Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8501 State: PUBLISHED Published: 2014-12-09T22:52:00 Last Updated: 2024-08-06T13:18:48.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62241 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7e1e19887abd24ae
/security/advisories?name=MDVSA-2015:029 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7e1e19887abd24aeb15066b141cdff5541e0ec8e - http://www.ubuntu.com/usn/USN-2496-1 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html - https://bugzilla.redhat.com/show_bug.cgi?id=1162570 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://sourceware.org/bugzilla/show_bug.cgi?id=17512 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147346.html - http://www.securityfocus.com/bid/70866 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html - http://lists.fedorap
m/bid/70866 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148427.html - http://secunia.com/advisories/62746 - http://www.openwall.com/lists/oss-security/2014/10/31/1 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147354.html - http://www.openwall.com/lists/oss-security/2014/10/26/3 - https://security.gentoo.org/glsa/201612-24
CVE ID: CVE-2014-8502 State: PUBLISHED Published: 2014-12-09T22:52:00 Last Updated: 2024-08-06T13:18:48.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a truncated export table in a PE file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62241 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 - http://www.securityfocus.com/bid/70869 - http://www.ubuntu.com/usn/USN-2496-1 - http://lists.fedoraproject.
A-2015:029 - http://www.securityfocus.com/bid/70869 - http://www.ubuntu.com/usn/USN-2496-1 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html - https://bugzilla.redhat.com/show_bug.cgi?id=1162594 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://sourceware.org/bugzilla/show_bug.cgi?id=17512 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147346.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148427.html - http://secunia.com/advisories/62746 - http://www.openwall.com/lists/o
ermail/package-announce/2015-January/148427.html - http://secunia.com/advisories/62746 - http://www.openwall.com/lists/oss-security/2014/10/31/1 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147354.html - https://security.gentoo.org/glsa/201612-24 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5a4b0ccc20ba30caef53b01bee2c0aaa5b855339
CVE ID: CVE-2014-8503 State: PUBLISHED Published: 2014-12-09T22:52:00 Last Updated: 2024-08-06T13:18:48.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted ihex file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62241 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 - http://www.ubuntu.com/usn/USN-2496-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1162607 - http://lists.fedoraproject.org/pipermail
untu.com/usn/USN-2496-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1162607 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://sourceware.org/bugzilla/show_bug.cgi?id=17512 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147346.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148427.html - http://secunia.com/advisories/62746 - http://www.openwall.com/lists/oss-security/2014/10/31/1 - http://lists.fedoraproject.org/pipermail
om/advisories/62746 - http://www.openwall.com/lists/oss-security/2014/10/31/1 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Ba=commit%3Bh=0102ea8cec5fc509bba6c91df61b7ce23a799d32 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147354.html - http://www.securityfocus.com/bid/70868 - https://security.gentoo.org/glsa/201612-24
CVE ID: CVE-2014-8504 State: PUBLISHED Published: 2014-12-09T22:52:00 Last Updated: 2024-08-06T13:18:48.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1162621 - http://secunia.com/advisories/62241 - https://sourceware.org/bugzilla/show_bug.cgi?id=17510 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 - http://www.ubuntu.com/usn/US
a/show_bug.cgi?id=17510 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:029 - http://www.ubuntu.com/usn/USN-2496-1 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html - http://www.openwall.com/lists/oss-security/2014/10/27/5 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147346.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148427.html - http://secunia.com/advisories/62746 - http://www.openwall.com/lists/oss-security/2014/10/27/4 - http://www.openwall.com/lists/oss-security/2014/10/31/1 - https://sourcew
openwall.com/lists/oss-security/2014/10/27/4 - http://www.openwall.com/lists/oss-security/2014/10/31/1 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=708d7d0d11f0f2d776171979aa3479e8e12a38a0 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147354.html - http://www.securityfocus.com/bid/70761 - https://security.gentoo.org/glsa/201612-24
CVE ID: CVE-2014-8505 State: PUBLISHED Published: 2014-10-28T14:00:00 Last Updated: 2024-08-06T13:18:48.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Etiko CMS allow remote attackers to inject arbitrary web script or HTML via the (1) page_id parameter to loja/index.php or (2) article_id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/97031 - http://packetstormsecurity.com/files/128644/Etiko-CMS-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2014-8506 State: PUBLISHED Published: 2014-10-28T14:00:00 Last Updated: 2024-08-06T13:18:48.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Etiko CMS allow remote attackers to execute arbitrary SQL commands via the (1) page_id parameter to loja/index.php or (2) article_id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/97030 - http://packetstormsecurity.com/files/128644/Etiko-CMS-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2014-8507 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T13:18:48.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the queryLastApp method in packages/WAPPushManager/src/com/android/smspush/WapPushManager.java in the WAPPushManager module in Android before 5.0.0 allow remote attackers to execute arbitrary SQL commands, and consequently launch an activity or service, via the (1) wapAppId or (2) contentType field of a PDU for a malformed WAPPush message, aka Bug 17969135. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/86 - https://android.
Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/86 - https://android.googlesource.com/platform/frameworks/base/+/48ed835468c6235905459e6ef7df032baf3e4df6 - http://packetstormsecurity.com/files/129283/Android-WAPPushManager-SQL-Injection.html - http://xteam.baidu.com/?p=167 - http://www.securityfocus.com/bid/71310
CVE ID: CVE-2014-8508 State: PUBLISHED Published: 2014-11-06T15:00:00 Last Updated: 2024-08-06T13:18:48.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in s_network.asp in the Denon AVR-3313CI audio/video receiver allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to Friendlyname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70892 - http://www.zerodayinitiative.com/advisories/ZDI-14-371/
CVE ID: CVE-2014-8509 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T13:18:48.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lazy_bdecode function in BitTorrent bootstrap-dht (aka Bootstrap) allows remote attackers to execute arbitrary code via a crafted packet, which triggers an out-of-bounds read, related to "Improper Indexing." Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-370/ - https://github.com/bittorrent/bootstrap-dht/commit/bbc0b7191e3f48461ca6e5b1b34bdf4b3f1e79a9 - http://www.securityfocus.com/bid/70812
CVE ID: CVE-2014-8510 State: PUBLISHED Published: 2014-11-07T19:00:00 Last Updated: 2024-08-06T13:18:48.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AdminUI in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) before 6.0 HF build 1244 allows remote authenticated users to read arbitrary files via vectors related to configuration input when saving filters. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-373/
CVE ID: CVE-2014-8511 State: PUBLISHED Published: 2014-12-27T15:00:00 Last Updated: 2024-08-06T13:18:48.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8512. NOTE: this may be clarified later based on details provided by researchers. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01 - https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01
CVE ID: CVE-2014-8512 State: PUBLISHED Published: 2014-12-27T15:00:00 Last Updated: 2024-08-06T13:18:48.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8511. NOTE: this may be clarified later based on details provided by researchers. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01 - https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01
CVE ID: CVE-2014-8513 State: PUBLISHED Published: 2014-12-27T15:00:00 Last Updated: 2024-08-06T13:18:48.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8514 and CVE-2014-9188. NOTE: this may be clarified later based on details provided by researchers. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01 - https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01
CVE ID: CVE-2014-8514 State: PUBLISHED Published: 2014-12-27T15:00:00 Last Updated: 2024-08-06T13:18:48.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-9188. NOTE: this may be clarified later based on details provided by researchers. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01 - http://www.securityfocus.com/bid/71710 - https://ics-cert.us-cert.gov/advisorie
com/files?p_Doc_Ref=SEVD%202014-344-01 - http://www.securityfocus.com/bid/71710 - https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01
CVE ID: CVE-2014-8515 State: PUBLISHED Published: 2014-12-12T15:00:00 Last Updated: 2024-08-06T13:18:48.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-418/
CVE ID: CVE-2014-8516 State: PUBLISHED Published: 2020-01-03T20:08:32 Last Updated: 2024-08-06T13:18:48.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-14-372/ - http://www.securityfocus.com/bid/70895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98475 - https://packetstormsecurity.com/files/129023
CVE ID: CVE-2014-8517 State: PUBLISHED Published: 2014-11-17T16:00:00 Last Updated: 2024-08-06T13:18:48.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-013.txt.asc - http://secunia.com/advisories/62028 - https://www.exploit-db.com/exploits/43112/ - http://seclists.org/oss-sec/2014/q4/464
tp://secunia.com/advisories/62028 - https://www.exploit-db.com/exploits/43112/ - http://seclists.org/oss-sec/2014/q4/464 - http://support.apple.com/HT204244 - https://security.gentoo.org/glsa/201611-05 - http://lists.opensuse.org/opensuse-updates/2014-11/msg00029.html - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html - http://secunia.com/advisories/62260 - http://seclists.org/oss-sec/2014/q4/459
