2014 CVEs (page 10)
Page 10 of 85 — CVEs published in 2014, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-9923 | High | 7.8 | 2017-06-06 | In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. |
CVE-2014-9983 | Medium | 5.5 | 2017-06-04 | Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote… |
CVE-2014-3527 | Critical | 9.8 | 2017-05-25 | When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another CAS Service into authenticating a… |
CVE-2014-0225 | High | 8.8 | 2017-05-25 | When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by… |
CVE-2014-0097 | High | 7.3 | 2017-05-25 | The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous… |
CVE-2014-9970 | High | 7.5 | 2017-05-21 | jasypt before 1.9.2 allows a timing attack against the password hash comparison. |
CVE-2014-9937 | High | 7.8 | 2017-05-16 | In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel. |
CVE-2014-9936 | High | 7.0 | 2017-05-16 | In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CAF using the Linux k… |
CVE-2014-9935 | High | 7.8 | 2017-05-16 | In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases from CAF using the… |
CVE-2014-9934 | High | 7.8 | 2017-05-16 | A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding. |
CVE-2014-9933 | High | 7.8 | 2017-05-16 | Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access. |
CVE-2014-9932 | High | 7.8 | 2017-05-16 | In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range… |
CVE-2014-9931 | High | 7.8 | 2017-05-16 | A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size customizati… |
CVE-2014-9940 | High | 7.0 | 2017-05-02 | The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or cause a denial of ser… |
CVE-2014-9680 | Low | 3.3 | 2017-04-24 | sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for re… |
CVE-2014-9654 | Critical | 9.8 | 2017-04-24 | The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calcul… |
CVE-2014-9907 | Medium | 6.5 | 2017-04-19 | coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file. |
CVE-2014-3887 | Medium | 5.4 | 2017-04-13 | Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary we… |
CVE-2014-7921 | Critical | 9.8 | 2017-04-13 | mediaserver in Android 4.0.3 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7920. |
CVE-2014-7920 | Critical | 9.8 | 2017-04-13 | mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921. |
CVE-2014-2710 | Medium | 6.1 | 2017-04-13 | Multiple cross-site scripting (XSS) vulnerabilities in Oliver (formerly Webshare) 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HT… |
CVE-2014-9837 | Medium | 6.5 | 2017-04-11 | coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service (crash) via a crafted png file. |
CVE-2014-8716 | Medium | 6.2 | 2017-04-11 | The JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service (out-of-bounds memory access and crash). |
CVE-2014-8562 | Medium | 5.5 | 2017-04-11 | DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read). |
CVE-2014-8355 | Medium | 5.5 | 2017-04-11 | PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read). |
CVE-2014-8354 | Medium | 6.5 | 2017-04-11 | The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted… |
CVE-2014-2960 | High | 7.5 | 2017-04-10 | Vision Critical before 2014-05-30 allows attackers to read arbitrary files via unspecified vectors, as demonstrated by image files and configuration files. |
CVE-2014-9829 | Medium | 6.5 | 2017-04-05 | coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted sun file. |
CVE-2014-9922 | High | 7.8 | 2017-04-04 | The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, rel… |
CVE-2014-3930 | High | 7.5 | 2017-04-03 | lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to obtain IP addresse… |
CVE-2014-3929 | High | 7.5 | 2017-04-03 | The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control, which might allow remote attackers to… |
CVE-2014-3928 | Critical | 9.8 | 2017-04-03 | Cougar-LG stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials. |
CVE-2014-3927 | Critical | 9.8 | 2017-04-03 | mrlg-lib.php in mrlg4php before 1.0.8 allows remote attackers to execute arbitrary shell code. |
CVE-2014-1677 | High | 7.5 | 2017-04-03 | Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information. |
CVE-2014-9696 | High | 8.8 | 2017-04-02 | The Hyper Module Management (HMM) software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions allows the operator to modify the user configur… |
CVE-2014-9695 | High | 8.8 | 2017-04-02 | The Hyper Module Management (HMM) software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesse… |
CVE-2014-9694 | High | 8.8 | 2017-04-02 | Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH226… |
CVE-2014-9693 | Critical | 9.8 | 2017-04-02 | Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH226… |
CVE-2014-9692 | High | 7.5 | 2017-04-02 | Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH226… |
CVE-2014-9691 | Medium | 6.5 | 2017-04-02 | Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH226… |
CVE-2014-9690 | High | 7.5 | 2017-04-02 | Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the PIN offline brute force cracking vulnerability of the WPS pro… |
CVE-2014-9137 | High | 8.8 | 2017-04-02 | Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with so… |
CVE-2014-9136 | High | 8.8 | 2017-04-02 | Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the… |
CVE-2014-8572 | High | 7.5 | 2017-04-02 | Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S… |
CVE-2014-8571 | Low | 3.3 | 2017-04-02 | Apps on Huawei Ascend P6 mobile phones with software EDGE-U00 V100R001C17B508SP01 and earlier versions before V100R001C17B508SP02; EDGE-T00 V100R001C01B508SP01… |
CVE-2014-8570 | Medium | 5.3 | 2017-04-02 | Huawei S9300, S9303, S9306, S9312 with software V100R002; S7700, S7703, S7706, S7712 with software V100R003, V100R006, V200R001, V200R002, V200R003, V200R005… |
