CVE-2015-8990: Undefined Security Weakness

Detection bypass vulnerability in Intel Security Advanced Threat Defense ATD 3.4.6 and earlier allows malware samples to bypass ATD detection via renaming the malware...

PT-2017-1472

Name of the Vulnerable Software and Affected Versions Intel Security VirusScan Enterprise Linux VSEL versions 2.0.3 and earlier Description The issue is related to improper control of code generation, allowing remote authenticated users to execute arbitrary code via a crafted HTTP request...

CVE-2017-3899: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Intel Security Advanced Threat Defense ATD Linux 3.6.0 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter...

CVE-2016-8012: Undefined Security Weakness

Access control vulnerability in Intel Security Data Loss Prevention Endpoint DLPe 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process memory get...

PT-2017-7521

Name of the Vulnerable Software and Affected Versions Intel Security Advanced Threat Defense ATD versions 3.4.6 and earlier Description A detection bypass issue allows malware samples to evade detection by renaming the malware. Recommendations For Intel Security Advanced Threat Defense ATD versio...

PT-2017-16167

Name of the Vulnerable Software and Affected Versions Intel Security Advanced Threat Defense ATD Linux versions 3.6.0 and earlier Description The issue allows remote authenticated users to obtain product information via a crafted HTTP request parameter. Recommendations For Intel Security Advanced...

CVE-2015-8989: Undefined Security Weakness

Unsalted password vulnerability in the Enterprise Manager web portal component in Intel Security McAfee Vulnerability Manager MVM 7.5.8 and earlier allows attackers to more easily decrypt user passwords via brute force attacks against the database...

CVE-2016-8016: Exposure of Sensitive Information to an Unauthorized Actor

Information exposure in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to obtain the existence of unauthorized files on the system via a URL parameter...

CVE-2016-8019: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in attributes in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML via a crafted user input...

CVE-2016-8017: Improper Input Validation

Special element injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to read files on the webserver via a crafted user input...

CVE-2016-8025: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter...

CVE-2016-8018: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to execute unauthorized commands via a crafted user input...

Local Privilege Escalation or Denial of Service via the Intel® Graphics Driver

Lenovo Security Advisory: LEN-7484 Potential Impact: Local privilege escalation or denial of service Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-5647 Summary Description: Multiple potential vulnerabilities exist in the Intel® Graphics Driver for Microsoft Windows. These...

Keys for Dharma Ransomware Released

Victims of the Dharma strain of ransomware can now get their files back, free of charge. Decryption keys for the ransomware were added to the Kaspersky Lab’s Rakhni decryptor tool Thursday morning. Dharma ransomware .dharma decryptor released pic.twitter.com/sIQorypOzj — Anton Ivanov @antonivanov...

Intel Security ePO Web UI Cross-Site Scripting Vulnerability

Intel Security ePO is a suite of scalable security management software from Intel Corporation formerly McAfee that provides centralized, streamlined management of endpoint, network, and content security and compliance solutions. The software enables centralized and streamlined management of...

CVE-2017-3896

Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not completely validated...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web user interface UI in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation...

CVE-2017-3902

Cross-site scripting XSS vulnerability in the Web user interface UI in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation...

CVE-2017-3896

CVE-2017-3896 concerns McAfee Agent’s remote log viewer: an unvalidated parameter in the remote log viewing capability (in 5.0.x before 5.0.4.449) allows an unauthenticated, remote attacker to submit crafted URLs, triggering a denial-of-service. Connected sources corroborate the flaw and fix path...

CVE-2017-3902

CVE-2017-3902 affects Intel Security ePO 5.1.x (prior to 5.1.3 HF1110787). The OpenVAS/Nessus entries describe a reflected XSS in the Web UI of ePO’s computer management services that is exploitable by an authenticated user who is lured into a crafted URL. The vulnerability stems from improper va...