2014 CVE Vulnerabilities

9,002 CVEs published in 2014.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2014-3915The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote attackers to ...
CVE-2014-3911Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to th...
CVE-2014-3850Cross-site request forgery (CSRF) vulnerability in the Member Approval plugin 131109 for WordPress allows remote attacke...
CVE-2014-3782Multiple incomplete blacklist vulnerabilities in the filemanager::isFileExclude method in the Media Manager in Dotclear ...
CVE-2014-3781The dcXmlRpc::setUser method in nc/core/class.dc.xmlrpc.php in Dotclear before 2.6.3 allows remote attackers to bypass a...
CVE-2014-3004The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct...
CVE-2014-2978The Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 allows remote attackers ...
CVE-2014-2977Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in D...
CVE-2014-0249The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is ...
CVE-2014-3157Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc i...
CVE-2014-3156Buffer overflow in the clipboard implementation in Google Chrome before 35.0.1916.153 allows remote attackers to cause a...
CVE-2014-3155net/spdy/spdy_write_queue.cc in the SPDY implementation in Google Chrome before 35.0.1916.153 allows remote attackers to...
CVE-2014-3154Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/child_thread.cc in the filesystem AP...
CVE-2014-1545Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a deni...
CVE-2014-1543Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in Mozilla Firefox before ...
CVE-2014-1542Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers...
CVE-2014-1541Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla ...
CVE-2014-1540Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener M...
CVE-2014-1539Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interactio...
CVE-2014-1538Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24...
CVE-2014-1537Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 a...
CVE-2014-1536The PropertyProvider::FindJustificationRange function in Mozilla Firefox before 30.0 allows remote attackers to execute ...
CVE-2014-1534Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow remote attackers to caus...
CVE-2014-1533Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6,...
CVE-2014-0536Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Ad...

Check if your code is affected by 2014 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now