Lucene search
+L

44 matches found

CVE
CVE
•added 2024/03/14 9:06 a.m.•89 views

CVE-2024-0311

CVE-2024-0311 affects Skyhigh Client Proxy on Windows, where a malicious insider can bypass the product’s policy without a valid release code. Connected sources describe a bypass via a named pipe MCPTrayPipe0 (CreateNamedPipeW) and related access-control weaknesses, enabling abuse of SCPBypass.ex...

5.5CVSS6.9AI score0.00421EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/03/14 9:06 a.m.•17 views

CVE-2024-0311

A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code...

5.5CVSS7AI score0.00421EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/03/14 12:00 a.m.•13 views

Skyhigh Client Proxy Security Vulnerability

Skyhigh Client Proxy is a client-side proxy from Skyhigh. A security vulnerability exists in Skyhigh Client Proxy 4.8.1 and earlier versions, which stems from an existing policy that allows an attacker to bypass the proxy...

5.5CVSS6.7AI score0.00421EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/03/14 12:00 a.m.•23 views

PT-2024-15461 · Mcafee · Skyhigh Client Proxy

Name of the Vulnerable Software and Affected Versions: Skyhigh Client Proxy affected versions not specified Description: A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code. Recommendations: At the moment, there is no information about a newer...

5.5CVSS7AI score0.00421EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/03/14 12:00 a.m.•15 views

Skyhigh Client Proxy Security Vulnerability

Skyhigh Client Proxy is a client proxy from Skyhigh. A security vulnerability exists in Skyhigh Client Proxy 4.8.1 and earlier versions, which stems from a vulnerability that allows an attacker to uninstall the proxy without a valid uninstall password...

5.5CVSS6.7AI score0.00164EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/14 12:00 a.m.•17 views

Skyhigh Client Proxy Security Vulnerability

Skyhigh Client Proxy is a client proxy from Skyhigh. A security vulnerability exists in Skyhigh Client Proxy 4.8.1 and earlier versions, which stems from the presence of a control flow implementation error issue that allows an attacker to circumvent existing security controls...

5.5CVSS6.7AI score0.00179EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/14 12:00 a.m.•16 views

PT-2024-15462 · Mcafee · Skyhigh Client Proxy

Name of the Vulnerable Software and Affected Versions: Skyhigh Client Proxy affected versions not specified Description: A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password. Recommendations: At the moment, there is no information about a newer version that...

5.5CVSS7AI score0.00164EPSS
SaveExploits0References3
OSV
OSV
•added 2022/10/06 6:16 p.m.•12 views

CVE-2022-36774

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. IBM X-Force ID: 233575...

5.3CVSS5.8AI score0.003EPSS
SaveExploits0References2
CVE
CVE
•added 2022/10/06 5:15 p.m.•80 views

CVE-2022-36774

IBM Robotic Process Automation (IBM RPA) is affected by CVE-2022-36774 for versions

6.5CVSS5.1AI score0.003EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2020/01/15 12:00 a.m.•12 views

The vulnerability of the McAfee Client Proxy software lies in its ability to bypass authentication by using a user-controlled password. This allows attackers to circumvent web traffic scanning and gain access to blocked websites.

The vulnerability of the McAfee Client Proxy software relates to the bypassing of authentication procedures by using a key controlled by the user. Exploiting this vulnerability allows an attacker to bypass web traffic scanning and gain access to blocked websites for a short period of time. This i...

5.3CVSS7.6AI score0.00665EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2019/12/05 12:46 a.m.•27 views

Arbitrary Code Execution

odata-client-proxy is vulnerable to arbitrary code execution. The vulnerability exists as the classes that were deserialized were not checked in AbstractService, allowing unsafe deserialization that can lead to arbitrary code execution...

9.8CVSS5.4AI score0.03621EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
•added 2019/11/25 12:00 a.m.•12 views

McAfee Client Proxy Authentication Bypass Vulnerability

McAfee Client Proxy MCP is a client proxy program in the McAfee Web Protection web security solution from McAfee, Inc. An authentication bypass vulnerability exists in McAfee MCP versions prior to 3.0.0 Windows. An attacker could exploit this vulnerability to bypass network traffic scans and acce...

8.6CVSS6.9AI score0.00665EPSS
SaveExploits0References1
NVD
NVD
•added 2019/11/22 8:15 p.m.•23 views

CVE-2019-3654

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...

8.6CVSS6.2AI score0.00665EPSS
SaveExploits0References1
OSV
OSV
•added 2019/11/22 8:15 p.m.•10 views

CVE-2019-3654

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...

8.6CVSS7.3AI score0.00665EPSS
SaveExploits0References1
Prion
Prion
•added 2019/11/22 8:15 p.m.•19 views

Authentication flaw

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...

6.8CVSS8.4AI score0.00665EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/11/22 7:56 p.m.•134 views

CVE-2019-3654

McAfee Client Proxy (MCP) for Windows is affected by an authentication bypass vulnerability prior to version 3.0.0. The issue allows a local user to bypass the normal authentication mechanism and generate an authorization key on the client that should only be created by the network administrator,...

8.6CVSS6.8AI score0.00665EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/11/22 7:56 p.m.•38 views

CVE-2019-3654 Client Proxy (MCP) - Authentication Bypass vulnerability

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...

5.3CVSS8.5AI score0.00665EPSS
SaveExploits0References1
Symantec
Symantec
•added 2019/11/20 12:00 a.m.•45 views

McAfee Client Proxy CVE-2019-3654 Local Authentication Bypass Vulnerability

Description McAfee Client Proxy is prone to a local authentication-bypass vulnerability. An attacker can exploit this issue to bypass the authentication mechanism. This may aid in further attacks. McAfee Client Proxy MCP versions prior to 3.0.0 are vulnerable. Technologies Affected McAfee Client...

2.1AI score0.00665EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2019/04/08 3:19 p.m.•36 views

GHSA-5XC6-FPC7-4QVG CoAPthon DoS due to Exceptions

The Serialize.deserialize method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles certain exceptions, leading to a denial of service in applications that use this library e.g., the standard CoAP server, CoAP client, CoAP reverse proxy, example collect CoAP server and client when they receive...

8.7CVSS7.1AI score0.01503EPSS
SaveExploits1References5
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•36 views

Symantec Multiple Products Client Proxy ActiveX (CLIproxy.dll) Remote Overflow

No description provided by source. source: http://www.securityfocus.com/bid/38222/info The Symantec Client Proxy ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote...

7.1AI score
SaveExploits0
Rows per page
Query Builder