Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-3564 State: PUBLISHED Published: 2019-05-06T15:15:02 Last Updated: 2024-08-04T19:12:09.508Z Vendors: Facebook Products: Facebook Thrift Problem Types: CWE-834 Description: Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.03.04.00. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/fbthrift/commit/c461c1bd1a3e130b181aa9c854da3030cd4b5156 - https://www.facebook.com/security/ad
ps://github.com/facebook/fbthrift/commit/c461c1bd1a3e130b181aa9c854da3030cd4b5156 - https://www.facebook.com/security/advisories/cve-2019-3564 - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E
CVE ID: CVE-2019-3565 State: PUBLISHED Published: 2019-05-06T15:15:02 Last Updated: 2024-08-04T19:12:09.598Z Vendors: Facebook Products: Facebook Thrift Problem Types: CWE-834 Description: Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.05.06.00. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/fbthrift/commit/01686e15ec77ccb4d49a77d5bce3a01601e54d64 -
Program Container: References: - https://github.com/facebook/fbthrift/commit/01686e15ec77ccb4d49a77d5bce3a01601e54d64 - https://www.facebook.com/security/advisories/cve-2019-3565 - http://www.securityfocus.com/bid/108280 - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E
CVE ID: CVE-2019-3566 State: PUBLISHED Published: 2019-05-10T20:58:02 Last Updated: 2024-08-04T19:12:09.532Z Vendors: Facebook Products: WhatsApp for Android, WhatsApp Business for Android Problem Types: CWE-284 Description: A bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual who has taken over over a WhatsApp user's account to recover previously sent messages. This behavior requires independent knowledge of metadata for previous messages, which are not available publicly. This issue affects WhatsApp for Android 2.19.52 and 2.19.54 - 2.19.103, as well as WhatsApp Business for Android starting in v2.19.22 until v2.19.38. Additional Analyst Notes: - C
- 2.19.103, as well as WhatsApp Business for Android starting in v2.19.22 until v2.19.38. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2019-3566
CVE ID: CVE-2019-3567 State: PUBLISHED Published: 2019-06-03T18:22:08 Last Updated: 2024-08-04T19:12:09.500Z Vendors: Facebook Products: osquery Problem Types: CWE-284 Description: In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious binary to a folder with known 'safe' permissions. Under those circumstances osquery will load said malicious executable with SYSTEM permissions. The solution is to migrate installations to the 'Program Files' directory on Windows which restricts unprivileged write access. This issue affects osquery prior to v3.4.0. Additional Analyst Notes: - CVE Program Contain
s unprivileged write access. This issue affects osquery prior to v3.4.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2019-3567
CVE ID: CVE-2019-3568 State: PUBLISHED Published: 2019-05-14T19:52:40.000Z Last Updated: 2025-10-21T23:45:37.464Z Vendors: Facebook Products: WhatsApp for Android, WhatsApp Business for Android, WhatsApp for iOS, WhatsApp Business for iOS, WhatsApp for Windows Phone, WhatsApp for Tizen Problem Types: CWE-122 Description: A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone
o v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.facebook.com/security/advisories/cve-2019-3568 - http://www.securityfocus.com/bid/108329
CVE ID: CVE-2019-3569 State: PUBLISHED Published: 2019-06-26T15:09:17 Last Updated: 2024-08-04T19:12:09.483Z Vendors: Facebook Products: HHVM Problem Types: CWE-552 Description: HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could allow a malicious individual unintended direct access to the application, which could result in information disclosure. This issue affects versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, versions 3.30.5 and below, and all versions in the 4.0, 4.1, and 4.2 series. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/hhvm/commit/97ef580ec2cca9a54da6f9bd9fdd9a455f6d74ed - https:
ogram Container: References: - https://github.com/facebook/hhvm/commit/97ef580ec2cca9a54da6f9bd9fdd9a455f6d74ed - https://hhvm.com/blog/2019/06/10/hhvm-4.9.0.html
CVE ID: CVE-2019-3570 State: PUBLISHED Published: 2019-07-18T15:42:25 Last Updated: 2024-08-04T19:12:09.495Z Vendors: Facebook Products: HHVM Problem Types: CWE-122 Description: Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and p). This happens if the parameters are configurable by an attacker for instance by providing the output of scrypt_enc() in a context where Hack/PHP code would attempt to verify it by re-running scrypt_enc() with the same parameters. This could result in information disclosure, memory being overwriten or crashes of the HHVM process. This issue affects versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.
