Cross site scripting

Cross Site scripting vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section...

CVE-2020-7301 DLP ePO extension - Cross site scripting

Cross Site scripting vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section...

CVE-2020-7301

CVE-2020-7301 concerns the McAfee Data Loss Prevention (DLP) ePO extension prior to version 11.5.3. The vulnerability is a Cross Site Scripting (XSS) flaw within the DLP case management file-upload tab, exploited by authenticated users to trigger alerts. The provided documents confirm the affecte...

CVE-2020-7300

CVE-2020-7300 affects McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3. An improper authorization flaw lets authenticated users with view-only privileges remotely alter configuration via carefully crafted HTTP POST messages. Impact is limited to configuration changes; exploitation ...

CVE-2020-7300 DLP ePO extension - Improper Authorization

Improper Authorization vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages...

McAfee Total Protection Input Validation Error Vulnerability

McAfee Total Protection MTP is a suite of antivirus software from the American company McAfee. A security vulnerability exists in McAfee Total Protection MTP versions prior to 16.0.R26. A local attacker can exploit this vulnerability with a specially crafted object to turn off time scanning...

CVE-2020-7298

Unexpected behavior violation in McAfee Total Protection MTP prior to 16.0.R26 allows local users to turn off real time scanning via a specially crafted object making a specific function call...

CVE-2020-7298

Unexpected behavior violation in McAfee Total Protection MTP prior to 16.0.R26 allows local users to turn off real time scanning via a specially crafted object making a specific function call...

Code injection

Unexpected behavior violation in McAfee Total Protection MTP prior to 16.0.R26 allows local users to turn off real time scanning via a specially crafted object making a specific function call...

CVE-2020-7298

CVE-2020-7298 affects McAfee Total Protection (MTP) prior to 16.0.R26. The vulnerability allows a local attacker to disable real-time scanning by supplying a specially crafted object that triggers a specific function call. Publicly available documents confirm the affected product and the basic im...

CVE-2020-7298 Total Protection (MTP) - Unexpected behavior violation

Unexpected behavior violation in McAfee Total Protection MTP prior to 16.0.R26 allows local users to turn off real time scanning via a specially crafted object making a specific function call...

Call an Exorcist! My Robot! My Robot's Possessed!

ARCHIVED STORY Call an Exorcist! My Robot’s Possessed! By Mark Bereza · AUG 05, 2020 · 69 MIN READ Overview As part of our continued goal of helping developers provide safer products for businesses and consumers, we here at McAfee Advanced Threat Research ATR recently investigated temi , a...

Call an Exorcist! My Robot! My Robot's Possessed!

ARCHIVED STORY Call an Exorcist! My Robot’s Possessed! By Mark Bereza · AUG 05, 2020 · 69 MIN READ Overview As part of our continued goal of helping developers provide safer products for businesses and consumers, we here at McAfee Advanced Threat Research ATR recently investigated temi, a...

NetWalker Ransomware Rakes in $29M Since March

The NetWalker ransomware has been around for about a year, but it has really made a name for itself in 2020, racking up around $29 million in extortion gains just since March. First detected in August 2019, NetWalker lingered around before surging in use in March through June, according to an...

Take a "NetWalk" on the Wild Side

ARCHIVED STORY Take a “NetWalk” on the Wild Side ATR Operational Intelligence Team · AUG 03, 2020 · 25 MIN READ Executive Summary The NetWalker ransomware, initially known as Mailto, was first detected in August 2019. Since then, new variants were discovered throughout 2019 and the beginning of...

Take a "NetWalk" on the Wild Side

ARCHIVED STORY Take a “NetWalk” on the Wild Side ATR Operational Intelligence Team · AUG 03, 2020 · 25 MIN READ Executive Summary The NetWalker ransomware, initially known as Mailto, was first detected in August 2019. Since then, new variants were discovered throughout 2019 and the beginning of...

Unspecified Vulnerability in McAfee Web Gateway

McAfee Web Gateway MWG is a security gateway product from the U.S.-based McAfee. The product provides threat protection, application control, and data loss prevention. A security vulnerability exists in McAfee MWG versions prior to 9.2.1, which can be exploited by a remote attacker to cause MWG t...

The vulnerability of the McAfee Total Protection anti-virus protection lies in its lack of access control mechanisms, which allows attackers to enhance their privileges.

The vulnerability of the McAfee Total Protection antivirus protection lies in its lack of access control mechanisms. Exploiting this vulnerability allows attackers to enhance their privileges by manipulating symbolic links or executing malicious scripts or programs...

The vulnerability of the executable file McTray.exe of the Microsoft Windows anti-virus software McAfee VirusScan Enterprise allows a perpetrator to gain increased privileges.

The vulnerability of the McTray.exe executable of the Microsoft Windows antivirus software, McAfee VirusScan Enterprise, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the McAfee Total Protection anti-virus protection lies in its lack of access control mechanisms, which allows attackers to enhance their privileges.

The vulnerability of the McAfee Total Protection antivirus protection lies in its lack of access control mechanisms. Exploiting this vulnerability allows attackers to enhance their privileges by manipulating symbolic links or executing malicious scripts or programs...