2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-9616 | — | — | 2.4% | Sep 19, 2017 | Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to obtain sensitive informa... |
| CVE-2014-9611 | — | — | 12.7% | Sep 19, 2017 | Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via ... |
| CVE-2014-9610 | — | — | 3.7% | Sep 19, 2017 | Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication an... |
| CVE-2014-8174 | — | — | 3.0% | Sep 19, 2017 | eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files. |
| CVE-2014-6191 | — | — | 0.6% | Sep 19, 2017 | Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2, 6.0.4, and 6.0.5 allows remote ... |
| CVE-2014-5362 | — | — | 3.2% | Sep 19, 2017 | The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file inclusion... |
| CVE-2014-6106 | — | — | 0.9% | Sep 18, 2017 | Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1, 6.0, and 7.0 allows remote attacke... |
| CVE-2014-9463 | — | — | 14.8% | Sep 15, 2017 | functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code v... |
| CVE-2014-7808 | HIGH | 7.5 | 1.1% | Sep 15, 2017 | Apache Wicket before 1.5.13, 6.x before 6.19.0, and 7.x before 7.0.0-M5 make it easier for attackers to defeat a cryptog... |
| CVE-2014-9635 | — | — | 2.7% | Sep 12, 2017 | Jenkins before 1.586 does not set the HttpOnly flag in a Set-Cookie header for session cookies when run on Tomcat 7.0.41... |
| CVE-2014-9634 | — | — | 2.7% | Sep 12, 2017 | Jenkins before 1.586 does not set the secure flag on session cookies when run on Tomcat 7.0.41 or later, which makes it ... |
| CVE-2014-9624 | — | — | 3.0% | Sep 12, 2017 | CAPTCHA bypass vulnerability in MantisBT before 1.2.19. |
| CVE-2014-9565 | — | — | 0.6% | Sep 7, 2017 | Cross-site request forgery (CSRF) vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switc... |
| CVE-2014-6438 | — | — | 4.1% | Sep 6, 2017 | The URI.decode_www_form_component method in Ruby before 1.9.2-p330 allows remote attackers to cause a denial of service ... |
| CVE-2014-8677 | — | — | 3.5% | Aug 31, 2017 | The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and... |
| CVE-2014-8676 | — | — | 40.8% | Aug 31, 2017 | Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attacke... |
| CVE-2014-8675 | — | — | 12.5% | Aug 31, 2017 | Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which all... |
| CVE-2014-9497 | — | — | 2.3% | Aug 29, 2017 | Buffer overflow in mpg123 before 1.18.0. |
| CVE-2014-8872 | — | — | 1.5% | Aug 29, 2017 | Improper Verification of Cryptographic Signature in AVM FRITZ!Box 6810 LTE after firmware 5.22, FRITZ!Box 6840 LTE after... |
| CVE-2014-8393 | — | — | 8.3% | Aug 29, 2017 | DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel... |
| CVE-2014-8163 | — | — | 1.5% | Aug 28, 2017 | Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5. |
| CVE-2014-9558 | — | — | 3.7% | Aug 28, 2017 | Multiple SQL injection vulnerabilities in SmartCMS v.2. |
| CVE-2014-9557 | MEDIUM | 6.1 | 1.0% | Aug 28, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in SmartCMS v.2. |
| CVE-2014-9514 | — | — | 0.8% | Aug 28, 2017 | Cross-site scripting (XSS) vulnerability in BMC Footprints Service Core 11.5. |
| CVE-2014-9513 | — | — | 3.7% | Aug 28, 2017 | Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code. |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now