ory being overwriten or crashes of the HHVM process. This issue affects versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, versions 3.30.5 and below, and all versions in the 4.0, 4.1, and 4.2 series. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/hhvm/commit/cc331e4349e91706a673e2a09f1f2ea5bbb33815 - https://hhvm.com/blog/2019/06/10/hhvm-4.9.0.html
CVE ID: CVE-2019-3571 State: PUBLISHED Published: 2019-07-16T20:16:35 Last Updated: 2024-08-04T19:12:09.515Z Vendors: Facebook Products: WhatsApp Desktop Problem Types: CWE-116 Description: An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows malicious clients to send files to users that would be displayed with a wrong extension. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2019-3571
CVE ID: CVE-2019-3572 State: PUBLISHED Published: 2019-01-02T15:00:00Z Last Updated: 2024-09-16T16:58:50.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to png_write_row in libpng, an out-of-bounds write might occur for some memory layouts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/169
CVE ID: CVE-2019-3573 State: PUBLISHED Published: 2019-01-02T15:00:00Z Last Updated: 2024-09-16T20:31:38.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libsixel v1.8.2, there is an infinite loop in the function sixel_decode_raw_impl() in the file fromsixel.c, as demonstrated by sixel2png. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/libsixel - https://github.com/saitoha/libsixel/issues/83
CVE ID: CVE-2019-3574 State: PUBLISHED Published: 2019-01-02T15:00:00Z Last Updated: 2024-09-17T02:36:15.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libsixel v1.8.2, there is a heap-based buffer over-read in the function load_jpeg() in the file loader.c, as demonstrated by img2sixel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/libsixel - https://github.com/saitoha/libsixel/issues/83
CVE ID: CVE-2019-3575 State: PUBLISHED Published: 2019-01-03T19:00:00 Last Updated: 2024-08-04T19:12:09.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/schettino72/sqla_yaml_fixtures/issues/20
CVE ID: CVE-2019-3576 State: PUBLISHED Published: 2019-01-02T17:00:00Z Last Updated: 2024-09-16T21:02:17.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveorite/ PATH_INFO. The vulnerable code location is com.inxedu.os.edu.controller.user.UserController#deleteFavorite (aka deleteFavorite in com/inxedu/os/edu/controller/user/UserController.java), where courseFavoritesService.deleteCourseFavoritesById is mishandled during use of MyBatis. NOTE: UserController.java has a spelling variation in an annotation: a @RequestMapping("/deleteFaveorite/{ids}") line followed b
erController.java has a spelling variation in an annotation: a @RequestMapping("/deleteFaveorite/{ids}") line followed by a "public ModelAndView deleteFavorite" line. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/inxeduopen/inxedu/issues/IQIIV
CVE ID: CVE-2019-3577 State: PUBLISHED Published: 2019-01-02T17:00:00Z Last Updated: 2024-09-16T22:02:34.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id[0] parameter to the /product URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/caokang/waimai/issues/9
CVE ID: CVE-2019-3578 State: PUBLISHED Published: 2019-06-06T18:13:52 Last Updated: 2024-08-04T19:12:09.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB 1.8.19 has XSS in the resetpassword function. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2019/02/27/mybb-1-8-20-released-security-maintenance-release/ - https://blog.mybb.com/
CVE ID: CVE-2019-3579 State: PUBLISHED Published: 2019-06-06T18:11:32 Last Updated: 2024-08-04T19:12:09.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB 1.8.19 allows remote attackers to obtain sensitive information because it discloses the username upon receiving a password-reset request that lacks the code parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2019/02/27/mybb-1-8-20-released-security-maintenance-release/ - https://blog.mybb.com/
CVE ID: CVE-2019-3580 State: PUBLISHED Published: 2019-01-03T01:00:00Z Last Updated: 2024-09-16T23:10:24.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenRefine/OpenRefine/issues/1927
