CVEs from 2014

7,864 normalized CVEs published or assigned in this year.

Total

7,864

critical

critical 837

high

high 1,288

medium

medium 4,980

low

low 583

% Critical

10.6%

% with KEV

0.4%

% with exploit

9.8%

Top vendors

ibm 5,966
adobe 4,032
google 3,857
mozilla 2,846
oracle 2,345
apache 1,979
moodle 1,668
cisco 1,598

Top products

chrome 3,804
moodle 1,668
flash_player 1,397
firefox 1,239
mediawiki 1,130
ffmpeg 998
acrobat 966
acrobat_reader 944

Top packages

critical high medium low unknown

0

KEV Has exploit

CVE	Severity	CVSS	Risk	Flags	OS	Vendor	Published	Description
CVE-2014-3656	unknown	—	—				4y ago	JBoss KeyCloak Cross-site Scripting Vulnerability
CVE-2014-3607	unknown	—	—				4y ago	Improper Certificate Validation in vt-ldap
CVE-2014-3603	unknown	—	—				4y ago	Improper Validation of Certificate with Host Mismatch in Shibboleth Identity Provider and OpenSAML Java
CVE-2014-9356	unknown	—	—				5y ago	Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a symlink in an (1) image or…