Mcafee
mcafee
602 CVEs • 137 products
Products (137)
Click to collapseToggle
Products (137)
Click to collapse
CVEs (602)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key (TK) before 5.1.165 allows local users to execute arbitrary code via specially crafted malware. |
Cross Site Scripting Exposure in McAfee True Key (TK) 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site. |
1Mcafee 1Application Change Control Nov 21, 2024 Sep 18, 2018 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control (MACC) 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary cod...Show more |
1Mcafee 1Application And Change Control Nov 21, 2024 Sep 18, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility. |
1Mcafee 2Endpoint Security For Linux Threat Prevention Endpoint Security Linux Threat PreventionNov 21, 2024 Sep 18, 2018 N/A· v4 5.3 MEDIUM· v3 3.3 LOW· v2 An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use (TOCTOU) race condition during a specif...Show more |
Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption (MDE) 7.1.0 and above allows physically proximate attackers to bypass local security protection via specific set of circumstances. |
1Mcafee 1Data Loss Prevention Endpoint Nov 21, 2024 Jul 23, 2018 N/A· v4 7.4 HIGH· v3 4.6 MEDIUM· v2 Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing...Show more |
1Mcafee 1Mcafee Web Gateway Nov 21, 2024 Jul 23, 2018 N/A· v4 9.1 CRITICAL· v3 6.5 MEDIUM· v2 Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to execute arbitrary commands via unspecified vectors. |
Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to gain elevated privileges via unspecified vectors. |
1Mcafee 1Network Security Manager Nov 21, 2024 Jul 17, 2018 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management (NSM) 9.1.7.11 and earlier allows authenticated users to allow arbitrary HTML code to be reflected in the response web page...Show more |
Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions (JMX). |
1Mcafee 1Epolicy Orchestrator Nov 21, 2024 Jun 15, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view sensitive information in plain text format via unspecified vectors. |
1Mcafee 1Epolicy Orchestrator Nov 21, 2024 Jun 15, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some...Show more |
1Mcafee 1Epolicy Orchestrator Nov 21, 2024 Jun 13, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the use...Show more |
1Mcafee 1Mcafee Threat Intelligence Exchange Nov 21, 2024 Jun 13, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the...Show more |
1Mcafee 2Network Data Loss Prevention Network Security ManagerNov 21, 2024 Jun 13, 2018 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5 allows remote attackers to disclose sensitive...Show more |
1Mcafee 1Network Security Manager Nov 21, 2024 Jun 12, 2018 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashe...Show more |
1Mcafee 1Network Security Manager Nov 21, 2024 Jun 12, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to gain elevated privileges via a crafted HTTP request parameter. |
External Entity Attack vulnerability in the ePO extension in McAfee Common UI (CUI) 2.0.2 allows remote authenticated users to view confidential information via a crafted HTTP request parameter. |
1Mcafee 1Management Of Native Encryption Nov 21, 2024 Jun 5, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Privilege Escalation vulnerability in McAfee Management of Native Encryption (MNE) before 4.1.4 allows local users to gain elevated privileges via a crafted user input. |