|
197731
|
7.5 |
HIGH
Network
|
is-user-valid_project
|
is-user-valid
|
All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure.
|
CWE-74
Injection
|
CVE-2021-23335
|
2024-11-21 14:51 |
2021-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197732
|
4.8 |
MEDIUM
Network
|
mcafee
|
endpoint_security
|
A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February 2021 Update allows an ENS ePO administrator to add a script to a policy event w…
|
CWE-79
Cross-site Scripting
|
CVE-2021-23881
|
2024-11-21 14:51 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197733
|
7.8 |
HIGH
Local
|
mcafee
|
total_protection
|
Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially c…
|
NVD-CWE-noinfo
|
CVE-2021-23876
|
2024-11-21 14:51 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197734
|
7.8 |
HIGH
Local
|
mcafee
|
total_protection
|
Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2021-23874
|
2024-11-21 14:51 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197735
|
6.1 |
MEDIUM
Local
|
mcafee
|
total_protection
|
Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially…
|
CWE-59
Link Following
|
CVE-2021-23873
|
2024-11-21 14:51 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197736
|
4.4 |
MEDIUM
Local
|
mcafee
|
endpoint_security
|
A Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific syste…
|
CWE-476
NULL Pointer Dereference
|
CVE-2021-23883
|
2024-11-21 14:51 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197737
|
4.4 |
MEDIUM
Local
|
mcafee
|
endpoint_security
|
Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by p…
|
NVD-CWE-Other
|
CVE-2021-23882
|
2024-11-21 14:51 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197738
|
4.4 |
MEDIUM
Local
|
mcafee
|
endpoint_security
|
Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of t…
|
NVD-CWE-Other
|
CVE-2021-23880
|
2024-11-21 14:51 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197739
|
5.0 |
MEDIUM
Local
|
mcafee
|
endpoint_security
|
Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and cre…
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2021-23878
|
2024-11-21 14:51 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197740
|
6.3 |
MEDIUM
Network
|
fusioncharts
|
apexcharts
|
The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.
|
CWE-79
Cross-site Scripting
|
CVE-2021-23327
|
2024-11-21 14:51 |
2021-02-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|