CVE-2014-4707 | High | 8.8 | 2017-04-02 | Huawei Campus S7700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300; S9300 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C0… |
CVE-2014-4706 | High | 7.5 | 2017-04-02 | Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 with software V200R002C00SPC100; Campus S7700 with software V200R003C00SPC300,V200R003C00SP… |
CVE-2014-3224 | High | 7.5 | 2017-04-02 | Huawei Quidway S9700 V200R003C00SPC500, Quidway S9300 V200R003C00SPC500, Quidway S7700 V200R003C00SPC500, Quidway S6700 V200R003C00SPC300, Quidway S6300 V200R0… |
CVE-2014-3223 | High | 7.5 | 2017-04-02 | Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with software before V100R006SPH010 support Y.1731 and therefore have the Y.1731 v… |
CVE-2014-3222 | High | 7.0 | 2017-04-02 | In Huawei eSpace Meeting with software V100R001C03SPC201 and the earlier versions, attackers that obtain the permissions assigned to common users can elevate p… |
CVE-2014-3221 | High | 7.5 | 2017-04-02 | Huawei Eudemon8000E firewall with software V200R001C01SPC800 and earlier versions allows users to log in to the device using Telnet or SSH. When an attacker se… |
CVE-2014-9114 | High | 7.8 | 2017-03-31 | Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code. |
CVE-2014-5009 | Critical | 9.8 | 2017-03-31 | Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008. |
CVE-2014-5008 | Critical | 9.8 | 2017-03-31 | Snoopy allows remote attackers to execute arbitrary commands. |
CVE-2014-3931 | Critical | 9.8 | 2017-03-31 | fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption. |
CVE-2014-9826 | Critical | 9.8 | 2017-03-30 | ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files. |
CVE-2014-9825 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-98… |
CVE-2014-9824 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-98… |
CVE-2014-9823 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9… |
CVE-2014-9822 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file. |
CVE-2014-9821 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file. |
CVE-2014-9820 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file. |
CVE-2014-9819 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9… |
CVE-2014-9818 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file. |
CVE-2014-9817 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file. |
CVE-2014-9816 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file. |
CVE-2014-9815 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted wpg file. |
CVE-2014-9814 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted wpg file. |
CVE-2014-9813 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file. |
CVE-2014-9812 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ps file. |
CVE-2014-9811 | Medium | 5.5 | 2017-03-30 | The xwd file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a malformed xwd file. |
CVE-2014-9810 | Medium | 5.5 | 2017-03-30 | The dpx file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a malformed dpx file. |
CVE-2014-9809 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted xwd image. |
CVE-2014-9808 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted dpc image. |
CVE-2014-9807 | Medium | 5.5 | 2017-03-30 | The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors. |
CVE-2014-9806 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file. |
CVE-2014-9805 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted pnm file. |
CVE-2014-9804 | High | 7.5 | 2017-03-30 | vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via vectors related to "too many object." |
CVE-2014-3582 | Critical | 9.8 | 2017-03-29 | In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in… |
CVE-2014-6440 | Critical | 9.8 | 2017-03-28 | VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service. |
CVE-2014-0229 | Medium | 6.5 | 2017-03-23 | Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes… |
CVE-2014-9915 | Medium | 5.5 | 2017-03-23 | Off-by-one error in ImageMagick before 6.6.0-4 allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM profile. |
CVE-2014-8731 | Critical | 9.8 | 2017-03-23 | PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialized data and the last part of the concate… |
CVE-2014-7279 | Critical | 9.8 | 2017-03-23 | The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equipment management authority" via TCP t… |
CVE-2014-9840 | Medium | 5.5 | 2017-03-22 | ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file. |
CVE-2014-9839 | High | 7.5 | 2017-03-22 | magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access). |
CVE-2014-9838 | Medium | 5.5 | 2017-03-22 | magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash). |
CVE-2014-9836 | Medium | 5.5 | 2017-03-22 | ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file. |
CVE-2014-9835 | High | 7.8 | 2017-03-22 | Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file. |
CVE-2014-9834 | High | 7.8 | 2017-03-22 | Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file. |
CVE-2014-9833 | High | 7.8 | 2017-03-22 | Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file. |
CVE-2014-9832 | High | 7.8 | 2017-03-22 | Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file. |
CVE-2014-9939 | Critical | 9.8 | 2017-03-21 | ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects. |
CVE-2014-9851 | High | 7.5 | 2017-03-20 | ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash). |
CVE-2014-9850 | High | 7.5 | 2017-03-20 | Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption). |
CVE-2014-9849 | High | 7.5 | 2017-03-20 | The png coder in ImageMagick allows remote attackers to cause a denial of service (crash). |
CVE-2014-9848 | High | 7.5 | 2017-03-20 | Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption). |
CVE-2014-9847 | Critical | 9.8 | 2017-03-20 | The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact. |
CVE-2014-9846 | Critical | 9.8 | 2017-03-20 | Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact. |