2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-2225 | HIGH | 8.8 | 1.3% | Feb 8, 2020 | Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remo... |
| CVE-2014-5468 | HIGH | 8.8 | 52.6% | Feb 7, 2020 | A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cf... |
| CVE-2014-5288 | HIGH | 8.8 | 1.6% | Feb 7, 2020 | A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages. |
| CVE-2014-7224 | HIGH | 8.8 | 2.0% | Feb 7, 2020 | A Code Execution vulnerability exists in Android prior to 4.4.0 related to the addJavascriptInterface method and the acc... |
| CVE-2014-2030 | HIGH | 8.8 | 11.1% | Feb 6, 2020 | Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remot... |
| CVE-2014-1958 | HIGH | 8.8 | 3.5% | Feb 6, 2020 | Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attacke... |
| CVE-2014-8141 | HIGH | 7.8 | 7.4% | Jan 31, 2020 | Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to exe... |
| CVE-2014-8321 | HIGH | 7.8 | 0.8% | Jan 31, 2020 | Stack-based buffer overflow in the gps_tracker function in airodump-ng.c in Aircrack-ng before 1.2 RC 1 allows local use... |
| CVE-2014-8140 | HIGH | 7.8 | 7.4% | Jan 31, 2020 | Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to ex... |
| CVE-2014-8139 | HIGH | 7.8 | 7.4% | Jan 31, 2020 | Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execut... |
| CVE-2014-8126 | HIGH | 8.8 | 3.1% | Jan 31, 2020 | The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code. |
| CVE-2014-5236 | HIGH | 7.5 | 3.8% | Jan 31, 2020 | Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 a... |
| CVE-2014-3868 | HIGH | 8.8 | 2.5% | Jan 31, 2020 | Multiple SQL injection vulnerabilities in ZeusCart 4.x. |
| CVE-2014-3119 | HIGH | 8.8 | 1.7% | Jan 31, 2020 | Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitr... |
| CVE-2014-3856 | HIGH | 7 | 0.3% | Jan 28, 2020 | The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows ... |
| CVE-2014-2906 | HIGH | 7 | 0.3% | Jan 28, 2020 | The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary files, which allows lo... |
| CVE-2014-2581 | HIGH | 7.5 | 2.6% | Jan 28, 2020 | Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Addition... |
| CVE-2014-8742 | HIGH | 7.5 | 4.4% | Jan 27, 2020 | Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allow... |
| CVE-2014-7303 | HIGH | 7.8 | 0.7% | Jan 27, 2020 | SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain pas... |
| CVE-2014-7302 | HIGH | 7.8 | 0.6% | Jan 27, 2020 | SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to change the... |
| CVE-2014-3979 | HIGH | 7.5 | 2.5% | Jan 27, 2020 | Bytemark Symbiosis allows remote attackers to cause a denial of service via a crafted username, which triggers the firew... |
| CVE-2014-9630 | HIGH | 7.8 | 1.5% | Jan 24, 2020 | The rtp_packetize_xiph_config function in modules/stream_out/rtpfmt.c in VideoLAN VLC media player before 2.1.6 uses a s... |
| CVE-2014-9629 | HIGH | 7.8 | 2.4% | Jan 24, 2020 | Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2.... |
| CVE-2014-9628 | HIGH | 7.8 | 2.2% | Jan 24, 2020 | The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote at... |
| CVE-2014-9627 | HIGH | 7.8 | 1.1% | Jan 24, 2020 | The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an inco... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now