Skip to content
OpenAdvisories

Archive

13 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /13 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.1
    CVE-2019-3661

    Advanced Threat Defense (ATD) - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute database commands via carefully constructed time based payloads.

    McAfee Advanced Threat Defense (ATD)
  • High 8.4
    CVE-2019-3660

    Advanced Threat Defense (ATD) - Improper Neutralization of HTTP requests

    Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests.

    McAfee Advanced Threat Defense (ATD)
  • High 8.8
    CVE-2019-3651

    Advanced Threat Defense (ATD) - Information Disclosure vulnerability

    Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an administrator via using the atduser credentials, which were too permissive.

    McAfee Advanced Threat Defense (ATD)
  • High 8.8
    CVE-2019-18279

    In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the included drivers could be used by a malicious Windows applicatio…