CVE-2020-7260 MACC installer DLL side loading

DLL Side Loading vulnerability in the installer for McAfee Application and Change Control MACC prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder...

CVE-2020-7260

CVE-2020-7260 describes a DLL side-loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to version 8.3, enabling local users to run arbitrary code by executing from a compromised folder. The issue is rooted in DLL loading during installation, with impact l...

McAfee Application and Change Control Privilege Permission and Access Control Issues Vulnerability

McAfee Application and Change Control MACC is a security threat monitoring system of the United States McAfee McAfee. There is a permission and access control issue vulnerability in MACC. An attacker could exploit this vulnerability with a malicious DLL to execute code...

Ransomware Maze

ARCHIVED STORY Ransomware Maze Alexandre Mundo · MAR 26, 2020 Overview The Maze ransomware, previously known in the community as “ChaCha ransomware”, was discovered on May the 29th 2019 by Jerome Segura1. The main goal of the ransomware is to crypt all files that it can in an infected system and...

Ransomware Maze

ARCHIVED STORY Ransomware Maze Alexandre Mundo · MAR 26, 2020 Overview The Maze ransomware, previously known in the community as “ChaCha ransomware”, was discovered on May the 29th 2019 by Jerome Segura1. The main goal of the ransomware is to crypt all files that it can in an infected system and...

Ransomware Maze

ARCHIVED STORY Ransomware Maze Alexandre Mundo · MAR 26, 2020 Overview The Maze ransomware, previously known in the community as “ChaCha ransomware”, was discovered on May the 29th 2019 by Jerome Segura1. The main goal of the ransomware is to crypt all files that it can in an infected system and...

McAfee Agent 5.5.x prior to 5.5.4 / 5.6.x prior to 5.6.4 Improper Access Control Vulnerability (SB10312)

The version of McAfee Agent, formerly McAfee ePolicy Orchestrator ePO Agent, installed on the remote host is 5.5.x prior to 5.5.4 / 5.6.x prior to 5.6.4. It is, therefore, affected by improper access control vulnerability. It allows local users with administrator privileges to disable...

McAfee Network Security Management Cross-Site Scripting Vulnerability (CNVD-2020-20985)

McAfee Network Security Management NSM is a suite of network security solutions from McAfee that enables real-time monitoring of deployed McAfee intrusion prevention systems across the network. A cross-site scripting vulnerability exists in McAfee NSM versions prior to 9.1. The vulnerability stem...

CVE-2020-7256

Cross site scripting vulnerability in McAfee Network Security Management NSM Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors...

CVE-2020-7258

Cross site scripting vulnerability in McAfee Network Security Management NSM Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors...

CVE-2020-7258

Cross site scripting vulnerability in McAfee Network Security Management NSM Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors...

CVE-2020-7256

Cross site scripting vulnerability in McAfee Network Security Management NSM Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors...

Cross site scripting

Cross site scripting vulnerability in McAfee Network Security Management NSM Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors...

Cross site scripting

Cross site scripting vulnerability in McAfee Network Security Management NSM Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors...

CVE-2020-7256 Network Security Management (NSM) - Cross site scripting vulnerability

Cross site scripting vulnerability in McAfee Network Security Management NSM Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors...

CVE-2020-7256

The CVE-2020-7256 entry concerns a Cross-Site Scripting vulnerability in McAfee Network Security Management (NSM) prior to version 9.1. The available connected documents confirm the affected product (NSM) and the vulnerability class (XSS) but do not provide concrete exploit vectors, affected comp...

CVE-2020-7258 Network Security Management (NSM) - Cross site scripting vulnerability

Cross site scripting vulnerability in McAfee Network Security Management NSM Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors...

CVE-2020-7258

McAfee Network Security Management (NSM) NSM versions prior to 9.1 update 6 (and specifically 9.1 and earlier per CNVD) contain a Cross-Site Scripting vulnerability. The root cause is a lack of proper validation of client-side data by a web application, enabling execution of client-side code. The...

McAfee Advanced Threat Defense Privilege Permission and Access Control Issues Vulnerability

McAfee Advanced Threat Defense ATD is a suite of advanced threat protection systems from the U.S.-based company McAfee McAfee. The system provides zero-day attack protection and malware protection through static code analysis, malware dynamic analysis and machine learning. A privilege permission...

McAfee Agent Access Control Error Vulnerability

McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator antivirus management platform and managed products. An access control error vulnerability exists in the masvc.exe file in McAfee Agent versions prior to 5.6.4. A local...