CVE ID: CVE-2014-8518 State: PUBLISHED Published: 2014-10-29T14:00:00 Last Updated: 2024-08-06T13:18:48.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Removable Media Protection (FRP) 4.3.0.x, and Endpoint Encryption for Files and Folders (EEFF) 3.2.x through 4.2.x, uses a hard-coded salt, which makes it easier for local users to obtain passwords via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10089
CVE ID: CVE-2014-8519 State: PUBLISHED Published: 2014-10-29T14:00:00Z Last Updated: 2024-09-17T00:30:39.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10044
CVE ID: CVE-2014-8520 State: PUBLISHED Published: 2014-10-29T14:00:00 Last Updated: 2024-08-06T13:18:48.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive information via vectors related to open network ports. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98433 - https://kc.mcafee.com/corporate/index?page=content&id=SB10053 - http://www.securityfocus.com/bid/70815
CVE ID: CVE-2014-8521 State: PUBLISHED Published: 2014-10-29T14:00:00Z Last Updated: 2024-09-17T02:36:16.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10053
CVE ID: CVE-2014-8522 State: PUBLISHED Published: 2014-10-29T14:00:00Z Last Updated: 2024-09-17T03:58:47.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MySQL database in McAfee Network Data Loss Prevention (NDLP) before 9.3 does not require a password, which makes it easier for remote attackers to obtain access. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10053
CVE ID: CVE-2014-8523 State: PUBLISHED Published: 2014-10-29T14:00:00Z Last Updated: 2024-09-17T02:56:36.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10053
CVE ID: CVE-2014-8524 State: PUBLISHED Published: 2014-10-29T14:00:00Z Last Updated: 2024-09-16T22:40:59.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Network Data Loss Prevention (NDLP) before 9.3 does not disable the autocomplete setting for the password and other fields, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10053
CVE ID: CVE-2014-8525 State: PUBLISHED Published: 2014-10-29T14:00:00 Last Updated: 2024-08-06T13:18:48.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Network Data Loss Prevention (NDLP) before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10053 - http://www.securityfocus.com/bid/70823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98431
CVE ID: CVE-2014-8526 State: PUBLISHED Published: 2014-10-29T14:00:00Z Last Updated: 2024-09-16T23:51:19.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive information by reading a Java stack trace. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10053
CVE ID: CVE-2014-8527 State: PUBLISHED Published: 2014-10-29T14:00:00Z Last Updated: 2024-09-16T23:55:33.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive information and affect integrity via vectors related to a "plain text password." Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10053
CVE ID: CVE-2014-8528 State: PUBLISHED Published: 2014-10-29T14:00:00Z Last Updated: 2024-09-17T03:59:13.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10053
CVE ID: CVE-2014-8529 State: PUBLISHED Published: 2014-10-29T14:00:00Z Last Updated: 2024-09-16T18:34:45.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Network Data Loss Prevention (NDLP) before 9.3 stores the SSH key in cleartext, which allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10053
CVE ID: CVE-2014-8530 State: PUBLISHED Published: 2014-10-29T14:00:00Z Last Updated: 2024-09-17T00:02:28.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive information, affect integrity, or cause a denial of service via unknown vectors, related to simultaneous logins. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10053
CVE ID: CVE-2014-8531 State: PUBLISHED Published: 2014-10-29T14:00:00 Last Updated: 2024-08-06T13:18:48.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS/SSL Server in McAfee Network Data Loss Prevention (NDLP) before 9.3 uses weak cipher algorithms, which makes it easier for remote authenticated users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10053 - http://www.securityfocus.com/bid/70831 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98432
CVE ID: CVE-2014-8532 State: PUBLISHED Published: 2014-10-29T14:00:00Z Last Updated: 2024-09-16T23:56:57.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in McAfee Network Data Loss Prevention before (NDLP) before 9.3 allows local users to obtain sensitive information and impact integrity via unknown vectors, related to partition mounting. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10053