CVE ID: CVE-2019-3581 State: PUBLISHED Published: 2019-01-09T14:00:00 Last Updated: 2024-08-04T19:12:09.492Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: McAfee Products: McAfee Web Gateway Problem Types: CWE-20 Description: Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to cause a denial of service via a crafted HTTP request parameter. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10264
CVE ID: CVE-2019-3582 State: PUBLISHED Published: 2019-02-28T16:00:00 Last Updated: 2024-08-04T19:12:09.374Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee, LLC Products: McAfee Endpoint Security (ENS) Problem Types: Privilege Escalation vulnerability Description: Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security (ENS) 10.6.1 and earlier allows local users to gain elevated privileges via a specific set of circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10254
CVE ID: CVE-2019-3584 State: PUBLISHED Published: 2019-01-23T15:00:00 Last Updated: 2024-08-04T19:12:09.473Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:H) Vendors: Mcafee Products: MVision Endpoint Problem Types: Exploitation of Authentication vulnerability Description: Exploitation of Authentication vulnerability in MVision Endpoint in McAfee MVision Endpoint Prior to 1811 Update 1 (18.11.31.62) allows authenticated administrator users --> administrators to Remove MVision Endpoint via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10265 - http://www.securityfocus.com/bid/1
tainer: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10265 - http://www.securityfocus.com/bid/106789
CVE ID: CVE-2019-3585 State: PUBLISHED Published: 2020-06-10T11:42:46.145910Z Last Updated: 2024-09-16T16:38:13.724Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: McAfee, LLC Products: McAfee VirusScan Enterprise (VSE) Problem Types: CWE-269 Description: Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=conten
eges. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10302
CVE ID: CVE-2019-3586 State: PUBLISHED Published: 2019-05-15T15:48:10 Last Updated: 2024-08-04T19:12:09.414Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:H) Vendors: McAfee, LLC Products: McAfee Endpoint Security (ENS) Problem Types: CWE-693 Description: Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI reputation is carefully manipulated and does not correctly trigger the ENS Firewall to block the connection. Additional Ana
utation is carefully manipulated and does not correctly trigger the ENS Firewall to block the connection. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10280 - http://www.securityfocus.com/bid/108416
CVE ID: CVE-2019-3587 State: PUBLISHED Published: 2019-01-23T15:00:00 Last Updated: 2024-08-04T19:12:09.648Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Mcafee Products: Total Protection (MTP) Problem Types: DLL Search Order Hijacking vulnerability Description: DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised folder. Additional Analyst Notes: - CVE Program Container: References: - http://service.mcafee.com/FAQDocument.aspx?&id=TS102887
CVE ID: CVE-2019-3588 State: PUBLISHED Published: 2020-06-10T11:47:44.182315Z Last Updated: 2024-09-16T20:37:00.818Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: McAfee, LLC Products: McAfee VirusScan Enterprise (VSE) Problem Types: CWE-269 Description: Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10302
CVE ID: CVE-2019-3591 State: PUBLISHED Published: 2019-07-24T14:30:11 Last Updated: 2024-08-04T19:12:09.538Z Severity: LOW (CVSS 3.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: McAfee, LLC Products: Data Loss Prevention ePO extension Problem Types: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in ePO extension in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows unauthenticated remote user to trigger specially crafted JavaScript to render in the ePO UI via a carefully crafted upload to a remote website which is correctly
cially crafted JavaScript to render in the ePO UI via a carefully crafted upload to a remote website which is correctly blocked by DLPe Web Protection. This would then render as an XSS when the DLP Admin viewed the event in the ePO UI. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10289 - http://www.securityfocus.com/bid/109377
