2014 CVE Vulnerabilities
9,002 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-3271 | — | — | 2.0% | May 20, 2014 | The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device crash) via a malf... |
| CVE-2014-3270 | — | — | 2.0% | May 20, 2014 | The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (process hang) via a malf... |
| CVE-2014-3269 | — | — | 1.5% | May 20, 2014 | The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service (device reload) by p... |
| CVE-2014-3268 | — | — | 1.2% | May 20, 2014 | Cisco IOS 15.2(4)M4 on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service ... |
| CVE-2014-3265 | — | — | 1.4% | May 20, 2014 | Cross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco Security Manager 4.2 and... |
| CVE-2014-3264 | — | — | 1.2% | May 20, 2014 | Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial... |
| CVE-2014-2351 | — | — | 2.5% | May 20, 2014 | SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbi... |
| CVE-2014-2199 | — | — | 1.7% | May 20, 2014 | meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meeti... |
| CVE-2014-2195 | — | — | 1.2% | May 20, 2014 | Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Dir... |
| CVE-2014-2194 | — | — | 1.2% | May 20, 2014 | system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have ... |
| CVE-2014-2193 | — | — | 1.0% | May 20, 2014 | Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attacke... |
| CVE-2014-2192 | — | — | 1.1% | May 20, 2014 | Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attack... |
| CVE-2014-3787 | — | — | 1.4% | May 19, 2014 | SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) table... |
| CVE-2014-3735 | — | — | 1.1% | May 19, 2014 | ir41_32.ax 4.51.16.3 for Intel Indeo Video 4.5 allows remote attackers to cause a denial of service (crash) via a crafte... |
| CVE-2014-3717 | — | — | 0.4% | May 19, 2014 | Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read sys... |
| CVE-2014-3716 | — | — | 0.4% | May 19, 2014 | Xen 4.4.x does not properly check alignment, which allows local users to cause a denial of service (crash) via an unspec... |
| CVE-2014-3715 | — | — | 0.4% | May 19, 2014 | Buffer overflow in Xen 4.4.x allows local users to read system memory or cause a denial of service (crash) via a crafted... |
| CVE-2014-3714 | — | — | 0.4% | May 19, 2014 | The ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which allows local users to r... |
| CVE-2014-3411 | — | — | 4.2% | May 19, 2014 | Unspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote attackers to execute arbit... |
| CVE-2014-1402 | — | — | 0.4% | May 19, 2014 | The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary ... |
| CVE-2014-0012 | — | — | 0.4% | May 19, 2014 | FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain... |
| CVE-2014-1347 | — | — | 0.4% | May 18, 2014 | Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which al... |
| CVE-2014-3453 | — | — | 2.1% | May 17, 2014 | Eval injection vulnerability in the flag_import_form_validate function in includes/flag.export.inc in the Flag module 7.... |
| CVE-2014-2085 | — | — | — | May 17, 2014 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-2084. Reason: This issue was MERGED into CVE-201... |
| CVE-2014-2084 | — | — | 4.4% | May 17, 2014 | Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly re... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now