2014 CVE Vulnerabilities
9,011 CVEs published in 2014.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2014-1004 | — | — | — | Jan 10, 2015 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9456. Reason: This candidate is not authorized... |
| CVE-2014-9585 | — | — | 0.6% | Jan 9, 2015 | The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locatio... |
| CVE-2014-9584 | — | — | 0.5% | Jan 9, 2015 | The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a le... |
| CVE-2014-9529 | — | — | 0.3% | Jan 9, 2015 | Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local ... |
| CVE-2014-9510 | — | — | 1.0% | Jan 9, 2015 | Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL-WR840N (V1) router with firm... |
| CVE-2014-9505 | — | — | 1.0% | Jan 9, 2015 | Cross-site scripting (XSS) vulnerability in the School Administration module 7.x-1.x before 7.x-1.8 for Drupal allows re... |
| CVE-2014-9501 | — | — | 0.9% | Jan 9, 2015 | Cross-site scripting (XSS) vulnerability in the Poll Chart Block module 7.x-1.x before 7.x-1.2 for Drupal allows remote ... |
| CVE-2014-9500 | — | — | 1.2% | Jan 9, 2015 | Cross-site scripting (XSS) vulnerability in the Moip module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to... |
| CVE-2014-9499 | — | — | 0.9% | Jan 9, 2015 | Cross-site scripting (XSS) vulnerability in the Godwin's Law module before 7.x-1.1 for Drupal, when using the dblog modu... |
| CVE-2014-9498 | — | — | 0.9% | Jan 9, 2015 | Cross-site scripting (XSS) vulnerability in the Webform Invitation module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-... |
| CVE-2014-9272 | — | — | 2.0% | Jan 9, 2015 | The string_insert_href function in MantisBT 1.2.0a1 through 1.2.x before 1.2.18 does not properly validate the URL proto... |
| CVE-2014-9271 | MEDIUM | 5.4 | 1.5% | Jan 9, 2015 | Cross-site scripting (XSS) vulnerability in file_download.php in MantisBT before 1.2.18 allows remote authenticated user... |
| CVE-2014-9269 | — | — | 2.0% | Jan 9, 2015 | Cross-site scripting (XSS) vulnerability in helper_api.php in MantisBT 1.1.0a1 through 1.2.x before 1.2.18, when Extende... |
| CVE-2014-8275 | — | — | 16.5% | Jan 9, 2015 | OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate... |
| CVE-2014-8033 | — | — | 1.4% | Jan 9, 2015 | The play/modules component in Cisco WebEx Meetings Server allows remote attackers to obtain administrator access via cra... |
| CVE-2014-8032 | — | — | 1.1% | Jan 9, 2015 | The OutlookAction LI in Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive encrypted-pass... |
| CVE-2014-8031 | — | — | 0.6% | Jan 9, 2015 | Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server allows remote attackers to hijack the aut... |
| CVE-2014-8030 | — | — | 1.2% | Jan 9, 2015 | Cross-site scripting (XSS) vulnerability in sendPwMail.do in Cisco WebEx Meetings Server allows remote attackers to inje... |
| CVE-2014-8029 | — | — | 1.2% | Jan 9, 2015 | Open redirect vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to ... |
| CVE-2014-8028 | — | — | 1.2% | Jan 9, 2015 | Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Secure Access Control System (ACS) all... |
| CVE-2014-8027 | — | — | 1.6% | Jan 9, 2015 | The RBAC component in Cisco Secure Access Control System (ACS) allows remote authenticated users to obtain Network Devic... |
| CVE-2014-3572 | — | — | 6.6% | Jan 9, 2015 | The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k ... |
| CVE-2014-3571 | — | — | 23.0% | Jan 9, 2015 | OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of servic... |
| CVE-2014-3570 | — | — | 21.3% | Jan 9, 2015 | The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calc... |
| CVE-2014-9583 | — | — | 80.7% | Jan 8, 2015 | common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC... |
Check if your code is affected by 2014 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now