2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-5450 | — | — | 0.4% | Mar 19, 2018 | Zarafa Collaboration Platform 4.1 uses world-readable permissions for /etc/zarafa/license, which allows local users to o... |
| CVE-2014-5443 | — | — | 0.4% | Mar 19, 2018 | Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vector... |
| CVE-2014-4024 | MEDIUM | 5.9 | 1.6% | Mar 19, 2018 | SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0 before HF10, 11.4.0 bef... |
| CVE-2014-2885 | — | — | 0.3% | Mar 19, 2018 | Multiple integer overflows in TrueCrypt 7.1a allow local users to (1) obtain sensitive information via vectors involving... |
| CVE-2014-2884 | — | — | 0.3% | Mar 19, 2018 | The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restricti... |
| CVE-2014-2675 | — | — | 0.8% | Mar 19, 2018 | Cross-site request forgery (CSRF) vulnerability in inc/AdminPage.php in the WP HTML Sitemap plugin 1.2 for WordPress all... |
| CVE-2014-2674 | — | — | 15.7% | Mar 19, 2018 | Directory traversal vulnerability in the Ajax Pagination (twitter Style) plugin 1.1 for WordPress allows remote attacker... |
| CVE-2014-2652 | — | — | 1.3% | Mar 19, 2018 | SQL injection vulnerability in OpenScape Deployment Service (DLS) before 6.x and 7.x before R1.11.3 allows remote attack... |
| CVE-2014-2550 | — | — | 1.7% | Mar 19, 2018 | Cross-site request forgery (CSRF) vulnerability in the Disable Comments plugin before 1.0.4 for WordPress allows remote ... |
| CVE-2014-2297 | — | — | 1.1% | Mar 19, 2018 | Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for Wor... |
| CVE-2014-2274 | — | — | 0.9% | Mar 19, 2018 | Cross-site request forgery (CSRF) vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for WordPress... |
| CVE-2014-3626 | — | — | 1.7% | Mar 19, 2018 | The Grails Resource Plugin often has to exchange URIs for resources with other internal components. Those other componen... |
| CVE-2014-4613 | — | — | 3.2% | Mar 16, 2018 | Cross-site request forgery (CSRF) vulnerability in the administration panel in Piwigo before 2.6.2 allows remote attacke... |
| CVE-2014-4612 | — | — | 1.4% | Mar 16, 2018 | Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5... |
| CVE-2014-8130 | — | — | 3.9% | Mar 12, 2018 | The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to ca... |
| CVE-2014-8129 | — | — | 3.9% | Mar 12, 2018 | LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified ot... |
| CVE-2014-6617 | — | — | 4.5% | Mar 9, 2018 | Softing FG-100 PB PROFIBUS firmware version FG-x00-PB_V2.02.0.00 contains a hardcoded password for the root account, whi... |
| CVE-2014-4861 | — | — | 1.2% | Mar 9, 2018 | The Remote Desktop Launcher in Thycotic Secret Server before 8.6.000010 does not properly cleanup a temporary file that ... |
| CVE-2014-2592 | — | — | 2.3% | Mar 9, 2018 | Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code ... |
| CVE-2014-7272 | — | — | 0.4% | Mar 8, 2018 | Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to gain root privileges because code running as r... |
| CVE-2014-7271 | — | — | 0.4% | Mar 8, 2018 | Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication. |
| CVE-2014-8780 | — | — | 0.7% | Mar 7, 2018 | Cross-site scripting (XSS) vulnerability in Jease 2.11 allows remote authenticated users to inject arbitrary web script ... |
| CVE-2014-5044 | — | — | 5.9% | Mar 7, 2018 | Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of se... |
| CVE-2014-10072 | — | — | 2.7% | Feb 27, 2018 | In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links. |
| CVE-2014-10071 | — | — | 2.8% | Feb 27, 2018 | In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax. |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now