CVE-2015-8993: Undefined Security Weakness

Malicious file execution vulnerability in Intel Security CloudAV Beta before 0.5.0.151.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation...

PT-2017-1474

Name of the Vulnerable Software and Affected Versions Intel Security VirusScan Enterprise Linux VSEL versions 2.0.3 and earlier McAfee VirusScan Enterprise affected versions not specified Description The issue is related to a cross-site request forgery CSRF vulnerability. This vulnerability allow...

PT-2017-1472

Name of the Vulnerable Software and Affected Versions Intel Security VirusScan Enterprise Linux VSEL versions 2.0.3 and earlier Description The issue is related to improper control of code generation, allowing remote authenticated users to execute arbitrary code via a crafted HTTP request...

PT-2017-7523

Name of the Vulnerable Software and Affected Versions Intel Security WebAdvisor versions prior to 4.0.2 Description A malicious file execution issue allows attackers to momentarily make the product vulnerable by executing preexisting, specifically crafted malware during installation or...

CVE-2016-8027: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator ePO 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a...

CVE-2016-8005: Undefined Security Weakness

File extension filtering vulnerability in Intel Security McAfee Email Gateway MEG before 7.6.404h1128596 allows attackers to fail to identify the file name properly via scanning an email with a forged attached filename that uses a null byte within the filename extension...

PT-2017-16167

Name of the Vulnerable Software and Affected Versions Intel Security Advanced Threat Defense ATD Linux versions 3.6.0 and earlier Description The issue allows remote authenticated users to obtain product information via a crafted HTTP request parameter. Recommendations For Intel Security Advanced...

CVE-2016-8023: Improper Authentication

Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to bypass server authentication via a crafted authentication cookie...

CVE-2016-8018: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to execute unauthorized commands via a crafted user input...

PT-2017-9461

Name of the Vulnerable Software and Affected Versions Intel Security Data Loss Prevention Endpoint DLPe versions 9.3.600 through 9.4.200 Description The issue allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process...

CVE-2017-3899: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Intel Security Advanced Threat Defense ATD Linux 3.6.0 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter...

CVE-2016-8010: Improper Access Control

Application protections bypass vulnerability in Intel Security McAfee Application Control MAC 7.0 and earlier and Endpoint Security ENS 10.2 and earlier allows local users to bypass local security protection via a command-line utility...

Local Privilege Escalation or Denial of Service via the Intel® Graphics Driver

Lenovo Security Advisory: LEN-7484 Potential Impact: Local privilege escalation or denial of service Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-5647 Summary Description: Multiple potential vulnerabilities exist in the Intel® Graphics Driver for Microsoft Windows. These...

Keys for Dharma Ransomware Released

Victims of the Dharma strain of ransomware can now get their files back, free of charge. Decryption keys for the ransomware were added to the Kaspersky Lab’s Rakhni decryptor tool Thursday morning. Dharma ransomware .dharma decryptor released pic.twitter.com/sIQorypOzj — Anton Ivanov @antonivanov...

Intel Security ePO Web UI Cross-Site Scripting Vulnerability

Intel Security ePO is a suite of scalable security management software from Intel Corporation formerly McAfee that provides centralized, streamlined management of endpoint, network, and content security and compliance solutions. The software enables centralized and streamlined management of...

CVE-2017-3896

Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not completely validated...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web user interface UI in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation...

CVE-2017-3902

Cross-site scripting XSS vulnerability in the Web user interface UI in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation...

CVE-2017-3896

CVE-2017-3896 concerns McAfee Agent’s remote log viewer: an unvalidated parameter in the remote log viewing capability (in 5.0.x before 5.0.4.449) allows an unauthenticated, remote attacker to submit crafted URLs, triggering a denial-of-service. Connected sources corroborate the flaw and fix path...

CVE-2017-3902

Cross-site scripting XSS vulnerability in the Web user interface UI in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation...