Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-6630 State: PUBLISHED Published: 2018-02-05T18:00:00Z Last Updated: 2024-09-17T04:00:12.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8000014c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Micropoint_POC/tree/master/mp110005/8000014c
CVE ID: CVE-2018-6631 State: PUBLISHED Published: 2018-02-05T18:00:00Z Last Updated: 2024-09-16T18:08:12.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110009.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000170. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Micropoint_POC/tree/master/mp110009/0x80000170
CVE ID: CVE-2018-6632 State: PUBLISHED Published: 2018-02-05T18:00:00Z Last Updated: 2024-09-16T19:04:30.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000110. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Micropoint_POC/tree/master/mp110005/80000110
CVE ID: CVE-2018-6633 State: PUBLISHED Published: 2018-02-05T18:00:00Z Last Updated: 2024-09-17T03:43:07.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000038. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Micropoint_POC/tree/master/mp110005/80000038
CVE ID: CVE-2018-6634 State: PUBLISHED Published: 2019-05-07T19:28:59 Last Updated: 2024-08-05T06:10:11.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Parsec Windows 142-0 and Parsec 'Linux Ubuntu 16.04 LTS Desktop' Build 142-1 allows unauthorized users to maintain access to an account. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/VixusFoxy/status/1125697484498583553
CVE ID: CVE-2018-6635 State: PUBLISHED Published: 2018-02-05T18:00:00 Last Updated: 2024-08-05T06:10:11.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: System Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with authentication, which allows remote attackers to bypass intended Remote Method Invocation (RMI) restrictions, aka SMGR-26896. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040329 - https://downloads.avaya.com/css/P8/documents/101038598 - http://www.securityfocus.com/bid/102940
CVE ID: CVE-2018-6638 State: PUBLISHED Published: 2018-02-28T05:00:00 Last Updated: 2024-08-05T06:10:10.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. This occurs in a function call in which the first argument is a corrupted offset value and the second argument is a stack buffer. This is fixed in 6.9d. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1V-AA1InXBPhgJviabilttkaP4DYay9f6 - http://www.dessci.com/en/dl/
CVE ID: CVE-2018-6639 State: PUBLISHED Published: 2018-02-28T05:00:00 Last Updated: 2024-08-05T06:10:10.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds write (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. A size used by memmove is read from the input file. This is fixed in 6.9d. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=175_n6KhbOUlu9l0ySw-8QYk0oQbAaoZV - http://www.dessci.com/en/dl/
CVE ID: CVE-2018-6640 State: PUBLISHED Published: 2018-02-28T05:00:00 Last Updated: 2024-08-05T06:10:11.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Heap Overflow (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. Crafted input can modify the next pointer of a linked list. This is fixed in 6.9d. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1jIKf-EgP4qD-VmNHM1LbWGLbJLOClDim - http://www.dessci.com/en/dl/
CVE ID: CVE-2018-6641 State: PUBLISHED Published: 2018-02-28T05:00:00 Last Updated: 2024-08-05T06:10:10.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Arbitrary Free (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. Crafted input can overwrite a structure, leading to a function call with an invalid parameter, and a subsequent free of important data such as a function pointer or list pointer. This is fixed in 6.9d. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1qrHKzDA1daHh0mM2T8FRybL8we-mHRW9 - http://www.dessci.com/en/dl/
CVE ID: CVE-2018-6643 State: PUBLISHED Published: 2018-08-28T19:00:00 Last Updated: 2024-08-05T06:10:11.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/undefinedmode/CVE-2018-6643
CVE ID: CVE-2018-6644 State: PUBLISHED Published: 2018-02-08T23:00:00 Last Updated: 2024-08-05T06:10:11.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the /cimom URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2018/02/07/1 - http://www.securityfocus.com/bid/103041
CVE ID: CVE-2018-6651 State: PUBLISHED Published: 2018-02-05T22:00:00 Last Updated: 2024-08-05T06:10:10.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the uncurl_ws_accept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation (accepting an arbitrary substring match) for WebSocket API requests allows remote attackers to bypass intended access restrictions. In Parsec, this means full control over the victim's computer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chrisd1100/uncurl/releases/tag/0.07 - https://gist.github.com/Zenexer/ac7601c0e367d876353137e5099b18a7 - https://gi
.com/chrisd1100/uncurl/releases/tag/0.07 - https://gist.github.com/Zenexer/ac7601c0e367d876353137e5099b18a7 - https://github.com/chrisd1100/uncurl/commit/448cd13e7b18c83855d706c564341ddd1e38e769
CVE ID: CVE-2018-6653 State: PUBLISHED Published: 2018-03-01T00:00:00 Last Updated: 2024-08-05T06:10:11.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: comforte SWAP 1049 through 1069 and 20.0.0 through 21.5.3 (as used in SSLOBJ on HPE NonStop SSL T0910, and in the comforte SecurCS, SecurFTP, SecurLib/SSL-AT, and SecurTN products), after executing the RELOAD CERTIFICATES command, does not ensure that clients use a strong TLS cipher suite, which makes it easier for remote attackers to defeat intended cryptographic protection mechanisms by sniffing the network. This is fixed in 21.6.0. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc
