Skip to content
OpenAdvisories

Archive

3 July 2020

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • High 8.6

    Network Security Management (NSM) - Exposure of Sensitive Information

    Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface (CLI).

  • Critical 9.8

    RVD#3316: No authentication in MAVLink protocol

    The Micro Air Vehicle Link (MAVLink) protocol presents no authentication mechanism on its version 1.0 (nor authorization) whichs leads to a variety of attacks including identity spoofing, unauthorized access, PITM attacks and more. According to literature, ve…

  • High 7.5

    RVD#3315: Cleartext transmission of sensitive information in MAVLink protocol version 1.0 and 2.0

    This vulnerability applies to the Micro Air Vehicle Link (MAVLink) protocol and allows a remote attacker to gain access to sensitive information provided it has access to the communication medium. MAVLink is a header-based protocol that does not perform encry…

  • High 7.5
    CVE-2020-7283 Public exploit

    Privilege Escalation vulnerability in McAfee Total Protection (MTP)

    Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not have access to. This is achieved through running a malicious …

  • High 7.5

    Privilege Escalation vulnerability in McAfee Total Protection (MTP)

    Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This…

  • High 7.5

    Privilege Escalation vulnerability in McAfee Total Protection (MTP)

    Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This i…

  • Unscored —

    VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, …

  • Unscored —

    The file upload feature in Atlassian Jira Server and Data Center in affected versions allows remote attackers to inject…

  • Unscored —

    This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity temp…

  • Unscored —

    Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL h…

  • Unscored —

    Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the i…