Lucene search
+L

4308 matches found

Positive Technologies
Positive Technologies
added 2023/08/17 12:00 a.m.5 views

PT-2023-4542 · Mcafee · Mcafee Safe Connect

Name of the Vulnerable Software and Affected Versions: McAfee Safe Connect versions prior to 2.16.1.126 Description: The issue is related to an uncontrolled search path element, which may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs. This can...

8.3CVSS7.2AI score0.00668EPSS
SaveExploits0References11
The Hacker News
The Hacker News
added 2023/07/29 8:10 a.m.45 views

New Android Malware CherryBlos Utilizing OCR to Steal Sensitive Data

A new Android malware strain called CherryBlos has been observed making use of optical character recognition OCR techniques to gather sensitive data stored in pictures. CherryBlos, per Trend Micro, is distributed via bogus posts on social media platforms and comes with capabilities to steal...

6.5AI score
SaveExploits0
HackRead
HackRead
added 2023/04/19 1:24 a.m.18 views

Goldoson Android Malware Found in 60 Apps with 100M Downloads

By Deeba Ahmed The malware was identified by cybersecurity researchers at McAfee. This is a post from HackRead.com Read the original post: Goldoson Android Malware Found in 60 Apps with 100M Downloads...

6.7AI score
SaveExploits0
CNNVD
CNNVD
added 2023/04/07 12:00 a.m.8 views

Trellix Agent 代码问题漏洞

Trellix Agent is a client component of FireEye USA Trellix, Inc. that provides secure communication between McAfee ePolicy Orchestrator McAfee ePO and hosted products. A security vulnerability exists in Trellix Agent that stems from a heap-based buffer overflow vulnerability...

7.8CVSS7.6AI score0.00646EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/03/29 12:00 a.m.29 views

McAfee Total Protection < 16.0.30 Multiple Vulnerabilities (TS103114)

The version of McAfee Total Protection installed on the remote Windows host is prior to 16.0.30. It is, therefore, affected by multiple vulnerabilities, including the following: - Bypass Remote Procedure call in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated...

8.2CVSS7.4AI score0.01026EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.16 views

The vulnerability of the McAfee Total Protection antivirus protection, related to deficiencies in access control to the registry, allows a hacker to modify the Component Object Model (COM) in the Windows registry.

The vulnerability of the McAfee Total Protection antivirus protection lies in its lack of access control for accessing the registry. Exploiting this vulnerability could allow an attacker to modify the Component Object Model COM in the Windows registry...

6.3CVSS6.6AI score0.00261EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/23 12:00 a.m.12 views

The vulnerability of the McAfee Total Protection antivirus protection, related to errors in processing symbolic links, allows attackers to enhance their privileges.

The vulnerability of the McAfee Total Protection antivirus protection lies in errors in processing symbolic links. Exploiting this vulnerability can allow attackers to enhance their privileges...

5.5CVSS5.9AI score0.00284EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/23 12:00 a.m.12 views

The vulnerability of the McAfee Total Protection antivirus protection lies in its uncontrolled search path, which allows attackers to escalate their privileges.

The vulnerability of the McAfee Total Protection antivirus protection lies in its uncontrolled search path. Exploiting this vulnerability can allow attackers to enhance their privileges...

5.5CVSS5.9AI score0.00254EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/23 12:00 a.m.13 views

The vulnerability of the McAfee Total Protection antivirus protection, related to insecure management of privileges, allows a hacker to delete the application.

The vulnerability of the McAfee Total Protection antivirus protection lies in the insecure management of privileges. Exploiting this vulnerability could allow a hacker to remove the application...

5.5CVSS5.9AI score0.00244EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2023/03/21 6:15 p.m.8 views

CVE-2023-25134

McAfee Total Protection prior to 16.0.50 may allow an adversary with full administrative access to modify a McAfee specific Component Object Model COM in the Windows Registry. This can result in the loading of a malicious payload...

6.7CVSS6.7AI score0.00261EPSS
SaveExploits0References2
NVD
NVD
added 2023/03/21 6:15 p.m.26 views

CVE-2023-25134

McAfee Total Protection prior to 16.0.50 may allow an adversary with full administrative access to modify a McAfee specific Component Object Model COM in the Windows Registry. This can result in the loading of a malicious payload...

6.7CVSS6.4AI score0.00261EPSS
SaveExploits0References2
Prion
Prion
added 2023/03/21 6:15 p.m.24 views

Design/Logic Flaw

McAfee Total Protection prior to 16.0.50 may allow an adversary with full administrative access to modify a McAfee specific Component Object Model COM in the Windows Registry. This can result in the loading of a malicious payload...

4CVSS6.3AI score0.00261EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/21 12:00 a.m.11 views

CVE-2023-25134

McAfee Total Protection prior to 16.0.50 may allow an adversary with full administrative access to modify a McAfee specific Component Object Model COM in the Windows Registry. This can result in the loading of a malicious payload...

6.4AI score0.00261EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/21 12:00 a.m.78 views

CVE-2023-25134

Summary: CVE-2023-25134 affects McAfee Total Protection prior to 16.0.50. An adversary with full administrative access can modify a McAfee-specific COM in the Windows Registry, enabling loading of a malicious payload. Affected product/version: McAfee Total Protection pre-16.0.50. Root cause: insu...

6.7CVSS6.3AI score0.00261EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/21 12:00 a.m.33 views

CVE-2023-25134

McAfee Total Protection prior to 16.0.50 may allow an adversary with full administrative access to modify a McAfee specific Component Object Model COM in the Windows Registry. This can result in the loading of a malicious payload...

6.6AI score0.00261EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/03/21 12:00 a.m.11 views

McAfee Total Protection 安全漏洞

McAfee Total Protection MTP is a suite of antivirus software from McAfee, Inc. in the United States. A security vulnerability exists in McAfee Total Protection prior to version 16.0.50, which stems from a vulnerability that allows an attacker to modify the McAfee-specific component object model i...

6.7CVSS6.6AI score0.00261EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/03/21 12:00 a.m.8 views

PT-2023-2001 · Mcafee · Mcafee Total Protection

Name of the Vulnerable Software and Affected Versions: McAfee Total Protection versions prior to 16.0.50 Description: The issue is related to insufficient access control to the registry, allowing an adversary with full administrative access to modify a McAfee specific Component Object Model COM i...

6.7CVSS7.1AI score0.00261EPSS
SaveExploits0References9
OSV
OSV
added 2023/03/13 1:15 p.m.10 views

CVE-2023-24577

McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileges to execute unauthorized tasks...

5.5CVSS6.2AI score0.00284EPSS
SaveExploits0References2
NVD
NVD
added 2023/03/13 1:15 p.m.28 views

CVE-2023-24577

McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileges to execute unauthorized tasks...

5.5CVSS5.6AI score0.00284EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/13 1:15 p.m.8 views

CVE-2023-24578

McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks...

5.5CVSS6.2AI score0.00254EPSS
SaveExploits0References2
Rows per page
Query Builder