mcafee Vulnerability Advisory Catalog

Total 506 security vulnerabilities recorded for mcafee software and firmware.

← Back to All Vendors
Component: epolicy_orchestrator

A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authen...

📅 2017-05-18
CVSS 7.2 Dossier →
CVE-2017-4017 MEDIUM
Component: network_data_loss_prevention

User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view user information via the applia...

📅 2017-05-17
CVSS 5.3 Dossier →
CVE-2017-4016 MEDIUM
Component: network_data_loss_prevention

Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to exploit and find another hol...

📅 2017-05-17
CVSS 5.3 Dossier →
CVE-2017-4015 MEDIUM
Component: network_data_loss_prevention

Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web...

📅 2017-05-17
CVSS 4.5 Dossier →
Component: network_data_loss_prevention

Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view, add, a...

📅 2017-05-17
CVSS 8.0 Dossier →
CVE-2017-4013 MEDIUM
Component: network_data_loss_prevention

Banner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to obtain product information via HTTP res...

📅 2017-05-17
CVSS 5.3 Dossier →
CVE-2017-4012 MEDIUM
Component: network_data_loss_prevention

Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confide...

📅 2017-05-17
CVSS 6.5 Dossier →
CVE-2017-4011 MEDIUM
Component: network_data_loss_prevention

Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to get ...

📅 2017-05-17
CVSS 6.1 Dossier →
CVE-2016-8030 MEDIUM
Component: virusscan_enterprise

A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a ...

📅 2017-04-25
CVSS 4.3 Dossier →
Component: anti-malware_scan_engine

Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local attackers to bypass local security p...

📅 2017-03-31
CVSS 7.3 Dossier →
Component: anti-malware_scan_engine

Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local users to bypass local security prote...

📅 2017-03-28
CVSS 7.3 Dossier →
CVE-2017-3899 MEDIUM
Component: advanced_threat_defense

SQL injection vulnerability in Intel Security Advanced Threat Defense (ATD) Linux 3.6.0 and earlier allows remote authenticated users to obtain produc...

📅 2017-03-14
CVSS 6.5 Dossier →
CVE-2016-8027 CRITICAL
Component: epolicy_orchestrator

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attack...

📅 2017-03-14
CVSS 10.0 Dossier →
Component: security_scan_plus

Arbitrary command execution vulnerability in Intel Security McAfee Security Scan Plus (SSP) 3.11.469 and earlier allows authenticated users to gain el...

📅 2017-03-14
CVSS 7.8 Dossier →
CVE-2016-8025 MEDIUM
Component: virusscan_enterprise

SQL injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to obtain produc...

📅 2017-03-14
CVSS 6.2 Dossier →
Component: virusscan_enterprise

Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows...

📅 2017-03-14
CVSS 8.1 Dossier →
Component: virusscan_enterprise

Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote un...

📅 2017-03-14
CVSS 8.1 Dossier →
Component: virusscan_enterprise

Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated ...

📅 2017-03-14
CVSS 7.5 Dossier →
CVE-2016-8021 MEDIUM
Component: virusscan_enterprise

Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote a...

📅 2017-03-14
CVSS 5.0 Dossier →
Component: virusscan_enterprise

Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticat...

📅 2017-03-14
CVSS 8.0 Dossier →
CVE-2016-8019 MEDIUM
Component: virusscan_enterprise

Cross-site scripting (XSS) vulnerability in attributes in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows unauthenticated ...

📅 2017-03-14
CVSS 6.1 Dossier →
CVE-2016-8018 MEDIUM
Component: virusscan_enterprise

Cross-site request forgery (CSRF) vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote at...

📅 2017-03-14
CVSS 4.3 Dossier →
CVE-2016-8017 MEDIUM
Component: virusscan_enterprise

Special element injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers ...

📅 2017-03-14
CVSS 4.1 Dossier →
Component: virusscan_enterprise

Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to obtain the exist...

📅 2017-03-14
CVSS 3.4 Dossier →
Page 13 of 22 (506 Total Records)