CVE ID: CVE-2019-3592 State: PUBLISHED Published: 2019-07-18T18:04:02 Last Updated: 2024-08-04T19:12:09.591Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee, LLC Products: McAfee Agent (MA) Problem Types: Privilege Escalation Description: Privilege escalation vulnerability in McAfee Agent (MA) before 5.6.1 HF3, allows local administrator users to potentially disable some McAfee processes by manipulating the MA directory control and placing a carefully constructed file in the MA directory. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10288
CVE ID: CVE-2019-3593 State: PUBLISHED Published: 2019-01-28T18:00:00Z Last Updated: 2024-09-17T00:16:44.003Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: Mcafee, LLC Products: Total Protection (MTP) Problem Types: Exploitation of Privilege/Trust vulnerability Description: Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies and product files, and uninstall McAfee software without permission via specially crafted malware. Additional Analyst Notes: - CVE Program Container: References: - http://service.mcafee.com/F
specially crafted malware. Additional Analyst Notes: - CVE Program Container: References: - http://service.mcafee.com/FAQDocument.aspx?&id=TS102888
CVE ID: CVE-2019-3595 State: PUBLISHED Published: 2019-07-24T14:28:59 Last Updated: 2024-08-04T19:12:09.605Z Severity: LOW (CVSS 2 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: McAfee, LLC Products: DLP Endpoint ePO extension Problem Types: CWE-78 Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') in ePO extension in McAfee Data Loss Prevention (DLP) 11.x prior to 11.3.0 allows Authenticated Adminstrator to execute arbitrary code with their local machine privileges via a specially crafted DLP policy, which is exported and opened on the their machine. In our checks, the user must explicitly allow the code to execute. Additional Analyst No
nd opened on the their machine. In our checks, the user must explicitly allow the code to execute. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10289 - http://www.securityfocus.com/bid/109377
CVE ID: CVE-2019-3597 State: PUBLISHED Published: 2019-03-26T17:21:31 Last Updated: 2024-08-04T19:12:09.639Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: McAfee LLC Products: McAfee Network Security Manager (NSM) Problem Types: Authentication Bypass vulnerability Description: Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated users to gain administrator rights via incorrect handling of expired GUI sessions. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10275 - http://www.securityfocu
Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10275 - http://www.securityfocus.com/bid/107609
CVE ID: CVE-2019-3598 State: PUBLISHED Published: 2019-02-28T16:00:00 Last Updated: 2024-08-04T19:12:09.700Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: McAfee, LLC Products: McAfee Agent (MA) Problem Types: Buffer Access with Incorrect Length Value Description: Buffer Access with Incorrect Length Value in McAfee Agent (MA) 5.x allows remote unauthenticated users to potentially cause a denial of service via specifically crafted UDP packets. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10272 - http://www.securityfocus.com/bid/107205
CVE ID: CVE-2019-3599 State: PUBLISHED Published: 2019-02-28T16:00:00 Last Updated: 2024-08-04T19:12:09.595Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: McAfee, LLC Products: McAfee Agent (MA) Problem Types: Information Disclosure vulnerability Description: Information Disclosure vulnerability in Remote logging (which is disabled by default) in McAfee Agent (MA) 5.x allows remote unauthenticated users to access sensitive information via remote logging when it is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10271
CVE ID: CVE-2019-3602 State: PUBLISHED Published: 2019-05-15T15:47:03 Last Updated: 2024-08-04T19:12:09.689Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: McAfee, LLC Products: McAfee Network Security Manager (NSM) Problem Types: Cross Site Scripting (XSS) vulnerability Description: Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) Prior to 9.1 Update 5 allows an authenticated administrator to embed an XSS in the administrator interface via a specially crafted custom rule containing HTML. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10281 - http://ww
Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10281 - http://www.securityfocus.com/bid/108400