Bullguard

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Bullguard records in CISA KEV

No Bullguard vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Internet Security 2 records MEDIUM Premium Protection 2 records LOW Bdagent.sys 1 record LOW Online Backup 1 record LOW Safe Browsing 1 record LOW

Records

4 records

TI-2008-05149 CVE-2008-5409 · GHSA-w5c9-rfx7-37rh

Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and…

MEDIUM 53

Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Security 8.5, and (3) Software602 Groupware Server 6.0.08.1118 allows remote attackers…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.11112 Published 2008-12-09 No fix listed CWE-119

TI-2014-07832 CVE-2014-9642 · GHSA-vwf9-jmrq-f5rf

bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online…

LOW 34

bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.01085 Published 2015-02-06 No fix listed CWE-264

TI-2018-12192 CVE-2018-17061 · GHSA-qjfv-m3xp-m5q6

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages…

LOW 28

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00724 Published 2018-09-15 No fix listed CWE-79

TI-2019-14427 CVE-2019-20000 · GHSA-9238-pwgr-pmp5

The malware scan function in BullGuard Premium Protection 20.0.371.8 has a TOCTOU issue…

LOW 27

The malware scan function in BullGuard Premium Protection 20.0.371.8 has a TOCTOU issue that enables a symbolic link attack, allowing privileged files to be deleted.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00561 Published 2019-12-26 No fix listed CWE-367

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0