2014 CVE Vulnerabilities
9,002 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-4259 | — | — | 2.4% | Jan 21, 2015 | Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.1 allows remot... |
| CVE-2014-0191 | — | — | 8.1% | Jan 21, 2015 | The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Serv... |
| CVE-2014-9494 | — | — | 1.4% | Jan 20, 2015 | RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For he... |
| CVE-2014-9491 | — | — | 2.7% | Jan 20, 2015 | The devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers ... |
| CVE-2014-9490 | — | — | 2.4% | Jan 20, 2015 | The numtok function in lib/raven/okjson.rb in the raven-ruby gem before 0.12.2 for Ruby allows remote attackers to cause... |
| CVE-2014-9330 | — | — | 4.2% | Jan 20, 2015 | Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of service (cra... |
| CVE-2014-8790 | — | — | 2.5% | Jan 20, 2015 | XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when ... |
| CVE-2014-8625 | — | — | 3.3% | Jan 20, 2015 | Multiple format string vulnerabilities in the parse_error_msg function in parsehelp.c in dpkg before 1.17.22 allow remot... |
| CVE-2014-8386 | — | — | 5.9% | Jan 20, 2015 | Multiple stack-based buffer overflows in Advantech AdamView 4.3 and earlier allow remote attackers to execute arbitrary ... |
| CVE-2014-7865 | — | — | — | Jan 18, 2015 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its reque... |
| CVE-2014-6197 | — | — | 1.4% | Jan 17, 2015 | IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allows remote attackers ... |
| CVE-2014-4835 | — | — | 0.3% | Jan 17, 2015 | IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 ... |
| CVE-2014-3032 | — | — | 0.8% | Jan 17, 2015 | Cross-site scripting (XSS) vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus 7.3.0 before 7.3.0.6, 7.3.1 before... |
| CVE-2014-3019 | — | — | 1.0% | Jan 17, 2015 | IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attacker... |
| CVE-2014-3018 | — | — | 1.3% | Jan 17, 2015 | IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attacker... |
| CVE-2014-9199 | — | — | 2.6% | Jan 17, 2015 | The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the ... |
| CVE-2014-9195 | — | — | 81.1% | Jan 17, 2015 | Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary... |
| CVE-2014-9194 | — | — | 1.0% | Jan 17, 2015 | Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service (disruption) via crafted radio t... |
| CVE-2014-8143 | — | — | 4.3% | Jan 17, 2015 | Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD ... |
| CVE-2014-5419 | — | — | 2.4% | Jan 17, 2015 | GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and... |
| CVE-2014-5418 | — | — | 3.2% | Jan 17, 2015 | GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and... |
| CVE-2014-2355 | — | — | 0.6% | Jan 17, 2015 | The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to ... |
| CVE-2014-9604 | — | — | 2.4% | Jan 16, 2015 | libavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a zero value of a slice height, which allows remote at... |
| CVE-2014-9603 | — | — | 2.0% | Jan 16, 2015 | The vmd_decode function in libavcodec/vmdvideo.c in FFmpeg before 2.5.2 does not validate the relationship between a cer... |
| CVE-2014-9602 | — | — | 2.0% | Jan 16, 2015 | libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions that do not satisfy a re... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now