2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-8944 | MEDIUM | 5.4 | 0.5% | Jun 1, 2020 | Lexiglot through 2014-11-20 allows XSS (Reflected) via the username, or XSS (Stored) via the admin.php?page=config insta... |
| CVE-2014-8943 | HIGH | 8.8 | 1.0% | Jun 1, 2020 | Lexiglot through 2014-11-20 allows SSRF via the admin.php?page=projects svn_url parameter. |
| CVE-2014-8942 | HIGH | 8.8 | 0.5% | Jun 1, 2020 | Lexiglot through 2014-11-20 allows CSRF. |
| CVE-2014-8941 | CRITICAL | 9.8 | 1.1% | Jun 1, 2020 | Lexiglot through 2014-11-20 allows SQL injection via an admin.php?page=users&from_id= or admin.php?page=history&limit= U... |
| CVE-2014-8940 | MEDIUM | 5.3 | 1.1% | Jun 1, 2020 | Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information (names and details of projects) by v... |
| CVE-2014-8939 | MEDIUM | 5.3 | 1.4% | Jun 1, 2020 | Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information (full path) via an include/smarty/pl... |
| CVE-2014-8938 | HIGH | 7.8 | 0.3% | Jun 1, 2020 | Lexiglot through 2014-11-20 allows local users to obtain sensitive information by listing a process because the username... |
| CVE-2014-8937 | HIGH | 7.5 | 1.1% | Jun 1, 2020 | Lexiglot through 2014-11-20 allows denial of service because api/update.php launches svn update operations that use a gr... |
| CVE-2014-7175 | CRITICAL | 9.8 | 1.3% | Jun 1, 2020 | FarLinX X25 Gateway through 2014-09-25 allows attackers to write arbitrary data to fsUI.xyz via fsSaveUIPersistence.php. |
| CVE-2014-7174 | MEDIUM | 5.3 | 1.3% | Jun 1, 2020 | FarLinX X25 Gateway through 2014-09-25 allows directory traversal via the log-handling feature. |
| CVE-2014-7173 | CRITICAL | 9.8 | 2.5% | Jun 1, 2020 | FarLinX X25 Gateway through 2014-09-25 allows command injection via shell metacharacters to sysSaveMonitorData.php, fsx2... |
| CVE-2014-1423 | MEDIUM | 5.5 | 0.8% | May 7, 2020 | signond before 8.57+15.04.20141127.1-0ubuntu1, as used in Ubuntu Touch, did not properly restrict applications from quer... |
| CVE-2014-2723 | HIGH | 8.8 | 1.7% | Mar 19, 2020 | In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may ... |
| CVE-2014-2722 | HIGH | 8.8 | 1.7% | Mar 19, 2020 | In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may ... |
| CVE-2014-2721 | HIGH | 8.8 | 2.3% | Mar 19, 2020 | In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may ... |
| CVE-2014-1634 | CRITICAL | 9.8 | 1.4% | Mar 9, 2020 | SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subsc... |
| CVE-2014-7914 | HIGH | 8.1 | 0.5% | Feb 21, 2020 | btif/src/btif_dm.c in Android before 5.1 does not properly enforce the temporary nature of a Bluetooth pairing, which al... |
| CVE-2014-3557 | — | — | — | Feb 20, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2014-4019 | HIGH | 7.5 | 12.4% | Feb 20, 2020 | ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient... |
| CVE-2014-4650 | CRITICAL | 9.8 | 24.1% | Feb 20, 2020 | The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path ... |
| CVE-2014-7951 | MEDIUM | 4.6 | 1.1% | Feb 20, 2020 | Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate att... |
| CVE-2014-4659 | MEDIUM | 5.5 | 0.4% | Feb 20, 2020 | Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credentia... |
| CVE-2014-4658 | MEDIUM | 5.5 | 0.4% | Feb 20, 2020 | The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, whic... |
| CVE-2014-4657 | CRITICAL | 9.8 | 4.3% | Feb 20, 2020 | The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers... |
| CVE-2014-3484 | CRITICAL | 9.8 | 2.1% | Feb 20, 2020 | Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 ... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now