Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mcafee policy auditor vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2021-31851
A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor before 6.5.2 allows a remote unauthenticated malicious user to inject arbitrary web script or HTML via the profileNodeID request parameters. The malicious script is reflected unmodified into the Policy Audito...
Mcafee Policy Auditor
4.3
CVSSv2
CVE-2021-31852
A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor before 6.5.2 allows a remote unauthenticated malicious user to inject arbitrary web script or HTML via the UID request parameter. The malicious script is reflected unmodified into the Policy Auditor web-based...
Mcafee Policy Auditor
4
CVSSv2
CVE-2020-15719
libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat E...
Openldap OpenldapRedhat Enterprise Linux 8.0Opensuse Leap 15.1Opensuse Leap 15.2Mcafee Policy AuditorOracle Blockchain Platform
4.3
CVSSv2
CVE-2019-16168
In SQLite up to and including 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
Sqlite SqliteNetapp Steelstore Cloud Integrated Storage -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified ManagerNetapp Santricity Unified Manager -Netapp E-series Santricity Os ControllerCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 12.04Fedoraproject Fedora 30Debian Debian Linux 9.0Tenable Nessus AgentOracle Solaris 11Oracle Outside In Technology 8.5.4Oracle MysqlOracle Jre 1.8.0Oracle Jdk 1.8.0Oracle Zfs Storage Appliance 8.8
3.5
CVSSv2
CVE-2019-13057
An issue exists in the server in OpenLDAP prior to 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting ...
Openldap OpenldapCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Debian Debian Linux 8.0Opensuse Leap 15.0Opensuse Leap 15.1Apple Mac Os XApple Mac Os X 10.14.6Apple Mac Os X 10.13.6Mcafee Policy AuditorMcafee Policy Auditor 6.5.1Oracle Solaris 11Oracle Zfs Storage Appliance Kit 8.8Oracle Blockchain Platform
5
CVSSv2
CVE-2017-17740
contrib/slapd-modules/nops/nops.c in OpenLDAP up to and including 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote malicious users to cause a denial of service (slapd crash) via ...
Openldap OpenldapOpensuse Leap 15.0Opensuse Leap 15.1Oracle Blockchain PlatformMcafee Policy Auditor
6.8
CVSSv2
CVE-2016-4472
The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete ...
Libexpat Project LibexpatCanonical Ubuntu Linux 12.04Mcafee Policy AuditorPython Python
7.5
CVSSv2
CVE-2016-0718
Expat allows context-dependent malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
Mozilla FirefoxApple Mac Os XSuse Linux Enterprise Server 11Suse Studio Onsite 1.3Suse Linux Enterprise Software Development Kit 11Suse Linux Enterprise Debuginfo 11Opensuse Leap 42.1Suse Linux Enterprise Software Development Kit 12Suse Linux Enterprise Server 12Suse Linux Enterprise Desktop 12Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Libexpat Project LibexpatDebian Debian Linux 8.0Opensuse Opensuse 13.1Opensuse Opensuse 13.2Mcafee Policy AuditorPython Python
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook