2014 CVEs (page 9)
Page 9 of 85 — CVEs published in 2014, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-9497 | High | 7.5 | 2017-08-29 | Buffer overflow in mpg123 before 1.18.0. |
CVE-2014-8872 | High | 7.8 | 2017-08-29 | Improper Verification of Cryptographic Signature in AVM FRITZ!Box 6810 LTE after firmware 5.22, FRITZ!Box 6840 LTE after firmware 5.23, and other models with f… |
CVE-2014-8393 | High | 7.8 | 2017-08-29 | DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion. |
CVE-2014-8163 | Medium | 6.5 | 2017-08-28 | Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5. |
CVE-2014-9558 | Critical | 9.8 | 2017-08-28 | Multiple SQL injection vulnerabilities in SmartCMS v.2. |
CVE-2014-9557 | Medium | 6.1 | 2017-08-28 | Multiple cross-site scripting (XSS) vulnerabilities in SmartCMS v.2. |
CVE-2014-9514 | Medium | 6.1 | 2017-08-28 | Cross-site scripting (XSS) vulnerability in BMC Footprints Service Core 11.5. |
CVE-2014-9513 | Critical | 9.8 | 2017-08-28 | Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code. |
CVE-2014-9483 | High | 7.5 | 2017-08-28 | Emacs 24.4 allows remote attackers to bypass security restrictions. |
CVE-2014-9469 | Medium | 6.1 | 2017-08-28 | Cross-site scripting (XSS) vulnerability in vBulletin 3.5.4, 3.6.0, 3.6.7, 3.8.7, 4.2.2, 5.0.5, and 5.1.3. |
CVE-2014-9312 | High | 8.8 | 2017-08-28 | Unrestricted File Upload vulnerability in Photo Gallery 1.2.5. |
CVE-2014-8900 | High | 8.8 | 2017-08-28 | Cross-site request forgery (CSRF) vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1.0.7 and earlier, and 6.1.1.1 and earlier. |
CVE-2014-8871 | High | 7.5 | 2017-08-28 | Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 and earlier, 5.1.0.1 and earlier, 5.1.1.2… |
CVE-2014-8753 | Medium | 6.1 | 2017-08-28 | Multiple cross-site scripting (XSS) vulnerabilities in Cit-e-Net Cit-e-Access 6. |
CVE-2014-8428 | Critical | 9.8 | 2017-08-28 | Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key. |
CVE-2014-8426 | Critical | 9.8 | 2017-08-28 | Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015. |
CVE-2014-8168 | Medium | 6.1 | 2017-08-28 | Red Hat Satellite 6 allows local users to access mongod and delete pulp_database. |
CVE-2014-5302 | High | 8.8 | 2017-08-28 | Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4… |
CVE-2014-5301 | High | 8.8 | 2017-08-28 | Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4. |
CVE-2014-4925 | Medium | 6.1 | 2017-08-28 | Cross-site scripting (XSS) vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40. |
CVE-2014-0141 | Medium | 6.1 | 2017-08-28 | Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3. |
CVE-2014-9637 | Medium | 5.5 | 2017-08-25 | GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory consumption and segmentation fault) via a crafted diff file. |
CVE-2014-9564 | Medium | 6.1 | 2017-08-25 | CRLF injection vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware before 3.4.1110 allows remote attackers to inje… |
CVE-2014-7860 | Medium | 5.3 | 2017-08-25 | The web/web_file/fb_publish.php script in D-Link DNS-320L before 1.04b12 and DNS-327L before 1.03b04 Build0119 does not authenticate requests, which allows rem… |
CVE-2014-7859 | Critical | 9.8 | 2017-08-25 | Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-326 before 2.10 build… |
CVE-2014-7858 | Critical | 9.8 | 2017-08-25 | The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie para… |
CVE-2014-7857 | Critical | 9.8 | 2017-08-25 | D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2… |
CVE-2014-4616 | Medium | 5.9 | 2017-08-24 | Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to re… |
CVE-2014-6189 | Medium | 6.1 | 2017-08-22 | Cross-site scripting (XSS) vulnerability in IBM Security Network Protection 3100, 4100, 5100, and 7100 devices with firmware 5.2 before 5.2.0.0-ISS-XGS-All-Mod… |
CVE-2014-9981 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an overflow check in the USB interface was insufficient during boot. |
CVE-2014-9980 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading to unauthorized acces… |
CVE-2014-9979 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potentially leading to t… |
CVE-2014-9978 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service. |
CVE-2014-9977 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM. |
CVE-2014-9976 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing. |
CVE-2014-9975 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk Encryption. |
CVE-2014-9974 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster. |
CVE-2014-9973 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missing in a PlayReady DRM routine. |
CVE-2014-9972 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause a NULL pointer dereference during an ou… |
CVE-2014-9971 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert to not be executed… |
CVE-2014-9969 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the GPS client may use an insecure cryptographic algorithm. |
CVE-2014-9968 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the UIMDIAG interface. |
CVE-2014-9411 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in rollback p… |
CVE-2014-3451 | High | 7.5 | 2017-08-18 | OpenFire XMPP Server before 3.10 accepts self-signed certificates, which allows remote attackers to perform unspecified spoofing attacks. |
CVE-2014-0146 | Medium | 5.5 | 2017-08-10 | The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NULL pointer derefere… |
CVE-2014-0145 | High | 7.8 | 2017-08-10 | Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (crash) or possibly execute arbitrary code… |
CVE-2014-0143 | High | 7.0 | 2017-08-10 | Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a crafted catalog si… |
CVE-2014-0142 | Medium | 5.5 | 2017-08-10 | QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the s… |
CVE-2014-9701 | Medium | 6.5 | 2017-08-09 | Cross-site scripting (XSS) vulnerability in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML… |
CVE-2014-6393 | Medium | 6.1 | 2017-08-09 | The Express web framework before 3.11 and 4.x before 4.5 for Node.js does not provide a charset field in HTTP Content-Type headers in 400 level responses, whic… |
