Microsoft Exchange Server ExchangeDLP Cross-Site Scripting Vulnerability

Microsoft Exchange Server is an enterprise-class mail service program. A cross-site scripting vulnerability exists in Microsoft Exchange Server ExchangeDLP's handling of user-submitted parameters, which can be exploited by a remote attacker to construct a malicious URI and trick the user into...

McAfee Data Loss Prevention Endpoint Information Disclosure Vulnerability

McAfee Data Loss Prevention Endpoint is an integrated endpoint data protection solution from McAfee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transfer, shared endpoint data flow control and data encryption. An...

McAfee Data Loss Prevention Endpoint SQL Injection Vulnerability (CNVD-2015-01276)

McAfee Data Loss Prevention Endpoint is an integrated endpoint data protection solution from McAfee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transfer, shared endpoint data flow control and data encryption. A S...

McAfee Data Loss Prevention Endpoint Cross-Site Scripting Vulnerability

McAfee Data Loss Prevention Endpoint is an integrated endpoint data protection solution from McAfee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transfer, shared endpoint data flow control and data encryption. A...

CVE-2015-1618

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL...

CVE-2015-1617

Cross-site scripting XSS vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-1616

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors...

Default credentials

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL...

CVE-2015-1616

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-1618

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL...

CVE-2015-1618

The CVE-2015-1618 issue affects the McAfee Data Loss Prevention Endpoint (DLPe) ePO extension prior to 9.3.400. A remote, authenticated user can obtain sensitive password information via a specially crafted URL, due to insufficient access checks in the ePO extension. Impact is information disclos...

KLA10485 Multiple vulnerabilities in McAfee Data Loss Prevention Endpoint

Multiple serious vulnerabilities have been found in McAfee DLPE. Malicious users can exploit these vulnerabilities to obtain sensitive information, inject or execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed URL and other unspecified vectors related ...

Trellix Data Loss Prevention Endpoint Agent Detection

Binary data mcafeedlpeagentinstalled.nbin...

CVE-2015-1305

McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 1 0x00224014 or 2 0x0022c018 IOCTL call...

Memory corruption

McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 1 0x00224014 or 2 0x0022c018 IOCTL call...

CVE-2015-1305

McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 1 0x00224014 or 2 0x0022c018 IOCTL call...

McAfee Data Loss Prevention Endpoint Local Elevation of Privilege Vulnerability

McAfee Network Data Loss Prevention monitors network traffic and protects against data loss. A local elevation of privilege vulnerability exists in McAfee Data Loss Prevention Endpoint, which could be exploited by an attacker to elevate privileges...

McAfee Data Loss Prevention Endpoint - Arbitrary Write Privilege Escalation

McAfee Data Loss Prevention Endpoint - Arbitrary Write Privilege Escalation / Exploit Title - McAfee Data Loss Prevention Endpoint Arbitrary Write Privilege Escalation Date - 29th January 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.mcafee.com Tested Version -...

McAfee Data Loss Prevention Endpoint - Arbitrary Write Privilege Escalation

/ Exploit Title - McAfee Data Loss Prevention Endpoint Arbitrary Write Privilege Escalation Date - 29th January 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.mcafee.com Tested Version - 9.3.200.23 Driver Version - 9.3.200.23 - hdlpctrl.sys Tested on OS - 32bit Windows ...