2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-4678 | CRITICAL | 9.8 | 5.1% | Feb 20, 2020 | The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers... |
| CVE-2014-4660 | MEDIUM | 5.5 | 0.4% | Feb 20, 2020 | Ansible before 1.5.5 constructs filenames containing user and password fields on the basis of deb lines in sources.list,... |
| CVE-2014-9617 | MEDIUM | 6.1 | 8.0% | Feb 19, 2020 | Open redirect vulnerability in remotereporter/load_logfiles.php in Netsweeper before 4.0.5 allows remote attackers to re... |
| CVE-2014-9615 | MEDIUM | 6.1 | 3.7% | Feb 19, 2020 | Cross-site scripting (XSS) vulnerability in Netsweeper 4.0.4 allows remote attackers to inject arbitrary web script or H... |
| CVE-2014-9614 | CRITICAL | 9.8 | 66.6% | Feb 19, 2020 | The Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding account, which makes it eas... |
| CVE-2014-9613 | CRITICAL | 9.8 | 4.1% | Feb 19, 2020 | Multiple SQL injection vulnerabilities in Netsweeper before 2.6.29.10 allow remote attackers to execute arbitrary SQL co... |
| CVE-2014-9612 | CRITICAL | 9.8 | 4.9% | Feb 19, 2020 | SQL injection vulnerability in remotereporter/load_logfiles.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1... |
| CVE-2014-9609 | MEDIUM | 5.3 | 10.6% | Feb 19, 2020 | Directory traversal vulnerability in webadmin/reporter/view_server_log.php in Netsweeper before 3.1.10, 4.0.x before 4.0... |
| CVE-2014-9608 | MEDIUM | 6.1 | 3.9% | Feb 19, 2020 | Cross-site scripting (XSS) vulnerability in webadmin/policy/group_table_ajax.php/ in Netsweeper before 3.1.10, 4.0.x bef... |
| CVE-2014-9607 | MEDIUM | 6.1 | 5.5% | Feb 19, 2020 | Cross-site scripting (XSS) vulnerability in remotereporter/load_logfiles.php in Netsweeper 4.0.3 and 4.0.4 allows remote... |
| CVE-2014-9606 | MEDIUM | 6.1 | 4.3% | Feb 19, 2020 | Multiple cross-site scripting (XSS) vulnerabilities in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.... |
| CVE-2014-2727 | CRITICAL | 9.8 | 1.9% | Feb 19, 2020 | The STARTTLS implementation in MailMarshal before 7.2 allows plaintext command injection. |
| CVE-2014-2228 | CRITICAL | 9.8 | 3.2% | Feb 19, 2020 | The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe dese... |
| CVE-2014-3622 | CRITICAL | 9.8 | 3.1% | Feb 19, 2020 | Use-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6.x before 5.6.1 might a... |
| CVE-2014-3879 | CRITICAL | 9.8 | 2.7% | Feb 18, 2020 | OpenPAM Nummularia 9.2 through 10.0 does not properly handle the error reported when an include directive refers to a po... |
| CVE-2014-4967 | CRITICAL | 9.8 | 3.4% | Feb 18, 2020 | Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by ... |
| CVE-2014-4966 | CRITICAL | 9.8 | 3.4% | Feb 18, 2020 | Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data... |
| CVE-2014-4651 | CRITICAL | 9.8 | 2.1% | Feb 18, 2020 | It was found that the jclouds scriptbuilder Statements class wrote a temporary file to a predictable location. An attack... |
| CVE-2014-8089 | CRITICAL | 9.8 | 2.5% | Feb 17, 2020 | SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the ... |
| CVE-2014-7236 | CRITICAL | 9.1 | 55.6% | Feb 17, 2020 | Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary ... |
| CVE-2014-4981 | CRITICAL | 9.8 | 6.2% | Feb 17, 2020 | LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization... |
| CVE-2014-1947 | HIGH | 7.8 | 6.9% | Feb 17, 2020 | Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote... |
| CVE-2014-9404 | — | — | — | Feb 17, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-5005. Reason: This candidate is a reservation du... |
| CVE-2014-1617 | MEDIUM | 6.5 | 1.0% | Feb 13, 2020 | Microsys PROMOTIC 8.2.13 contains an ActiveX Control Start Buffer Overflow vulnerability which can lead to denial of ser... |
| CVE-2014-3208 | HIGH | 7.5 | 1.5% | Feb 13, 2020 | A Denial of Service vulnerability exists in askpop3d 0.7.7 in free (pszQuery), |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now