CVE-2015-7704

CVE-2015-7704 describes a denial-of-service in ntpd caused by handling of Kiss-of-Death (KoD) messages. The issue arises from KoD processing that could delay or stop querying time sources. Affected software: ntpd in NTP 4.x prior to 4.2.8p4 and 4.3.x prior to 4.3.77. Impact: unauthenticated remot...

CVE-2019-3629

McAfee Enterprise Security Manager (ESM) has an authorization issue that allows an unauthenticated user to impersonate system users via specially crafted parameters. Affected versions are ESM prior to 11.2.0 and prior to 10.4.0. This is a protection bypass vulnerability in the application itself....

CVE-2019-3630

CVE-2019-3630 affects McAfee Enterprise Security Manager (ESM). An authenticated user can trigger a command injection via specially crafted parameters, allowing execution of arbitrary code on affected systems. Affected versions are ESM prior to 11.2.0 and prior to 10.4.0. The vulnerability stems ...

CVE-2019-3632

CVE-2019-3632 affects McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0. A directory traversal vulnerability allows an authenticated user to gain elevated privileges via specially crafted input, due to insufficient restrictions on path names. In practice, exploitation w...

CVE-2019-3631

McAfee Enterprise Security Manager (ESM) is affected by a command injection vulnerability (CVE-2019-3631) in versions prior to 11.2.0 and prior to 10.4.0. The issue arises from input that can be crafted by anAuthenticated user to cause arbitrary code execution. Impact is described as remote code ...