2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-9749 | — | — | 11.4% | Nov 6, 2015 | Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated use... |
| CVE-2014-8912 | — | — | 2.1% | Oct 28, 2015 | IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8... |
| CVE-2014-8242 | — | — | 2.9% | Oct 26, 2015 | librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modif... |
| CVE-2014-6451 | — | — | 1.9% | Oct 16, 2015 | J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of se... |
| CVE-2014-6450 | — | — | 1.9% | Oct 16, 2015 | Juniper Junos OS before 11.4R12-S4, 12.1X44 before 12.1X44-D41, 12.1X46 before 12.1X46-D26, 12.1X47 before 12.1X47-D11/D... |
| CVE-2014-6449 | — | — | 1.7% | Oct 16, 2015 | Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X4... |
| CVE-2014-9751 | — | — | 4.5% | Oct 6, 2015 | The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly deter... |
| CVE-2014-9750 | — | — | 6.2% | Oct 6, 2015 | ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obtai... |
| CVE-2014-9298 | — | — | — | Oct 6, 2015 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9750, CVE-2014-9751. Reason: this ID was inten... |
| CVE-2014-9297 | — | — | — | Oct 6, 2015 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9750, CVE-2014-9751. Reason: this ID was inten... |
| CVE-2014-8916 | — | — | 0.8% | Oct 3, 2015 | Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 bef... |
| CVE-2014-7917 | — | — | 0.6% | Oct 1, 2015 | Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors,... |
| CVE-2014-7916 | — | — | 0.6% | Oct 1, 2015 | Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors,... |
| CVE-2014-7915 | — | — | 0.6% | Oct 1, 2015 | Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors,... |
| CVE-2014-9202 | — | — | 0.8% | Sep 28, 2015 | Multiple stack-based buffer overflows in an unspecified DLL file in Advantech WebAccess before 8.0_20150816 allow remote... |
| CVE-2014-9229 | — | — | 1.7% | Sep 20, 2015 | Multiple SQL injection vulnerabilities in interface PHP scripts in the Manager component in Symantec Endpoint Protection... |
| CVE-2014-9228 | — | — | 0.4% | Sep 20, 2015 | sysplant.sys in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allows local users to cause a ... |
| CVE-2014-9227 | — | — | 0.4% | Sep 20, 2015 | Multiple untrusted search path vulnerabilities in the Manager component in Symantec Endpoint Protection (SEP) before 12.... |
| CVE-2014-8611 | — | — | 0.5% | Sep 18, 2015 | The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failu... |
| CVE-2014-8778 | — | — | 3.3% | Sep 16, 2015 | Checkmarx CxSAST (formerly CxSuite) before 7.1.8 allows remote authenticated users to bypass the CxQL sandbox protection... |
| CVE-2014-9745 | — | — | 3.7% | Sep 14, 2015 | The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of serv... |
| CVE-2014-7216 | — | — | 6.8% | Sep 11, 2015 | Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denia... |
| CVE-2014-9208 | — | — | 9.3% | Sep 11, 2015 | Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attacker... |
| CVE-2014-9605 | — | — | 3.9% | Sep 4, 2015 | WebUpgrade in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass aut... |
| CVE-2014-6616 | — | — | 1.9% | Aug 31, 2015 | Cross-site scripting (XSS) vulnerability in Softing FG-100 PROFIBUS Single Channel (FG-100-PB) with firmware FG-x00-PB_V... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now