2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-10070 | — | — | 0.5% | Feb 27, 2018 | zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of ... |
| CVE-2014-3206 | — | — | 52.9% | Feb 23, 2018 | Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmg... |
| CVE-2014-3205 | — | — | 2.9% | Feb 23, 2018 | backupmgt/pre_connect_check.php in Seagate BlackArmor NAS contains a hard-coded password of '!~@##$$%FREDESWWSED' for a ... |
| CVE-2014-3972 | — | — | 2.5% | Feb 19, 2018 | Directory traversal vulnerability in Apexis APM-J601-WS cameras with firmware before 17.35.2.49 allows remote attackers ... |
| CVE-2014-0014 | — | — | 1.4% | Feb 15, 2018 | Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 a... |
| CVE-2014-0013 | — | — | 0.7% | Feb 15, 2018 | Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 a... |
| CVE-2014-8171 | — | — | 0.4% | Feb 9, 2018 | The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock... |
| CVE-2014-3219 | — | — | 0.4% | Feb 9, 2018 | fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp... |
| CVE-2014-8985 | — | — | 10.0% | Feb 8, 2018 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co... |
| CVE-2014-4145 | — | — | 8.9% | Feb 8, 2018 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co... |
| CVE-2014-4112 | — | — | 8.5% | Feb 8, 2018 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co... |
| CVE-2014-4066 | — | — | 7.9% | Feb 8, 2018 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co... |
| CVE-2014-5282 | — | — | 1.3% | Feb 6, 2018 | Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image throu... |
| CVE-2014-5280 | HIGH | 8.8 | 0.7% | Feb 6, 2018 | boot2docker 1.2 and earlier allows attackers to conduct cross-site request forgery (CSRF) attacks by leveraging Docker d... |
| CVE-2014-5279 | — | — | 2.8% | Feb 6, 2018 | The Docker daemon managed by boot2docker 1.2 and earlier improperly enables unauthenticated TCP connections by default, ... |
| CVE-2014-1835 | — | — | 0.4% | Feb 2, 2018 | The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login cr... |
| CVE-2014-1834 | — | — | 0.4% | Feb 2, 2018 | The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to inject arbitrary c... |
| CVE-2014-9504 | — | — | 1.6% | Feb 1, 2018 | The OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal, allows remote attacke... |
| CVE-2014-9503 | — | — | 1.4% | Feb 1, 2018 | The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenticated user... |
| CVE-2014-9502 | — | — | 1.0% | Feb 1, 2018 | Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified sub modules in the Open Atrium module 7.x-2.x ... |
| CVE-2014-3752 | — | — | 1.0% | Feb 1, 2018 | The MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users with administrator rights... |
| CVE-2014-3519 | — | — | 0.4% | Feb 1, 2018 | The open_by_handle_at function in vzkernel before 042stab090.5 in the OpenVZ modification for the Linux kernel 2.6.32, w... |
| CVE-2014-3244 | — | — | 5.1% | Feb 1, 2018 | XML external entity (XXE) vulnerability in the RSSDashlet dashlet in SugarCRM before 6.5.17 allows remote attackers to r... |
| CVE-2014-3005 | — | — | 5.3% | Feb 1, 2018 | XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1,... |
| CVE-2014-1632 | — | — | 10.7% | Jan 31, 2018 | htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the ... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now