EUVD-2020-26983

Malware in sbrugna...

EUVD-2015-8042

Malware in sbrugna...

Symantec Endpoint Protection Manager < 14.3 RU2 Session Token Exposure (SYMSA18255)

The version of Symantec Endpoint Protection Manager SEPM installed on the remote host is prior to 14.3 RU2. It is therefore affected by a vulnerability. HTTPS GET parameters may include session tokens, which could be logged. Note that Nessus has not tested for this issue but has instead relied on...

CVE-2020-5834

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory...

CVE-2020-5833

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

CVE-2020-5835

Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine...

CVE-2020-5834

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory...

CVE-2020-5834

Summary: CVE-2020-5834 affects Symantec Endpoint Protection Manager (SEPM) prior to v14.3. A directory traversal vulnerability could allow a remote attacker to determine the size of files in a directory. Root cause / affected components: Directory traversal flaw in SEPM before 14.3 (as per multip...

CVE-2020-5834: Improper Limitation of a Pathname to a Restricted Directory

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory...

CVE-2020-5835: Concurrent Execution using Shared Resource with Improper Synchronization

Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine...

CVE-2020-5833: Out-of-bounds Read

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

PT-2020-18743

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 14.3 Description The issue allows a remote actor to determine the size of files in the directory through a directory traversal attack. Recommendations For versions prior to 14.3, update to...

PT-2020-18744

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 14.3 Description The issue is related to a race condition in the client remote deployment feature, which could potentially lead to an elevation of privilege on the remote machine...

PT-2020-18742

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 14.3 Description The issue is related to an out of bounds vulnerability, which occurs when an application reads memory outside of the allocated bounds, potentially leading to unintended...

Symantec Endpoint Protection Manager Information Disclosure Vulnerability (CNVD-2020-09963)

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. Symantec Endpoint Protection Manager suffers from an information disclosure vulnerabilit...

CVE-2020-5831

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

CVE-2020-5831

Symantec Endpoint Protection Manager (SEPM) is affected by CVE-2020-5831, a local, out-of-bounds read vulnerability present in SEPM prior to 14.2 RU2 MP1 (and pre-14.2 RU2 MP1 refresh noted in the advisories). Exploitation could allow a local attacker to read memory outside allocated bounds via t...

CVE-2020-5827

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

CVE-2020-5830: Out-of-bounds Read

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

CVE-2020-5828: Out-of-bounds Read

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...