4308 matches found
CVE-2019-3666
API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to navigate to restricted websites via a carefully crafted web site...
CVE-2019-3666
API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to navigate to restricted websites via a carefully crafted web site...
CVE-2019-3665
Code Injection vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site...
CVE-2019-3665
Code Injection vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site...
Code injection
Code Injection vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site...
Code injection
API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to navigate to restricted websites via a carefully crafted web site...
CVE-2019-3665
CVE-2019-3665 affects the web interface of McAfee Web Advisor (WA) for versions before 4.1.1.48. The issue is a code injection vulnerability that allows a remote unauthenticated attacker to cause the browser to render websites that WA would normally block when presented via a carefully crafted si...
CVE-2019-3665 Code Injection vulnerability
Code Injection vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site...
CVE-2019-3666
CVE-2019-3666 affects McAfee Web Advisor (WA) web interface prior to version 4.1.1.48. The vulnerability is described as an API abuse/misuse in the WA web interface that allows a remote, unauthenticated attacker to induce the browser to navigate to restricted websites via a specially crafted web ...
CVE-2019-3666 API Abuse Vulnerability
API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor WA prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to navigate to restricted websites via a carefully crafted web site...
McAfee WebAdvisor TS102991 Multiple Security Vulnerabilities
Description McAfee WebAdvisor is prone to the following security vulnerabilities: 1. A remote code injection vulnerability 2. A security vulnerability. Successfully exploiting these issues may allow attacker to inject and execute arbitrary code. This may lead to other attacks. McAfee WebAdvisor...
McAfee Client Proxy Authentication Bypass Vulnerability
McAfee Client Proxy MCP is a client proxy program in the McAfee Web Protection web security solution from McAfee, Inc. An authentication bypass vulnerability exists in McAfee MCP versions prior to 3.0.0 Windows. An attacker could exploit this vulnerability to bypass network traffic scans and acce...
CVE-2019-3654
Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...
CVE-2019-3654
Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...
Authentication flaw
Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...
CVE-2019-3654 Client Proxy (MCP) - Authentication Bypass vulnerability
Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...
CVE-2019-3654
McAfee Client Proxy (MCP) for Windows is affected by an authentication bypass vulnerability prior to version 3.0.0. The issue allows a local user to bypass the normal authentication mechanism and generate an authorization key on the client that should only be created by the network administrator,...
McAfee Client Proxy CVE-2019-3654 Local Authentication Bypass Vulnerability
Description McAfee Client Proxy is prone to a local authentication-bypass vulnerability. An attacker can exploit this issue to bypass the authentication mechanism. This may aid in further attacks. McAfee Client Proxy MCP versions prior to 3.0.0 are vulnerable. Technologies Affected McAfee Client...
McAfee Advanced Threat Defense Path Traversal Vulnerability
McAfee Advanced Threat Defense ATD is a suite of advanced threat protection systems from the U.S.-based company McAfee McAfee. The system provides zero-day attack protection and malware protection through static code analysis, malware dynamic analysis and machine learning. A path traversal...
McAfee Total Protection Elevation of Privilege Vulnerability
McAfee Total Protection MTP is a suite of antivirus software from the American company McAfee. An elevation of privilege vulnerability exists in McAfee Total Protection. An attacker could execute arbitrary code by placing a malicious file in a specific location protected by administrator privileg...