rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-3562 
A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code. This affects the Oculus Browser starting from version 5.2.7 until 5.7.11.
Problem types: cwe_id: CWE-74
description: Improper Neutralization of Special Elements in Output Used by a Downstream Component (CWE-74)
Affected products: vendor: Oculus
product: Oculus Browser
Published: 2019-04-29T15:32:45.000Z
CVE-2019-3563 
Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflow. This affects versions of Wangle prior to v2019.04.22.00
Problem types: cwe_id: CWE-126
description: Buffer Over-read (CWE-126)
Affected products: vendor: Facebook
product: Wangle
Published: 2019-04-29T15:32:45.000Z
CVE-2019-3564 
Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.03.04.00.
Problem types: cwe_id: CWE-834
description: Excessive Iteration (CWE-834)
Affected products: vendor: Facebook
product: Facebook Thrift
Published: 2019-05-06T15:15:02.000Z
CVE-2019-3565 
Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.05.06.00.
Problem types: cwe_id: CWE-834
description: Excessive Iteration (CWE-834)
Affected products: vendor: Facebook
product: Facebook Thrift
Published: 2019-05-06T15:15:02.000Z
CVE-2019-3566 
A bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual who has taken over over a WhatsApp user's account to recover previously sent messages. This behavior requires independent knowledge of metadata for previous messages, which are not available publicly. This issue affects WhatsApp for Android 2.19.52 and 2.19.54 - 2.19.103, as well as WhatsApp Business for Android starting in v2.19.22 until v2.19.38.
Problem types: cwe_id: CWE-284
description: Improper Access Control (CWE-284)
Affected products: vendor: Facebook
product: WhatsApp for Android
vendor: Facebook
product: WhatsApp Business for Android
Published: 2019-05-10T20:58:02.000Z
CVE-2019-3567 
In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious binary to a folder with known 'safe' permissions. Under those circumstances osquery will load said malicious executable with SYSTEM permissions. The solution is to migrate installations to the 'Program Files' directory on Windows which restricts unprivileged write access. This issue affects osquery prior to v3.4.0.
Problem types: cwe_id: CWE-284
description: Improper Access Control (CWE-284)
Affected products: vendor: Facebook
product: osquery
Published: 2019-06-03T18:22:08.000Z
CVE-2019-3568 
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15.
Problem types: cwe_id: CWE-122
description: Heap-based Buffer Overflow (CWE-122)
Affected products: vendor: Facebook
product: WhatsApp for Android
vendor: Facebook
product: WhatsApp Business for Android
vendor: Facebook
product: WhatsApp for iOS
vendor: Facebook
product: WhatsApp Business for iOS
vendor: Facebook
product: WhatsApp for Windows Phone
vendor: Facebook
product: WhatsApp for Tizen
Published: 2019-05-14T19:52:40.000Z
CVE-2019-3569 
HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could allow a malicious individual unintended direct access to the application, which could result in information disclosure. This issue affects versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, versions 3.30.5 and below, and all versions in the 4.0, 4.1, and 4.2 series.
Problem types: cwe_id: CWE-552
description: Files or Directories Accessible to External Parties (CWE-552)
Affected products: vendor: Facebook
product: HHVM
Published: 2019-06-26T15:09:17.000Z
CVE-2019-3570 
Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and p). This happens if the parameters are configurable by an attacker for instance by providing the output of scrypt_enc() in a context where Hack/PHP code would attempt to verify it by re-running scrypt_enc() with the same parameters. This could result in information disclosure, memory being overwriten or crashes of the HHVM process. This issue affects versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, versions 3.30.5 and below, and all versions in the 4.0, 4.1, and 4.2 series.
Problem types: cwe_id: CWE-122
description: Heap-based Buffer Overflow (CWE-122)
Affected products: vendor: Facebook
product: HHVM
Published: 2019-07-18T15:42:25.000Z
CVE-2019-3571 
An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows malicious clients to send files to users that would be displayed with a wrong extension.
