2014 CVE Vulnerabilities
9,002 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-2356 | — | — | 3.4% | Jul 30, 2014 | Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows... |
| CVE-2014-3025 | — | — | 0.9% | Jul 30, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 throug... |
| CVE-2014-0948 | — | — | 1.9% | Jul 30, 2014 | Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager 3.x and... |
| CVE-2014-0947 | — | — | 1.9% | Jul 30, 2014 | Unspecified vulnerability in the server in IBM Rational Software Architect Design Manager 4.0.6 allows remote authentica... |
| CVE-2014-0915 | — | — | 1.0% | Jul 30, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 throug... |
| CVE-2014-0914 | — | — | 1.1% | Jul 30, 2014 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 6.x and 7.x through 7.5.0.... |
| CVE-2014-3897 | — | — | 1.1% | Jul 29, 2014 | Cross-site scripting (XSS) vulnerability in Homepage Decorator PerlMailer 3.10 and earlier allows remote attackers to in... |
| CVE-2014-3896 | — | — | 0.9% | Jul 29, 2014 | Multiple cross-site request forgery (CSRF) vulnerabilities in CGI programs in Seeds acmailer before 3.8.17 and 3.9.x bef... |
| CVE-2014-3895 | — | — | 2.2% | Jul 29, 2014 | The I-O DATA TS-WLCAM camera with firmware 1.06 and earlier, TS-WLCAM/V camera with firmware 1.06 and earlier, TS-WPTCAM... |
| CVE-2014-3329 | — | — | 2.2% | Jul 29, 2014 | Cross-site scripting (XSS) vulnerability in the web-server component in Cisco Prime Data Center Network Manager (DCNM) 6... |
| CVE-2014-3057 | — | — | 1.8% | Jul 29, 2014 | Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x thr... |
| CVE-2014-3056 | — | — | 2.1% | Jul 29, 2014 | The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to... |
| CVE-2014-3055 | — | — | 1.9% | Jul 29, 2014 | SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 ... |
| CVE-2014-3054 | — | — | 1.8% | Jul 29, 2014 | Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x throu... |
| CVE-2014-3050 | — | — | 0.9% | Jul 29, 2014 | IBM Rational Team Concert (RTC) 3.x before 3.0.1.6 IF3 and 4.x before 4.0.7 does not properly integrate with build engin... |
| CVE-2014-3026 | — | — | 1.0% | Jul 29, 2014 | CRLF injection vulnerability in IBM Maximo Asset Management 7.5 through 7.5.0.6, and 7.5 through 7.5.0.3 and 7.5.1 throu... |
| CVE-2014-3020 | — | — | 0.3% | Jul 29, 2014 | install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integrated Portal (TIP) 2.1... |
| CVE-2014-0889 | — | — | 1.2% | Jul 29, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in IBM Atlas Suite (aka Atlas Policy Suite), as used in Atlas eDisco... |
| CVE-2014-5116 | — | — | 7.8% | Jul 29, 2014 | The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attac... |
| CVE-2014-5115 | — | — | 6.3% | Jul 29, 2014 | Absolute path traversal vulnerability in DirPHP 1.0 allows remote attackers to read arbitrary files via a full pathname ... |
| CVE-2014-5114 | — | — | 2.1% | Jul 29, 2014 | WeBid 1.1.1 allows remote attackers to conduct an LDAP injection attack via the (1) js or (2) cat parameter. |
| CVE-2014-5031 | — | — | 2.9% | Jul 29, 2014 | The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote atta... |
| CVE-2014-5030 | — | — | 0.4% | Jul 29, 2014 | CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) ... |
| CVE-2014-5029 | — | — | 0.3% | Jul 29, 2014 | The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a fil... |
| CVE-2014-4909 | — | — | 5.4% | Jul 29, 2014 | Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote ... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now