CVE-2014-8527

McAfee Network Data Loss Prevention NDLP before 9.3 allows local users to obtain sensitive information and affect integrity via vectors related to a "plain text password."...

CVE-2014-8519

Unspecified vulnerability in McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to read arbitrary files via unknown vectors...

CVE-2014-8533

McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection...

CVE-2014-8532

Unspecified vulnerability in McAfee Network Data Loss Prevention before NDLP before 9.3 allows local users to obtain sensitive information and impact integrity via unknown vectors, related to partition mounting...

CVE-2014-8535

McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to bypass intended restriction on unspecified functionality via unknown vectors...

CVE-2014-8523

Cross-site request forgery CSRF vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-8521

Cross-site scripting XSS vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

UBUNTU-CVE-2023-53106

In the Linux kernel, the following vulnerability has been resolved: nfc: st-nci: Fix use after free bug in ndlcremove due to race condition This bug influences both stncii2cremove and stncispiremove. Take stncii2cremove as an example. In stncii2cprobe, it called ndlcprobe and bound &ndlc-smwork...

[SECURITY] Fedora 41 Update: prometheus-podman-exporter-1.16.0-1.fc41

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

CVE-2025-27738

Improper access control in Windows Resilient File System ReFS allows an authorized attacker to disclose information over a network...

CVE-2025-26664

Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

UBUNTU-CVE-2024-38797

EDK2 contains a vulnerability in the HashPeImageByType. A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this vulnerability may lead to a loss of Integrity and/or Availability...

PT-2025-15273

Name of the Vulnerable Software and Affected Versions EDK2 affected versions not specified Description The issue is related to a vulnerability in the HashPeImageByType function, where a user can cause a read out of bounds by sending corrupted data via the network. This could lead to a loss of...

Outback Power Mojave Inverter 信息泄露漏洞

The Outback Power Mojave Inverter is an AC inverter from Outback Power. An information disclosure vulnerability exists in the Outback Power Mojave Inverter that stems from the possibility that an attacker could modify the URL to discover sensitive information about the target network...

Regular Expression Denial of Service (ReDoS)

Overview parse-duration is a package that converts a human readable duration to ms. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. An attacker could cause an event loop delay or trigger an out of memory error that would crash a running Node.js...

PT-2025-5619 · Ndpi · Ndpi

Name of the Vulnerable Software and Affected Versions: nDPI versions 4.12 and earlier Description: The issue is a potential stack-based buffer overflow in the ndpi address cache restore function located in lib/ndpi cache.c. This could potentially lead to exploitation. Recommendations: For nDPI...

UBUNTU-CVE-2024-57791

In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sockrecvmsg when draining clc data When receiving clc msg, the field length in smcclcmsghdr indicates the length of msg should be received from network and the value should not be fully trusted as i...

Vulnerable WiFi Alliance example code found in Arcadyan FMIMG51AX000J

Overview A command injection vulnerability has been identified in the Wi-Fi Test Suite, a tool developed by the WiFi Alliance, which has been found deployed on Arcadyan routers. This flaw allows an unauthenticated local attacker to exploit the Wi-Fi Test Suite by sending specially crafted packets...

VulnCheck KEV: CVE-2017-0929

DNN aka DotNetNuke before 9.2.0 suffers from a Server-Side Request Forgery SSRF vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources...

QNAP Systems QTS 和QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China's Weilian Technology QNAP Systems.QNAP Systems QTS is an operating system used by entry to mid-level QNAP NAS.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP Systems QTS version 5.1.6.272...