2014 CVE Vulnerabilities
9,002 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-1350 | — | — | 0.4% | Jul 1, 2014 | Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requireme... |
| CVE-2014-1349 | — | — | 2.9% | Jul 1, 2014 | Use-after-free vulnerability in Safari in Apple iOS before 7.1.2 allows remote attackers to execute arbitrary code or ca... |
| CVE-2014-1348 | — | — | 0.4% | Jul 1, 2014 | Mail in Apple iOS before 7.1.2 advertises the availability of data protection for attachments but stores cleartext attac... |
| CVE-2014-1345 | — | — | 1.7% | Jul 1, 2014 | WebKit in Apple iOS before 7.1.2 and Apple Safari before 6.1.5 and 7.x before 7.0.5 does not properly encode domain name... |
| CVE-2014-1340 | — | — | 1.8% | Jul 1, 2014 | WebKit, as used in Apple Safari before 6.1.5 and 7.x before 7.0.5, allows remote attackers to execute arbitrary code or ... |
| CVE-2014-1325 | — | — | 2.7% | Jul 1, 2014 | WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, al... |
| CVE-2014-1317 | — | — | 0.3% | Jul 1, 2014 | iBooks Commerce in Apple OS X before 10.9.4 places Apple ID credentials in the iBooks log, which allows local users to o... |
| CVE-2014-2512 | — | — | 1.6% | Jul 1, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum eRoom 7.4.3, 7.4.4 before P19, and 7.4.4 SP1 allow... |
| CVE-2014-2509 | — | — | 1.6% | Jul 1, 2014 | Session fixation vulnerability in the Report Advisor (RA) component in EMC Network Configuration Manager (NCM) before 9.... |
| CVE-2014-4669 | — | — | 1.7% | Jun 28, 2014 | HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML ... |
| CVE-2014-4649 | — | — | 1.0% | Jun 28, 2014 | SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authen... |
| CVE-2014-4648 | — | — | 1.5% | Jun 28, 2014 | Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure." |
| CVE-2014-2613 | — | — | 3.6% | Jun 28, 2014 | Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x b... |
| CVE-2014-2612 | — | — | 6.8% | Jun 28, 2014 | Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x b... |
| CVE-2014-3881 | — | — | 0.6% | Jun 28, 2014 | Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to ... |
| CVE-2014-2006 | — | — | 1.1% | Jun 28, 2014 | Cross-site scripting (XSS) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject ... |
| CVE-2014-0891 | — | — | 2.1% | Jun 28, 2014 | IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.2 allows remo... |
| CVE-2014-3011 | — | — | 1.0% | Jun 27, 2014 | IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection attacks via unspecified ... |
| CVE-2014-3433 | — | — | 2.0% | Jun 27, 2014 | Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allow... |
| CVE-2014-3432 | — | — | 2.0% | Jun 27, 2014 | Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allow... |
| CVE-2014-4645 | — | — | 1.5% | Jun 25, 2014 | Cross-site scripting (XSS) vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbit... |
| CVE-2014-4644 | — | — | 1.3% | Jun 25, 2014 | SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execut... |
| CVE-2014-4643 | — | — | 8.8% | Jun 25, 2014 | Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a den... |
| CVE-2014-4030 | — | — | 2.9% | Jun 25, 2014 | Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attacke... |
| CVE-2014-4617 | — | — | 3.3% | Jun 25, 2014 | The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent a... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now