CVE-2018-6755: Incorrect Permission Assignment for Critical Resource

Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6757: Undefined Security Weakness

Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

Hardware resistance & enhanced security for GnuPG

VSHG aims to provide a memory / hardware resistant reinforcement to GnuPG’s standard s2k key-derivation-function + a simplified interface for symmetric encryption . VSHG Very secure hash generator is a standalone Addon for GnuPG Gnu privacy guard . It is written as a shell script and is designed...

GHSA-XV7X-X6WR-XX7G Apache Ranger policy engine incorrectly matches paths in certain conditions

Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true...

McAfee True Key Cross-Site Scripting Vulnerability

McAfee True Key TK is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition. A security vulnerability exists in McAfee TK 4.0.0.0 and earlier versions. The vulnerability can be exploited by ...

Spoofing

DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key TK before 5.1.165 allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6700

DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key TK before 5.1.165 allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6700

DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key TK before 5.1.165 allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6700 True Key (TK) - DLL Search Order Hijacking vulnerability

DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key TK before 5.1.165 allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6700

CVE-2018-6700 corresponds to a DLL Search Order Hijacking vulnerability in McAfee True Key (TK) on Windows Client, prior to version 5.1.165. The root cause is exploitation of DLL search order to load malicious code locally, enabling arbitrary code execution by a local attacker with no credentials...

CVE-2018-6682

Cross Site Scripting Exposure in McAfee True Key TK 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site...

Cross site scripting

Cross Site Scripting Exposure in McAfee True Key TK 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site...

CVE-2018-6682

Cross Site Scripting Exposure in McAfee True Key TK 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site...

CVE-2018-6682

The CVE-2018-6682 entry concerns McAfee True Key (TK), where Cross Site Scripting exposes confidential data to local users via a crafted website in TK 4.0.0.0 and earlier. Affected component: the True Key web context handling (XSS exposure). Root cause: unclear in the provided documents beyond th...

CVE-2018-6682 True Key (TK) - Cross Site Scripting Exposure

Cross Site Scripting Exposure in McAfee True Key TK 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site...

PT-2018-17719 · Mcafee · Mcafee True Key

Name of the Vulnerable Software and Affected Versions: McAfee True Key versions prior to 5.1.165 Description: A DLL Search Order Hijacking issue allows local users to execute arbitrary code via specially crafted malware. Recommendations: For versions prior to 5.1.165, update to version 5.1.165 or...

PT-2018-17711 · Mcafee · Mcafee True Key

Name of the Vulnerable Software and Affected Versions: McAfee True Key versions 4.0.0.0 and earlier Description: The issue allows local users to expose confidential data via a crafted web site, potentially leading to the disclosure of sensitive information. Recommendations: For versions 4.0.0.0 a...

CVE-2018-6682: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting Exposure in McAfee True Key TK 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site...

CVE-2018-6700: Untrusted Search Path

DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key TK before 5.1.165 allows local users to execute arbitrary code via specially crafted malware...

PT-2018-13237

Name of the Vulnerable Software and Affected Versions portfolioCMS version 1.0.5 Description An issue was discovered that allows CSRF to create new pages. This can be done via the "admin/portfolio.php?newpage=true" endpoint. Recommendations For portfolioCMS version 1.0.5, consider implementing CS...