. This is fixed in 21.6.0. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03827en_us - https://comforte.com/cve-2018-6653/
CVE ID: CVE-2018-6654 State: PUBLISHED Published: 2018-02-06T01:00:00Z Last Updated: 2024-09-17T01:41:14.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Grammarly extension before 2018-02-02 for Chrome allows remote attackers to discover authentication tokens via an 'action: "user"' request to iframe.gr_-ifr, because the exposure of these tokens is not restricted to any specific web site. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1527
CVE ID: CVE-2018-6655 State: PUBLISHED Published: 2018-02-07T21:00:00 Last Updated: 2024-08-05T06:10:10.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/43988/
CVE ID: CVE-2018-6656 State: PUBLISHED Published: 2018-02-06T14:00:00 Last Updated: 2024-08-05T06:10:10.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Z-BlogPHP 1.5.1 has CSRF via zb_users/plugin/AppCentre/app_del.php, as demonstrated by deleting files and directories. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zblogcn/zblogphp/commit/c51da34a27798b5fe6d1cb5133a15da6a6384e43 - https://github.com/zblogcn/zblogphp/issues/175
CVE ID: CVE-2018-6659 State: PUBLISHED Published: 2018-04-02T17:00:00Z Last Updated: 2024-09-16T16:23:29.064Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L) Vendors: McAfee Products: ePolicy Orchestrator (ePO) Problem Types: Reflected Cross-Site Scripting vulnerability Description: Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103392 - http://www.securitytracker.com/id/1040884 - https://kc.mcafee.com/corporate/index?
://www.securityfocus.com/bid/103392 - http://www.securitytracker.com/id/1040884 - https://kc.mcafee.com/corporate/index?page=content&id=SB10228
CVE ID: CVE-2018-6660 State: PUBLISHED Published: 2018-04-02T13:00:00Z Last Updated: 2024-09-16T22:40:52.250Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H) Vendors: McAfee Products: ePolicy Orchestrator (ePO) Problem Types: Directory Traversal vulnerability Description: Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103392 - http://
file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103392 - http://www.securitytracker.com/id/1040884 - https://kc.mcafee.com/corporate/index?page=content&id=SB10228
CVE ID: CVE-2018-6661 State: PUBLISHED Published: 2018-04-02T13:00:00Z Last Updated: 2024-09-16T18:13:31.477Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee Products: True Key Problem Types: DLL Side-Loading vulnerability Description: DLL Side-Loading vulnerability in Microsoft Windows Client in McAfee True Key before 4.20.110 allows local users to gain privilege elevation via not verifying a particular DLL file signature. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102801
CVE ID: CVE-2018-6662 State: PUBLISHED Published: 2018-06-05T14:00:00Z Last Updated: 2024-09-16T16:17:34.509Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee Products: McAfee Management of Native Encryption (MNE) Problem Types: Privilege Escalation Vulnerability Description: Privilege Escalation vulnerability in McAfee Management of Native Encryption (MNE) before 4.1.4 allows local users to gain elevated privileges via a crafted user input. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104009 - https://kc.mcafee.com/corporate/index?page=content&id=SB10232
CVE ID: CVE-2018-6664 State: PUBLISHED Published: 2018-05-25T13:00:00Z Last Updated: 2024-09-16T17:54:18.317Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:H) Vendors: McAfee Products: Data Loss Prevention (DLP) Endpoint Problem Types: Application Protection Bypass vulnerability Description: Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104299 - http://www.securitytracke
nalyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104299 - http://www.securitytracker.com/id/1040895 - https://kc.mcafee.com/corporate/index?page=content&id=SB10237
CVE ID: CVE-2018-6667 State: PUBLISHED Published: 2018-06-26T17:00:00 Last Updated: 2024-08-05T06:10:10.815Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee Products: Web Gateway Problem Types: Authentication Bypass vulnerability Description: Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions (JMX). Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10241 - http://www.securitytracker.com/id/1041129 - http://www.securityfocus.com/bid/10
orporate/index?page=content&id=SB10241 - http://www.securitytracker.com/id/1041129 - http://www.securityfocus.com/bid/104564
CVE ID: CVE-2018-6668 State: PUBLISHED Published: 2018-12-31T18:00:00.000Z Last Updated: 2025-05-06T16:56:35.580Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H) Vendors: McAfee Products: Application and Change Control Problem Types: whitelist bypass vulnerability Description: A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/106282 - https://kc.mcafee.com/corporate/index?page=content&id=SB10261
CVE ID: CVE-2018-6669 State: PUBLISHED Published: 2018-12-20T14:00:00 Last Updated: 2024-08-05T06:10:11.290Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H) Vendors: McAfee Products: Application and Change Control Problem Types: whitelist bypass vulnerability Description: A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows a remote or local user to execute blacklisted files through an ASP.NET form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106282 - https://kc.mcafee.com/corporate/index?page=content&id=SB10261
