Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

31 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2014-8523	Modificada	Media (6.8)	0.58%	—	Mcafee Network Data Loss Prevention	29/10/2014	17/6/2026	Cross-site request forgery (CSRF) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2014-8522	Modificada	Alta (7.5)	1.3%	—	Mcafee Network Data Loss Prevention	29/10/2014	17/6/2026	The MySQL database in McAfee Network Data Loss Prevention (NDLP) before 9.3 does not require a password, which makes it easier for remote attackers to obtain access.
CVE-2014-8521	Modificada	Baja (3.5)	0.39%	—	Mcafee Network Data Loss Prevention	29/10/2014	17/6/2026	Cross-site scripting (XSS) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-8520	Modificada	Media (5)	1.4%	—	Mcafee Network Data Loss Prevention	29/10/2014	17/6/2026	McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive information via vectors related to open network ports.
CVE-2014-8519	Modificada	Baja (2.1)	0.32%	—	Mcafee Network Data Loss Prevention	29/10/2014	17/6/2026	Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to read arbitrary files via unknown vectors.
CVE-2004-0230	Analizada	Media (5)	80%	💥 Exploit	Juniper Junos Microsoft Windows 2000 Microsoft Windows 98 Microsoft Windows 98se+8	18/8/2004	16/6/2026	TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.