mcafee Vulnerability Advisory Catalog

Total 506 security vulnerabilities recorded for mcafee software and firmware.

← Back to All Vendors
CVE-2019-3612 MEDIUM
Component: data_exchange_layer

Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated u...

📅 2019-04-10
CVSS 4.4 Dossier →
Component: network_security_manager

Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 < 9.1.7.75 (Update ...

📅 2019-03-26
CVSS 7.7 Dossier →
CVE-2019-3597 MEDIUM
Component: network_security_manager

Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated...

📅 2019-03-26
CVSS 6.5 Dossier →
CVE-2019-3615 MEDIUM
Component: database_security

Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose ...

📅 2019-03-12
CVSS 5.3 Dossier →
Component: agent

Information Disclosure vulnerability in Remote logging (which is disabled by default) in McAfee Agent (MA) 5.x allows remote unauthenticated users to ...

📅 2019-02-28
CVSS 7.5 Dossier →
CVE-2019-3598 MEDIUM
Component: agent

Buffer Access with Incorrect Length Value in McAfee Agent (MA) 5.x allows remote unauthenticated users to potentially cause a denial of service via sp...

📅 2019-02-28
CVSS 5.3 Dossier →
Component: endpoint_security

Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security (ENS) 10.6.1 and earlier allows local users to gain elevate...

📅 2019-02-28
CVSS 8.6 Dossier →
CVE-2018-6687 MEDIUM
Component: getsusp

Loop with Unreachable Exit Condition ('Infinite Loop') in McAfee GetSusp (GetSusp) 3.0.0.461 and earlier allows attackers to DoS a manual GetSusp scan...

📅 2019-02-21
CVSS 5.5 Dossier →
CVE-2019-3610 MEDIUM
Component: true_key

Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key (TK) 3.1.9211.0 and earlier allows local users to expose confidentia...

📅 2019-02-13
CVSS 5.6 Dossier →
CVE-2019-3604 MEDIUM
Component: epolicy_orchestrator

Cross-Site Request Forgery (CSRF) vulnerability in McAfee ePO (legacy) Cloud allows unauthenticated users to perform unintended ePO actions using an a...

📅 2019-02-01
CVSS 4.8 Dossier →
Component: total_protection

Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.R18 allows local users to byp...

📅 2019-01-28
CVSS 7.5 Dossier →
Component: total_protection

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.18 allows local users to execute a...

📅 2019-01-23
CVSS 7.2 Dossier →
Component: mvision_endpoint

Exploitation of Authentication vulnerability in MVision Endpoint in McAfee MVision Endpoint Prior to 1811 Update 1 (18.11.31.62) allows authenticated ...

📅 2019-01-23
CVSS 7.4 Dossier →
Component: mcafee_web_gateway

Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to cause a denial of service via a cr...

📅 2019-01-09
CVSS 7.5 Dossier →
CVE-2018-6668 MEDIUM
Component: application_change_control

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL...

📅 2018-12-31
CVSS 6.1 Dossier →
CVE-2018-6669 MEDIUM
Component: application_change_control

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows a remote or local user to execute blacklisted ...

📅 2018-12-20
CVSS 6.3 Dossier →
Component: agent

Denial of Service through Resource Depletion vulnerability in the agent in non-Windows McAfee Agent (MA) 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows ...

📅 2018-12-14
CVSS 3.7 Dossier →
Component: agent

Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows an Unprivileged User to introduce custom...

📅 2018-12-12
CVSS 7.5 Dossier →
Component: agent

Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary comman...

📅 2018-12-12
CVSS 7.8 Dossier →
Component: agent

Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary comman...

📅 2018-12-12
CVSS 7.8 Dossier →
CVE-2018-6703 CRITICAL
Component: agent

Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers...

📅 2018-12-11
CVSS 9.8 Dossier →
Component: true_key

Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary c...

📅 2018-12-06
CVSS 7.5 Dossier →
Component: true_key

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorize...

📅 2018-12-06
CVSS 7.8 Dossier →
Component: true_key

Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitr...

📅 2018-12-06
CVSS 7.2 Dossier →
Page 10 of 22 (506 Total Records)