5321 matches found
VulnCheck KEV: CVE-2012-0297
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by 1 injecting crafted data or 2 including crafted data...
Researchers Uncover Grayling APT's Ongoing Attack Campaign Across Industries
A previously undocumented threat actor of unknown provenance has been linked to a number of attacks targeting organizations in the manufacturing, IT, and biomedical sectors in Taiwan. The Symantec Threat Hunter Team, part of Broadcom, attributed the attacks to an advanced persistent threat APT it...
China-Linked Budworm Targeting Middle Eastern Telco and Asian Government Agencies
Government and telecom entities have been subjected to a new wave of attacks by a China-linked threat actor tracked as Budworm using an updated malware toolset. The intrusions, targeting a Middle Eastern telecommunications organization and an Asian government, took place in August 2023, with the...
CVE-2023-23958
Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...
CVE-2023-23958
Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...
Memory corruption
Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...
Symantec Protection Engine Security Vulnerability
Symantec Protection Engine is a malware protection platform from Symantec USA. A security vulnerability exists in Symantec Protection Engine versions prior to 9.1.0, which stems from a hash disclosure vulnerability...
CVE-2023-23958
The CVE-2023-23958 issue affects Symantec Protection Engine, with versions prior to 9.1.0. The root cause is a Hash Leak vulnerability that may allow exposure of sensitive information to an unauthorized actor. Impact is described as exposure of confidential data, with no explicit exploit details ...
CVE-2023-23958 Symantec Protection Engine Hash Leak Vulnerability
Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...
CVE-2023-23958 Symantec Protection Engine Hash Leak Vulnerability
Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...
PT-2023-19324 · Symantec · Symantec Protection Engine
Name of the Vulnerable Software and Affected Versions: Symantec Protection Engine versions prior to 9.1.0 Description: The issue may allow sensitive information to be exposed to an unauthorized actor due to a Hash Leak. Recommendations: For Symantec Protection Engine versions prior to 9.1.0, upda...
CVE-2023-23957
An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4...
CVE-2023-23957
An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4...
Code injection
An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4...
CVE-2023-23957 Open Redirection Vulnerability in Symantec Identity Portal 14.4
An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4...
CVE-2023-23957 Open Redirection Vulnerability in Symantec Identity Portal 14.4
An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4...
CVE-2023-23957
CVE-2023-23957 affects Symantec Identity Portal 14.4. An authenticated user can see and modify the value of the ‘next’ query parameter, which corresponds to an open redirection vulnerability in Symantec Identity Portal 14.4. The available documents state the impact as an ability to view/modify th...
Symantec Identity Portal Input Validation Error Vulnerability
Symantec Identity Portal is an identity and access management from Symantec USA. A security vulnerability exists in Symantec Identity Portal version 14.4. An attacker could view and modify the value of the "next" query parameter...
Carderbee Attacks: Hong Kong Organizations Targeted via Malicious Software Updates
A previously undocumented threat cluster has been linked to a software supply chain attack targeting organizations primarily located in Hong Kong and other regions in Asia. The Symantec Threat Hunter Team, part of Broadcom, is tracking the activity under its insect-themed moniker Carderbee. The...
Researchers Expose Space Pirates' Cyber Campaign Across Russia and Serbia
The threat actor known as Space Pirates has been linked to attacks against at least 16 organizations in Russia and Serbia over the past year by employing novel tactics and adding new cyber weapons to its arsenal. "The cybercriminals' main goals are still espionage and theft of confidential...