CVE-2014-5144 | Medium | 5.4 | 2017-08-09 | Cross-site scripting (XSS) vulnerability in Telescope before 0.9.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted markdow… |
CVE-2014-9831 | High | 8.8 | 2017-08-07 | coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted wpg file. |
CVE-2014-9830 | High | 8.8 | 2017-08-07 | coders/sun.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted sun file. |
CVE-2014-9828 | High | 8.8 | 2017-08-07 | coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file. |
CVE-2014-9827 | High | 8.8 | 2017-08-07 | coders/xpm.c in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file. |
CVE-2014-3462 | High | 7.5 | 2017-08-07 | The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "bl… |
CVE-2014-1235 | High | 7.8 | 2017-08-07 | Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial of service (applic… |
CVE-2014-9262 | High | 8.2 | 2017-08-07 | The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files. |
CVE-2014-9260 | High | 8.8 | 2017-08-07 | The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users to update every WordPress option. |
CVE-2014-8903 | High | 8.8 | 2017-08-02 | IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5iFix10 and 6.0.5 before 6.0.5.6 allows remote authenticated users to load arbitrar… |
CVE-2014-7954 | Medium | 4.6 | 2017-07-07 | Directory traversal vulnerability in the doSendObjectInfo method in frameworks/av/media/mtp/MtpServer.cpp in Android 4.4.4 allows physically proximate attacker… |
CVE-2014-7953 | High | 7.0 | 2017-07-07 | Race condition in the bindBackupAgent method in the ActivityManagerService in Android 4.4.4 allows local users with adb shell access to execute arbitrary code… |
CVE-2014-8149 | High | 8.8 | 2017-06-27 | OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files. |
CVE-2014-6354 | High | 7.5 | 2017-06-27 | Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11 allows remote attackers to e… |
CVE-2014-8127 | Medium | 6.5 | 2017-06-26 | LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkInkNamesString funct… |
CVE-2014-9967 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. |
CVE-2014-9966 | High | 7.0 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure Display. |
CVE-2014-9965 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of an SCM call. |
CVE-2014-9964 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality. |
CVE-2014-9963 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM. |
CVE-2014-9962 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of a DRM provisioning command. |
CVE-2014-9961 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on write protection. |
CVE-2014-9960 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API. |
CVE-2014-9984 | Critical | 9.8 | 2017-06-12 | nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests… |
CVE-2014-7919 | High | 7.5 | 2017-06-08 | b/libs/gui/ISurfaceComposer.cpp in Android allows attackers to trigger a denial of service (null pointer dereference and process crash). |
CVE-2014-3498 | High | 8.8 | 2017-06-08 | The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands. |
CVE-2014-8687 | Critical | 9.8 | 2017-06-08 | Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root privileges by leveraging use of a stati… |
CVE-2014-6031 | Medium | 4.9 | 2017-06-08 | Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5… |
CVE-2014-4843 | Medium | 5.3 | 2017-06-08 | Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.5 iFix5 allows remote att… |
CVE-2014-9310 | Medium | 6.1 | 2017-06-07 | Cross-site scripting (XSS) vulnerability in the WordPress Backup to Dropbox plugin before 4.1 for WordPress. |
CVE-2014-8180 | Medium | 5.5 | 2017-06-06 | MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an empty password and delete information which can cause a Denial… |
CVE-2014-9952 | High | 7.8 | 2017-06-06 | In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could potentially exist. |
CVE-2014-9951 | Medium | 5.5 | 2017-06-06 | In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure Through Timing Discrepancy vulnerability could potentially exist. |
CVE-2014-9950 | High | 7.8 | 2017-06-06 | In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist. |
CVE-2014-9949 | High | 7.8 | 2017-06-06 | In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability could potentially exist. |
CVE-2014-9948 | High | 7.8 | 2017-06-06 | In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerability could potentially exist. |
CVE-2014-9947 | Medium | 5.5 | 2017-06-06 | In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulnerability could potentially exist. |
CVE-2014-9946 | High | 7.8 | 2017-06-06 | In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist. |
CVE-2014-9945 | High | 7.8 | 2017-06-06 | In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist. |
CVE-2014-9944 | High | 7.8 | 2017-06-06 | In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist. |
CVE-2014-9943 | High | 7.8 | 2017-06-06 | In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist. |
CVE-2014-9942 | High | 7.8 | 2017-06-06 | In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could potentially exist. |
CVE-2014-9941 | High | 7.0 | 2017-06-06 | In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially… |
CVE-2014-9930 | High | 7.8 | 2017-06-06 | In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist. |
CVE-2014-9929 | High | 7.8 | 2017-06-06 | In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability could potentially exist. |
CVE-2014-9928 | High | 7.8 | 2017-06-06 | In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. |
CVE-2014-9927 | High | 7.8 | 2017-06-06 | In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. |
CVE-2014-9926 | High | 7.8 | 2017-06-06 | In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist. |
CVE-2014-9925 | High | 7.8 | 2017-06-06 | In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. |
CVE-2014-9924 | High | 7.8 | 2017-06-06 | In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially occur. |