702 | HIGH | 7.5 | 1.3% | Jun 1, 2020 | system/classes/DbPDO.php in Cmfive through 2015-03-15, when database connectivity malfunctions, allows remote attackers ... |
| CVE-2014-8943 | HIGH | 8.8 | 1.0% | Jun 1, 2020 | Lexiglot through 2014-11-20 allows SSRF via the admin.php?page=projects svn_url parameter. |
| CVE-2014-8942 | HIGH | 8.8 | 0.5% | Jun 1, 2020 | Lexiglot through 2014-11-20 allows CSRF. |
| CVE-2014-8938 | HIGH | 7.8 | 0.3% | Jun 1, 2020 | Lexiglot through 2014-11-20 allows local users to obtain sensitive information by listing a process because the username... |
| CVE-2014-8937 | HIGH | 7.5 | 1.1% | Jun 1, 2020 | Lexiglot through 2014-11-20 allows denial of service because api/update.php launches svn update operations that use a gr... |
| CVE-2014-2723 | HIGH | 8.8 | 1.7% | Mar 19, 2020 | In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may ... |
| CVE-2014-2722 | HIGH | 8.8 | 1.7% | Mar 19, 2020 | In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may ... |
| CVE-2014-2721 | HIGH | 8.8 | 2.3% | Mar 19, 2020 | In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may ... |
| CVE-2014-7914 | HIGH | 8.1 | 0.5% | Feb 21, 2020 | btif/src/btif_dm.c in Android before 5.1 does not properly enforce the temporary nature of a Bluetooth pairing, which al... |
| CVE-2014-4019 | HIGH | 7.5 | 12.4% | Feb 20, 2020 | ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient... |
| CVE-2014-1947 | HIGH | 7.8 | 6.9% | Feb 17, 2020 | Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote... |
| CVE-2014-3208 | HIGH | 7.5 | 1.5% | Feb 13, 2020 | A Denial of Service vulnerability exists in askpop3d 0.7.7 in free (pszQuery), |
| CVE-2014-3860 | HIGH | 7.8 | 0.7% | Feb 12, 2020 | Xilisoft Video Converter Ultimate 7.8.1 build-20140505 has a DLL Hijacking vulnerability |
| CVE-2014-4607 | HIGH | 8.8 | 5.3% | Feb 12, 2020 | Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow... |
| CVE-2014-2560 | HIGH | 7.5 | 1.7% | Feb 12, 2020 | The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which... |
| CVE-2014-6262 | HIGH | 7.5 | 7.1% | Feb 12, 2020 | Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other pr... |
| CVE-2014-4968 | HIGH | 8.8 | 6.1% | Feb 12, 2020 | The WebView class and use of the WebView.addJavascriptInterface method in the Boat Browser application 8.0 and 8.0.1 for... |
| CVE-2014-9748 | HIGH | 8.1 | 2.5% | Feb 11, 2020 | The uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent t... |
| CVE-2014-6447 | HIGH | 7.1 | 0.8% | Feb 11, 2020 | Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting (XSS) issues ... |
| CVE-2014-8347 | HIGH | 7.8 | 1.4% | Feb 11, 2020 | An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 a... |
| CVE-2014-5086 | HIGH | 8.8 | 9.8% | Feb 10, 2020 | A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite... |
| CVE-2014-5085 | HIGH | 8.8 | 5.8% | Feb 10, 2020 | A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, whi... |
| CVE-2014-5084 | HIGH | 8.8 | 7.7% | Feb 10, 2020 | A Command Execution vulnerability exists in Sphider Pro 3.2 due to insufficient sanitization of fwrite, which could let ... |
| CVE-2014-5083 | HIGH | 8.8 | 5.8% | Feb 10, 2020 | A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php,... |
| CVE-2014-7863 | HIGH | 7.5 | 83.4% | Feb 8, 2020 | The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, O... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now