5186 matches found
CVE-2020-7297: Improper Authentication
Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user to access protected dashboard data via improper access control in the user interface...
PT-2020-19532
Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions prior to 9.2.1 Description A privilege escalation issue exists due to improper access controls in the user interface, allowing an authenticated user interface user to delete or download protected log data...
CVE-2020-7296: Improper Authentication
Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user to access protected configuration files via improper access control in the user interface...
CVE-2020-7295: Improper Authentication
Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface...
McAfee Agent Elevation of Privilege Vulnerability
McAfee Agent is an antivirus program. McAfee Agent has a security vulnerability that can be exploited by a local attacker to submit special requests that can elevate privileges...
McAfee MVISION Endpoint Access Control Error Vulnerability
McAfee MVISION Endpoint is a set of endpoint security protection software from the U.S. company McAfee McAfee. The software provides enhanced threat detection and correction for Windows systems. Access Control Error Vulnerability in Windows McAfee MVISION Endpoint before version 20.9. The...
McAfee Endpoint Security Access Control Error Vulnerability (CNVD-2020-52037)
McAfee Endpoint Security ENS is the United States McAfee McAfee company's set of framework for providing intelligent collaboration and advanced threat defense. The framework supports the entire threat defense lifecycle of real-time communications control and actionable threat forensics and so on...
McAfee Endpoint Security Access Control Error Vulnerability
McAfee Endpoint Security ENS is the United States McAfee McAfee company's set of framework for providing intelligent collaboration and advanced threat defense. The framework supports the entire threat defense lifecycle of real-time communications control and actionable threat forensics and so on...
McAfee Endpoint Security Access Control Error Vulnerability (CNVD-2020-52034)
McAfee Endpoint Security ENS is the United States McAfee McAfee company's set of framework for providing intelligent collaboration and advanced threat defense. The framework supports the entire threat defense lifecycle of real-time communications control and actionable threat forensics and so on...
McAfee MVISION Endpoint Access Control Error Vulnerability (CNVD-2020-52033)
McAfee MVISION Endpoint is a set of endpoint security protection software from the U.S. company McAfee McAfee. The software provides enhanced threat detection and correction for Windows systems. Access Control Error Vulnerability in Windows McAfee MVISION Endpoint before version 20.9. The...
McAfee Agent Privilege Control Vulnerability
McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator antivirus management platform and managed products. A privilege control vulnerability exists in McAfee Agent. The vulnerability stems from an incorrect programmatic cal...
McAfee Agent Elevation of Privilege Vulnerability
McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator antivirus management platform and managed products. An elevation of privilege vulnerability exists in McAfee Agent. The vulnerability stems from an incorrect programmat...
McAfee Agent Code Injection Vulnerability
McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator antivirus management platform and managed products. A code injection vulnerability exists in McAfee Agent prior to version 5.6.6. The vulnerability stems from a failure...
GHSA-8MM3-2MCJ-CX6R Malicious Package in angluar-cli
Version 0.0.3 of angluar-cli contains malicious code as a postinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed the package attempts to remove files and stop processes related to McAfee antivirus...
Malicious Package in angluar-cli
Version 0.0.3 of angluar-cli contains malicious code as a postinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed the package attempts to remove files and stop processes related to McAfee antivirus...
PT-2020-21169
Name of the Vulnerable Software and Affected Versions angular-cli version 0.0.3 Description The issue concerns malicious code in a postinstall script. This malware is designed to exploit typing mistakes when installing modules, targeting macOS users. Upon installation, it attempts to remove files...
Vulnerabilities fixed in McAfee Agent
Vulnerabilities have been fixed in McAfee Agent. The vulnerabilities allow a malicious party to launch attacks that result in the following categories of damage: Remote code execution Administrator/Root rights Remote code execution User rights Increased user privileges McAfee has released updates...
CVE-2020-7312
DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent MA for Windows prior to 5.6.6 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder...
