CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2014-6271ShellShock - Remote Code Execution | GNU · Bourne-Again Shell (Bash) | Exploited | 9.8 | 100% | 2014-09-24 |
| CVE-2014-0160The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive infor… | OpenSSL · OpenSSL | Exploited | 7.5 | 100% | 2014-04-07 |
| CVE-2014-7169GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wr… | GNU · Bourne-Again Shell (Bash) | Exploited | 9.8 | 100% | 2014-09-25 |
| CVE-2014-0497Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote att… | Adobe · Flash Player | Exploited | 8.8 | 100% | 2014-02-05 |
| CVE-2014-6278GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands vi… | GNU · GNU Bash | Exploited | 8.8 | 100% | 2014-09-30 |
| CVE-2014-6287HTTP File Server <2.3c - Remote Command Execution | Rejetto · HTTP File Server (HFS) | Exploited | 9.8 | 99% | 2014-10-07 |
| CVE-2014-6332OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold an… | Microsoft · Windows | Exploited | 8.8 | 95% | 2014-11-11 |
| CVE-2014-3120ElasticSearch v1.1.1/1.2 RCE | Elastic · Elasticsearch | Exploited | 8.1 | 89% | 2014-07-28 |
| CVE-2014-6324The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and… | Microsoft · Kerberos Key Distribution Center (KDC) | Exploited | 8.8 | 87% | 2014-11-18 |
| CVE-2014-4113win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows S… | Microsoft · Win32k | Exploited | 7.8 | 87% | 2014-10-15 |
| CVE-2014-0322Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and… | Microsoft · Internet Explorer | Exploited | 8.8 | 85% | 2014-02-14 |
| CVE-2014-1776Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vec… | Microsoft · Internet Explorer | Exploited | 9.8 | 83% | 2014-04-27 |
| CVE-2014-4114Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote a… | Microsoft · Windows | Exploited | 7.8 | 82% | 2014-10-15 |
| CVE-2014-1761Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Ser… | Microsoft · Word | Exploited | 7.8 | 78% | 2014-03-24 |
| CVE-2014-6352Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote a… | Microsoft · Windows | Exploited | 7.8 | 77% | 2014-10-22 |
| CVE-2014-0780InduSoft Web Studio Path Traversal | InduSoft · Web Studio | Exploited | 9.8 | 75% | 2014-04-25 |
| CVE-2014-1812The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does… | Microsoft · Windows | Exploited | 8.8 | 65% | 2014-05-14 |
| CVE-2014-4148win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows S… | Microsoft · Windows | Exploited | 8.8 | 60% | 2014-10-15 |
| CVE-2014-4077Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Japanese) is installed,… | Microsoft · Input Method Editor (IME) Japanese | Exploited | 7.8 | 55% | 2014-11-11 |
| CVE-2014-0130Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x… | Rails · Ruby on Rails | Exploited | 7.5 | 54% | 2014-05-07 |
| CVE-2013-7331The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet host… | Microsoft · Internet Explorer | Exploited | 6.5 | 50% | 2014-02-26 |
| CVE-2014-4404Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that pr… | Apple · OS X | Exploited | 7.8 | 49% | 2014-09-18 |
| CVE-2014-4123Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploi… | Microsoft · Internet Explorer | Exploited | 8.8 | 47% | 2014-10-15 |
| CVE-2014-9163Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to ex… | Adobe · Flash Player | Exploited | 7.8 | 45% | 2014-12-10 |
| CVE-2014-0496Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecif… | Adobe · Reader and Acrobat | Exploited | 8.8 | 40% | 2014-01-15 |
| CVE-2014-3153The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain pri… | Linux · Kernel | Exploited | 7.8 | 37% | 2014-06-07 |
| CVE-2014-2817Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability." | Microsoft · Internet Explorer | Exploited | 8.8 | 26% | 2014-08-12 |
| CVE-2014-0502Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR… | Adobe · Flash Player | Exploited | 8.8 | 25% | 2014-02-21 |
| CVE-2014-2120Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTM… | Cisco · Adaptive Security Appliance (ASA) | Exploited | 5.4 | 23% | 2014-03-19 |
| CVE-2014-0546Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a… | Adobe · Reader and Acrobat | Exploited | 8.8 | 22% | 2014-08-12 |
| CVE-2014-8439Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15… | Adobe · Flash Player | Exploited | 8.8 | 20% | 2014-11-25 |
| CVE-2014-0196The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local user… | Linux · Kernel | Exploited | 5.5 | 20% | 2014-05-07 |
| CVE-2013-3993IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted param… | IBM · InfoSphere BigInsights | Exploited | 6.5 | 4.8% | 2014-07-07 |
| CVE-2013-2597Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) An… | Code Aurora · ACDB Audio Driver | Exploited | 8.4 | 1.5% | 2014-08-31 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.