Overview 29 matches · 2 in Waratek scope · 2 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
29matches
2in Waratek scope6.9%
2protected6.9%
0exploited0.0%
0CISA KEV0.0%
1public PoC3.4%
0EPSS ≥ 0.50.0%
Protected by Waratek
2
6.9%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
2
6.9%
Not applicable
25
86.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
6.9%
partly blocked
0
0.0%
not blocked
27
93.1%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
1
3.4%
Proof of concept only
1
3.4%
Forecast only
0
0.0%
No public exploit
27
93.1%
split by
peak 11 / year
20163
Not applicable3
Critical3
not blocked3
No public exploit3
20175
Protected by Waratek1
Not applicable4
Critical5
blocked by ARMR today1
not blocked4
Working exploit published1
No public exploit4
201811
Protected by Waratek1
Outside Waratek scope1
Not applicable9
Critical11
blocked by ARMR today1
not blocked10
No public exploit11
20194
Outside Waratek scope1
Not applicable3
Critical4
not blocked4
No public exploit4
20201
Not applicable1
Critical1
not blocked1
No public exploit1
20214
Not applicable4
Critical4
not blocked4
No public exploit4
20220
20230
20241
Not applicable1
Critical1
not blocked1
Proof of concept only1
201620172018201920202021202220232024
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2024-25254 | Critical | 2024-11-11 | Not applicable | Proof of concept only | SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter. |
| CVE-2021-31838 | Critical | 2021-06-29 | Not applicable | No public exploit | A command injection vulnerability in MVISION EDR (MVEDR) prior to 3.4.0 allows an authenticated MVEDR administrator to trigger the EDR client to execute arbitrary commands through PowerShell using the EDR functionality 'execute reaction'. |
| CVE-2021-23895 | Critical | 2021-06-02 | Not applicable | No public exploit | Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server. |
| CVE-2021-23894 | Critical | 2021-06-02 | Not applicable | No public exploit | Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server. |
| CVE-2021-23885 | Critical | 2021-02-17 | Not applicable | No public exploit | Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance via incorrect improper neutralization of user input in the troubleshooting page. |
| CVE-2020-7293 | Critical | 2020-09-15 | Not applicable | No public exploit | Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface. |
| CVE-2019-3663 | Critical | 2019-11-14 | Not applicable | No public exploit | Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted in this being updated to Critical. The root password is common across all instances of ATD prior to 4.8. See the Security bulletin for further details |
| CVE-2019-3638 | Critical | 2019-09-12 | Not applicable | No public exploit | Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway (MWG) 7.8.x prior to 7.8.2.13 allows remote attackers to collect sensitive information or execute commands with the MWG administrator's credentials via tricking the administrator to click on a carefully constructed malicious link. |
| CVE-2019-3597 | Critical | 2019-03-26 | Not applicable | No public exploit | Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated users to gain administrator rights via incorrect handling of expired GUI sessions. |
| CVE-2019-9169 | Critical | 2019-02-26 | Outside Waratek scope | No public exploit | In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match. |
| CVE-2018-6703 | Critical | 2018-12-11 | Not applicable | No public exploit | Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sent to the logging service. |
| CVE-2018-18311 | Critical | 2018-12-07 | Outside Waratek scope | No public exploit | Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations. |
| CVE-2018-6678 | Critical | 2018-07-23 | Not applicable | No public exploit | Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to execute arbitrary commands via unspecified vectors. |
| CVE-2018-6677 | Critical | 2018-07-23 | Not applicable | No public exploit | Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to gain elevated privileges via unspecified vectors. |
| CVE-2018-6667 | Critical | 2018-06-26 | Not applicable | No public exploit | Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions (JMX). |
| CVE-2017-3968 | Critical | 2018-06-13 | Not applicable | No public exploit | Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie. |
| CVE-2017-3936 | Critical | 2018-06-13 | Protected by Waratek | No public exploit | OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output. |
| CVE-2017-3907 | Critical | 2018-06-13 | Not applicable | No public exploit | Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vector. |
| CVE-2017-3962 | Critical | 2018-06-12 | Not applicable | No public exploit | Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes. |
| CVE-2018-10381 | Critical | 2018-04-26 | Not applicable | No public exploit | TunnelBear 3.2.0.6 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "TunnelBearMaintenance" service. This service establishes a NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "OpenVPNConnect" method accepts a server list argument that provides attacker control of the OpenVPN command line. An attacker can specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user. |
| CVE-2017-3972 | Critical | 2018-04-03 | Not applicable | No public exploit | Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to execute arbitrary code via the server banner leaking potentially sensitive or security relevant information. |
| CVE-2017-3897 | Critical | 2017-09-01 | Not applicable | Working exploit published | A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3 allows network attackers to perform a malicious file execution via a HTTP backend-response. |
| CVE-2017-4053 | Critical | 2017-07-12 | Not applicable | No public exploit | Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to execute a command of their choice via a crafted HTTP request parameter. |
| CVE-2017-4052 | Critical | 2017-07-12 | Not applicable | No public exploit | Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to change or update any configuration settings, or gain administrator functionality via a crafted HTTP request parameter. |
| CVE-2016-8027 | Critical | 2017-03-14 | Protected by Waratek | No public exploit | SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a specially crafted HTTP post. |
| CVE-2014-9921 | Critical | 2017-03-14 | Not applicable | No public exploit | Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d and earlier allows remote unauthenticated users to view, add, and remove users via a configuration error. |
| CVE-2016-4448 | Critical | 2016-06-09 | Not applicable | No public exploit | Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors. |
| CVE-2016-0718 | Critical | 2016-05-26 | Not applicable | No public exploit | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow. |
| CVE-2015-8772 | Critical | 2016-01-29 | Not applicable | No public exploit | McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a denial of service (system crash) via a large VERIFY_INFORMATION.Length value in an IOCTL_DISK_VERIFY ioctl call. |