CVE-2020-12242

CVE-2020-12242 affects Valve Source Engine (Valve) where a local attacker can gain privileges by writing to the /tmp/hl2_relaunch file, which is later executed in the context of a different user account. Public references in connected documents indicate exploitation against Source Engine CS:GO Bu...

CVE-2019-4668

IBM UrbanCode Deploy UCD 7.0.4.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 171250...

EulerOS Virtualization 3.0.2.2 : polkit (EulerOS-SA-2020-1463)

According to the versions of the polkit package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The polkitbackendactionpoolinit function in polkitbackend/polkitbackendactionpool.c in PolicyKit aka polkit before 0.113 might all...

Huawei EulerOS: Security Advisory for coreutils (EulerOS-SA-2020-1484)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-7255

Privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2020 Update allows local users to gain elevated privileges via ENS not checking user permissions when editing configuration in the ENS client interface...

CVE-2020-7255

Privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2020 Update allows local users to gain elevated privileges via ENS not checking user permissions when editing configuration in the ENS client interface...

CVE-2020-7261

Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security ENS Prior to 10.7.0 February 2020 Update allows local users to disable Endpoint Security via a carefully crafted user input...

CVE-2020-7277

Protection mechanism failure in all processes in McAfee Endpoint Security ENS for Windows prior to 10.7.0 April 2020 Update allows local users to stop certain McAfee ENS processes, reducing the protection offered...

Privilege escalation

Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security ENS Prior to 10.7.0 February 2020 Update allows local users to bypass local security protection via a carefully crafted input file...

Buffer overflow

Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security ENS Prior to 10.7.0 February 2020 Update allows local users to disable Endpoint Security via a carefully crafted user input...

Input validation

Accessing, modifying or executing executable files vulnerability in the uninstaller in McAfee Endpoint Security ENS for Windows Prior to 10.7.0 April 2020 Update allows local users to execute arbitrary code via a carefully crafted input file...

Session fixation

Protection mechanism failure in all processes in McAfee Endpoint Security ENS for Windows prior to 10.7.0 April 2020 Update allows local users to stop certain McAfee ENS processes, reducing the protection offered...

CVE-2020-7259 Unsigned executable vulnerability in ENS can be used to bypass intended self-protection rules

Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security ENS Prior to 10.7.0 February 2020 Update allows local users to bypass local security protection via a carefully crafted input file...

CVE-2020-7259

The CVE-2020-7259 entry concerns McAfee Endpoint Security (ENS) for Windows and describes a privilege/trust bypass via a crafted input file in ENS prior to 10.7.0 February 2020 Update. Connected docs indicate related issues in the same ENS release family and list fixes in 10.7.0 (April 2020 Updat...

CVE-2020-7277 McAfee processes not protected

Protection mechanism failure in all processes in McAfee Endpoint Security ENS for Windows prior to 10.7.0 April 2020 Update allows local users to stop certain McAfee ENS processes, reducing the protection offered...

CVE-2020-7277

CVE-2020-7277 (McAfee Endpoint Security for Windows) is a local-privilege issue in ENS prior to the 10.7.0 April 2020 Update. The vulnerability is a protection mechanism failure that allows local users to stop certain ENS processes, reducing protection. Connected sources (SB10309) confirm affecte...

Security feature bypass

Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security ENS for Windows prior to 10.7.0 April 2020 and 10.6.1 April 2020 updates allows remote attackers and local users to allow or block unauthorized traffic via pre-existing rules...

CVE-2020-7278

McAfee Endpoint Security (ENS) Firewall for Windows is affected by CVE-2020-7278 due to an access-control rule handling flaw. The issue arises in ENS versions prior to 10.7.0 (Feb 2020/April 2020 updates) and 10.6.1 (April 2020 update), where pre-existing firewall rules are not properly enforced ...

CVE-2020-7278 McAfee firewall rules not enforced correctly

Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security ENS for Windows prior to 10.7.0 April 2020 and 10.6.1 April 2020 updates allows remote attackers and local users to allow or block unauthorized traffic via pre-existing rules...

CVE-2020-7273

Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security ENS for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters...