| | CVE-2013-7372 |  Apache | medium | 5.0 | 0.7%
| | The engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony/se… | Apr 29, 2014 | May 6, 2026 |
| | CVE-2014-0088 |  F5 | high | 7.5 | 2.6%
| | The SPDY implementation in the ngx_http_spdy_module module in nginx 1.5.10 before 1.5.11, when runni… | Apr 29, 2014 | May 6, 2026 |
| | CVE-2014-2185 |  Cisco | medium | 4.0 | 0.2%
| | The Call Detail Records (CDR) Management component in Cisco Unified Communications Manager (Unified … | Apr 29, 2014 | May 6, 2026 |
| | CVE-2014-2184 | Cisco | medium | 5.0 | 0.3%
| | The IP Manager Assistant (IPMA) component in Cisco Unified Communications Manager (Unified CM) allow… | Apr 29, 2014 | May 6, 2026 |
| | CVE-2014-2180 | Cisco | medium | 4.0 | 0.1%
| | The Document Management component in Cisco Unified Contact Center Express does not properly validate… | Apr 29, 2014 | May 6, 2026 |
| | CVE-2014-0113 | Apache | high | 7.5 | 82.1%
| | CookieInterceptor in Apache Struts before 2.3.20, when a wildcard cookiesName value is used, does no… | Apr 29, 2014 | May 6, 2026 |
| | CVE-2014-0112 | Apache | high | 7.5 | 91.4%
| | ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getCla… | Apr 29, 2014 | May 6, 2026 |
| | CVE-2014-1776 |  Microsoft | critical | 9.8 | 84.0%
| ⚠ KEV | Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to … | Apr 27, 2014 | Apr 21, 2026 |
| | CVE-2014-1766 | Microsoft | critical | 9.3 | 11.0%
| | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause … | Apr 27, 2014 | May 6, 2026 |
| | CVE-2014-1765 | Microsoft | high | 7.6 | 42.6%
| | Multiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote att… | Apr 27, 2014 | May 6, 2026 |
| | CVE-2014-1764 | Microsoft | critical | 10.0 | 71.1%
| | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code and bypas… | Apr 27, 2014 | May 6, 2026 |
| | CVE-2014-1763 | Microsoft | critical | 10.0 | 39.3%
| | Use-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to … | Apr 27, 2014 | May 6, 2026 |
| | CVE-2014-1762 | Microsoft | high | 7.5 | 46.2%
| | Unspecified vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to exe… | Apr 27, 2014 | May 6, 2026 |
| | CVE-2011-5279 | Microsoft | medium | 5.0 | 8.5%
| | CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services (I… | Apr 23, 2014 | May 6, 2026 |
| | CVE-2013-2187 | Apache | medium | 4.3 | 1.1%
| | Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 al… | Apr 22, 2014 | May 6, 2026 |
| | CVE-2014-2155 | Cisco | medium | 5.0 | 0.4%
| | The DHCPv6 server module in Cisco CNS Network Registrar 7.1 allows remote attackers to cause a denia… | Apr 19, 2014 | May 6, 2026 |
| | CVE-2013-6219 |  HPE | low | 3.8 | 0.0%
| | Unspecified vulnerability in HP HP-UX Whitelisting (aka WLI) before A.01.02.02 on HP-UX B.11.31 allo… | Apr 19, 2014 | May 6, 2026 |
| | CVE-2013-6218 | HPE | critical | 10.0 | 31.6%
| | Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote att… | Apr 19, 2014 | May 6, 2026 |
| | CVE-2013-6215 | HPE | high | 8.5 | 0.5%
| | Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Databa… | Apr 19, 2014 | May 6, 2026 |
| | CVE-2013-6212 | HPE | medium | 6.5 | 0.2%
| | Unspecified vulnerability in HP Database and Middleware Automation 10.0, 10.01, 10.10, and 10.20 bef… | Apr 19, 2014 | May 6, 2026 |
| | CVE-2013-6214 | HPE | medium | 4.0 | 0.2%
| | Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Databa… | Apr 19, 2014 | May 6, 2026 |
| | CVE-2013-6213 | HPE | critical | 10.0 | 27.7%
| | Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 Patch 1 allows rem… | Apr 19, 2014 | May 6, 2026 |
| | CVE-2014-0111 | Apache | medium | 6.5 | 1.4%
| | Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arb… | Apr 17, 2014 | May 6, 2026 |
| | CVE-2014-0054 |  VMware | medium | 6.8 | 2.5%
| | The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 be… | Apr 17, 2014 | May 6, 2026 |
| | CVE-2014-2384 | VMware | medium | 4.9 | 0.0%
| | vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Window… | Apr 15, 2014 | May 6, 2026 |
