EUVD-2019-13245

Malware in sbrugna...

EUVD-2019-13250

Malware in sbrugna...

EUVD-2019-13241

Malware in sbrugna...

Command injection

Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management NSM 9.1 9.1.7.75 Update 4 and 9.2 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands...

CVE-2019-3606 Data leakage when in an MDR pair by McAfee Network Security Manager 9.x

Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management NSM 9.1 9.1.7.75 Update 4 and 9.2 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands...

CVE-2019-3606

CVE-2019-3606 affects McAfee Network Security Manager (NSM) in the web portal component when running NSM 9.x with versions prior to 9.1.7.75 Update 4 or 9.2.7.31 Update2. The issue enables data leakage by allowing administrators to view configuration information in plain text via the GUI or GUI t...

CVE-2019-3615

CVE-2019-3615 affects the web interface of McAfee Database Security prior to version 4.6.6 (March 2019). The issue allows local users to exfiltrate passwords by exploiting incorrectly autofilled password fields on the admin login screen. Impact is described in NT terms as exposure of passwords an...

Code injection

Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen...

CVE-2019-3610 True Key Browser Extension 3.1.9219.0 update fixes Sensitive Data Exposure vulnerability

Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key TK 3.1.9211.0 and earlier allows local users to expose confidential data via specially crafted malware...

CVE-2019-3610

The CVE-2019-3610 entry applies to the McAfee True Key Windows client. Affected software: McAfee True Key (Windows client) v3.1.9211.0 and earlier. Issue: local information disclosure via specially crafted malware, enabling a local attacker to exfiltrate confidential data. CVSS details indicate L...