CVE-2026-109430

Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity XXE injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without disabling external entity and DTD resolution. Attackers can exploit this flaw to forc...

CVE-2026-109430 Ellucian WebAdvisor 3.2 Unauthenticated XXE Injection

Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity XXE injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without disabling external entity and DTD resolution. Attackers can exploit this flaw to forc...

EUVD-2026-101808

Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity XXE injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without disabling external entity and DTD resolution. Attackers can exploit this flaw to forc...

CVE-2026-109430

Ellucian WebAdvisor 3.2 is vulnerable to an unauthenticated XML External Entity (XXE) injection because the /WebAdvisor/WebAdvisor endpoint fails to disable external entity and DTD resolution. A remote attacker can submit crafted XML POST requests to trigger Server-Side Request Forgery (SSRF) , d...

CVE-2026-109430: Improper Restriction of XML External Entity Reference

Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity XXE injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without disabling external entity and DTD resolution. Attackers can exploit this flaw to forc...

PT-2026-114434

Name of the Vulnerable Software and Affected Versions Ellucian WebAdvisor version 3.2 Description An unauthenticated XML External Entity XXE injection exists, allowing remote attackers to send crafted XML POST requests to the '/WebAdvisor/WebAdvisor' endpoint. This occurs because the system fails...

CVE-2022-0815

Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user’s system. This could lead to unexpected behaviors including; settings being changed...

EUVD-2015-8846

Malware in sbrugna...

EUVD-2022-15865

Malicious code in bioql PyPI...

McAfee WebAdvisor Access Control

The vulnerability of the McAfee WebAdvisor antivirus protection plugin for browsers Chrome and Edge is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the plugin settings and other system information of the...

Mcafee WebAdvisor Access Control Error Vulnerability

McAfee WebAdvisor, an organization of Mcafee, Inc. that evaluates Web site security, also refers to the services it provides. attackers can use this vulnerability to obtain detailed information about McAfee WebAdvisor settings and user systems...

CVE-2022-0815

Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user’s system. This could lead to unexpected behaviors including; settings being changed...

CVE-2022-0815

Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user’s system. This could lead to unexpected behaviors including; settings being changed...

CVE-2022-0815

Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user’s system. This could lead to unexpected behaviors including; settings being changed...

Improper access control

Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user’s system. This could lead to unexpected behaviors including; settings being changed...

CVE-2022-0815 McAfee WebAdvisor - Extension Fingerprinting vulnerability

Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user’s system. This could lead to unexpected behaviors including; settings being changed...

CVE-2022-0815

CVE-2022-0815 describes an improper access control flaw in McAfee WebAdvisor Chrome and Edge extensions (version ~8.1.0.1895 and earlier). The issue allows a remote attacker to access McAfee WebAdvisor settings and other system details. Documented impacts include potential setting changes, system...

McAfee WebAdvisor Access Control Vulnerability

McAfee WebAdvisor, an organization of Mcafee, Inc. that evaluates Web site security, also refers to the services it provides. attackers can use this vulnerability to obtain detailed information about McAfee WebAdvisor settings and user systems...

CVE-2022-0815: Exposure of Resource to Wrong Sphere

Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user’s system. This could lead to unexpected behaviors including; settings being changed...

PT-2022-2271

Name of the Vulnerable Software and Affected Versions McAfee WebAdvisor versions up to 8.1.0.1895 Description The issue is related to improper access control in the McAfee WebAdvisor Chrome and Edge browser extensions. This could allow a remote attacker to gain access to McAfee WebAdvisor setting...