CVE-2014-8520: Exposure of Sensitive Information to an Unauthorized Actor

McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to obtain sensitive information via vectors related to open network ports...

CVE-2014-8534: Undefined Security Weakness

Unspecified vulnerability in the login form in McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to cause a denial of service via a crafted value in the domain field...

CVE-2014-8522: Improper Authentication

The MySQL database in McAfee Network Data Loss Prevention NDLP before 9.3 does not require a password, which makes it easier for remote attackers to obtain access...

CVE-2014-8529: Undefined Security Weakness

McAfee Network Data Loss Prevention NDLP before 9.3 stores the SSH key in cleartext, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2014-8530: Undefined Security Weakness

Unspecified vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to obtain sensitive information, affect integrity, or cause a denial of service via unknown vectors, related to simultaneous logins...

CVE-2014-8536: Exposure of Sensitive Information to an Unauthorized Actor

McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to obtain sensitive information by reading unspecified error messages...

CVE-2014-8523: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-8518: Undefined Security Weakness

The 1 Removable Media and 2 CD and DVD encryption offsite access options formerly Endpoint Encryption for Removable Media or EERM in McAfee File and Removable Media Protection FRP 4.3.0.x, and Endpoint Encryption for Files and Folders EEFF 3.2.x through 4.2.x, uses a hard-coded salt, which makes ...

CVE-2014-8531: Undefined Security Weakness

The TLS/SSL Server in McAfee Network Data Loss Prevention NDLP before 9.3 uses weak cipher algorithms, which makes it easier for remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2014-8519: Undefined Security Weakness

Unspecified vulnerability in McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to read arbitrary files via unknown vectors...

CVE-2014-8532: Undefined Security Weakness

Unspecified vulnerability in McAfee Network Data Loss Prevention before NDLP before 9.3 allows local users to obtain sensitive information and impact integrity via unknown vectors, related to partition mounting...

CVE-2014-8527: Undefined Security Weakness

McAfee Network Data Loss Prevention NDLP before 9.3 allows local users to obtain sensitive information and affect integrity via vectors related to a "plain text password."...

CVE-2014-8528: Exposure of Sensitive Information to an Unauthorized Actor

McAfee Network Data Loss Prevention NDLP before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log...

CVE-2014-8524: Exposure of Sensitive Information to an Unauthorized Actor

McAfee Network Data Loss Prevention NDLP before 9.3 does not disable the autocomplete setting for the password and other fields, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2014-8537: Exposure of Sensitive Information to an Unauthorized Actor

McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to obtain sensitive information by reading the logs...

McAfee Web Gateway Information Disclosure Vulnerability

McAfee Web Gateway is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee Web Gateway Information Disclosure (SB10080)

The remote host is running a version of McAfee Web Gateway MWG that is affected by an information disclosure vulnerability. There is an unspecified flaw in the admin interface that is triggered when viewing the top level 'Accounts' tab. This flaw allows a remote, authenticated attacker to gain...

Code injection

The Accounts tab in the administrative user interface in McAfee Web Gateway MWG before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors...

CVE-2014-6064

The Accounts tab in the administrative user interface in McAfee Web Gateway MWG before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors...

CVE-2014-6064

McAfee Web Gateway (MWG) information disclosure (CVE-2014-6064) affects the Admin UI Accounts tab. Versions before MWG 7.3.2.9 and before 7.4.2 on the 7.4.x line are vulnerable to remote authenticated access that can reveal hashed user passwords via unspecified vectors. The connected sources conf...