File and Path Handling

Every one of the 52 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the reportF…CVE-2014-2588Mcafee · 7.3% likely

   CWE-22

2. Privilege escalation vulnerability in McAfee AgentCVE-2022-0166McAfee,LLC · CVSS 7.8 · 2.9% likely

   CWE-427

3. A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a co…CVE-2017-3980McAfee · 2.8% likely

   CWE-22

4. Directory traversal vulnerability in the remote log viewing functionality in McAfee Agent (MA) 5.x before 5.0.2 allows remote attackers to obtain sensitive information via unspeci…CVE-2015-7237Mcafee · 2.8% likely

   CWE-22

5. Directory traversal vulnerability in McAfee Email Gateway (MEG) 7.0.0 and 7.0.1 allows remote authenticated users to bypass intended access restrictions and download arbitrary fil…CVE-2012-4596Mcafee · 2.6% likely

   CWE-22

6. Directory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee Cloud Single Sign On (MCSSO) before 4.0.1, and Intel Expressway Cloud Access 360-SSO…CVE-2014-2536Mcafee · 2.4% likely

   CWE-22

7. McAfee Web Gateway (MWG) - Directory Traversal vulnerabilityCVE-2018-6677McAfee · CVSS 7.6 · 2.1% likely

   CWE-22

8. Directory traversal vulnerability in McAfee Web Gateway (MWG) 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and earlier allows remote authenticated users to read arbitrary…CVE-2014-2535Mcafee · 2.1% likely

   CWE-22

9. Directory Traversal vulnerability could lead to elevated privilegesCVE-2019-3632McAfee, LLC · CVSS 8.5 · 1.7% likely

   CWE-22

10. SB10228 ePO Directory Traversal vulnerabilityCVE-2018-6660McAfee · CVSS 6.2 · 1.7% likely

    CWE-22

11. Advanced Threat Defense (ATD) - Path Traversal: '/absolute/pathname/here' vulnerabilityCVE-2019-3662McAfee · CVSS 6.5 · 1.4% likely

    CWE-22

12. DLL Search Order Hijacking vulnerabilityCVE-2019-3587Mcafee · CVSS 7.2 · 1.4% likely

    CWE-426

13. Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request…CVE-2013-0141Mcafee · 1.1% likely

    CWE-22

14. Denial of Service in Database Security on WindowsCVE-2021-31850McAfee,LLC · CVSS 6.1 · 1.0% likely

    CWE-552

15. McAfee Email Gateway (MEG) - Path Traversal vulnerabilityCVE-2020-7268McAfee · CVSS 4.3 · 1.0% likely

    CWE-22

16. True Key (TK) - DLL Search Order Hijacking vulnerabilityCVE-2018-6700McAfee · CVSS 7.5 · 0.9% likely

    CWE-426

17. TS102801 True Key DLL Side-Loading vulnerabilityCVE-2018-6661McAfee · CVSS 7.5 · 0.8% likely

    CWE-426

18. DLP ePO extension - Unrestricted Upload of File with Dangerous TypeCVE-2020-7302McAfee · CVSS 5.4 · 0.7% likely

    CWE-434

19. McAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs.CVE-2023-40352Mcafee · 0.7% likely

    CWE-427

20. McAfee Total Protection (MTP) privilege escalation vulnerabilityCVE-2021-23873McAfee,LLC · CVSS 7.8 · 0.7% likely

    CWE-59

21. Implicit loading of DLLsCVE-2019-3648McAfee,LLC · CVSS 6.1 · 0.7% likely

    CWE-426

22. Incorrect access to deleted scripts vulnerability in McAfee DBSecCVE-2021-31831McAfee,LLC · CVSS 4.9 · 0.6% likely

    CWE-552

23. McAfee Agent (MA) non-Windows versions incorrect use of temporary file vulnerabilityCVE-2018-6706McAfee · CVSS 2.3 · 0.6% likely

    CWE-377

24. Multiple unquoted Windows search path vulnerabilities in the (1) Client Management and (2) Gateway in McAfee ePO Deep Command 2.1 and 2.2 before HF 1058831 allow local users to ga…CVE-2015-3987Mcafee · 0.5% likely

    CWE-426

25. DLL Injection vulnerability in MA for WindowsCVE-2020-7315McAfee LLC · CVSS 6 · 0.5% likely

    CWE-426

26. Privilege Escalation vulnerability in McAfee Total Protection (MTP)CVE-2021-23872McAfee,LLC · CVSS 7.8 · 0.4% likely

    CWE-59

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.