2014 CVE Vulnerabilities

9,002 CVEs published in 2014.

CVE IDSeverityCVSSDescription
CVE-2014-9639Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a craf...
CVE-2014-9638oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a...
CVE-2014-9623OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storag...
CVE-2014-8802The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-regist...
CVE-2014-7948The AppCacheUpdateJob::URLFetcher::OnResponseStarted function in content/browser/appcache/appcache_update_job.cc in Goog...
CVE-2014-7947OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial...
CVE-2014-7946The RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink, as used in Google Chrom...
CVE-2014-7945OpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial...
CVE-2014-7944The sycc422_to_rgb function in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 40.0.2214.9...
CVE-2014-7943Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds ...
CVE-2014-7942The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which all...
CVE-2014-7941The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome bef...
CVE-2014-7940The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 29312...
CVE-2014-7939Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the...
CVE-2014-7938The Fonts implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service (memo...
CVE-2014-7937Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.9...
CVE-2014-7936Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/location_bar/zoom_bubble_view.cc ...
CVE-2014-7935Use-after-free vulnerability in browser/speech/tts_message_filter.cc in the Speech implementation in Google Chrome befor...
CVE-2014-7934Use-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows re...
CVE-2014-7933Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as ...
CVE-2014-7932Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink,...
CVE-2014-7931factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of serv...
CVE-2014-7930Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Goo...
CVE-2014-7929Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp ...
CVE-2014-7928hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which a...

Check if your code is affected by 2014 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now