2014 CVE Vulnerabilities
9,002 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-1646 | — | — | 0.7% | Apr 23, 2014 | Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly ... |
| CVE-2014-0892 | — | — | 4.1% | Apr 23, 2014 | IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc opt... |
| CVE-2014-2983 | — | — | 1.6% | Apr 23, 2014 | Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which... |
| CVE-2014-2976 | — | — | 3.7% | Apr 23, 2014 | Directory traversal vulnerability in Sixnet SixView Manager 2.4.1 allows remote attackers to read arbitrary files via a ... |
| CVE-2014-2894 | — | — | 0.4% | Apr 23, 2014 | Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users... |
| CVE-2014-2893 | — | — | 0.4% | Apr 23, 2014 | The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive inf... |
| CVE-2014-2888 | — | — | 2.2% | Apr 23, 2014 | lib/sfpagent/bsig.rb in the sfpagent gem before 0.4.15 for Ruby allows remote attackers to execute arbitrary commands vi... |
| CVE-2014-2855 | — | — | 4.1% | Apr 23, 2014 | The check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of serv... |
| CVE-2014-2709 | — | — | 4.9% | Apr 23, 2014 | lib/rrd.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to execute arbitrary commands via shell metacha... |
| CVE-2014-2554 | — | — | 1.5% | Apr 23, 2014 | OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking at... |
| CVE-2014-2328 | — | — | 3.5% | Apr 23, 2014 | lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary command... |
| CVE-2014-2327 | — | — | 2.3% | Apr 23, 2014 | Cross-site request forgery (CSRF) vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to hijack t... |
| CVE-2014-0474 | — | — | 4.8% | Apr 23, 2014 | The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.... |
| CVE-2014-0473 | — | — | 2.0% | Apr 23, 2014 | The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuse... |
| CVE-2014-0472 | — | — | 5.6% | Apr 23, 2014 | The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x... |
| CVE-2014-2154 | — | — | 1.8% | Apr 23, 2014 | Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to ... |
| CVE-2014-1648 | — | — | 2.1% | Apr 23, 2014 | Cross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management cons... |
| CVE-2014-1322 | — | — | 1.1% | Apr 23, 2014 | The kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure accessible from user s... |
| CVE-2014-1320 | — | — | 0.4% | Apr 23, 2014 | IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an obj... |
| CVE-2014-1321 | — | — | 0.3% | Apr 23, 2014 | Power Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to bypass an intended transit... |
| CVE-2014-1319 | — | — | 1.9% | Apr 23, 2014 | Buffer overflow in ImageIO in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or caus... |
| CVE-2014-1316 | — | — | 1.1% | Apr 23, 2014 | Heimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of service (abort and daemon ex... |
| CVE-2014-1318 | — | — | 2.1% | Apr 23, 2014 | The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer, which allows attack... |
| CVE-2014-1314 | — | — | 3.1% | Apr 23, 2014 | WindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed application, which allows att... |
| CVE-2014-1315 | — | — | 1.8% | Apr 23, 2014 | Format string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execut... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now