2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-9760 | MEDIUM | 6.1 | 1.2% | Feb 13, 2017 | Cross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers ... |
| CVE-2014-9914 | HIGH | 7.8 | 0.3% | Feb 7, 2017 | Race condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows l... |
| CVE-2014-9772 | — | — | 2.6% | Jan 23, 2017 | The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter v... |
| CVE-2014-8362 | — | — | 3.3% | Jan 23, 2017 | Vivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm system and modify other secu... |
| CVE-2014-9755 | — | — | 3.6% | Jan 20, 2017 | The hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does not validate the remot... |
| CVE-2014-9754 | — | — | 1.7% | Jan 20, 2017 | The hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does not validate the remot... |
| CVE-2014-2045 | — | — | 4.5% | Jan 20, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 30... |
| CVE-2014-9913 | — | — | 1.5% | Jan 18, 2017 | Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of ... |
| CVE-2014-9910 | — | — | 0.5% | Jan 18, 2017 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execu... |
| CVE-2014-9909 | — | — | 0.5% | Jan 18, 2017 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execu... |
| CVE-2014-9912 | — | — | 4.9% | Jan 4, 2017 | The get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c in PHP before 5.3.29, 5.4.x before 5.4.30, a... |
| CVE-2014-9911 | — | — | 5.4% | Jan 4, 2017 | Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components... |
| CVE-2014-8241 | — | — | 3.1% | Dec 14, 2016 | XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging fail... |
| CVE-2014-9299 | — | — | — | Dec 6, 2016 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-8870. Reason: This candidate is a duplicate of... |
| CVE-2014-5415 | CRITICAL | 9.1 | 4.3% | Oct 5, 2016 | Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow r... |
| CVE-2014-5414 | CRITICAL | 9.1 | 4.8% | Oct 5, 2016 | Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components do not restri... |
| CVE-2014-2146 | — | — | 1.3% | Sep 22, 2016 | The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earl... |
| CVE-2014-9906 | — | — | 6.0% | Aug 19, 2016 | Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or... |
| CVE-2014-9410 | CRITICAL | 9.8 | 1.3% | Aug 7, 2016 | The vfe31_proc_general function in drivers/media/video/msm/vfe/msm_vfe31.c in the MSM-VFE31 driver for the Linux kernel ... |
| CVE-2014-9900 | — | — | 0.5% | Aug 6, 2016 | The ethtool_get_wol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05... |
| CVE-2014-9899 | — | — | 0.5% | Aug 6, 2016 | drivers/usb/host/ehci-msm2.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices omits certain mi... |
| CVE-2014-9898 | — | — | 0.5% | Aug 6, 2016 | arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (201... |
| CVE-2014-9897 | — | — | 0.5% | Aug 6, 2016 | sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does n... |
| CVE-2014-9896 | — | — | 0.5% | Aug 6, 2016 | drivers/char/adsprpc.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not ... |
| CVE-2014-9895 | — | — | 0.7% | Aug 6, 2016 | drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 (201... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now