CVE-2020-5823

Symantec Endpoint Protection (SEP) and SEP Small Business Edition (SEP SBE) before 14.2 RU2 MP1 (SEP) and before 14.2.5569.2100 (SEP SBE) are affected by a privilege-escalation vulnerability. Exploitation would allow local attackers to gain elevated access. Remediation is to upgrade to SEP 14.2 R...

CVE-2020-5822

Symantec Endpoint Protection (SEP) and SEP Small Business Edition (SEP SBE) are affected by CVE-2020-5822, a local privilege-escalation vulnerability in SEP/SEP SBE prior to 14.2 RU2 MP1 (14.2.5569.2100). The issue is associated with the ccSvc.dll component and allows a local attacker to gain ele...

CVE-2020-5821

Symantec Endpoint Protection (SEP) and SEP SBE on Windows are affected by a DLL injection vulnerability (CVE-2020-5821) in versions prior to 14.2 RU2 MP1 (SEP) and prior to 14.2.5569.2100 (SEP SBE). The issue allows an attacker to run code in place of legitimate code; impact is high across confid...

CVE-2020-5820

CVE-2020-5820 affects Symantec Endpoint Protection (SEP) and SEP Small Business Edition (SEP SBE) prior to 14.2 RU2 MP1 (and 14.2.5569.2100, respectively). The connected advisories describe a privilege escalation vulnerability rooted in insufficient validation within components used by SEP/SEP SB...

CVE-2019-12757

Symantec Endpoint Protection (SEP) and SEP Small Business Edition (SEP SBE) are affected by CVE-2019-12757, a privilege-escalation flaw in versions before 14.2 RU2 and 12.1 RU6 MP10d (SEP SBE 12.1.7510.7002). The vulnerability allows an attacker with local access to elevate privileges within the ...

Symantec Endpoint Protection Multiple Issues

SUMMARY Symantec has released updates to address issues that were discovered in the Symantec Endpoint Protection SEP, Symantec Endpoint Protection Manager SEPM, Symantec Endpoint Protection Small Business Edition SEP SBE and Symantec Mail Security for MS Exchange SMSMSE products. AFFECTED PRODUCT...

Security Update for .NET Core (Sep 2019)

The Microsoft .NET Core installation on the remote host is version 2.1.x 2.1.13, or 2.2.x 2.2.7. It is, therefore, affected by a denial-of-service vulnerability when .Net Core improperly handles web requests. An unauthenticated, remote attacker could exploit this issue, to cause a denial of servi...

LG Supersign EZ CMS - Remote Code Execution (Metasploit)

LG Supersign EZ CMS - Remote Code Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'LG Supersign EZ CMS RCE', 'Description' = %q LG SuperSignEZ CMS, that many LG SuperSign TVs...

CVE-2018-18366

Symantec Norton Security prior to 22.16.3, SEP Windows client prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22, SEP-12.1.7484.7002 and SEP Cloud prior to 22.16.3 may be susceptible to a kernel memory disclosure, which is a type ...

Design/Logic Flaw

Symantec Norton Security prior to 22.16.3, SEP Windows client prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22, SEP-12.1.7484.7002 and SEP Cloud prior to 22.16.3 may be susceptible to a kernel memory disclosure, which is a type ...

CVE-2018-12244

SEP Mac client prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection also known as formula injection vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files...

Design/Logic Flaw

SEP Mac client prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection also known as formula injection vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files...

CVE-2018-18366

Symantec Endpoint Protection Small Business Edition ccSetx86.sys kernel driver (IOCTL 0x224844) has an information-disclosure vulnerability. A specially crafted IRP can cause the driver to return uninitialized kernel memory to a user-mode process, potentially leaking sensitive data. The issue is ...

CVE-2018-18366

Symantec Norton Security prior to 22.16.3, SEP Windows client prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22, SEP-12.1.7484.7002 and SEP Cloud prior to 22.16.3 may be susceptible to a kernel memory disclosure, which is a type ...

CVE-2018-12244

CVE-2018-12244 affects the SEP for Mac client, from versions before 12.1 RU6 MP9 and before 14.2 RU1. The issue is a CSV/DDE (formula) injection vulnerability where untrusted input placed in CSV files can be interpreted as commands or formulas by the application. The connected sources document th...

CVE-2018-12244

SEP Mac client prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection also known as formula injection vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files...

CVE-2018-18369

Norton Security Windows client prior to 22.16.3 and SEP SBE Windows client prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution an...

Sql injection

Norton Security Windows client prior to 22.16.3 and SEP SBE Windows client prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution an...

CVE-2018-18369

The CVE-2018-18369 entry describes a DLL Preloading vulnerability affecting Windows clients: Norton Security prior to 22.16.3 and SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22, and SEP-12.1.7484.7002. Root cause is a DLL loading order issue that can allow an attacker to substitute a m...

CVE-2018-18369

Norton Security Windows client prior to 22.16.3 and SEP SBE Windows client prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution an...