CVEs from 2014

7,930 normalized CVEs published or assigned in this year.

Total

7,930

critical

critical 837

high

high 1,288

medium

medium 4,980

low

low 583

% Critical

10.6%

% with KEV

0.4%

% with exploit

0.6%

Top vendors

ibm 5,966
adobe 4,032
google 3,857
mozilla 2,846
oracle 2,345
apache 1,979
moodle 1,668
cisco 1,598

Top products

chrome 3,804
moodle 1,668
flash_player 1,397
firefox 1,239
mediawiki 1,130
ffmpeg 998
acrobat 966
acrobat_reader 944

Top packages

critical high medium low unknown

0

KEV Has exploit

CVE	Severity	CVSS	Risk	Published	Description	Impact
CVE-2014-3977	medium	—	6.9	12y ago	libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix…
CVE-2014-1664	medium	—	5.0	13y ago	The Citrix GoToMeeting application 5.0.799.1238 for Android logs HTTP requests containing sensitive information, which allows attackers to obtain user IDs, meeting details, and authentication tokens …
CVE-2014-9349	medium	—	4.3	12y ago	Multiple cross-site scripting (XSS) vulnerabilities in admin/robots.lib.php in RobotStats 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) nom or (2) user_agent parameter…