CVE-2019-3649

Information Disclosure vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attackers to gain access to hashed credentials via carefully constructed POST request extracting incorrectly recorded data from log files...

CVE-2019-3650

Information Disclosure vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser credentials via carefully constructed GET request extracting insecurely information stored in the database...

Information disclosure

Information Disclosure vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attackers to gain access to hashed credentials via carefully constructed POST request extracting incorrectly recorded data from log files...

Information disclosure

Information Disclosure vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser credentials via carefully constructed GET request extracting insecurely information stored in the database...

Information disclosure

Information Disclosure vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an administrator via using the atduser credentials, which were too permissive...

Input validation

Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests...

CVE-2019-3660 Advanced Threat Defense (ATD) - Improper Neutralization of HTTP requests

Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests...

CVE-2019-3650 Advanced Threat Defense (ATD) - Information Disclosure vulnerability

Information Disclosure vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser credentials via carefully constructed GET request extracting insecurely information stored in the database...

CVE-2019-3651 Advanced Threat Defense (ATD) - Information Disclosure vulnerability

Information Disclosure vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an administrator via using the atduser credentials, which were too permissive...

CVE-2019-3651

CVE-2019-3651 affects McAfee Advanced Threat Defense (ATD) prior to 4.8. Vulnerability arises from overly permissive ATD user credentials (atduser) that allow remote authenticated attackers to access ePO as an administrator, enabling information disclosure. Connected sources confirm the issue and...

CVE-2019-3649 Advanced Threat Defense (ATD) - Information Disclosure vulnerability

Information Disclosure vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attackers to gain access to hashed credentials via carefully constructed POST request extracting incorrectly recorded data from log files...

Unspecified Vulnerability in McAfee Advanced Threat Defense

McAfee Advanced Threat Defense ATD is a suite of advanced threat protection systems from the U.S.-based company McAfee McAfee. The system provides zero-day attack protection and malware protection through static code analysis, malware dynamic analysis and machine learning. A security vulnerabilit...

Important: Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support. The microcodectl packages provide microcode updates for Intel x86 processors. This update adds the following enhancement: Update Intel microcode version to microcode-20191112 BZ1769883 Users of...

McAfee Advanced Threat Defense SB10304 Multiple Security Vulnerabilities

Description McAfee Advanced Threat Defense is prone to the following security vulnerabilities: 1. Multiple information disclosure vulnerabilities. 2. A remote command execution vulnerability 3. Directory-traversal vulnerability. 4. An SQL-injection vulnerability. 5. A security vulnerability...

Important: Red Hat Bug Fix Advisory: Advanced Virtualization bug fix and enhancement update

The updated Advanced Virtualization module is now available for Red Hat Enterprise Linux 8.1 Advanced Virtualization. The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Red Hat products...

CVE-2019-15966

A vulnerability in the web application of Cisco TelePresence Advanced Media Gateway could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to the lack of input validation in the web application. An attacker could...

Input validation

A vulnerability in the web application of Cisco TelePresence Advanced Media Gateway could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to the lack of input validation in the web application. An attacker could...

CVE-2019-15966

A vulnerability in the web application of Cisco TelePresence Advanced Media Gateway could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to the lack of input validation in the web application. An attacker could...

CVE-2019-15966

CVE-2019-15966 affects Cisco TelePresence Advanced Media Gateway web application. The vulnerability arises from a lack of input validation in the web interface, allowing an authenticated, remote attacker to send a crafted HTTP request that can stop services and potentially render the device inope...

WordPress YITH Advanced Refund System for WooCommerce plugin <=1.0.11 - Authenticated Settings Change (YITH Plugin Framework <=3.3.8) vulnerability

Authenticated Settings Change YITH Plugin Framework =3.3.8 vulnerability found by Jerome Bruandet in WordPress YITH Advanced Refund System for WooCommerce plugin versions =1.0.11. Solution Update the WordPress YITH Advanced Refund System for WooCommerce plugin to the latest available version at...