| | CVE-2014-0107 | Apache | high | 7.5 | 8.8%
| | The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certai… | Apr 15, 2014 | May 6, 2026 |
| | CVE-2013-5704 | Apache | medium | 5.0 | 64.7%
| | The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHe… | Apr 15, 2014 | May 6, 2026 |
| | CVE-2013-6216 | HPE | low | 2.1 | 0.1%
| | Unspecified vulnerability in HP Array Configuration Utility, Array Diagnostics Utility, ProLiant Arr… | Apr 12, 2014 | May 6, 2026 |
| | CVE-2014-1210 | VMware | medium | 5.8 | 0.2%
| | VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 c… | Apr 11, 2014 | May 6, 2026 |
| | CVE-2014-1209 | VMware | critical | 9.3 | 4.1%
| | VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly valid… | Apr 11, 2014 | May 6, 2026 |
| | CVE-2014-2848 |  Tenable | medium | 6.9 | 0.0%
| | A race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows loc… | Apr 11, 2014 | May 6, 2026 |
| | CVE-2014-1760 | Microsoft | critical | 9.3 | 22.8%
| | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o… | Apr 8, 2014 | May 6, 2026 |
| | CVE-2014-1759 | Microsoft | critical | 9.3 | 21.5%
| | pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrar… | Apr 8, 2014 | May 6, 2026 |
| | CVE-2014-1758 | Microsoft | critical | 9.3 | 32.5%
| | Stack-based buffer overflow in Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary … | Apr 8, 2014 | May 6, 2026 |
| | CVE-2014-1757 | Microsoft | critical | 9.3 | 28.1%
| | Microsoft Word 2007 SP3 and 2010 SP1 and SP2, and Office Compatibility Pack SP3, allocates memory in… | Apr 8, 2014 | May 6, 2026 |
| | CVE-2014-1755 | Microsoft | critical | 9.3 | 20.9%
| | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of… | Apr 8, 2014 | May 6, 2026 |
| | CVE-2014-1753 | Microsoft | critical | 9.3 | 20.9%
| | Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a… | Apr 8, 2014 | May 6, 2026 |
| | CVE-2014-1752 | Microsoft | critical | 9.3 | 20.9%
| | Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a den… | Apr 8, 2014 | May 6, 2026 |
| | CVE-2014-1751 | Microsoft | critical | 9.3 | 20.9%
| | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of… | Apr 8, 2014 | May 6, 2026 |
| | CVE-2014-0160 |  Splunk | high | 7.5 | 94.5%
| ⚠ KEV | The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heart… | Apr 7, 2014 | Apr 21, 2026 |
| | CVE-2014-2730 | Microsoft | medium | 5.0 | 9.3%
| | The XML parser in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013, and Office for Mac 2011, do… | Apr 5, 2014 | May 6, 2026 |
| | CVE-2014-2600 | HPE | medium | 4.0 | 0.2%
| | Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.… | Apr 5, 2014 | May 6, 2026 |
| | CVE-2014-2145 | Cisco | medium | 4.0 | 0.3%
| | Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authe… | Apr 5, 2014 | May 6, 2026 |
| | CVE-2014-2117 | Cisco | medium | 4.3 | 0.4%
| | Multiple open redirect vulnerabilities in Cisco Emergency Responder (ER) 8.6 and earlier allow remot… | Apr 4, 2014 | May 6, 2026 |
| | CVE-2014-2116 | Cisco | medium | 4.3 | 0.4%
| | Cisco Emergency Responder (ER) 8.6 and earlier allows remote attackers to inject web pages and modif… | Apr 4, 2014 | May 6, 2026 |
| | CVE-2014-2115 | Cisco | medium | 6.8 | 0.1%
| | Multiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco Emergenc… | Apr 4, 2014 | May 6, 2026 |
| | CVE-2014-2114 | Cisco | medium | 4.3 | 0.3%
| | Cross-site scripting (XSS) vulnerability in UserServlet in Cisco Emergency Responder (ER) 8.6 and ea… | Apr 4, 2014 | May 6, 2026 |
| | CVE-2014-2578 | Splunk | medium | 4.3 | 0.3%
| | Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.8 allows remote attacker… | Apr 2, 2014 | May 6, 2026 |
| | CVE-2014-2138 | Cisco | medium | 4.3 | 0.2%
| | CRLF injection vulnerability in the web framework in Cisco Security Manager 4.2 and earlier allows r… | Apr 2, 2014 | May 6, 2026 |
| | CVE-2014-2137 | Cisco | medium | 4.3 | 0.2%
| | CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earl… | Apr 2, 2014 | May 6, 2026 |