Read the docs

Comodo

Records93All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high24CVSS 7.0–8.9

Exploited now

Comodo records in CISA KEV

No Comodo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

93 records

Priority HIGH 65

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.99992 Published 2012-03-21 No fix listed CWE-264
Priority HIGH 65

The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ika…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.99908 Published 2012-03-21 No fix listed CWE-264
Priority HIGH 65

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.9998 Published 2012-03-21 No fix listed CWE-264
Priority HIGH 65

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, nProtect Anti-V…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.99542 Published 2012-03-21 No fix listed CWE-264
Priority MEDIUM 64

The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Se…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.93794 Published 2012-03-21 No fix listed CWE-264
Priority MEDIUM 63

Comodo Dome Firewall 2.7.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the vpnfw endpoint.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00394 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 63

Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the schedule endpoint.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00413 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 63

Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the newLicense parameter.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00341 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 63

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, McAfee Anti-Virus Sc…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.91932 Published 2012-03-21 No fix listed CWE-264
Priority MEDIUM 61

A vulnerability, which was classified as critical, was found in Comodo Internet Security Premium 12.3.4.8162.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00744 Published 2025-07-06 No fix listed CWE-22
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the antispyware endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00461 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the dnsmasq endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00426 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the VIRUS_ADMIN parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00397 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the EXCEPTIONSITELIST parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00382 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the /korugan/proxyconfig endpoint that allow attackers to inject malicious scripts through POST parameters.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00461 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains multiple cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the policyfw endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00461 Published 2026-02-19 No fix listed CWE-79
Load more
Open these records in search →