EUVD-2016-8868

Malware in sbrugna...

CVE-2016-8022

Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to execute arbitrary code or cause a denial of service via a crafted authentication cookie...

CVE-2016-8025

SQL injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter...

Authentication flaw

Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to bypass server authentication via a crafted authentication cookie...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to execute unauthorized commands via a crafted user input...

CVE-2016-8017

Special element injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to read files on the webserver via a crafted user input...

Sql injection

SQL injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter...

CVE-2016-8024

The CVE-2016-8024 entry affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability is HTTP Response Splitting caused by improper neutralization of CRLF sequences in HTTP headers, enabling a remote unauthenticated attacker to influence server responses and potentiall...

CVE-2016-8017

Special element injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to read files on the webserver via a crafted user input...

PT-2017-1474

Name of the Vulnerable Software and Affected Versions Intel Security VirusScan Enterprise Linux VSEL versions 2.0.3 and earlier McAfee VirusScan Enterprise affected versions not specified Description The issue is related to a cross-site request forgery CSRF vulnerability. This vulnerability allow...

PT-2017-1475

Name of the Vulnerable Software and Affected Versions Intel Security VirusScan Enterprise Linux VSEL versions 2.0.3 and earlier Description The issue is related to a special element injection vulnerability that exists due to insufficient input validation. This allows an authenticated remote...

CVE-2016-8023: Improper Authentication

Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to bypass server authentication via a crafted authentication cookie...

CVE-2016-8018: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to execute unauthorized commands via a crafted user input...

CVE-2016-8021: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to spoof update server and execute arbitrary code via a crafted input file...

PT-2017-1476

Name of the Vulnerable Software and Affected Versions Intel Security VirusScan Enterprise Linux VSEL version 2.0.3 and earlier McAfee VirusScan Enterprise affected versions not specified Description The issue allows authenticated remote attackers to obtain information about the existence of...

PT-2017-1472

Name of the Vulnerable Software and Affected Versions Intel Security VirusScan Enterprise Linux VSEL versions 2.0.3 and earlier Description The issue is related to improper control of code generation, allowing remote authenticated users to execute arbitrary code via a crafted HTTP request...

CVE-2016-8022: Improper Authentication

Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to execute arbitrary code or cause a denial of service via a crafted authentication cookie...

CVE-2016-8024: Improper Neutralization of CRLF Sequences in HTTP Headers

Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to obtain sensitive information via the server HTTP response spoofing...

CVE-2016-8025: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter...

CVE-2016-8017: Improper Input Validation

Special element injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to read files on the webserver via a crafted user input...