PT-2017-7524

Name of the Vulnerable Software and Affected Versions Intel Security CloudAV Beta versions prior to 0.5.0.151.3 Description A malicious file execution issue allows attackers to momentarily make the product vulnerable by executing specifically crafted malware during installation or uninstallation,...

PT-2017-1475

Name of the Vulnerable Software and Affected Versions Intel Security VirusScan Enterprise Linux VSEL versions 2.0.3 and earlier Description The issue is related to a special element injection vulnerability that exists due to insufficient input validation. This allows an authenticated remote...

PT-2017-1476

Name of the Vulnerable Software and Affected Versions Intel Security VirusScan Enterprise Linux VSEL version 2.0.3 and earlier McAfee VirusScan Enterprise affected versions not specified Description The issue allows authenticated remote attackers to obtain information about the existence of...

CVE-2016-8011: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security ENS Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site...

CVE-2016-8020: Improper Control of Generation of Code

Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to execute arbitrary code via a crafted HTTP request parameter...

CVE-2015-8991: Undefined Security Weakness

Malicious file execution vulnerability in Intel Security McAfee Security Scan+ MSS+ before 3.11.266.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation...

PT-2017-1468

Name of the Vulnerable Software and Affected Versions Intel Security VirusScan Enterprise Linux VSEL versions 2.0.3 and earlier McAfee VirusScan Enterprise affected versions not specified Description The issue is related to the improper neutralization of CRLF sequences in HTTP headers, which allo...

CVE-2016-8017: Improper Input Validation

Special element injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to read files on the webserver via a crafted user input...

CVE-2015-8990: Undefined Security Weakness

Detection bypass vulnerability in Intel Security Advanced Threat Defense ATD 3.4.6 and earlier allows malware samples to bypass ATD detection via renaming the malware...

PT-2017-9459

Name of the Vulnerable Software and Affected Versions Intel Security McAfee Application Control MAC versions 7.0 and earlier Intel Security McAfee Endpoint Security ENS versions 10.2 and earlier Description A bypass vulnerability in the application protection mechanism allows local users to...

CVE-2016-8025: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter...

CVE-2016-8024: Improper Neutralization of CRLF Sequences in HTTP Headers

Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to obtain sensitive information via the server HTTP response spoofing...

CVE-2015-8989: Undefined Security Weakness

Unsalted password vulnerability in the Enterprise Manager web portal component in Intel Security McAfee Vulnerability Manager MVM 7.5.8 and earlier allows attackers to more easily decrypt user passwords via brute force attacks against the database...

CVE-2016-8010: Improper Access Control

Application protections bypass vulnerability in Intel Security McAfee Application Control MAC 7.0 and earlier and Endpoint Security ENS 10.2 and earlier allows local users to bypass local security protection via a command-line utility...

CVE-2016-8026: Undefined Security Weakness

Arbitrary command execution vulnerability in Intel Security McAfee Security Scan Plus SSP 3.11.469 and earlier allows authenticated users to gain elevated privileges via unspecified vectors...

CVE-2016-8022: Improper Authentication

Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to execute arbitrary code or cause a denial of service via a crafted authentication cookie...

CVE-2016-8021: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to spoof update server and execute arbitrary code via a crafted input file...

CVE-2016-8019: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in attributes in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML via a crafted user input...

CVE-2016-8016: Exposure of Sensitive Information to an Unauthorized Actor

Information exposure in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to obtain the existence of unauthorized files on the system via a URL parameter...

CVE-2016-8012: Undefined Security Weakness

Access control vulnerability in Intel Security Data Loss Prevention Endpoint DLPe 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process memory get...