2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-9805 | MEDIUM | 5.5 | 1.4% | Mar 30, 2017 | ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafte... |
| CVE-2014-9804 | HIGH | 7.5 | 3.4% | Mar 30, 2017 | vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via vectors related to "too... |
| CVE-2014-3582 | — | — | 1.6% | Mar 29, 2017 | In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while g... |
| CVE-2014-6440 | — | — | 5.0% | Mar 28, 2017 | VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service. |
| CVE-2014-0229 | — | — | 1.6% | Mar 23, 2017 | Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check autho... |
| CVE-2014-9915 | — | — | 0.9% | Mar 23, 2017 | Off-by-one error in ImageMagick before 6.6.0-4 allows remote attackers to cause a denial of service (application crash) ... |
| CVE-2014-8731 | — | — | 11.8% | Mar 23, 2017 | PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialize... |
| CVE-2014-7279 | — | — | 11.7% | Mar 23, 2017 | The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equ... |
| CVE-2014-9840 | — | — | 1.2% | Mar 22, 2017 | ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file. |
| CVE-2014-9839 | — | — | 2.0% | Mar 22, 2017 | magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds acc... |
| CVE-2014-9838 | — | — | 1.2% | Mar 22, 2017 | magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash). |
| CVE-2014-9836 | — | — | 1.2% | Mar 22, 2017 | ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file. |
| CVE-2014-9835 | — | — | 1.2% | Mar 22, 2017 | Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file. |
| CVE-2014-9834 | — | — | 1.2% | Mar 22, 2017 | Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file. |
| CVE-2014-9833 | — | — | 1.2% | Mar 22, 2017 | Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file. |
| CVE-2014-9832 | — | — | 1.2% | Mar 22, 2017 | Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file. |
| CVE-2014-9939 | — | — | 2.3% | Mar 21, 2017 | ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects. |
| CVE-2014-9851 | — | — | 3.6% | Mar 20, 2017 | ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash). |
| CVE-2014-9850 | — | — | 3.5% | Mar 20, 2017 | Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption). |
| CVE-2014-9849 | — | — | 3.5% | Mar 20, 2017 | The png coder in ImageMagick allows remote attackers to cause a denial of service (crash). |
| CVE-2014-9848 | HIGH | 7.5 | 3.7% | Mar 20, 2017 | Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption). |
| CVE-2014-9847 | — | — | 4.5% | Mar 20, 2017 | The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact. |
| CVE-2014-9846 | — | — | 4.8% | Mar 20, 2017 | Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unsp... |
| CVE-2014-9845 | — | — | 2.0% | Mar 20, 2017 | The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) vi... |
| CVE-2014-9844 | — | — | 2.1% | Mar 20, 2017 | The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (o... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now