McAfee Enterprise Security Manager (ESM) any version

Directory Traversal vulnerability could lead to elevated privileges

Privilege escalation could allow authenticated user to gain access to a core system

Application protections bypass vulnerability could allow unauthenticated user to impersonate system users

Command Injection could allow authenticated users to execute arbitrary code

Command Injection could allow authenticated users to execute arbitrary code

The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.

McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before 9.5.0MR7 allow remote authenticated users to execute arbitrary OS commands via a crafted filename, which is not properly handled when downloading the file.