EUVD-2012-3529

Malware in sbrugna...

PT-2015-3922

Name of the Vulnerable Software and Affected Versions Symantec PGP Universal Server and Encryption Management Server versions prior to 3.3.2 MP7 Description The issue allows remote attackers to trigger unintended content in outbound e-mail messages via a crafted key UID value in an inbound e-mail...

PT-2015-3923

Name of the Vulnerable Software and Affected Versions Symantec PGP Universal Server and Encryption Management Server versions prior to 3.3.2 MP7 Description The issue allows remote authenticated administrators to execute arbitrary shell commands. This can be achieved by crafting a command line in...

CVE-2014-7287: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to trigger unintended content in outbound e-mail messages via a crafted key UID value in an inbound e-mail message, as demonstrated by the outbound Subject heade...

CVE-2014-7288: Undefined Security Weakness

Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell commands via a crafted command line in a database-backup restore action...

Symantec PGP Universal Web Messenger Unauthorized Access

Vulnerability title: Unauthorised Access To Other Users Email Messages in Symantec PGP Universal Web Messenger CVE: CVE-2014-1643 Vendor: Symantec Product: PGP Universal Web Messenger Affected version: All Prior to 3.3.2 Fixed version: 3.3.2 Reported by: Richard O'Donnell Details: Authenticated W...

CVE-2012-3582

Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote attackers to read a private key in opportunistic circumstances by making a request near the end of a user's session...

PT-2012-4828

Name of the Vulnerable Software and Affected Versions Symantec PGP Universal Server versions 3.2.x through 3.2.1 MP1 Description The issue arises from improper session management, specifically with key search requests. This could potentially allow remote attackers to read a private key under...

CVE-2012-3582: Undefined Security Weakness

Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote attackers to read a private key in opportunistic circumstances by making a request near the end of a user's session...

PGP Universal Server Unauthorized Key Exposure

SUMMARY Symantecs PGP Universal Server, under specific circumstances, may inadvertently expose a PGP clients private key. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- PGP Universal Server | 3.2.x | PGP Universal Server 3.2.1 MP2 ISSUES CVSS2 Base Score | Impact | Exploitability |...

PR10-06: Cross-domain redirect on PGP Universal Web Messenger

http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-06 PR10-06 Cross-domain redirect on PGP Universal Web Messenger Advisory publicly released: Thursday, 16 December 2010 Vulnerability found: Wednesday, 10 February 2010 Vendor informed: Wednesday, 10 February 2010 Vulnerability...

PHP Universal Web Messenger Cross-Domain Redirect

http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-06 PR10-06 Cross-domain redirect on PGP Universal Web Messenger Advisory publicly released: Thursday, 16 December 2010 Vulnerability found: Wednesday, 10 February 2010 Vendor informed: Wednesday, 10 February 2010 Vulnerability...