2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-9843 | — | — | 3.9% | Mar 20, 2017 | The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact v... |
| CVE-2014-9842 | — | — | 3.5% | Mar 20, 2017 | Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a deni... |
| CVE-2014-9841 | — | — | 3.9% | Mar 20, 2017 | The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via... |
| CVE-2014-9938 | HIGH | 8.8 | 2.3% | Mar 20, 2017 | contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a mali... |
| CVE-2014-9854 | HIGH | 7.5 | 3.6% | Mar 17, 2017 | coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors relate... |
| CVE-2014-9853 | MEDIUM | 5.5 | 1.8% | Mar 17, 2017 | Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via... |
| CVE-2014-9852 | CRITICAL | 9.8 | 2.9% | Mar 17, 2017 | distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have ... |
| CVE-2014-8723 | — | — | 1.2% | Mar 17, 2017 | GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) plugins/anonymou... |
| CVE-2014-8722 | — | — | 14.4% | Mar 17, 2017 | GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<user... |
| CVE-2014-8708 | — | — | 3.0% | Mar 17, 2017 | Pluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature. |
| CVE-2014-8707 | — | — | 0.7% | Mar 17, 2017 | Cross-site scripting (XSS) vulnerability in TinyMCE in Pluck CMS 4.7.2 allows remote authenticated users to inject arbit... |
| CVE-2014-8706 | — | — | 1.1% | Mar 17, 2017 | Pluck CMS 4.7.2 allows remote attackers to obtain sensitive information by (1) changing "PHPSESSID" to an array; (2) add... |
| CVE-2014-8705 | — | — | 1.5% | Mar 17, 2017 | PHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote attackers to execute arbitra... |
| CVE-2014-8704 | — | — | 2.0% | Mar 17, 2017 | Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to include and execute arbitra... |
| CVE-2014-8703 | — | — | 0.8% | Mar 17, 2017 | Cross-site scripting (XSS) vulnerability in Wonder CMS 2014 allows remote attackers to inject arbitrary web script or HT... |
| CVE-2014-8702 | — | — | 1.4% | Mar 17, 2017 | Wonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the application with an array fo... |
| CVE-2014-8701 | — | — | 1.5% | Mar 17, 2017 | Wonder CMS 2014 allows remote attackers to obtain sensitive information by viewing /files/password, which reveals the un... |
| CVE-2014-9921 | — | — | 3.0% | Mar 14, 2017 | Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.... |
| CVE-2014-9920 | — | — | 1.0% | Mar 14, 2017 | Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 bef... |
| CVE-2014-8688 | HIGH | 7.5 | 1.3% | Mar 14, 2017 | An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat messages are available in c... |
| CVE-2014-3926 | — | — | 1.4% | Mar 13, 2017 | Cross-site scripting (XSS) vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web scri... |
| CVE-2014-9645 | — | — | 0.6% | Mar 12, 2017 | The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restriction... |
| CVE-2014-9916 | MEDIUM | 6.1 | 0.9% | Feb 24, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web sc... |
| CVE-2014-4677 | — | — | 0.6% | Feb 22, 2017 | The installPackage function in the installerHelper subcomponent in Libmacgpg in GPG Suite before 2015.06 allows local us... |
| CVE-2014-9905 | MEDIUM | 6.1 | 1.2% | Feb 17, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers to i... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now