4294 matches found
CVE-2014-8535
McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to bypass intended restriction on unspecified functionality via unknown vectors...
CVE-2014-8531
The CVE-2014-8531 entry concerns McAfee Network Data Loss Prevention (NDLP) TLS/SSL Server prior to version 9.3. The issue is that the TLS/SSL Server uses weak cipher algorithms, enabling remote authenticated users to execute arbitrary code via unspecified vectors. Documents explicitly link the v...
McAfee Web Gateway Information Disclosure Vulnerability
McAfee Web Gateway is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
McAfee Web Gateway Information Disclosure (SB10080)
The remote host is running a version of McAfee Web Gateway MWG that is affected by an information disclosure vulnerability. There is an unspecified flaw in the admin interface that is triggered when viewing the top level 'Accounts' tab. This flaw allows a remote, authenticated attacker to gain...
Code injection
The Accounts tab in the administrative user interface in McAfee Web Gateway MWG before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors...
CVE-2014-6064
McAfee Web Gateway (MWG) information disclosure (CVE-2014-6064) affects the Admin UI Accounts tab. Versions before MWG 7.3.2.9 and before 7.4.2 on the 7.4.x line are vulnerable to remote authenticated access that can reveal hashed user passwords via unspecified vectors. The connected sources conf...
CVE-2014-6064
The Accounts tab in the administrative user interface in McAfee Web Gateway MWG before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors...
Microsoft Windows SMB Registry : McAfee EPO GUID
By reading the registry key HKLM\SOFTWARE\Network Associates\ePolicy Orchestrator\Agent, it was possible to determine that the remote Windows system is managed by McAfee EPO. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77477; scriptversion"1.7";...
CVE-2014-2390
Technical details for CVE-2014-2390 are not publicly provided in the supplied connected documents. Based on the initial entry, no specific affected product versions, exploit vectors, or remediation are disclosed here. Monitor for updates.
CVE-2014-2390
Cross-site request forgery CSRF vulnerability in the User Management module in McAfee Network Security Manager NSM before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the User Management module in McAfee Network Security Manager NSM before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for...
McAfee Web Gateway Admin Traffic Detection
Binary data 8346.prm...
McAfee Web Gateway Proxy Detection
Binary data 8345.prm...
McAfee Web Gateway Proxy Detection (Blocked Resource)
Binary data 8344.prm...
SandroRAT — Android Malware that Disguises itself as "Kaspersky Mobile Security" App
Researchers have warned users of Android devices to avoid app downloads from particularly unauthorized sources, since a new and sophisticated piece of malware is targeting Android users through phishing emails. The malware, dubbed SandroRAT, is currently being used by cybercriminals to target...
McAfee Cloud Single Sign On ExtensionAccessServlet Directory Traversal (CVE-2014-2536)
A directory traversal vulnerability has been reported in the ExtensionAccessServlet included in McAfee Cloud Single Sign On. The vulnerability is due to insufficient input sanitization on the GET request URI passed to the ExtensionAccessServlet. A remote unauthenticated attacker can exploit this...
McAfee Email Gateway OpenSSL Multiple Vulnerabilities (SB10075)
The remote host is running a version of McAfee Email Gateway MEG that is affected by the multiple vulnerabilities related to the included OpenSSL library : - An error exists in the function 'ssl3readbytes' that can allow data to be injected into other sessions or allow denial of service attacks...
McAfee VirusScan Enterprise for Linux Multiple OpenSSL Vulnerabilities (SB10075)
The remote host is running a version of McAfee VirusScan Enterprise for Linux VSEL that is affected by multiple vulnerabilities due to flaws in the included OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial...
