2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-1631 | — | — | 9.5% | Jan 31, 2018 | Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php. |
| CVE-2014-4705 | — | — | 1.5% | Jan 30, 2018 | Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S... |
| CVE-2014-4919 | MEDIUM | 5.4 | 0.8% | Jan 19, 2018 | OXID eShop Professional Edition before 4.7.13 and 4.8.x before 4.8.7, Enterprise Edition before 5.0.13 and 5.1.x before ... |
| CVE-2014-2017 | — | — | 2.4% | Jan 18, 2018 | CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition... |
| CVE-2014-9485 | — | — | 4.2% | Jan 16, 2018 | Directory traversal vulnerability in the do_extract_currentfile function in miniunz.c in miniunzip in minizip before 1.1... |
| CVE-2014-9482 | MEDIUM | 6.5 | 2.2% | Jan 16, 2018 | Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow remote attackers to cause a ... |
| CVE-2014-6071 | — | — | 2.4% | Jan 16, 2018 | jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the tex... |
| CVE-2014-6027 | — | — | 1.2% | Jan 16, 2018 | Multiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.4 allow (1) remote attackers to inject arbitrary we... |
| CVE-2014-8166 | HIGH | 8.8 | 3.7% | Jan 12, 2018 | The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might ... |
| CVE-2014-7952 | — | — | 0.4% | Jan 12, 2018 | The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execu... |
| CVE-2014-6437 | — | — | 15.5% | Jan 12, 2018 | Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configurat... |
| CVE-2014-6436 | — | — | 42.1% | Jan 12, 2018 | Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to... |
| CVE-2014-6435 | — | — | 12.6% | Jan 12, 2018 | cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication,... |
| CVE-2014-3471 | — | — | 0.4% | Jan 12, 2018 | Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial... |
| CVE-2014-5070 | HIGH | 8.8 | 1.7% | Jan 11, 2018 | Symmetricom s350i 2.70.15 allows remote authenticated users to gain privileges via vectors related to pushing unauthenti... |
| CVE-2014-5068 | HIGH | 7.5 | 2.7% | Jan 11, 2018 | Directory traversal vulnerability in the web application in Symmetricom s350i 2.70.15 allows remote attackers to read ar... |
| CVE-2014-0087 | — | — | 1.8% | Jan 11, 2018 | The check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as used in Red Hat CloudForms... |
| CVE-2014-5004 | — | — | 0.4% | Jan 10, 2018 | lib/brbackup.rb in the brbackup gem 0.1.1 for Ruby places the database password on the mysql command line, which allows ... |
| CVE-2014-5003 | — | — | 0.4% | Jan 10, 2018 | chef/travis-cookbooks/ci_environment/perlbrew/recipes/default.rb in the ciborg gem 3.0.0 for Ruby allows local users to ... |
| CVE-2014-5002 | — | — | 0.5% | Jan 10, 2018 | The lynx gem before 1.0.0 for Ruby places the configured password on command lines, which allows local users to obtain s... |
| CVE-2014-5001 | — | — | 0.5% | Jan 10, 2018 | lib/ksymfony1.rb in the kcapifony gem 2.1.6 for Ruby places database user passwords on the (1) mysqldump, (2) pg_dump, (... |
| CVE-2014-5000 | — | — | 0.5% | Jan 10, 2018 | The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, whic... |
| CVE-2014-4999 | — | — | 0.5% | Jan 10, 2018 | vendor/plugins/dataset/lib/dataset/database/mysql.rb in the kajam gem 1.0.3.rc2 for Ruby places the mysql user password ... |
| CVE-2014-4998 | — | — | 0.5% | Jan 10, 2018 | test/tc_database.rb in the lean-ruport gem 0.3.8 for Ruby places the mysql user password on the mysqldump command line, ... |
| CVE-2014-4997 | — | — | 0.5% | Jan 10, 2018 | lib/commands/setup.rb in the point-cli gem 0.0.1 for Ruby places credentials on the curl command line, which allows loca... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now