Skip to contentMcafee vulnerabilities
Products
Show 33 moreShow less
Newest
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as...CVE-2016-1840Fix available7.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...CVE-2016-1839Public exploitFix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS...CVE-2016-1838Public exploitFix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreMultiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2)...CVE-2016-1837Fix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreUse-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as...CVE-2016-1836Fix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple...CVE-2016-1834Public exploitFix available7.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...CVE-2016-1833Fix available5.5 Medium
- canonical ubuntu linux, libexpat project libexpat, mcafee policy auditor +1 more +3 moreThe overflow protection in Expat is removed by compilers with certain optimization settings,...CVE-2016-4472Fix availableEPSS 11.9%8.1 High
- apple mac os x, canonical ubuntu linux, debian linux +11 more +13 moreExpat allows context-dependent attackers to cause a denial of service (crash) or possibly execute...CVE-2016-0718Fix availableEPSS 13.3%9.8 Critical
- mcafee livesafeInteger signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0,...CVE-2016-4535Public exploit7.5 High
- mcafee virusscan enterprise, microsoft windows +1 moreThe McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix...CVE-2016-4534Public exploit3.0 Low
- mcafee active response, agent, data exchange layer +4 more +6 moreThe McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161,...CVE-2016-3984Public exploit5.1 Medium
- mcafee advanced threat defenseMcAfee Advanced Threat Defense (ATD) before 3.4.8.178 might allow remote attackers to bypass...CVE-2016-39837.5 High
- mcafee email gatewayCross-site scripting (XSS) vulnerability in McAfee Email Gateway (MEG) 7.6.x before 7.6.404, when...CVE-2016-39696.1 Medium
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...CVE-2016-1762Fix available8.1 High
- mcafee vulnerability managerMultiple cross-site request forgery (CSRF) vulnerabilities in the Organizations and Remediation...CVE-2016-21998.8 High
- mcafee file lockStack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total...CVE-2015-87737.5 High
- mcafee file lockMcPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to...CVE-2015-87729.1 Critical
- mcafee application control, microsoft windows +1 moreThe swin.sys kernel driver in McAfee Application Control (MAC) 6.1.0 before build 706, 6.1.1...CVE-2016-17156.6 Medium
- mcafee epolicy orchestratorIntel McAfee ePolicy Orchestrator (ePO) 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix...CVE-2015-87658.3 High
- mcafee virusscan enterpriseThe Buffer Overflow Protection (BOP) feature in McAfee VirusScan Enterprise before 8.8 Patch 6...CVE-2015-85772.6 Low
- mcafee enterprise security managerMcAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and...CVE-2015-80249.3 High
- ntp, citrix xenserver, debian linux +11 more +13 moreThe ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to...CVE-2015-7704Fix availableEPSS 10.7%7.5 High
- mcafee vulnerability managerMultiple cross-site request forgery (CSRF) vulnerabilities in the Organizations page in...CVE-2015-76126.8 Medium
- mcafee enterprise security manager, enterprise security manager\/log manager, enterprise security manager\/receiver +2 moreMcAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and...CVE-2015-73106.5 Medium
- mcafee threat intelligence exchangeThe Secondary server in Threat Intelligence Exchange (TIE) before 1.2.0 uses weak permissions for...CVE-2015-72382.1 Low
- mcafee agentDirectory traversal vulnerability in the remote log viewing functionality in McAfee Agent (MA) 5...CVE-2015-72375.0 Medium
- mcafee epolicy orchestratorIntel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate...CVE-2015-28595.8 Medium
- mcafee epolicy orchestratorCross-site scripting (XSS) vulnerability in the product deployment feature in the Java core web...CVE-2015-45594.3 Medium
- mcafee epo deep commandMultiple unquoted Windows search path vulnerabilities in the (1) Client Management and (2)...CVE-2015-39877.2 High
- mcafee advanced threat defenseThe web interface in McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote...CVE-2015-30304.0 Medium
- mcafee advanced threat defenseThe web interface in McAfee Advanced Threat Defense (MATD) before 3.4.4.63 does not properly...CVE-2015-30294.0 Medium
- mcafee advanced threat defenseMcAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to bypass...CVE-2015-30285.5 Medium
- mcafee data loss prevention endpointCross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention...CVE-2015-27603.5 Low
- mcafee data loss prevention endpointMultiple cross-site request forgery (CSRF) vulnerabilities in the ePO extension in McAfee Data...CVE-2015-27596.8 Medium
- mcafee data loss prevention endpointThe ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9...CVE-2015-27586.5 Medium
- mcafee data loss prevention endpointThe ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9...CVE-2015-27574.0 Medium
- mcafee agentThe log viewer in McAfee Agent (MA) before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections...CVE-2015-20534.3 Medium
- mcafee email gatewayCross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee...CVE-2015-16193.5 Low
- mcafee data loss prevention endpointThe ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote...CVE-2015-16184.0 Medium
- mcafee data loss prevention endpointCross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention...CVE-2015-16173.5 Low
- mcafee data loss prevention endpointSQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe)...CVE-2015-16166.5 Medium
- mcafee data loss prevention endpointMcAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to...CVE-2015-1305Public exploit6.9 Medium
- mcafee epolicy orchestratorMcAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 uses the same secret key...CVE-2015-0922EPSS 13.3%5.0 Medium
- mcafee epolicy orchestratorXML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator ...CVE-2015-0921EPSS 17.4%4.0 Medium
- mcafee network data loss preventionMcAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive...CVE-2014-85372.1 Low
- mcafee network data loss preventionMcAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive...CVE-2014-85362.1 Low
- mcafee network data loss preventionMcAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to bypass intended...CVE-2014-85354.6 Medium
- mcafee network data loss preventionUnspecified vulnerability in the login form in McAfee Network Data Loss Prevention (NDLP) before...CVE-2014-85342.1 Low
- mcafee network data loss preventionMcAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute...CVE-2014-85337.5 High
- Show moreLoading…