2014 CVE Vulnerabilities
9,002 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-0514 | — | — | 72.0% | Apr 15, 2014 | The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows r... |
| CVE-2014-2580 | — | — | 0.3% | Apr 15, 2014 | The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local... |
| CVE-2014-0107 | — | — | 13.7% | Apr 15, 2014 | The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FE... |
| CVE-2014-2842 | — | — | 3.5% | Apr 15, 2014 | Juniper ScreenOS 6.3 and earlier allows remote attackers to cause a denial of service (crash and restart or failover) vi... |
| CVE-2014-2828 | — | — | 3.1% | Apr 15, 2014 | The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attack... |
| CVE-2014-2690 | — | — | 0.3% | Apr 15, 2014 | Citrix VDI-in-a-Box 5.3.x before 5.3.6 and 5.4.x before 5.4.3 allows local users to obtain administrator credentials by ... |
| CVE-2014-0167 | — | — | 1.6% | Apr 15, 2014 | The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before ic... |
| CVE-2014-0157 | — | — | 1.2% | Apr 15, 2014 | Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 201... |
| CVE-2014-0139 | — | — | 4.9% | Apr 15, 2014 | cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildca... |
| CVE-2014-0138 | — | — | 5.1% | Apr 15, 2014 | The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) I... |
| CVE-2014-0105 | — | — | 1.1% | Apr 15, 2014 | The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 d... |
| CVE-2014-0359 | — | — | 4.7% | Apr 15, 2014 | Xangati XSR before 11 and XNR before 7 allows remote attackers to execute arbitrary commands via shell metacharacters in... |
| CVE-2014-0358 | — | — | 6.1% | Apr 15, 2014 | Multiple directory traversal vulnerabilities in Xangati XSR before 11 and XNR before 7 allow remote attackers to read ar... |
| CVE-2014-0357 | — | — | 1.8% | Apr 15, 2014 | Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a... |
| CVE-2014-0356 | — | — | 1.1% | Apr 15, 2014 | The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to execute arbitrary ... |
| CVE-2014-0355 | — | — | 0.6% | Apr 15, 2014 | Multiple stack-based buffer overflows on the ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allo... |
| CVE-2014-0354 | — | — | 0.8% | Apr 15, 2014 | The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 has a hardcoded password of qweasdzxc for an ... |
| CVE-2014-0353 | — | — | 0.9% | Apr 15, 2014 | The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to bypass authenticat... |
| CVE-2014-0348 | — | — | 0.9% | Apr 15, 2014 | The Artiva Agency Single Sign-On (SSO) implementation in Artiva Workstation 1.3.x before 1.3.9, Artiva Rm 3.1 MR7, Artiv... |
| CVE-2014-0342 | — | — | 2.1% | Apr 15, 2014 | Multiple unrestricted file upload vulnerabilities in fileupload.php in PivotX before 2.3.9 allow remote authenticated us... |
| CVE-2014-0341 | — | — | 1.9% | Apr 15, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in PivotX before 2.3.9 allow remote authenticated users to inject ar... |
| CVE-2014-2851 | — | — | 1.0% | Apr 14, 2014 | Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users... |
| CVE-2014-2739 | — | — | 1.6% | Apr 14, 2014 | The cma_req_handler function in drivers/infiniband/core/cma.c in the Linux kernel 3.14.x through 3.14.1 attempts to reso... |
| CVE-2014-2706 | — | — | 4.3% | Apr 14, 2014 | Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of ... |
| CVE-2014-0155 | — | — | 1.0% | Apr 14, 2014 | The ioapic_deliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not properly validate the kvm_i... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now