CVE-2018-6321

Unquoted Windows search path vulnerability in the pandaurlfiltering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact...

CVE-2018-6322

Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of .\pipe\PSANMSrvcPpal -- an "insecurely created named pipe." Ensures full access to Everyone users group...

Design/Logic Flaw

Unquoted Windows search path vulnerability in the pandaurlfiltering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact...

Design/Logic Flaw

Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of .\pipe\PSANMSrvcPpal -- an "insecurely created named pipe." Ensures full access to Everyone users group...

CVE-2018-6321

Unquoted Windows search path vulnerability in the pandaurlfiltering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact...

CVE-2018-6322

Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of .\pipe\PSANMSrvcPpal -- an "insecurely created named pipe." Ensures full access to Everyone users group...

CVE-2018-6322

Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of .\pipe\PSANMSrvcPpal -- an "insecurely created named pipe." Ensures full access to Everyone users group...

CVE-2018-6321

Unquoted Windows search path vulnerability in the pandaurlfiltering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact...

CVE-2018-6322

Affected product : Panda Global Protection 17.0.1. Vulnerability : Local privilege escalation via impersonation of the insecurely created named pipe \dot-\pipe\PSANMSrvcPpal, granting full access to the Everyone group and enabling privilege gain or DoS. Root cause : Insecurely created named pipe ...

CVE-2018-6321

CVE-2018-6321 : Connected sources confirm a local privilege escalation in Panda Global Protection 17.0.1, via an unquoted Windows search path in the panda_url_filtering service. The vulnerability is triggered by placing a malicious artefact, allowing a local user to gain higher privileges. Root c...

Panda Global Protection <= 17.00.01 DoS Vulnerability

Panda Global Protection through 17.00.01 is vulnerable to multiple vulnerabilities that can cause a system crash. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Panda Global Protection Denial of Service Vulnerability (CNVD-2018-00586)

Panda Global Protection is a suite of antivirus software from the Spanish company Panda Security. The software protects devices from viruses, spyware, hackers and other Internet threats. A denial of service vulnerability exists in Panda Global Protection version 17.0.1. An attacker can exploit th...

CVE-2017-17683

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \.\PSMEMDriver DeviceIoControl request...

CVE-2017-17684

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \.\PSMEMDriver DeviceIoControl request...

Cross site request forgery (csrf)

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \.\PSMEMDriver DeviceIoControl request...

Cross site request forgery (csrf)

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \.\PSMEMDriver DeviceIoControl request...

CVE-2017-17684

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \.\PSMEMDriver DeviceIoControl request...

CVE-2017-17683

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \.\PSMEMDriver DeviceIoControl request...

CVE-2017-17684

Panda Global Protection 17.0.1 is affected by CVE-2017-17684, a denial-of-service due to a crafted 0xb3702c04 \.PSMEMDriver DeviceIoControl request that can crash the system. Public sources consistently describe a DoS impact (system crash) rather than remote code execution. Affected product line ...

CVE-2017-17683

CVE-2017-17683 affects Panda Global Protection 17.0.1 and allows a denial-of-service (system crash) via a 0xb3702c44 \.PSMEMDriver DeviceIoControl request. The vulnerability is associated with an affected PSMEMDriver path and can be triggered remotely (network attack vector) with no user interact...