CVE-2016-8007

Authentication bypass vulnerability in McAfee Host Intrusion Prevention Services HIPS 8.0 Patch 7 and earlier allows authenticated users to manipulate the product's registry keys via specific conditions...

CVE-2016-8010

CVE-2016-8010 affects McAfee Application Control (MAC) v7.0 and earlier and McAfee Endpoint Security (ENS) v10.2 and earlier. Description: a vulnerability allows a local attacker to bypass local security protections via a command‑line utility. The connected documents confirm affected products and...

CVE-2016-8011

The CVE-2016-8011 entry concerns Intel Security McAfee Endpoint Security (ENS) Web Control prior to 10.2.0.408.10. The vulnerability is a cross-site scripting flaw that allows an attacker to inject arbitrary web script or HTML via a crafted website. This affects the Web Control component and coul...

CVE-2016-8009

CVE-2016-8009 affects Intel Security McAfee Application Control (MAC) 6.x and 7.0.x. The root cause is unauthorized IOCTL usage that enables local privilege escalation, which can lead to DoS, abnormal behavior, or potentially arbitrary code execution. Public sources describe affected versions (MA...

CVE-2015-8986

CVE-2015-8986 is described as a sandbox-detection evasion vulnerability in McAfee/Intel Security Advanced Threat Defense (MATD) versions up to 3.4.2.32. The issue allows malware to detect the sandbox environment and bypass malware detection, resulting in false negatives. The available sources ide...

CVE-2016-8008

Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus SSP 3.11.376 allows attackers to load a replacement of the version.dll file via McAfee McUICnt.exe onto a Windows system...

CVE-2014-9921

CVE-2014-9921 affects McAfee Cloud Analysis and Deconstructive Services (CADS) versions 1.0.0.3x, 1.0.0.4d and earlier. A configuration error allows remote unauthenticated users to view, add, and remove users, constituting an information-disclosure vulnerability. The core issue is improper access...

CVE-2015-8987

Man-in-the-middle MitM attack vulnerability in non-Mac OS agents in McAfee now Intel Security Agent MA 4.8.0 patch 2 and earlier allows attackers to make a McAfee Agent talk with another, possibly rogue, ePO server via McAfee Agent migration to another ePO server...

CVE-2015-8988

CVE-2015-8988 concerns an unquoted executable path vulnerability in the McAfee/ePO Deep Command (eDC) Client Management and Gateway components. The affected versions are eDC 2.2 and 2.1. The issue allows an authenticated user to execute arbitrary commands by dropping a malicious file in the unquo...

CVE-2014-9920

CVE-2014-9920 affects McAfee Application Control (MAC) 6.x before specific hotfixes (9726 for 6.0.0, 9068 for 6.0.1, 692 for 6.1.0, 399 for 6.1.1, 426 for 6.1.2, 357 for 6.1.3 and earlier). A malformed Windows binary can be created that is treated as non-executable and bypasses the whitelisting p...

CVE-2015-8987

McAfee Agent (MA) for non-Mac OS, version 4.8.0 patch 2 and earlier, is affected by a MitM vulnerability that lets an attacker cause a MA instance to communicate with a rogue ePO server via migration to another ePO server. The OpenVAS entry and NVD record corroborate the MITM impact but do not pr...

CVE-2016-8027

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator ePO 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a...

CVE-2015-8991

CVE-2015-8991 concerns Intel/MCAfee Security Scan Plus (MSS+) prior to version 3.11.266.3. The vulnerability is a malicious file execution flaw that can be triggered during installation or uninstallation by preexisting crafted malware, while normal operation remains unaffected. The OpenVAS entry ...

CVE-2015-8986

Sandbox detection evasion vulnerability in hardware appliances in McAfee now Intel Security Advanced Threat Defense MATD 3.4.2.32 and earlier allows attackers to detect the sandbox environment, then bypass proper malware detection resulting in failure to detect a malware file false-negative via...

CVE-2013-7462

A directory traversal vulnerability in the web application in McAfee now Intel Security SaaS Control Console SCC Platform 6.14 before patch 1070, and 6.15 before patch 1076 allows unauthenticated users to view contents of arbitrary system files that did not have file system level read access...

CVE-2013-7461

A write protection and execution bypass vulnerability in McAfee now Intel Security Change Control MCC 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write protection rules via specific conditions...

CVE-2013-7460

A write protection and execution bypass vulnerability in McAfee now Intel Security Application Control MAC 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions...

CVE-2015-8988

Unquoted executable path vulnerability in Client Management and Gateway components in McAfee now Intel Security ePO Deep Command eDC 2.2 and 2.1 allows authenticated users to execute a command of their choice via dropping a malicious file for the path...

CVE-2016-8027

Summary: CVE-2016-8027 is a SQL injection in McAfee ePolicy Orchestrator (ePO) where the Agent GUID is used to build a SQL query without proper sanitization. The vulnerability exists in the DataChannel/Agent communication path (via SPIPE and HTTP POST) used by agents to report data. The exploit c...

CVE-2016-8005

File extension filtering vulnerability in Intel Security McAfee Email Gateway MEG before 7.6.404h1128596 allows attackers to fail to identify the file name properly via scanning an email with a forged attached filename that uses a null byte within the filename extension...