CVE ID: CVE-2018-6670 State: PUBLISHED Published: 2018-06-07T18:00:00 Last Updated: 2024-08-05T06:10:11.275Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:L) Vendors: McAfee Products: Common UI (CUI) Problem Types: External Entity Attack vulnerability Description: External Entity Attack vulnerability in the ePO extension in McAfee Common UI (CUI) 2.0.2 allows remote authenticated users to view confidential information via a crafted HTTP request parameter. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10236
CVE ID: CVE-2018-6671 State: PUBLISHED Published: 2018-06-15T14:00:00 Last Updated: 2024-08-05T06:10:11.361Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: McAfee Products: ePolicy Orchestrator (ePO) Problem Types: Application Protection Bypass vulnerability Description: Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some ePO features via a specially crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104485 - https://kc.mcaf
ditional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104485 - https://kc.mcafee.com/corporate/index?page=content&id=SB10240 - https://www.exploit-db.com/exploits/46518/ - http://www.securitytracker.com/id/1041155
CVE ID: CVE-2018-6672 State: PUBLISHED Published: 2018-06-15T14:00:00 Last Updated: 2024-08-05T06:10:11.360Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: McAfee Products: ePolicy Orchestrator (ePO) Problem Types: Information disclosure vulnerability Description: Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view sensitive information in plain text format via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104485 - https://kc.mcafee.com/corporate/index?page=content&id=SB10240 - http://w
es: - http://www.securityfocus.com/bid/104485 - https://kc.mcafee.com/corporate/index?page=content&id=SB10240 - http://www.securitytracker.com/id/1041155
CVE ID: CVE-2018-6674 State: PUBLISHED Published: 2018-05-25T13:00:00 Last Updated: 2024-08-05T06:10:10.792Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee, LLC Products: VirusScan Enterprise (VSE) Problem Types: CWE-264, CWE-274, CWE-269 Description: Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user's privileges). Additional Analyst Notes: - CVE Program Container: References: - https:/
lt it runs with the current user's privileges). Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10237
CVE ID: CVE-2018-6677 State: PUBLISHED Published: 2018-07-23T13:00:00 Last Updated: 2024-08-05T06:10:10.756Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee Products: McAfee Web Gateway (MWG) Problem Types: Directory Traversal vulnerability Description: Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to gain elevated privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104893 - https://kc.mcafee.com/corporate/index?page=content&id=SB10245
CVE ID: CVE-2018-6678 State: PUBLISHED Published: 2018-07-23T13:00:00 Last Updated: 2024-08-05T06:10:11.375Z Severity: LOW (CVSS 3.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:L) Vendors: McAfee Products: McAfee Web Gateway (MWG) Problem Types: Configuration manipulation vulnerability Description: Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104893 - https://kc.mcafee.com/corporate/index?page=content&id=SB10245
CVE ID: CVE-2018-6681 State: PUBLISHED Published: 2018-07-17T13:00:00 Last Updated: 2024-08-05T06:10:11.272Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N) Vendors: McAfee Products: Network Security Management (NSM) Problem Types: Abuse of Functionality vulnerability Description: Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management (NSM) 9.1.7.11 and earlier allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via appliance web interface. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10244
CVE ID: CVE-2018-6682 State: PUBLISHED Published: 2018-09-24T12:00:00 Last Updated: 2024-08-05T06:10:10.927Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: McAfee Products: True Key (TK) Problem Types: Cross Site Scripting Exposure Description: Cross Site Scripting Exposure in McAfee True Key (TK) 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102825
CVE ID: CVE-2018-6683 State: PUBLISHED Published: 2018-07-23T15:00:00 Last Updated: 2024-08-05T06:10:10.754Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee Products: Data Loss Prevention (DLP) for Windows Problem Types: Exploiting Incorrectly Configured Access Control Security Levels vulnerability Description: Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corpo
policy files when offline. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10246
CVE ID: CVE-2018-6686 State: PUBLISHED Published: 2018-07-27T13:00:00 Last Updated: 2024-08-05T06:10:10.705Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: McAfee Products: Drive Encryption (MDE) Problem Types: Authentication Bypass vulnerability Description: Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption (MDE) 7.1.0 and above allows physically proximate attackers to bypass local security protection via specific set of circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10242
CVE ID: CVE-2018-6687 State: PUBLISHED Published: 2019-02-21T14:00:00 Last Updated: 2024-08-05T06:10:10.797Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: McAfee, LLC Products: McAfee GetSusp (GetSusp) Problem Types: Loop with Unreachable Exit Condition ('Infinite Loop') Description: Loop with Unreachable Exit Condition ('Infinite Loop') in McAfee GetSusp (GetSusp) 3.0.0.461 and earlier allows attackers to DoS a manual GetSusp scan via while scanning a specifically crafted file . GetSusp is a free standalone McAfee tool that runs on several versions of Microsoft Windows. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfo
al versions of Microsoft Windows. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107126 - https://kc.mcafee.com/corporate/index?page=content&id=SB10270