917 matches found
CVE-2018-6700
DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key TK before 5.1.165 allows local users to execute arbitrary code via specially crafted malware...
Spoofing
DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key TK before 5.1.165 allows local users to execute arbitrary code via specially crafted malware...
CVE-2018-6700
CVE-2018-6700 corresponds to a DLL Search Order Hijacking vulnerability in McAfee True Key (TK) on Windows Client, prior to version 5.1.165. The root cause is exploitation of DLL search order to load malicious code locally, enabling arbitrary code execution by a local attacker with no credentials...
CVE-2018-6700 True Key (TK) - DLL Search Order Hijacking vulnerability
DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key TK before 5.1.165 allows local users to execute arbitrary code via specially crafted malware...
CVE-2018-6682
Cross Site Scripting Exposure in McAfee True Key TK 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site...
Cross site scripting
Cross Site Scripting Exposure in McAfee True Key TK 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site...
CVE-2018-6682
Cross Site Scripting Exposure in McAfee True Key TK 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site...
CVE-2018-6682
The CVE-2018-6682 entry concerns McAfee True Key (TK), where Cross Site Scripting exposes confidential data to local users via a crafted website in TK 4.0.0.0 and earlier. Affected component: the True Key web context handling (XSS exposure). Root cause: unclear in the provided documents beyond th...
CVE-2018-6682 True Key (TK) - Cross Site Scripting Exposure
Cross Site Scripting Exposure in McAfee True Key TK 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site...
PT-2018-17711 · Mcafee · Mcafee True Key
Name of the Vulnerable Software and Affected Versions: McAfee True Key versions 4.0.0.0 and earlier Description: The issue allows local users to expose confidential data via a crafted web site, potentially leading to the disclosure of sensitive information. Recommendations: For versions 4.0.0.0 a...
PT-2018-17719 · Mcafee · Mcafee True Key
Name of the Vulnerable Software and Affected Versions: McAfee True Key versions prior to 5.1.165 Description: A DLL Search Order Hijacking issue allows local users to execute arbitrary code via specially crafted malware. Recommendations: For versions prior to 5.1.165, update to version 5.1.165 or...
xkcd on Voting Computers
Funny and true...
portfolioCMS any.php file upload vulnerability
portfolioCMS is a content management system CMS based on PHP and MySQL. A security vulnerability exists in portfolioCMS version 1.0.5. An attacker can exploit the vulnerability to upload arbitrary .php files with the help of admin/portfolio.php?newpage=true URI...
MiniUPnP ngiflib Buffer Overflow Vulnerability
MiniUPnP is a set of UPnP tools developed by MiniUPnP project that can be used in embedded systems. This tool enables devices in home and corporate networks to connect to each other. ngiflib is one of the GIF image format decoding libraries written in C language. A buffer overflow vulnerability...
true-pharm.org XSS vulnerability
Open Bug Bounty ID: OBB-616702 Description| Value ---|--- Affected Website:| true-pharm.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
McAfee True Key Detection (Windows SMB Login)
Detection of installed version of McAfee True Key on Windows. The script logs in via smb, searches for McAfee True Key in the registry and gets the version from registry. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrig...
McAfee True Key DLL Side Loading Privilege Elevation Vulnerability - Windows
McAfee True Key is prone to a privilege elevation vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mcafee:truekey";...
McAfee True Key DLL Sideload Vulnerability
McAfee True Key is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition. A security vulnerability exists in McAfee True Key versions prior to 4.20.110, which stems from the program's failur...
Privilege escalation
DLL Side-Loading vulnerability in Microsoft Windows Client in McAfee True Key before 4.20.110 allows local users to gain privilege elevation via not verifying a particular DLL file signature...