CVE-2014-5254: xcfa project xcfa – CVSS 4.7 · Watchpost