2014 CVE Vulnerabilities

9,002 CVEs published in 2014.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2014-5858The Candy Blast (aka com.appgame7.candyblast) application 1.1.001 for Android does not verify X.509 certificates from SS...
CVE-2014-5857The White & Yellow Pages (aka com.avantar.wny) application 5.1.1 for Android does not verify X.509 certificates from SSL...
CVE-2014-5313Cross-site scripting (XSS) vulnerability in the management page in Six Apart Movable Type before 5.2 allows remote authe...
CVE-2014-4864The NETGEAR ProSafe Plus Configuration Utility creates configuration backup files containing cleartext passwords, which ...
CVE-2014-4789Session fixation vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 be...
CVE-2014-4788IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before ...
CVE-2014-4787Cross-site scripting (XSS) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.09301...
CVE-2014-4786IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before ...
CVE-2014-4785Cross-site request forgery (CSRF) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9....
CVE-2014-4784IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before ...
CVE-2014-4783Cross-site request forgery (CSRF) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9....
CVE-2014-4756The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote aut...
CVE-2014-3348The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series ...
CVE-2014-3343Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (DHCPv6 daemon crash) via a malformed DHCPv6 packe...
CVE-2014-3179Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.120 allow attackers to cause a denial of service ...
CVE-2014-3178Use-after-free vulnerability in core/dom/Node.cpp in Blink, as used in Google Chrome before 37.0.2062.120, allows remote...
CVE-2014-3079The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote aut...
CVE-2014-3037Cross-site request forgery (CSRF) vulnerability in IBM Configuration Management Application (aka VVC) in IBM Rational En...
CVE-2014-0909The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 does not set the ...
CVE-2014-0554Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on ...
CVE-2014-4111Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service ...
CVE-2014-4110Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service ...
CVE-2014-4109Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service ...
CVE-2014-4108Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service ...
CVE-2014-4107Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service ...

Check if your code is affected by 2014 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now