Problem types: cwe_id: CWE-116
description: Improper Encoding or Escaping of Output (CWE-116), Improper Handling of Unicode Encoding (CWE-176)
Affected products: vendor: Facebook
product: WhatsApp Desktop
Published: 2019-07-16T20:16:35.000Z
CVE-2019-3572 
An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to png_write_row in libpng, an out-of-bounds write might occur for some memory layouts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-02T15:00:00.000Z
CVE-2019-3573 
In libsixel v1.8.2, there is an infinite loop in the function sixel_decode_raw_impl() in the file fromsixel.c, as demonstrated by sixel2png.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-02T15:00:00.000Z
CVE-2019-3574 
In libsixel v1.8.2, there is a heap-based buffer over-read in the function load_jpeg() in the file loader.c, as demonstrated by img2sixel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-02T15:00:00.000Z
CVE-2019-3575 
Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T19:00:00.000Z
CVE-2019-3576 
inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveorite/ PATH_INFO. The vulnerable code location is com.inxedu.os.edu.controller.user.UserController#deleteFavorite (aka deleteFavorite in com/inxedu/os/edu/controller/user/UserController.java), where courseFavoritesService.deleteCourseFavoritesById is mishandled during use of MyBatis. NOTE: UserController.java has a spelling variation in an annotation: a @RequestMapping("/deleteFaveorite/{ids}") line followed by a "public ModelAndView deleteFavorite" line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-02T17:00:00.000Z
CVE-2019-3577 
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id[0] parameter to the /product URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-02T17:00:00.000Z
CVE-2019-3578 
MyBB 1.8.19 has XSS in the resetpassword function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-06T18:13:52.000Z
CVE-2019-3579 
MyBB 1.8.19 allows remote attackers to obtain sensitive information because it discloses the username upon receiving a password-reset request that lacks the code parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-06T18:11:32.000Z
CVE-2019-3580 
OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T01:00:00.000Z
CVE-2019-3581 McAfee Web Gateway denial of service attack due to Improper Input Validation
Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to cause a denial of service via a crafted HTTP request parameter.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: McAfee
product: McAfee Web Gateway
Published: 2019-01-09T14:00:00.000Z
CVE-2019-3582 McAfee Endpoint Security updates fix a privilege escalation vulnerability
Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security (ENS) 10.6.1 and earlier allows local users to gain elevated privileges via a specific set of circumstances.
Problem types: description: Privilege Escalation vulnerability
Affected products: vendor: McAfee, LLC
product: McAfee Endpoint Security (ENS)
Published: 2019-02-28T16:00:00.000Z
CVE-2019-3584 Exploitation of Authentication vulnerability
Exploitation of Authentication vulnerability in MVision Endpoint in McAfee MVision Endpoint Prior to 1811 Update 1 (18.11.31.62) allows authenticated administrator users --> administrators to Remove MVision Endpoint via unspecified vectors.
Problem types: description: Exploitation of Authentication vulnerability
Affected products: vendor: Mcafee
product: MVision Endpoint
Published: 2019-01-23T15:00:00.000Z
CVE-2019-3585 VSE Escalation of Privileges through Alert pop-up window
Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with elevated privileges.
Problem types: cwe_id: CWE-269
description: CWE-269: Improper Privilege Management
Affected products: vendor: McAfee, LLC
product: McAfee VirusScan Enterprise (VSE)
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: McAfee credits Lockheed Martin Red Team for reporting this bug
Published: 2020-06-10T11:42:46.145Z
CVE-2019-3586 McAfee Endpoint Security firewall not always acting on GTI lookup results
Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI reputation is carefully manipulated and does not correctly trigger the ENS Firewall to block the connection.
Problem types: cwe_id: CWE-693
description: CWE-693 Protection Mechanism Failure
Affected products: vendor: McAfee, LLC
product: McAfee Endpoint Security (ENS)
Published: 2019-05-15T15:48:10.000Z
CVE-2019-3587 DLL Search Order Hijacking vulnerability
DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised folder.
Problem types: description: DLL Search Order Hijacking vulnerability
Affected products: vendor: Mcafee
product: Total Protection (MTP)
Published: 2019-01-23T15:00:00.000Z
CVE-2019-3588 Using VSE to bypass Windows Credentials on Lock screen
Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked.
Problem types: cwe_id: CWE-269
description: CWE-269: Improper Privilege Management
Affected products: vendor: McAfee, LLC
product: McAfee VirusScan Enterprise (VSE)
CVSS v3.1: attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: HIGH
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: McAfee credits Lockheed Martin Red Team for reporting this bug
Published: 2020-06-10T11:47:44.182Z
CVE-2019-3591 DLP Endpoint ePO extension vulnerable to XSS
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in ePO extension in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows unauthenticated remote user to trigger specially crafted JavaScript to render in the ePO UI via a carefully crafted upload to a remote website which is correctly blocked by DLPe Web Protection. This would then render as an XSS when the DLP Admin viewed the event in the ePO UI.
