260 matches found
Design/Logic Flaw
Application protections bypass vulnerability in Intel Security McAfee Application Control MAC 7.0 and earlier and Endpoint Security ENS 10.2 and earlier allows local users to bypass local security protection via a command-line utility...
CVE-2016-8009
Privilege escalation vulnerability in Intel Security McAfee Application Control MAC 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior, or potentially unauthorized code execution via an unauthorized use of IOCTL call...
CVE-2016-8010
Application protections bypass vulnerability in Intel Security McAfee Application Control MAC 7.0 and earlier and Endpoint Security ENS 10.2 and earlier allows local users to bypass local security protection via a command-line utility...
CVE-2016-8011
Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security ENS Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site...
CVE-2016-8016
Information exposure in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to obtain the existence of unauthorized files on the system via a URL parameter...
CVE-2016-8020
Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to execute arbitrary code via a crafted HTTP request parameter...
CVE-2015-8991
Malicious file execution vulnerability in Intel Security McAfee Security Scan+ MSS+ before 3.11.266.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation...
CVE-2016-8022
Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to execute arbitrary code or cause a denial of service via a crafted authentication cookie...
CVE-2016-8023
Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to bypass server authentication via a crafted authentication cookie...
CVE-2016-8020
Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to execute arbitrary code via a crafted HTTP request parameter...
CVE-2016-8021
CVE-2016-8021 affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability is in the web interface’s verification of cryptographic signatures, allowing a remote authenticated attacker to spoof the update server and execute arbitrary code via a crafted input file. Impa...
CVE-2016-8005
CVE-2016-8005 is a file-extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) prior to 7.6.404h1128596. An attacker can bypass proper filename detection by forging a filename with a null byte in the extension, as described in NVD and relatedOpenVAS entries. Affected produ...
CVE-2016-8024
The CVE-2016-8024 entry affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability is HTTP Response Splitting caused by improper neutralization of CRLF sequences in HTTP headers, enabling a remote unauthenticated attacker to influence server responses and potentiall...
CVE-2017-3899
Vulnerability: CVE-2017-3899 affects Intel Security Advanced Threat Defense (ATD) Linux 3.6.0 and earlier. Root cause: SQL injection via a crafted HTTP request parameter, leading to disclosure of product information. Impact: partial confidentiality loss; remote authenticated users can obtain info...
CVE-2016-8017
Special element injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to read files on the webserver via a crafted user input...
CVE-2016-8023
CVE-2016-8023 affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The flaw is an authentication bypass in the web interface caused by improper handling of the nailsSessionId cookie, enabling an unauthenticated, remote attacker to bypass server authentication by manipulating/gu...
CVE-2016-8016
CVE-2016-8016 affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability is an information disclosure via the web interface: an authenticated remote attacker can use a URL parameter to determine the existence of unauthorized files on the system. Connected sources al...
CVE-2013-7462
The CVE-2013-7462 entry describes a directory traversal vulnerability in McAfee/SCC Platform prior to patch 1070 (6.14) and prior to patch 1076 (6.15). An unauthenticated user could view contents of arbitrary system files that lacked file-system read restrictions via a null-byte injection exploit...
CVE-2016-8019
CVE-2016-8019 is an XSS vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 and earlier. The issue affects the web interface where user input passed through tplt parameters (notably info:7/info:5 in NailsConfig.html or MonitorHost.html) can be crafted by an unauthenticated rem...