CVE-2016-8023: Improper Authentication

Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to bypass server authentication via a crafted authentication cookie...

PT-2017-1475

Name of the Vulnerable Software and Affected Versions Intel Security VirusScan Enterprise Linux VSEL versions 2.0.3 and earlier Description The issue is related to a special element injection vulnerability that exists due to insufficient input validation. This allows an authenticated remote...

CVE-2016-8018: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to execute unauthorized commands via a crafted user input...

CVE-2016-8021: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to spoof update server and execute arbitrary code via a crafted input file...

CVE-2016-8005: Undefined Security Weakness

File extension filtering vulnerability in Intel Security McAfee Email Gateway MEG before 7.6.404h1128596 allows attackers to fail to identify the file name properly via scanning an email with a forged attached filename that uses a null byte within the filename extension...

CVE-2016-8011: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security ENS Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site...

PT-2017-1468

Name of the Vulnerable Software and Affected Versions Intel Security VirusScan Enterprise Linux VSEL versions 2.0.3 and earlier McAfee VirusScan Enterprise affected versions not specified Description The issue is related to the improper neutralization of CRLF sequences in HTTP headers, which allo...

CVE-2016-8022: Improper Authentication

Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to execute arbitrary code or cause a denial of service via a crafted authentication cookie...

CVE-2016-8010: Improper Access Control

Application protections bypass vulnerability in Intel Security McAfee Application Control MAC 7.0 and earlier and Endpoint Security ENS 10.2 and earlier allows local users to bypass local security protection via a command-line utility...

CVE-2016-8027: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator ePO 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a...

CVE-2015-8993: Undefined Security Weakness

Malicious file execution vulnerability in Intel Security CloudAV Beta before 0.5.0.151.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation...

PT-2017-9459

Name of the Vulnerable Software and Affected Versions Intel Security McAfee Application Control MAC versions 7.0 and earlier Intel Security McAfee Endpoint Security ENS versions 10.2 and earlier Description A bypass vulnerability in the application protection mechanism allows local users to...

CVE-2015-8991: Undefined Security Weakness

Malicious file execution vulnerability in Intel Security McAfee Security Scan+ MSS+ before 3.11.266.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation...

PT-2017-7523

Name of the Vulnerable Software and Affected Versions Intel Security WebAdvisor versions prior to 4.0.2 Description A malicious file execution issue allows attackers to momentarily make the product vulnerable by executing preexisting, specifically crafted malware during installation or...

CVE-2016-8009: Undefined Security Weakness

Privilege escalation vulnerability in Intel Security McAfee Application Control MAC 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior, or potentially unauthorized code execution via an unauthorized use of IOCTL call...

PT-2017-9461

Name of the Vulnerable Software and Affected Versions Intel Security Data Loss Prevention Endpoint DLPe versions 9.3.600 through 9.4.200 Description The issue allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process...

CVE-2015-8992: Undefined Security Weakness

Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation...

CVE-2016-8020: Improper Control of Generation of Code

Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to execute arbitrary code via a crafted HTTP request parameter...

CVE-2016-8024: Improper Neutralization of CRLF Sequences in HTTP Headers

Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to obtain sensitive information via the server HTTP response spoofing...

CVE-2016-8026: Undefined Security Weakness

Arbitrary command execution vulnerability in Intel Security McAfee Security Scan Plus SSP 3.11.469 and earlier allows authenticated users to gain elevated privileges via unspecified vectors...