2014 CVEs¶
22 entries from 2014. 0 ship detection & prevention rules.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2014-0497 — Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x… | Critical (9.8) | — | ✅ |
| CVE-2014-0546 — Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow… | Critical (9.8) | — | ✅ |
| CVE-2014-0780 — Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2… | Critical (9.8) | — | ✅ |
| CVE-2014-1776 — Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote… | Critical (9.8) | — | ✅ |
| CVE-2014-3931 — fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers… | Critical (9.8) | — | ✅ |
| CVE-2014-6271 — GNU Bash through 4.3 processes trailing strings after function definitions in the values… | Critical (9.8) | — | ✅ |
| CVE-2014-6287 — The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or… | Critical (9.8) | — | ✅ |
| CVE-2014-7169 — GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… | Critical (9.8) | — | ✅ |
| CVE-2014-8361 — The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code… | Critical (9.8) | — | ✅ |
| CVE-2014-0322 — Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote… | High (8.8) | — | ✅ |
| CVE-2014-0496 — Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x… | High (8.8) | — | ✅ |
| CVE-2014-0502 — Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through… | High (8.8) | — | ✅ |
| CVE-2014-1812 — The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2… | High (8.8) | — | ✅ |
| CVE-2014-2817 — Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a… | High (8.8) | — | ✅ |
| CVE-2014-4123 — Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a… | High (8.8) | — | ✅ |
| CVE-2014-4148 — win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista… | High (8.8) | — | ✅ |
| CVE-2014-6278 — GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the… | High (8.8) | — | ✅ |
| CVE-2014-6324 — The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows… | High (8.8) | — | ✅ |
| CVE-2014-6332 — OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows… | High (8.8) | — | ✅ |
| CVE-2014-8439 — Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and… | High (8.8) | — | ✅ |
| CVE-2014-3120 — The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which… | High (8.1) | — | ✅ |
| CVE-2014-100005 — Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. | High (8.0) | — | ✅ |