CVE-2017-4016

Web Server method disclosure in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote attackers to exploit and find another hole via HTTP response header...

CVE-2017-4017

McAfee Network Data Loss Prevention (NDLP) 9.3.x contains an information disclosure vulnerability in the server implementation that allows remote attackers to view user information via the appliance web interface. Public sources in connected documents corroborate that an attacker can exploit the ...

CVE-2017-4013

Banner Disclosure in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote attackers to obtain product information via HTTP response header...

CVE-2017-4011

Embedding Script XSS in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote attackers to get session/cookie information via modification of the HTTP request...

Ransomware: What Are the Bad Guys After and How Do I Stop Them?

If the past few days of WannaCry ransomware activity have taught us anything it’s that cybercriminals pose a clear and present danger to organizations and their customers all over the world. But have you ever wondered exactly what the bad guys are after when they launch their online attacks at yo...

CVE-2017-4013: Exposure of Sensitive Information to an Unauthorized Actor

Banner Disclosure in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote attackers to obtain product information via HTTP response header...

CVE-2017-4014: Session Fixation

Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote authenticated users to view, add, and remove users via modification of the HTTP request...

PT-2017-16178 · Mcafee · Mcafee Network Data Loss Prevention

Name of the Vulnerable Software and Affected Versions: McAfee Network Data Loss Prevention NDLP versions 9.3.x Description: The issue allows remote authenticated users to inject arbitrary web script or HTML via HTTP response headers. This can be exploited by injecting malicious code into the HTTP...

PT-2017-16176

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions 9.3.x Description The issue allows remote attackers to obtain product information via HTTP response headers due to banner disclosure in the server. Recommendations For versions 9.3.x, consider...

PT-2017-16180

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP version 9.3.x Description The issue allows remote attackers to view user information via the appliance web interface, specifically due to a user name disclosure in the server. Recommendations For versio...

PT-2017-16175

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions 9.3.x Description A privilege escalation issue in the server allows remote authenticated users to view confidential information by modifying the HTTP request. Recommendations For versions 9.3.x...

PT-2017-16177

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions 9.3.x Description A session side jacking issue in the server allows remote authenticated users to view, add, and remove users by modifying the HTTP request. Recommendations For versions 9.3.x,...

CVE-2017-4015: Improper Restriction of Rendered UI Layers or Frames

Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header...

CVE-2017-4017: Exposure of Sensitive Information to an Unauthorized Actor

User Name Disclosure in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote attackers to view user information via the appliance web interface...

CVE-2017-4016: Exposure of Sensitive Information to an Unauthorized Actor

Web Server method disclosure in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote attackers to exploit and find another hole via HTTP response header...

PT-2017-16174

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions 9.3.x Description The issue allows remote attackers to obtain session or cookie information by modifying the HTTP request, which can lead to unauthorized access. This is due to an Embedding...

CVE-2017-4011: Improper Neutralization of Input During Web Page Generation

Embedding Script XSS in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote attackers to get session/cookie information via modification of the HTTP request...

CVE-2017-4012: Undefined Security Weakness

Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote authenticated users to view confidential information via modification of the HTTP request...

PT-2017-16179

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions 9.3.x Description The issue concerns a Web Server method disclosure in the server, allowing remote attackers to exploit this and potentially find another vulnerability via the HTTP response...

Microsoft Windows Multiple Vulnerabilities (KB4016871)

This host is missing a critical security update according to Microsoft Security update KB4016871. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...