260 matches found
CVE-2016-8009
CVE-2016-8009 affects Intel Security McAfee Application Control (MAC) 6.x and 7.0.x. The root cause is unauthorized IOCTL usage that enables local privilege escalation, which can lead to DoS, abnormal behavior, or potentially arbitrary code execution. Public sources describe affected versions (MA...
CVE-2015-8992
The CVE-2015-8992 entry applies to Intel Security WebAdvisor versions before 4.0.2, 4.0.1 and 3.7.2 . The vulnerability arises from a flaw that allows a crafted malware payload to be executed during installation or uninstallation, making the product momentarily vulnerable. The issue does not affe...
CVE-2014-9920
CVE-2014-9920 affects McAfee Application Control (MAC) 6.x before specific hotfixes (9726 for 6.0.0, 9068 for 6.0.1, 692 for 6.1.0, 399 for 6.1.1, 426 for 6.1.2, 357 for 6.1.3 and earlier). A malformed Windows binary can be created that is treated as non-executable and bypasses the whitelisting p...
CVE-2016-8017
CVE-2016-8017 is a concrete vulnerability in McAfee VirusScan Enterprise for Linux (VSEL) up to version 2.0.3 where the web interface handles special elements (tplt) in user input, enabling an authenticated remote attacker to read files on the webserver. The underlying issue is a Special Element ...
CVE-2015-8990
Detection bypass vulnerability in Intel Security Advanced Threat Defense ATD 3.4.6 and earlier allows malware samples to bypass ATD detection via renaming the malware...
CVE-2015-8986
CVE-2015-8986 is described as a sandbox-detection evasion vulnerability in McAfee/Intel Security Advanced Threat Defense (MATD) versions up to 3.4.2.32. The issue allows malware to detect the sandbox environment and bypass malware detection, resulting in false negatives. The available sources ide...
CVE-2015-8987
McAfee Agent (MA) for non-Mac OS, version 4.8.0 patch 2 and earlier, is affected by a MitM vulnerability that lets an attacker cause a MA instance to communicate with a rogue ePO server via migration to another ePO server. The OpenVAS entry and NVD record corroborate the MITM impact but do not pr...
CVE-2016-8025
SQL injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter...
CVE-2016-8018
CVE-2016-8018 affects McAfee VirusScan Enterprise for Linux (VSEL) up to version 2.0.3. The issue is a cross-site request forgery (CSRF) vulnerability in the web interface that can allow an authenticated remote attacker to execute unauthorized commands via crafted input. Connected documents corro...
CVE-2016-8018
Cross-site request forgery CSRF vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to execute unauthorized commands via a crafted user input...
CVE-2016-8027
SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator ePO 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a...
CVE-2016-8019
Cross-site scripting XSS vulnerability in attributes in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML via a crafted user input...
CVE-2016-8009
Privilege escalation vulnerability in Intel Security McAfee Application Control MAC 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior, or potentially unauthorized code execution via an unauthorized use of IOCTL call...
CVE-2016-8011
Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security ENS Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site...
CVE-2016-8021
Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to spoof update server and execute arbitrary code via a crafted input file...
CVE-2013-7460
A write protection and execution bypass vulnerability in McAfee now Intel Security Application Control MAC 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions...
CVE-2015-8992
Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation...
CVE-2016-8022
CVE-2016-8022 affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability enables authentication bypass via the web interface by manipulating authentication cookies; an unauthenticated remote attacker could bypass login and potentially execute code or cause a denial ...
CVE-2016-8025
CVE-2016-8025 affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability is a SQL injection in the web interface exposed via crafting the HTTP request parameter (mon:0), allowing an authenticated remote attacker to manipulate or disclose data stored in the backend S...