The vulnerability of the Update module and the ES Service of the Dr.Web Enterprise Security Suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Update module and the ES Service of the Dr.Web Enterprise Security Suite antivirus software is related to deficiencies in access control. Exploiting this vulnerability allows a hacker to execute arbitrary code within the context of the antivirus process, with system...

PT-2020-3041

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to insufficient access control in the Update and ES Service modules of the Dr.Web Enterprise Security Suite antivirus software. Exploitation of...

The vulnerability of the Agent component of the Dr.Web anti-virus protection software, Dr.Web Enterprise Security Suite, allows a hacker to gain access to protected information.

The vulnerability of the Agent component in the Dr.Web anti-virus protection software, Dr.Web Enterprise Security Suite, is related to deficiencies in access control to named communication channels. Exploiting this vulnerability can allow attackers to gain access to information about user...

The vulnerability of the Agent component of the Dr.Web anti-virus protection software, Dr.Web Enterprise Security Suite, allows a hacker to execute system commands.

The vulnerability of the Agent Dr.Web component in the Dr.Web Enterprise Security Suite antivirus protection tool is related to deficiencies in the mechanism for checking the digital signatures of executable files during the creation of communication channels with drivers. Exploiting this...

The vulnerability of the Dr.Web Enterprise Security Suite antivirus protection, related to errors in processing the relative path to the directory, allows a hacker to execute arbitrary code.

The vulnerability of the Dr.Web Enterprise Security Suite antivirus protection lies in errors in processing the relative path to the catalog during the export of repository content into an archive. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the server by...

The vulnerability of the Dr.Web Enterprise Security Suite, an anti-virus protection tool, lies in the lack of SQL query filtering. This allows attackers to increase their privileges.

The vulnerability of the Dr.Web Enterprise Security Suite antivirus protection lies in the absence of SQL query filtering. Exploiting this vulnerability allows a malicious actor, who operates remotely and has no access to the application’s administrative operations via the web interface, to...

The vulnerability of the Dr.Web Enterprise Security Suite antivirus protection, related to errors in the proprietary protocol’s operation, allows a hacker to replace the installation file.

The vulnerability of the Dr.Web Enterprise Security Suite antivirus protection lies in errors in the proprietary protocol used to connect the antivirus components to the server. Exploiting this vulnerability allows a malicious actor to create a fake “Dr.Web Enterprise Security Suite” server withi...

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite antivirus tool allows a hacker to gain access to protected information.

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite antivirus tool is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain information about the installed...

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite allows a hacker to execute HTML code.

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code into the user’s browser by placin...

PT-2018-2751

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to errors in processing relative directory paths when exporting repository content to an archive. Exploitation of this issue may allow a remote...

PT-2018-2749

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to errors in handling relative directory paths. It may allow a remote attacker to read arbitrary files by specifying a file path in the id...

PT-2018-2742

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue exists due to a lack of protection for the web page structure in the "Security Center" component. This could allow a remote attacker to execute arbitrary HT...

PT-2018-2740

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to a buffer overflow in the dwprot.sys driver of Dr.Web Enterprise Security Suite. Exploitation of this issue could allow an attacker to cause a...

PT-2018-2747

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to the "Security Control Center" component of Dr.Web Enterprise Security Suite, specifically with the document export mechanism. This could allow...

PT-2018-2752

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to a lack of SQL query filtering in Dr.Web Enterprise Security Suite. This could allow a remote attacker, without access to service operations in...

PT-2018-2748

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to a lack of restrictions on writing, reading, and creating files within the server folder. This could allow a remote attacker to execute arbitra...

PT-2018-2746

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to the "Security Control Center" component of Dr.Web Enterprise Security Suite, specifically with the error reporting mechanism. An attacker can...

PT-2018-2753

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue exists due to insufficient input validation in a component of Dr.Web Enterprise Security Suite, specifically the Dr.Web agent. Exploitation of this issue ma...

PT-2018-2743

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the "Security Control Center" component. This allows a remote attacker to execute arbitrary...

PT-2018-2755

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to a component of Dr.Web Enterprise Security Suite, specifically the Dr.Web Agent, which has a flaw in its digital signature verification mechani...