2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-0245 | MEDIUM | 5.9 | 1.0% | Jan 2, 2020 | It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For ... |
| CVE-2014-0183 | MEDIUM | 6.1 | 0.7% | Jan 2, 2020 | Versions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a XSS via HTML in the syste... |
| CVE-2014-0169 | MEDIUM | 6.5 | 0.8% | Jan 2, 2020 | In JBoss EAP 6 a security domain is configured to use a cache that is shared between all applications that are in the se... |
| CVE-2014-4553 | MEDIUM | 6.1 | 1.2% | Jan 2, 2020 | Cross-site Scripting (XSS) in the spreadshirt-rss-3d-cube-flash-gallery plugin 2014 for WordPress allows remote attacker... |
| CVE-2014-0161 | MEDIUM | 5.9 | 0.4% | Jan 2, 2020 | ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of the remote endpoint matches the ... |
| CVE-2014-0104 | MEDIUM | 5.9 | 0.8% | Jan 2, 2020 | In fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py script which can potenti... |
| CVE-2014-6420 | MEDIUM | 6.1 | 1.8% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in Livefyre LiveComments 3.0 allows remote attackers to inject arbitrary web sc... |
| CVE-2014-4550 | MEDIUM | 6.1 | 3.9% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier... |
| CVE-2014-4536 | MEDIUM | 6.1 | 3.9% | Dec 27, 2019 | Multiple cross-site scripting (XSS) vulnerabilities in tests/notAuto_test_ContactService_pauseCampaign.php in the Infusi... |
| CVE-2014-4535 | MEDIUM | 6.1 | 4.0% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote a... |
| CVE-2014-4567 | MEDIUM | 6.1 | 1.2% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video Comments Webcam Recorder pl... |
| CVE-2014-4558 | MEDIUM | 6.1 | 4.1% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earli... |
| CVE-2014-4548 | MEDIUM | 6.1 | 1.2% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress ... |
| CVE-2014-4544 | MEDIUM | 6.1 | 3.8% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote att... |
| CVE-2014-4539 | MEDIUM | 6.1 | 4.0% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to i... |
| CVE-2014-4592 | MEDIUM | 6.1 | 3.9% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in rss.class/scripts/magpie_debug.php in the WP-Planet plugin 0.1 and earlier f... |
| CVE-2014-4519 | MEDIUM | 6.1 | 1.2% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in the Conversador plugin 2.61 and earlier for WordPress allows remote attacker... |
| CVE-2014-4559 | MEDIUM | 6.1 | 1.2% | Dec 27, 2019 | Multiple cross-site scripting (XSS) vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.... |
| CVE-2014-4525 | MEDIUM | 6.1 | 1.2% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the Ebay Feeds for WordPress plugin 1.... |
| CVE-2014-4523 | MEDIUM | 6.1 | 1.2% | Dec 27, 2019 | Cross-site scripting (XSS) vulnerability in the Easy Career Openings plugin 0.4 and earlier for WordPress allows remote ... |
| CVE-2014-8178 | MEDIUM | 5.5 | 0.5% | Dec 17, 2019 | Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image ... |
| CVE-2014-8561 | MEDIUM | 6.5 | 2.2% | Dec 15, 2019 | imagemagick 6.8.9.6 has remote DOS via infinite loop |
| CVE-2014-4913 | MEDIUM | 6.1 | 1.2% | Dec 15, 2019 | ZF2014-03 has a potential cross site scripting vector in multiple view helpers |
| CVE-2014-3652 | MEDIUM | 6.1 | 0.7% | Dec 15, 2019 | JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL. |
| CVE-2014-3536 | MEDIUM | 5.5 | 0.3% | Dec 15, 2019 | CFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during registration |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now