Lucene search
+L

284 matches found

Cvelist
Cvelist
•added 2019/10/28 2:23 p.m.•27 views

CVE-2019-3636 File masquerade attack vulnerability in McAfee Total Protection

A File Masquerade vulnerability in McAfee Total Protection MTP version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected...

7.5CVSS7.5AI score0.00225EPSS
SaveExploits0References1
CVE
CVE
•added 2019/10/28 2:23 p.m.•71 views

CVE-2019-3636

McAfee Total Protection Windows client (versions up to 16.0.R21) is affected by CVE-2019-3636, a local File Masquerade vulnerability that lets an attacker read the plaintext list of AV-Scan exclusion files from the Windows registry and potentially replace excluded files with malware without detec...

7.8CVSS7.4AI score0.00225EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/28 12:00 a.m.•3 views

CVE-2019-3636: Cleartext Storage of Sensitive Information

A File Masquerade vulnerability in McAfee Total Protection MTP version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected...

7.8CVSS7.2AI score0.00225EPSS
SaveExploits0References2
Symantec
Symantec
•added 2019/10/25 12:00 a.m.•34 views

McAfee Total Protection Windows Client CVE-2019-3636 Local Security Bypass Vulnerability

Description McAfee Total Protection Windows client is prone to a local security-bypass vulnerability. Local attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks. Versions prior to McAfee Total Protection 16.0.R...

1.8AI score0.00225EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2019/09/20 12:00 a.m.•13 views

McAfee Total Protection MTP Free Antivirus Trial Code Issue Vulnerability

McAfee Total Protection MTP is a suite of antivirus software from McAfee, Inc.MTP Free Antivirus Trial is its free trial version. A code issue vulnerability exists in the Microsoft Windows client in McAfee Total Protection MTP Free Antivirus Trial 16.0.R18 and prior versions. An attacker could...

6.9CVSS7.5AI score0.01479EPSS
SaveExploits0References1
NVD
NVD
•added 2019/09/13 1:15 p.m.•20 views

CVE-2019-3646

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights...

6.9CVSS6.8AI score0.01479EPSS
SaveExploits0References1
OSV
OSV
•added 2019/09/13 1:15 p.m.•11 views

CVE-2019-3646

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights...

6.5CVSS6.1AI score0.01479EPSS
SaveExploits0References1
Prion
Prion
•added 2019/09/13 1:15 p.m.•27 views

Spoofing

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights...

6CVSS6.6AI score0.01479EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/09/13 1:05 p.m.•144 views

CVE-2019-3646

CVE-2019-3646 affects Microsoft Windows client components of McAfee Total Protection (MTP) Free Antivirus Trial, up to and including version 16.0.R18. It is described as a DLL search order hijacking vulnerability that allows a local attacker with administrator rights to cause arbitrary code execu...

6.9CVSS6.6AI score0.01479EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/09/13 1:05 p.m.•31 views

CVE-2019-3646 McAfee Total Protection - Free Antivirus Trial: DLL Search Order Hijacking vulnerability

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights...

6.9CVSS6.8AI score0.01479EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/13 12:00 a.m.•6 views

CVE-2019-3646: Untrusted Search Path

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights...

6.9CVSS7.3AI score0.01479EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/02/19 12:00 a.m.•14 views

The vulnerability of the McAfee Total Protection antivirus protection, related to errors in checking the loading path of dynamic libraries, allows a hacker to execute arbitrary code.

The vulnerability of the McAfee Total Protection antivirus protection lies in errors during the checking of the path where dynamic libraries are loaded. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.2CVSS7.2AI score0.01373EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2019/01/29 12:00 a.m.•10 views

McAfee Total Protection (MTP) Security Restriction Bypass Vulnerability

McAfee Total Protection is a suite of antivirus software from the American company McAfee McAfee. A security vulnerability exists in the Windows client in McAfee MTP versions prior to 16.0.R18. This vulnerability can be exploited by a local attacker with specially crafted malware to bypass the...

7.5CVSS6.5AI score0.00347EPSS
SaveExploits0References1
CVE
CVE
•added 2019/01/28 6:00 p.m.•64 views

CVE-2019-3593

CVE-2019-3593 tracks a privilege/trust vulnerability in the Windows client of McAfee Total Protection (MTP) before version 16.0.R18 . The issue allows local attackers to bypass the product’s self‑protection, tamper with policies and product files, and uninstall McAfee software via specially craft...

7.5CVSS6.7AI score0.00347EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2019/01/28 5:29 p.m.•13 views

CVE-2019-3593

Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies and product files, and uninstall McAfee software without permission via specially crafted malware...

7.1CVSS7.1AI score0.00347EPSS
SaveExploits0References1
NVD
NVD
•added 2019/01/28 5:29 p.m.•33 views

CVE-2019-3593

Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies and product files, and uninstall McAfee software without permission via specially crafted malware...

7.5CVSS7.3AI score0.00347EPSS
SaveExploits0References1
Prion
Prion
•added 2019/01/28 5:29 p.m.•25 views

Privilege escalation

Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies and product files, and uninstall McAfee software without permission via specially crafted malware...

5.6CVSS6.6AI score0.00347EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/28 12:00 a.m.•3 views

CVE-2019-3593: Undefined Security Weakness

Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies and product files, and uninstall McAfee software without permission via specially crafted malware...

7.5CVSS5.8AI score0.00347EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/01/24 12:00 a.m.•19 views

McAfee Total Protection DLL Search Order Hijacking Vulnerability

McAfee Total Protection is a suite of antivirus software from the American company McAfee McAfee. A security vulnerability exists in the Microsoft Windows client in versions prior to McAfee MTP 16.0.18. An attacker could exploit the vulnerability to execute arbitrary code...

7.2CVSS7.1AI score0.01373EPSS
SaveExploits0References1
OSV
OSV
•added 2019/01/23 3:29 p.m.•17 views

CVE-2019-3587

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised folder...

6.5CVSS7.2AI score0.01373EPSS
SaveExploits0References1
Rows per page
Query Builder