FortiClient SSLVPN Privilege Elevation Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. An elevation of privilege vulnerability exists in FortiClient SSLVPN. An attacker can exploit this vulnerability to gain root privileges...

Jon Oberheide on Perimeter Security

Mike Mimoso talks to Duo Security co-founder and CTO Jon Oberheide at RSA Conference about Google’s BeyondCorp security model, enforcing perimeter security, how endpoint security has evolved through the years, and the future of passwords. Download: JonOberheideonPerimeterSecurity.mp3 Music by Chr...

Intel Security McAfee Endpoint Security Web Control Cross-Site Scripting Vulnerability

McAfee Endpoint Security is an integrated security solution that protects servers, endpoint computer systems, laptops and tablets against all types of threats. A cross-site scripting vulnerability exists in Intel Security McAfee Endpoint Security Web Control. It allows attackers to inject arbitra...

CVE-2016-8010

Application protections bypass vulnerability in Intel Security McAfee Application Control MAC 7.0 and earlier and Endpoint Security ENS 10.2 and earlier allows local users to bypass local security protection via a command-line utility...

CVE-2016-8011

Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security ENS Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site...

Design/Logic Flaw

Application protections bypass vulnerability in Intel Security McAfee Application Control MAC 7.0 and earlier and Endpoint Security ENS 10.2 and earlier allows local users to bypass local security protection via a command-line utility...

Cross site scripting

Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security ENS Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site...

CVE-2016-8011

Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security ENS Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site...

CVE-2016-8011

Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security ENS Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site...

CVE-2016-8010

CVE-2016-8010 affects McAfee Application Control (MAC) v7.0 and earlier and McAfee Endpoint Security (ENS) v10.2 and earlier. Description: a vulnerability allows a local attacker to bypass local security protections via a command‑line utility. The connected documents confirm affected products and...

PT-2017-9460

Name of the Vulnerable Software and Affected Versions Intel Security McAfee Endpoint Security ENS Web Control versions prior to 10.2.0.408.10 Description A cross-site scripting issue exists, allowing attackers to inject arbitrary web script or HTML via a crafted web site. Recommendations For...

CVE-2016-8011: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security ENS Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site...

PT-2017-9459

Name of the Vulnerable Software and Affected Versions Intel Security McAfee Application Control MAC versions 7.0 and earlier Intel Security McAfee Endpoint Security ENS versions 10.2 and earlier Description A bypass vulnerability in the application protection mechanism allows local users to...

CVE-2016-8010: Improper Access Control

Application protections bypass vulnerability in Intel Security McAfee Application Control MAC 7.0 and earlier and Endpoint Security ENS 10.2 and earlier allows local users to bypass local security protection via a command-line utility...

CVE-2016-9892

CVE-2016-9892 affects the esets_daemon service in ESET Endpoint Antivirus for macOS prior to 6.4.168.0 and Endpoint Security for macOS prior to 6.4.168.0. Root cause is improper verification of X.509 certificates from the edf.eset.com SSL server, enabling MITM attackers to spoof the server and pr...

CVE-2016-9892: Improper Certificate Validation

The esetsdaemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses ...

PT-2017-10383

Name of the Vulnerable Software and Affected Versions ESET Endpoint Antivirus for macOS versions prior to 6.4.168.0 ESET Endpoint Security for macOS versions prior to 6.4.168.0 Description The issue concerns the esets daemon service, which fails to properly verify X.509 certificates from the...

McAfee Application Control and Endpoint Security Security Bypass Vulnerability

McAfee Application Control MAC and Endpoint Security are both products of the U.S. company McAfee McAfee. The former is a set of program control software, the latter is a set of endpoint security software to provide intelligent threat defense. MAC and Endpoint Security have a local security bypas...

Kaspersky Endpoint Security - Certificates or keys found, Corrupted files, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Kaspersky Endpoint Security published at the 'play' market has multiple vulnerabilities...

Facebook releases Osquery Security Tool for Windows

OSquery, an open-source framework created by Facebook that allows organizations to look for potential malware or malicious activity on their networks, was available for Mac OS X and Linux environments until today. But now the social network has announced that the company has developed a Windows...