Priority CRITICAL 85
The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.87725 · Published 2009-04-29 · No fix listed CWE-94
Priority HIGH 73
Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.55088 · Published 2009-04-29 · No fix listed CWE-119
Priority HIGH 66
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.53402 · Published 2016-06-30 · No fix listed CWE-119
Priority HIGH 65
The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Fortinet Antivirus 4.2.254.0, Ikarus Viru…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.97229 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Com…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.9815 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99992 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Co…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99854 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ika…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99908 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe 7.0.17.0, Kaspersky…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99619 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.9998 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 63
Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec End…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.24614 · Published 2016-06-30 · No fix listed CWE-189
Priority MEDIUM 63
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scann…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.92229 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 62
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote attackers to bypass malware…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.8769 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 61
Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x b…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.19405 · Published 2010-02-19 · No fix listed CWE-119
Priority MEDIUM 54
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP…
CVSS 3.0HIGH 8.4· Local · No auth · No interaction · EPSS 0.17739 · Published 2016-06-30 · No fix listed CWE-20
Priority MEDIUM 54
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP…
CVSS 3.0HIGH 8.4· Local · No auth · No interaction · EPSS 0.17739 · Published 2016-06-30 · No fix listed CWE-20
Priority MEDIUM 54
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP…
CVSS 3.0HIGH 8.4· Local · No auth · No interaction · EPSS 0.18101 · Published 2016-06-30 · No fix listed CWE-20
Priority MEDIUM 51
Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Pr…
CVSS 3.0HIGH 7.3· Local · No auth · No interaction · EPSS 0.20891 · Published 2016-06-30 · No fix listed CWE-119
Priority MEDIUM 51
XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Sy…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08036 · Published 2009-04-29 · No fix listed
Priority MEDIUM 49
The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and Symantec Scan Engine (SSE) before 5.2.8 d…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06045 · Published 2012-11-14 · No fix listed CWE-119
Priority MEDIUM 47
The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0398 · Published 2012-05-23 · No fix listed CWE-94
Priority MEDIUM 45
Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint P…
CVSS 3.0HIGH 7.3· Local · No auth · No interaction · EPSS 0.11372 · Published 2016-06-30 · No fix listed CWE-119
Priority MEDIUM 42
Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are no…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01892 · Published 2018-06-20 · No fix listed
Priority MEDIUM 41
fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint Protection (SEP) 11.x before 11 RU6 MP2 allows remote attackers to bypass intended restrictions on report generation, overwri…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05048 · Published 2010-12-22 · No fix listed CWE-20
Priority LOW 39
Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.02381 · Published 2019-04-25 · Fixed in 22.16.3 CWE-426
Load more