2014 CVE Vulnerabilities
9,002 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-5921 | — | — | 0.3% | Sep 18, 2014 | The Need for Speed Network (aka com.ea.nfsautolog.bv) application 1.0.1 for Android does not verify X.509 certificates f... |
| CVE-2014-5920 | — | — | 0.3% | Sep 18, 2014 | The VK Amberfog (aka com.amberfog.vkfree) application 3.5.6 for Android does not verify X.509 certificates from SSL serv... |
| CVE-2014-5919 | — | — | 0.3% | Sep 18, 2014 | The SurDoc - 100GB+ FREE storage (aka com.jd.surdoc) application 1.3.4.0 for Android does not verify X.509 certificates ... |
| CVE-2014-5413 | — | — | 1.0% | Sep 18, 2014 | Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 cert... |
| CVE-2014-5412 | — | — | 1.6% | Sep 18, 2014 | Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database... |
| CVE-2014-5411 | — | — | 1.3% | Sep 18, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 t... |
| CVE-2014-5317 | — | — | 1.2% | Sep 18, 2014 | Cross-site scripting (XSS) vulnerability in php365.com 365 Links 3.11 and earlier, 365 Links2 3.11 and earlier, 365 Link... |
| CVE-2014-4826 | — | — | 1.2% | Sep 18, 2014 | IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 does not properly handle SSH connections, which allows remote attacker... |
| CVE-2014-4824 | — | — | 1.0% | Sep 18, 2014 | SQL injection vulnerability in IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 allows remote authenticated users to ex... |
| CVE-2014-4820 | — | — | 1.1% | Sep 18, 2014 | Cross-site scripting (XSS) vulnerability in IBM Integration Bus Manufacturing Pack 1.x before 1.0.0.1 allows remote atta... |
| CVE-2014-4819 | — | — | 1.1% | Sep 18, 2014 | The web user interface in IBM WebSphere Message Broker 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.3 all... |
| CVE-2014-4423 | — | — | 1.6% | Sep 18, 2014 | The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an act... |
| CVE-2014-4422 | — | — | 1.9% | Sep 18, 2014 | The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early porti... |
| CVE-2014-4421 | — | — | 0.4% | Sep 18, 2014 | The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize ... |
| CVE-2014-4420 | — | — | 0.4% | Sep 18, 2014 | The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize ... |
| CVE-2014-4419 | — | — | 0.4% | Sep 18, 2014 | The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize ... |
| CVE-2014-4418 | — | — | 1.7% | Sep 18, 2014 | IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows a... |
| CVE-2014-4415 | — | — | 2.8% | Sep 18, 2014 | WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause ... |
| CVE-2014-4414 | — | — | 2.8% | Sep 18, 2014 | WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause ... |
| CVE-2014-4413 | — | — | 2.8% | Sep 18, 2014 | WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause ... |
| CVE-2014-4412 | — | — | 2.9% | Sep 18, 2014 | WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause ... |
| CVE-2014-4411 | — | — | 2.8% | Sep 18, 2014 | WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause ... |
| CVE-2014-4410 | — | — | 2.8% | Sep 18, 2014 | WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause ... |
| CVE-2014-4409 | — | — | 1.7% | Sep 18, 2014 | WebKit in Apple iOS before 8 makes it easier for remote attackers to track users during private browsing via a crafted w... |
| CVE-2014-4408 | — | — | 0.3% | Sep 18, 2014 | The rt_setgate function in the kernel in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges ... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now