Priority HIGH 65
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Com…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.9815 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99992 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.9998 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, F-Secure Anti-Viru…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.98794 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Gateway (formerly Webwasher) 2010.1C, nProtec…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99542 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, nProtect Anti-V…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99542 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 64
The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Se…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.93794 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 63
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, McAfee Anti-Virus Sc…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.91932 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 55
Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long dir…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10262 · Published 2004-05-05 · Fixed CWE-119
Priority MEDIUM 51
Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service (file scanning infinite loop) via certain crafted (1) ARJ archives or (2) FSG pack…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04789 · Published 2007-05-31 · No fix listed CWE-20
Priority MEDIUM 51
WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists in a case-sensitive manner, when previous versions were case-insensitive, which might allow remote a…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04846 · Published 2005-09-02 · No fix listed
Priority MEDIUM 49
F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service (possibly fatal scan error), and possibly bypass virus detection, by inserting invalid characters into base64 encoded conte…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03804 · Published 2006-12-10 · No fix listed
Priority MEDIUM 46
Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafted header in a (1) LHA or (2) RAR archive.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03711 · Published 2007-06-20 · No fix listed
Priority MEDIUM 43
A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00817 · Published 2022-03-06 · Fixed in 18.5x CWE-79
Priority MEDIUM 42
Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attack…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.05535 · Published 2009-02-06 · No fix listed CWE-189
Priority MEDIUM 42
Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service (crash) and possibly execute…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.0569 · Published 2006-06-06 · No fix listed
Priority MEDIUM 42
Buffer overflow in multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Serv…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05808 · Published 2006-01-21 · No fix listed
Priority MEDIUM 41
An issue was discovered in F-Secure SAFE 17.7 on macOS.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.03141 · Published 2020-06-23 · No fix listed
Priority MEDIUM 41
An issue was discovered in F-Secure SAFE 17.7 on macOS.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.03128 · Published 2020-06-23 · No fix listed
Priority MEDIUM 41
Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (applicati…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05208 · Published 2007-05-31 · No fix listed CWE-119
Priority MEDIUM 41
Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, (2) Reflection for Secure IT Windows Server before 6.0 b…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.10162 · Published 2006-02-15 · No fix listed CWE-134
Priority MEDIUM 40
Certain WithSecure products allow Denial of Service via the aepack archive unpack handler.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00635 · Published 2023-09-22 · No fix listed CWE-400
Priority MEDIUM 40
Certain WithSecure products allow Denial of Service in the aeelf component.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00635 · Published 2023-09-22 · No fix listed
Priority MEDIUM 40
Certain WithSecure products allow Denial of Service (infinite loop).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00635 · Published 2023-09-22 · No fix listed CWE-835
Priority MEDIUM 40
In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-22_07, the aerdl.dll unpacker handler crashes.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00717 · Published 2022-11-25 · No fix listed CWE-248
Load more