Problem types: description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: McAfee, LLC
product: Data Loss Prevention ePO extension
Published: 2019-07-24T14:30:11.000Z
CVE-2019-3592 MA for Windows update addresses weak directory permissions
Privilege escalation vulnerability in McAfee Agent (MA) before 5.6.1 HF3, allows local administrator users to potentially disable some McAfee processes by manipulating the MA directory control and placing a carefully constructed file in the MA directory.
Problem types: description: Privilege Escalation
Affected products: vendor: McAfee, LLC
product: McAfee Agent (MA)
Published: 2019-07-18T18:04:02.000Z
CVE-2019-3593 Exploitation of Privilege/Trust vulnerability
Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies and product files, and uninstall McAfee software without permission via specially crafted malware.
Problem types: description: Exploitation of Privilege/Trust vulnerability
Affected products: vendor: Mcafee, LLC
product: Total Protection (MTP)
Published: 2019-01-28T18:00:00.000Z
CVE-2019-3595 DLP Endpoint ePO extension not sanitizing CSV exports
Improper Neutralization of Special Elements used in a Command ('Command Injection') in ePO extension in McAfee Data Loss Prevention (DLP) 11.x prior to 11.3.0 allows Authenticated Adminstrator to execute arbitrary code with their local machine privileges via a specially crafted DLP policy, which is exported and opened on the their machine. In our checks, the user must explicitly allow the code to execute.
Problem types: cwe_id: CWE-78
description: CWE-78 OS Command Injection
Affected products: vendor: McAfee, LLC
product: DLP Endpoint ePO extension
Published: 2019-07-24T14:28:59.000Z
CVE-2019-3597 Authentication bypass in McAfee Network Security Manager 9.x
Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated users to gain administrator rights via incorrect handling of expired GUI sessions.
Problem types: description: Authentication Bypass vulnerability
Affected products: vendor: McAfee LLC
product: McAfee Network Security Manager (NSM)
Published: 2019-03-26T17:21:31.000Z
CVE-2019-3598 McAfee Agent update fixes a vulnerability in handling UDP requests
Buffer Access with Incorrect Length Value in McAfee Agent (MA) 5.x allows remote unauthenticated users to potentially cause a denial of service via specifically crafted UDP packets.
Problem types: description: Buffer Access with Incorrect Length Value
Affected products: vendor: McAfee, LLC
product: McAfee Agent (MA)
Published: 2019-02-28T16:00:00.000Z
CVE-2019-3599 McAfee Agent update fixes an Information Disclosure vulnerability
Information Disclosure vulnerability in Remote logging (which is disabled by default) in McAfee Agent (MA) 5.x allows remote unauthenticated users to access sensitive information via remote logging when it is enabled.
Problem types: description: Information Disclosure vulnerability
Affected products: vendor: McAfee, LLC
product: McAfee Agent (MA)
Published: 2019-02-28T16:00:00.000Z
CVE-2019-3602 Cross site scripting vulnerability in McAfee NSM impacting authenticated users
Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) Prior to 9.1 Update 5 allows an authenticated administrator to embed an XSS in the administrator interface via a specially crafted custom rule containing HTML.
Problem types: description: Cross Site Scripting (XSS) vulnerability
Affected products: vendor: McAfee, LLC
product: McAfee Network Security Manager (NSM)
Published: 2019-05-15T15:47:03.000Z
CVE-2019-3604 ePolicy Orchestrator Cloud update fixes multiple Cross-Site Request Forgery vulnerabilities
Cross-Site Request Forgery (CSRF) vulnerability in McAfee ePO (legacy) Cloud allows unauthenticated users to perform unintended ePO actions using an authenticated user's session via unspecified vectors.
Problem types: description: Cross Site Request Forgery (aka Session Riding) vulnerability
Affected products: vendor: McAfee, LLC
product: ePolicy Orchestrator Cloud
Published: 2019-02-01T16:00:00.000Z
CVE-2019-3606 Data leakage when in an MDR pair by McAfee Network Security Manager 9.x
Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 < 9.1.7.75 (Update 4) and 9.2 < 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands.
