4294 matches found
CVE-2014-8526
McAfee Network Data Loss Prevention (NDLP) prior to version 9.3 is affected by a local information-disclosure vulnerability where an attacker can read a Java stack trace to obtain sensitive information. The available documents confirm the affected product and symptom (stack trace exposure) and th...
CVE-2014-8527
McAfee Network Data Loss Prevention NDLP before 9.3 allows local users to obtain sensitive information and affect integrity via vectors related to a "plain text password."...
CVE-2014-8524
McAfee Network Data Loss Prevention NDLP before 9.3 does not disable the autocomplete setting for the password and other fields, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2014-8521
CVE-2014-8521 is an XSS vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3, where remote authenticated users can inject arbitrary web script or HTML via unspecified vectors. The NVD entry assigns a low impact (CVSSv2 base score 3.5) with network access and partial integrity im...
CVE-2014-8528
CVE-2014-8528 affects McAfee Network Data Loss Prevention (NDLP) prior to 9.3. The issue is that session IDs are logged, allowing local users to read the audit log and obtain sensitive information (partial confidentiality impact). No remediation or patch/version details are provided in the suppli...
CVE-2014-8536
McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to obtain sensitive information by reading unspecified error messages...
CVE-2014-8525
McAfee Network Data Loss Prevention NDLP before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie...
CVE-2014-8527
CVE-2014-8527 affects McAfee Network Data Loss Prevention (NDLP) prior to 9.3. The issue allows local users to obtain sensitive information and affect integrity through vectors related to a plain text password. The description provides affected product and root cause (plain text password handling...
CVE-2014-8530
Unspecified vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to obtain sensitive information, affect integrity, or cause a denial of service via unknown vectors, related to simultaneous logins...
CVE-2014-8522
The MySQL database in McAfee Network Data Loss Prevention NDLP before 9.3 does not require a password, which makes it easier for remote attackers to obtain access...
CVE-2014-8521
Cross-site scripting XSS vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-8531
The TLS/SSL Server in McAfee Network Data Loss Prevention NDLP before 9.3 uses weak cipher algorithms, which makes it easier for remote authenticated users to execute arbitrary code via unspecified vectors...
CVE-2014-8519
McAfee Network Data Loss Prevention (NDLP)
CVE-2014-8536
CVE-2014-8536 affects McAfee Network Data Loss Prevention (NDLP) prior to version 9.2.2. The issue is a local information-disclosure vulnerability where local users can obtain sensitive data by reading unspecified error messages. Affected component is NDLP; root cause described as error messaging...
CVE-2014-8522
CVE-2014-8522 concerns the MySQL database component used by McAfee Network Data Loss Prevention (NDLP). The vulnerability stems from the NDLP deployment permitting unauthenticated access to its MySQL database prior to version 9.3, meaning remote attackers could gain access without credentials. Pu...
CVE-2014-8534
Unspecified vulnerability in the login form in McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to cause a denial of service via a crafted value in the domain field...
CVE-2014-8518
The 1 Removable Media and 2 CD and DVD encryption offsite access options formerly Endpoint Encryption for Removable Media or EERM in McAfee File and Removable Media Protection FRP 4.3.0.x, and Endpoint Encryption for Files and Folders EEFF 3.2.x through 4.2.x, uses a hard-coded salt, which makes ...
CVE-2014-8532
Technical details about CVE-2014-8532 are not publicly available in the provided documents. The records describe an unspecified vulnerability in McAfee NDLP prior to 9.3 but do not specify affected components, root cause, or fixes. Monitor for updates.
CVE-2014-8518
The CVE-2014-8518 entry affects McAfee File and Removable Media Protection (FRP) 4.3.0.x (Removable Media and CD/DVD encryption offsite access options) and Endpoint Encryption for Files and Folders (EEFF) 3.2.x–4.2.x. The root cause is a hard-coded salt, which can allow local users to brute-force...