PT-2023-1883 · Mcafee · Mcafee Total Protection

Name of the Vulnerable Software and Affected Versions: McAfee Total Protection versions prior to 16.0.49 Description: The issue is related to an uncontrolled search path element in McAfee Total Protection, which can be exploited to elevate user privileges due to DLL sideloading. This could enable...

McAfee Total Protection 后置链接漏洞

McAfee Total Protection MTP is a suite of antivirus software from McAfee, Inc. A security vulnerability exists in McAfee Total Protection prior to version 16.0.50, which stems from incorrect link resolution. The vulnerability can be exploited by an attacker to elevate user privileges via the...

CVE-2023-24577

McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileges to execute unauthorized tasks...

CVE-2023-24578

McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks...

CVE-2023-24579

McAfee Total Protection prior to 16.0.51 allows attackers to trick a victim into uninstalling the application via the command prompt...

McAfee Total Protection 代码问题漏洞

McAfee Total Protection MTP is a suite of antivirus software from the US-based McAfee, Inc. A security vulnerability exists in McAfee Total Protection prior to version 16.0.49, which originated from a vulnerability that allows an attacker to elevate a user's privileges via DLL side loading. The...

CVE-2023-24578

McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks...

CVE-2023-24578

CVE-2023-24578 affects McAfee Total Protection prior to 16.0.49. The root cause is DLL sideloading in the product, allowing a local, low-privilege user to elevate privileges and perform unauthorized tasks. Affected software is McAfee Total Protection; the issue is tied to DLL search path handling...

SUSE CVE-2016-2199

Multiple cross-site request forgery CSRF vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McAfee Vulnerability Manager MVM before 7.5.10 allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via...

McAfee Total Protection Installed (Windows)

Binary data mcafeetotalprotectioninstalled.nbin...

McAfee Skyhigh Secure Web Gateway 跨站脚本漏洞

McAfee Skyhigh Secure Web Gateway McAfee Skyhigh SWG is a series of security gateways from McAfee, Inc. A security vulnerability in McAfee Skyhigh Secure Web Gateway versions 10.x prior to 10.2.17 and 11.x prior to 11.2.6 and 12.x prior to 12.0.1 stems from a vulnerability that could allow a remo...

CVE-2022-43751

McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unprivileged user. This may have allowed the unprivileged user to execute arbitrary code with system...

CVE-2022-43751

McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unprivileged user. This may have allowed the unprivileged user to execute arbitrary code with system...

Path traversal

McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unprivileged user. This may have allowed the unprivileged user to execute arbitrary code with system...

CVE-2022-43751

McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unprivileged user. This may have allowed the unprivileged user to execute arbitrary code with system...

CVE-2022-43751

CVE-2022-43751 affects McAfee Total Protection prior to version 16.0.49. The issue is an uncontrolled search path element caused by a variable pointing to a subdirectory that may be controlled by an unprivileged user, potentially allowing arbitrary code execution with system privileges. Documente...

CVE-2022-43751

McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unprivileged user. This may have allowed the unprivileged user to execute arbitrary code with system...

PT-2022-27023 · Mcafee · Mcafee Total Protection

Name of the Vulnerable Software and Affected Versions: McAfee Total Protection versions prior to 16.0.49 Description: The issue is related to an uncontrolled search path element vulnerability. This vulnerability is due to the use of a variable pointing to a subdirectory that may be controllable b...

McAfee Total Protection 代码问题漏洞

McAfee Total Protection MTP is a suite of antivirus software from McAfee, Inc. in the United States. A security vulnerability exists in McAfee Total Protection prior to version 16.0.49, which stems from the use of a variable that points to a subdirectory that is under the control of a...

The vulnerability of the McAfee Web Reporter Premium anti-virus software arises from insufficient restrictions on access to the invoker/EJBInvokerServlet and invoker/JMXInvokerServlet servers. This allows attackers to execute arbitrary Java code.

The vulnerability of the McAfee Web Reporter Premium antivirus software exists due to insufficient restrictions on access to the invoker/EJBInvokerServlet and invoker/JMXInvokerServlet servers. Exploiting this vulnerability allows a malicious actor to execute arbitrary Java code by sending...