Problem types: description: Data Leakage Attacks vulnerability
Affected products: vendor: McAfee LLC
product: McAfee Network Security Manager (NSM)
Published: 2019-03-26T17:23:48.000Z
CVE-2019-3610 True Key Browser Extension 3.1.9219.0 update fixes Sensitive Data Exposure vulnerability
Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key (TK) 3.1.9211.0 and earlier allows local users to expose confidential data via specially crafted malware.
Problem types: description: Data Leakage Attacks vulnerability
Affected products: vendor: McAfee, LLC
product: True Key (TK)
Published: 2019-02-13T17:00:00.000Z
CVE-2019-3612 Information disclosure vulnerability in McAfee TIE Server and DXL Platform
Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text via the GUI or command line.
Problem types: description: Information Disclosure vulnerability
Affected products: vendor: McAfee, LLC
product: Data eXchange Layer (DXL) Platform
vendor: McAfee, LLC
product: Threat Intelligence Exchange (TIE) Server
Published: 2019-04-10T20:10:39.000Z
CVE-2019-3613 DLL search order hijacking in MA
DLL Search Order Hijacking vulnerability in McAfee Agent (MA) prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder.
Problem types: cwe_id: CWE-427
description: CWE-427: Uncontrolled Search Path Element
Affected products: vendor: McAfee, LLC
product: McAfee Agent (MA)
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
version: 3.1
Published: 2020-06-10T11:12:49.485Z
CVE-2019-3615 Data Leakage Vulnerability in McAfee Database Security web interface
Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen.
Problem types: description: Data Leakage Attacks vulnerability
Affected products: vendor: McAfee, LCC
product: McAfee Database Security (DAM)
Published: 2019-03-12T22:00:00.000Z
CVE-2019-3617 Privilege escalation in ToPS for Mac
Privilege escalation vulnerability in McAfee Total Protection (ToPS) for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files.
Problem types: description: Privilege escalation vulnerability
Affected products: vendor: McAfee, LLC
product: Total Protection (ToPS) for Mac OS
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
version: 3.1
Published: 2020-06-10T07:29:50.000Z
CVE-2019-3619 
Information Disclosure vulnerability in the Agent Handler in McAfee ePolicy Orchestrator (ePO) 5.9.x and 5.10.0 prior to 5.10.0 update 4 allows remote unauthenticated attacker to view sensitive information in plain text via sniffing the traffic between the Agent Handler and the SQL server.
Problem types: description: Information disclosure vulnerability
Affected products: vendor: McAfee, LLC
product: McAfee ePolicy Orchestrator (ePO)
Published: 2019-07-03T13:40:04.000Z
CVE-2019-3621 DLP Endpoint Windows lock screen bypass with physical access
Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked. The attacker requires physical access to the machine.
Problem types: description: Authentication protection bypass vulnerability
Affected products: vendor: McAfee, LLC
product: Data Loss Prevention (DLPe) for Windows
Published: 2019-07-25T16:20:25.000Z
CVE-2019-3622 DLP Endpoint log file redirection to arbitrary locations
Files or Directories Accessible to External Parties in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows authenticated user to redirect DLPe log files to arbitrary locations via incorrect access control applied to the DLPe log folder allowing privileged users to create symbolic links.
Problem types: cwe_id: CWE-552
description: CWE-552 Files or Directories Accessible to External Parties
Affected products: vendor: McAfee, LLC
product: Data Loss Prevention (DLPe) for Windows
Published: 2019-07-24T16:13:17.000Z
CVE-2019-3628 Privilege escalation could allow authenticated user to gain access to a core system
Privilege escalation in McAfee Enterprise Security Manager (ESM) 11.x prior to 11.2.0 allows authenticated user to gain access to a core system component via incorrect access control.
Problem types: description: Privilege escalation
Affected products: vendor: McAfee, LLC
product: McAfee Enterprise Security Manager (ESM)
Published: 2019-06-27T16:55:16.000Z
CVE-2019-3629 Application protections bypass vulnerability could allow unauthenticated user to impersonate system users
Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters.
Problem types: description: Application protection bypass vulnerability
Affected products: vendor: McAfee, LLC
product: McAfee Enterprise Security Manager (ESM)
Published: 2019-06-27T20:33:59.000Z