PT-2024-19970 · Symantec · Symantec Messaging Gateway

Name of the Vulnerable Software and Affected Versions: Symantec Messaging Gateway versions 10.5 and before Description: A buffer overflow vulnerability exists, allowing a remote, anonymous attacker to achieve remote code execution as root. Recommendations: For Symantec Messaging Gateway versions...

CVE-2024-23616: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM...

CVE-2024-23613: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM...

CVE-2024-23617: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution...

CVE-2024-23615: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root...

CVE-2024-23614: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root...

PT-2024-19969 · Symantec · Symantec Messaging Gateway

Name of the Vulnerable Software and Affected Versions: Symantec Messaging Gateway versions 9.5 and before Description: A buffer overflow issue exists, allowing a remote, anonymous attacker to achieve remote code execution as root. Recommendations: For Symantec Messaging Gateway versions 9.5 and...

Update of ca-certificates

update to CKBI 2.64 from NSS 3.95 - updated: - Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - removed old certificates: - Certificate "E-Tugra Certification Authority" - Certificate "Hongkong Post Root CA 1" - Certificate "Symantec Class 1 Public Primary Certification...

schaefer-products.com Cross Site Scripting vulnerability OBB-3839020

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nspgroup.com Cross Site Scripting vulnerability OBB-3836039

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

VulnCheck KEV: CVE-2012-0297

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by 1 injecting crafted data or 2 including crafted data...

Researchers Uncover Grayling APT's Ongoing Attack Campaign Across Industries

A previously undocumented threat actor of unknown provenance has been linked to a number of attacks targeting organizations in the manufacturing, IT, and biomedical sectors in Taiwan. The Symantec Threat Hunter Team, part of Broadcom, attributed the attacks to an advanced persistent threat APT it...

China-Linked Budworm Targeting Middle Eastern Telco and Asian Government Agencies

Government and telecom entities have been subjected to a new wave of attacks by a China-linked threat actor tracked as Budworm using an updated malware toolset. The intrusions, targeting a Middle Eastern telecommunications organization and an Asian government, took place in August 2023, with the...

CVE-2023-23958

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...

CVE-2023-23958

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...

Memory corruption

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...

Symantec Protection Engine Security Vulnerability

Symantec Protection Engine is a malware protection platform from Symantec USA. A security vulnerability exists in Symantec Protection Engine versions prior to 9.1.0, which stems from a hash disclosure vulnerability...

CVE-2023-23958 Symantec Protection Engine Hash Leak Vulnerability

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...

CVE-2023-23958 Symantec Protection Engine Hash Leak Vulnerability

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability...

CVE-2023-23958

The CVE-2023-23958 issue affects Symantec Protection Engine, with versions prior to 9.1.0. The root cause is a Hash Leak vulnerability that may allow exposure of sensitive information to an unauthorized actor. Impact is described as exposure of confidential data, with no explicit exploit details ...