29 October 2014

33 results · Feed

• Unscored —
  CVE-2014-8538

  The Hijab Modern (aka com.Aisyaidea.HijabModern) application 1.0 for Android does not verify X.509 certificates from SS…

  Oct 29, 2014
• Unscored —
  CVE-2014-8523

  Cross-site request forgery (CSRF) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote …

  Oct 29, 2014
• Unscored —
  CVE-2014-8526

  McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive information by reading a J…

  Oct 29, 2014
• Unscored —
  CVE-2014-8528

  McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users to obtain sensitive in…

  Oct 29, 2014
• Unscored —
  CVE-2014-8518

  The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removabl…

  Oct 29, 2014
• Unscored —
  CVE-2014-8520

  McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive information via vecto…

  Oct 29, 2014
• Unscored —
  CVE-2014-8532

  Unspecified vulnerability in McAfee Network Data Loss Prevention before (NDLP) before 9.3 allows local users to obtain …

  Oct 29, 2014
• Unscored —
  CVE-2014-8519

  Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to read arbitra…

  Oct 29, 2014
• Unscored —
  CVE-2014-8529

  McAfee Network Data Loss Prevention (NDLP) before 9.3 stores the SSH key in cleartext, which allows local users to obta…

  Oct 29, 2014
• Unscored —
  CVE-2014-8530

  Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain se…

  Oct 29, 2014
• Unscored —
  CVE-2014-8524

  McAfee Network Data Loss Prevention (NDLP) before 9.3 does not disable the autocomplete setting for the password and ot…

  Oct 29, 2014
• Unscored —
  CVE-2014-8533

  McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute arbitrary code via vectors rel…

  Oct 29, 2014
• Unscored —
  CVE-2014-8537

  McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive information by reading t…

  Oct 29, 2014
• Unscored —
  CVE-2014-8525

  McAfee Network Data Loss Prevention (NDLP) before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the…

  Oct 29, 2014
• Unscored —
  CVE-2014-8531

  The TLS/SSL Server in McAfee Network Data Loss Prevention (NDLP) before 9.3 uses weak cipher algorithms, which makes it…

  Oct 29, 2014
• Unscored —
  CVE-2014-8521

  Cross-site scripting (XSS) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote authent…

  Oct 29, 2014
• Unscored —
  CVE-2014-8535

  McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to bypass intended restriction on unspecifie…

  Oct 29, 2014
• Unscored —
  CVE-2014-8522

  The MySQL database in McAfee Network Data Loss Prevention (NDLP) before 9.3 does not require a password, which makes it…

  Oct 29, 2014
• Unscored —
  CVE-2014-8527

  McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive information and affect int…

  Oct 29, 2014
• Unscored —
  CVE-2014-8534

  Unspecified vulnerability in the login form in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local use…

  Oct 29, 2014
• Unscored —
  CVE-2014-8536

  McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive information by reading u…

  Oct 29, 2014
• Unscored —
  CVE-2014-4877 Public exploit EPSS 40%

  Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to …

  wget wget Debian Ubuntu
  Oct 29, 2014
• Unscored —
  CVE-2014-4839

  Cross-site request forgery (CSRF) vulnerability in birtviewer.query in IBM TRIRIGA Application Platform 3.2 and 3.3 bef…

  Oct 29, 2014
• Unscored —
  CVE-2014-6149

  Directory traversal vulnerability in BIRT-viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0…

  Oct 29, 2014
• Unscored —
  CVE-2014-3694

  The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 …

  pidgin pidgin Debian Ubuntu
  Oct 29, 2014
• Unscored —
  CVE-2014-3698

  The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows …

  pidgin pidgin Debian Ubuntu
  Oct 29, 2014
• Unscored —
  CVE-2014-3668 EPSS 27%

  Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC ex…

  php5 Ubuntu
  Oct 29, 2014
• Unscored —
  CVE-2014-3695

  markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of s…

  pidgin pidgin Debian Ubuntu
  Oct 29, 2014
• Unscored —
  CVE-2014-3670 EPSS 23%

  The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x b…

  php5 Ubuntu
  Oct 29, 2014
• Unscored —
  CVE-2014-3669 EPSS 29%

  Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.…

  php5 Ubuntu
  Oct 29, 2014
• Unscored —
  CVE-2014-3696

  nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause …

  pidgin pidgin Debian Ubuntu
  Oct 29, 2014
• Unscored —
  CVE-2014-3051

  The Internet Service Monitor (ISM) agent in IBM Tivoli Composite Application Manager (ITCAM) for Transactions 7.1 and 7…

  Oct 29, 2014
• Unscored —
  CVE-2014-3697

  Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows …

  Oct 29, 2014