Menu

Star on GitHub · 3.2k

2014

7,937 vulnerabilities published in 2014.

Results

23 of 7,937
7.8
CVE-2014-9163KEV

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and O

8.8
CVE-2014-8439KEV

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on

8.8
CVE-2014-6324KEV

The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008

8.8
CVE-2014-6332KEV

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows

7.8
CVE-2014-4077KEV

Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007

7.8
CVE-2014-6352KEV

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2

8.8
CVE-2014-4148KEV

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

8.8
CVE-2014-4123KEV

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Interne

7.8
CVE-2014-4114KEV

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2

7.8
CVE-2014-4113KEV

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

8.8
CVE-2014-6278KEV

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi

7.8
CVE-2014-4404KEV

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitr

8.4
CVE-2013-2597KEV

Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6

8.8
CVE-2014-2817KEV

Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Interne

8.1
CVE-2014-3120KEV

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execut

7.8
CVE-2014-3153KEV

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff

8.8
CVE-2014-1812KEV

The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

7.5
CVE-2014-0130KEV

Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in

7.5
CVE-2014-0160KEV

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

7.8
CVE-2014-1761KEV

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Offi

8.8
CVE-2014-0502KEV

Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Window

8.8
CVE-2014-0322KEV

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code v

8.8
CVE-2014-0496KEV

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac O

Test your stack for 2014issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.