CVE-2020-7280

CVE-2020-7280 : Privilege escalation in McAfee VirusScan Enterprise (VSE) versions prior to 8.8 Patch 15. The issue arises during daily DAT updates where an attacker can alter the target of symbolic links, enabling local users to delete or create files they normally cannot. Timing-dependent vulne...

Privilege escalation

Privilege Escalation vulnerability in McAfee VirusScan Enterprise VSE for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is...

CVE-2020-7266

CVE-2020-7266 affects McAfee VirusScan Enterprise (VSE) for Windows prior to 8.8 Patch 14 Hotfix 116778. A local privilege escalation exists where an attacker can delete restricted files by abusing symbolic links to redirect a McAfee delete action to an unintended file. Root cause: manipulation o...

vse-na-yug.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-951652 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

vse-taxi.kz XSS vulnerability

Open Bug Bounty ID: OBB-641741 Description| Value ---|--- Affected Website:| vse-taxi.kz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-6674

The CVE-2018-6674 issue affects McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13, specifically the McTray.exe component. The root cause is privilege escalation through the ability to spawn unrelated processes with elevated privileges when McTray.exe is granted elevated privileges by the sy...

CVE-2018-6674 Privilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges

Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges by default it runs with...

vse-pro-radost.cz XSS vulnerability

Vulnerable URL: http://vse-pro-radost.cz/search.asp?searchText=didgerida%22%3E%3Csvg/onload=alert%28document.domain%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4369252 VIP...

CVE-2016-3984

CVE-2016-3984 affects McAfee VirusScan Console and multiple McAfee components (MAR, MA, DXL, DLPe, MDC, ENS, IPS, VSE) on Windows. Local administrators can bypass self-protection rules and disable the antivirus engine by modifying registry keys. Impact: partial to full antivirus disablement; CVSS...

McAfee VirusScan Enterprise 8.8 < 8.8 Patch 1 DoS

The remote Windows host has a version of McAfee VirusScan Enterprise VSE 8.8 prior to 8.8 Patch 1. It is, therefore, affected by a denial of service vulnerability due to a flaw in Self Protection. Malicious software can change the NTFS folder permissions on VSE folders and disable the software. C...