EUVD-2009-5070

Malware in sbrugna...

EUVD-2018-18417

Malware in sbrugna...

McAfee Common UI ePO Extension Information Disclosure Vulnerability

McAfee Common UI CUI is a set of user interfaces for managing McAfee products from McAfee, Inc. in the United States. ePO extension is one of the software managers. A security vulnerability exists in the ePO extension in McAfee CUI version 2.0.2. A remote attacker could exploit the vulnerability ...

CVE-2018-6670

External Entity Attack vulnerability in the ePO extension in McAfee Common UI CUI 2.0.2 allows remote authenticated users to view confidential information via a crafted HTTP request parameter...

CVE-2018-6670

External Entity Attack vulnerability in the ePO extension in McAfee Common UI CUI 2.0.2 allows remote authenticated users to view confidential information via a crafted HTTP request parameter...

PT-2018-17705

Name of the Vulnerable Software and Affected Versions McAfee Common UI CUI version 2.0.2 Description The issue allows remote authenticated users to view confidential information by sending a crafted HTTP request parameter. Recommendations For McAfee Common UI CUI version 2.0.2, update to a versio...

CVE-2018-6670: Improper Restriction of XML External Entity Reference

External Entity Attack vulnerability in the ePO extension in McAfee Common UI CUI 2.0.2 allows remote authenticated users to view confidential information via a crafted HTTP request parameter...

PT-2012-1280

Name of the Vulnerable Software and Affected Versions McAfee Common Management Agent CMA versions 3.5.5 through 3.5.5.588 McAfee Common Management Agent CMA versions 3.6.0 through 3.6.0.608 McAfee Agent versions prior to 4.0 Patch 3 Description The issue allows remote authenticated users to...

CVE-2009-5115: Undefined Security Weakness

McAfee Common Management Agent CMA 3.5.5 through 3.5.5.588 and 3.6.0 through 3.6.0.608, and McAfee Agent 4.0 before Patch 3, allows remote authenticated users to overwrite arbitrary files by accessing a report-writing ActiveX control COM object...

McAfee Common Management Agent < 3.6.0.603 FrameworkService.exe AVClient DoS

According to its banner, the version of the McAfee Common Management Agent CMA running on the remote host is prior to 3.6.0.603. It is, therefore, affected by a denial of service vulnerability in FrameworkService.exe due to a memory corruption issue. An unauthenticated, remote attacker can exploi...

CVE-2008-1855: Undefined Security Weakness

FrameworkService.exe in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator ePO and ProtectionPilot PrP, allows remote attackers to corrupt memory and cause a denial of service CMA Framework service crash via a long invalid method in requests for the...

McAfee Common Management Agent < 3.6.0.595 UDP Packet Handling Format String

According to its banner, the version of McAfee Common Management Agent CMA running on the remote host is prior to 3.6.0.595. It is, therefore, affected by a flaw in the logDetail function of applib.dll due to calling vsnwprintf without the needed format string argument. An unauthenticated, remote...

CVE-2008-1357: Use of Externally-Controlled Format String

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string...