2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-9958 | — | — | 1.1% | Apr 4, 2018 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel... |
| CVE-2014-9957 | — | — | 1.1% | Apr 4, 2018 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel... |
| CVE-2014-9956 | — | — | 1.1% | Apr 4, 2018 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel... |
| CVE-2014-9955 | — | — | 1.1% | Apr 4, 2018 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel... |
| CVE-2014-9954 | — | — | 1.1% | Apr 4, 2018 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel... |
| CVE-2014-9953 | — | — | 1.1% | Apr 4, 2018 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel... |
| CVE-2014-6604 | — | — | 1.2% | Mar 29, 2018 | Cross-site scripting (XSS) vulnerability in class-s2-list-table.php in the Subscribe2 plugin before 10.16 for WordPress ... |
| CVE-2014-5170 | — | — | 4.0% | Mar 29, 2018 | The Storage API module 7.x before 7.x-1.6 for Drupal might allow remote attackers to execute arbitrary code by leveragin... |
| CVE-2014-5028 | — | — | 1.7% | Mar 29, 2018 | The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allow remote aut... |
| CVE-2014-5132 | — | — | 2.0% | Mar 27, 2018 | Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses. |
| CVE-2014-5131 | — | — | 2.6% | Mar 27, 2018 | Avolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive information by leverag... |
| CVE-2014-5130 | — | — | 2.6% | Mar 27, 2018 | Avolve Software ProjectDox 8.1 allows remote authenticated users to obtain sensitive information from other users via ve... |
| CVE-2014-4959 | — | — | 1.5% | Mar 27, 2018 | **DISPUTED** SQL injection vulnerability in SQLiteDatabase.java in the SQLi Api in Android allows remote attackers to ex... |
| CVE-2014-0486 | — | — | 3.5% | Mar 27, 2018 | Knot DNS before 1.5.2 allows remote attackers to cause a denial of service (application crash) via a crafted DNS message... |
| CVE-2014-2312 | MEDIUM | 5.5 | 0.4% | Mar 26, 2018 | The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a symlink attack on... |
| CVE-2014-2293 | — | — | 4.9% | Mar 26, 2018 | Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object injection attacks and d... |
| CVE-2014-2048 | — | — | 2.7% | Mar 26, 2018 | The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure ... |
| CVE-2014-4912 | — | — | 8.5% | Mar 22, 2018 | An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation. |
| CVE-2014-4928 | — | — | 1.1% | Mar 20, 2018 | SQL injection vulnerability in Invision Power Board (aka IPB or IP.Board) before 3.4.6 allows remote attackers to execut... |
| CVE-2014-3990 | — | — | 6.9% | Mar 20, 2018 | The Cart::getProducts method in system/library/cart.php in OpenCart 1.5.6.4 and earlier allows remote attackers to condu... |
| CVE-2014-2032 | — | — | 2.0% | Mar 20, 2018 | Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote atta... |
| CVE-2014-2031 | — | — | 1.8% | Mar 20, 2018 | Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote atta... |
| CVE-2014-1665 | — | — | 3.1% | Mar 20, 2018 | Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary ... |
| CVE-2014-1457 | — | — | 1.2% | Mar 20, 2018 | Open Web Analytics (OWA) before 1.5.6 improperly generates random nonce values, which makes it easier for remote attacke... |
| CVE-2014-1215 | — | — | 0.4% | Mar 20, 2018 | Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors relat... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now