Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

20 records in Secure Endpoint · all components

Priority HIGH 66

On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earl…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30061 Published 2023-02-16 No fix listed CWE-120
TI-2024-13224 CVE-2024-20290 · GHSA-xcpx-h22f-m42v

Out-of-bounds read in Cisco Secure Endpoint

Priority MEDIUM 64

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.33323 Published 2024-02-07 No fix listed CWE-126
Priority MEDIUM 53

On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in CHM file parser of Clam AntiVirus (ClamAV) versions 0.1…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.07074 Published 2022-05-04 No fix listed CWE-399
Priority MEDIUM 49

On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus (ClamAV) versions 0.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07117 Published 2022-05-04 No fix listed CWE-401
Priority MEDIUM 48

On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file parser of Clam AntiVirus (ClamAV) version…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05882 Published 2022-05-04 No fix listed CWE-399
Priority MEDIUM 40

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected dev…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00719 Published 2026-08-07 No fix listed CWE-120
Priority MEDIUM 40

A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2026-07-01 No fix listed CWE-120
Priority MEDIUM 40

A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2026-07-01 No fix listed CWE-120
Priority MEDIUM 40

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected dev…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2026-07-01 No fix listed CWE-120
Priority MEDIUM 40

A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2026-07-01 No fix listed CWE-120
Priority MEDIUM 40

A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2026-07-01 No fix listed CWE-120
Priority MEDIUM 40

A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2026-07-01 No fix listed CWE-120
Priority LOW 36

A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01815 Published 2025-01-22 No fix listed CWE-122
TI-2023-06903 CVE-2023-20197 · GHSA-r7mw-p665-4533

Infinite loop in Cisco Secure Endpoint

Priority LOW 35

A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01171 Published 2023-08-16 No fix listed CWE-835
Priority LOW 34

On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could a…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.07003 Published 2023-02-16 No fix listed CWE-611
Priority LOW 29

On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00388 Published 2022-05-04 No fix listed CWE-822
Open these records in search →