CVE-2014-8521

Cross-site scripting XSS vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-8518

The 1 Removable Media and 2 CD and DVD encryption offsite access options formerly Endpoint Encryption for Removable Media or EERM in McAfee File and Removable Media Protection FRP 4.3.0.x, and Endpoint Encryption for Files and Folders EEFF 3.2.x through 4.2.x, uses a hard-coded salt, which makes ...

CVE-2014-8537

McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to obtain sensitive information by reading the logs...

CVE-2014-8520

CVE-2014-8520 affects McAfee Network Data Loss Prevention (NDLP) older than version 9.3. Public sources describe an information disclosure vulnerability where remote attackers can obtain sensitive data via vectors related to open network ports. The available documents do not provide specific tech...

CVE-2014-8522

CVE-2014-8522 concerns the MySQL database component used by McAfee Network Data Loss Prevention (NDLP). The vulnerability stems from the NDLP deployment permitting unauthenticated access to its MySQL database prior to version 9.3, meaning remote attackers could gain access without credentials. Pu...

CVE-2014-8525

McAfee Network Data Loss Prevention NDLP before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie...

CVE-2014-8527

CVE-2014-8527 affects McAfee Network Data Loss Prevention (NDLP) prior to 9.3. The issue allows local users to obtain sensitive information and affect integrity through vectors related to a plain text password. The description provides affected product and root cause (plain text password handling...

CVE-2014-8530

Unspecified vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to obtain sensitive information, affect integrity, or cause a denial of service via unknown vectors, related to simultaneous logins...

CVE-2014-8535

CVE-2014-8535 affects McAfee Network Data Loss Prevention (NDLP) prior to version 9.2.2. The vulnerability allows local users to bypass a restriction on an unspecified functionality via unknown vectors. The provided documents identify the affected product and version and describe the impact (bypa...

CVE-2014-8529

CVE-2014-8529 affects McAfee Network Data Loss Prevention (NDLP) prior to version 9.3. The issue is that the product stores the SSH key in cleartext, enabling local users to obtain sensitive information via unspecified vectors. The documents provide the vulnerability presence and its information-...

CVE-2014-8523

CVE-2014-8523 describes a CSRF vulnerability in McAfee Network Data Loss Prevention (NDLP) prior to version 9.3. The flaw could allow remote attackers to hijack the authentication of unspecified victims via unknown vectors; the exact attack vectors and exploited components are not detailed in the...

CVE-2014-8524

McAfee Network Data Loss Prevention NDLP before 9.3 does not disable the autocomplete setting for the password and other fields, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2014-8520

McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to obtain sensitive information via vectors related to open network ports...

CVE-2014-8528

McAfee Network Data Loss Prevention NDLP before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log...

CVE-2014-8518

The CVE-2014-8518 entry affects McAfee File and Removable Media Protection (FRP) 4.3.0.x (Removable Media and CD/DVD encryption offsite access options) and Endpoint Encryption for Files and Folders (EEFF) 3.2.x–4.2.x. The root cause is a hard-coded salt, which can allow local users to brute-force...

CVE-2014-8533

CVE-2014-8533 affects McAfee Network Data Loss Prevention (NDLP) prior to version 9.3. The issue allows remote attackers to execute arbitrary code via vectors related to ICMP redirection, resulting in potential impact to confidentiality, integrity, and availability as stated by NVD (base score 7....

CVE-2014-8532

Technical details about CVE-2014-8532 are not publicly available in the provided documents. The records describe an unspecified vulnerability in McAfee NDLP prior to 9.3 but do not specify affected components, root cause, or fixes. Monitor for updates.

CVE-2014-8531

The TLS/SSL Server in McAfee Network Data Loss Prevention NDLP before 9.3 uses weak cipher algorithms, which makes it easier for remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2014-8529

McAfee Network Data Loss Prevention NDLP before 9.3 stores the SSH key in cleartext, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2014-8526

McAfee Network Data Loss Prevention (NDLP) prior to version 9.3 is affected by a local information-disclosure vulnerability where an attacker can read a Java stack trace to obtain sensitive information. The available documents confirm the affected product and symptom (stack trace exposure) and th...