4793 matches found
Microsoft Windows SMB Registry : McAfee EPO GUID
By reading the registry key HKLM\SOFTWARE\Network Associates\ePolicy Orchestrator\Agent, it was possible to determine that the remote Windows system is managed by McAfee EPO. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77477; scriptversion"1.7";...
CVE-2014-6064: Exposure of Sensitive Information to an Unauthorized Actor
The Accounts tab in the administrative user interface in McAfee Web Gateway MWG before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors...
CVE-2014-2390
Technical details for CVE-2014-2390 are not publicly provided in the supplied connected documents. Based on the initial entry, no specific affected product versions, exploit vectors, or remediation are disclosed here. Monitor for updates.
CVE-2014-2390
Cross-site request forgery CSRF vulnerability in the User Management module in McAfee Network Security Manager NSM before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the User Management module in McAfee Network Security Manager NSM before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for...
CVE-2014-2390: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the User Management module in McAfee Network Security Manager NSM before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for...
McAfee Web Gateway Proxy Detection (Blocked Resource)
Binary data 8344.prm...
McAfee Web Gateway Admin Traffic Detection
Binary data 8346.prm...
McAfee Web Gateway Proxy Detection
Binary data 8345.prm...
SandroRAT — Android Malware that Disguises itself as "Kaspersky Mobile Security" App
Researchers have warned users of Android devices to avoid app downloads from particularly unauthorized sources, since a new and sophisticated piece of malware is targeting Android users through phishing emails. The malware, dubbed SandroRAT, is currently being used by cybercriminals to target...
McAfee Cloud Single Sign On ExtensionAccessServlet Directory Traversal (CVE-2014-2536)
A directory traversal vulnerability has been reported in the ExtensionAccessServlet included in McAfee Cloud Single Sign On. The vulnerability is due to insufficient input sanitization on the GET request URI passed to the ExtensionAccessServlet. A remote unauthenticated attacker can exploit this...
McAfee Email Gateway OpenSSL Multiple Vulnerabilities (SB10075)
The remote host is running a version of McAfee Email Gateway MEG that is affected by the multiple vulnerabilities related to the included OpenSSL library : - An error exists in the function 'ssl3readbytes' that can allow data to be injected into other sessions or allow denial of service attacks...
McAfee VirusScan Enterprise for Linux Multiple OpenSSL Vulnerabilities (SB10075)
The remote host is running a version of McAfee VirusScan Enterprise for Linux VSEL that is affected by multiple vulnerabilities due to flaws in the included OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial...
McAfee VirusScan 8.0 Path Specification Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16040/info McAfee VirusScan is prone to a vulnerability that could allow an arbitrary file to be executed. The 'naPrdMgr.exe' process calls applications without using properly quoted paths. Successful exploitation may all...
McAfee Email Gateway (formerly IronMail) - Internal Information Disclosure
No description provided by source...
McAfee Email Gateway (formerly IronMail) - Denial of Service
No description provided by source...
Mcafee FreeScan CoMcFreeScan Browser Object Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10071/info It has been reported that Mcafee FreeScan CoMcFreeScan browser object may be prone to a remote buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient boundary checks performed on dat...
McAfee IntruShield Security Management System Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/14167/info McAfee IntruShield Security Management System is susceptible to multiple vulnerabilities. The first two issues are cross-site scripting vulnerabilities in the 'intruvert/jsp/systemHealth/SystemEvent.jsp' script...
Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP)
No description provided by source. $Id: ms07017aniloadimagechunksize.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...
McAfee Remediation Client ActiveX Control Buffer Overflow
No description provided by source. $Id: mcafeeherculesdeletesnapshot.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...