Symantec Endpoint Protection Manager Cross-Site Scripting (CVE-2016-3652)

A cross-site-scripting vulnerability has been reported in the Symantec Endpoint Protection Manager. The vulnerability is due to insufficient input validation on user-supplied input. A remote attacker could exploit this vulnerability by enticing authenticated users to click on a crafted link...

sym.com.tw XSS vulnerability

Vulnerable URL: http://www.sym.com.tw/news/index.php?cat=1" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 392192 VIP website status:| No Check sym.com.tw...

Symantec Mail Security for Microsoft Exchange Unsupported Version Detection

According to its self-reported version number, the installation of Symantec Mail Security for Microsoft Exchange on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain...

Threat Outbreak Alert RuleID24168: Email Messages Distributing Malicious Software on August 9, 2016

Medium Alert ID: 48412 First Published: 2016 August 9 13:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24168 may contain the following files: Name | Si...

Symantec Mail Security for Domino Unsupported

The installation of Symantec Mail Security for Domino on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network Security, Inc...

Websphere/JBoss/OpenNMS/Symantec Endpoint Protection Manager - Java Deserialization Remote Code Execution

!/bin/bash/env python3 / | | | | | \ \ / \ '| |/ | |/ | / | '| | / | | | | | | | | || | | |/ || ||,||,|\/|| By Nikhil Sreekumar @roo7break import sys import base64 import httplib2 import socket import argparse import socket import os import struct import ctypes version = "0.1" banner = """ / |...

WebsphereJBossOpenNMSSymantec Endpoint Protection Manager - Java Deserialization Remote Code Execution

WebsphereJBossOpenNMSSymantec Endpoint Protection Manager - Java Deserialization Remote Code Execution ! /bin/bash/env python3 / | | | | | \ \ / \ '| |/ | |/ | / | '| | / | | | | | | | | || | | |/ || ||,||,|\/|| By Nikhil Sreekumar @roo7break import sys import base64 import httplib2 import...

The vulnerability of Symantec’s antivirus protection tools allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Symantec’s AntiVirus Decomposer antivirus protection system is caused by a numerical overflow or buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure memory corruption or execute arbitrary code using a specially crafted CAB file...

The vulnerability of Symantec’s antivirus protection tools allows a hacker to cause a service failure or execute arbitrary codes.

The vulnerability of Symantec’s Decomposer antivirus protection system stems from a numerical overflow or buffer overflow. Exploiting this vulnerability allows an attacker to cause a service failure memory corruption or execute arbitrary code as a result of parsing specially crafted files...

The vulnerability of Symantec’s antivirus protection tools allows a hacker to execute arbitrary code.

The vulnerability of the Dec2LHA.dll file in Symantec’s anti-virus protection software is caused by a numerical overflow or buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

The vulnerability of Symantec’s antivirus protection tools allows a hacker to execute arbitrary code.

The vulnerability of the Dec2SS.dll file in Symantec’s anti-virus protection software is caused by a numerical overflow or buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

The vulnerability of Symantec’s antivirus protection tools allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Symantec’s Decomposer antivirus protection system stems from a numerical overflow or buffer overflow. Exploiting this vulnerability allows an attacker to cause a service failure memory corruption or execute arbitrary code using specially crafted TNEF format files...

The vulnerability of Symantec’s antivirus protection tools allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Symantec’s AntiVirus Decomposer antivirus protection system is caused by a numerical overflow or buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure memory corruption or execute arbitrary code using modified MIME data in messages...

The vulnerability of Symantec’s antivirus protection tools allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of Symantec’s AntiVirus Decomposer antivirus protection system is caused by a numerical buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a denial-of-service attack access denial using a specially crafted RAR file...

Symantec Workspace Streaming Information Disclosure Vulnerability

Symantec Symantec Workspace Streaming is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

CVE-2016-5308

The Client Intrusion Detection System CIDS driver before 15.0.6 in Symantec Endpoint Protection SEP and before 15.1.2 in Norton Security allows remote attackers to cause a denial of service memory corruption and system crash via a malformed Portable Executable PE file...

CVE-2016-5308

The Client Intrusion Detection System CIDS driver before 15.0.6 in Symantec Endpoint Protection SEP and before 15.1.2 in Norton Security allows remote attackers to cause a denial of service memory corruption and system crash via a malformed Portable Executable PE file...

CVE-2016-2206

The management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read arbitrary files by modifying the file-download...

CVE-2016-2206

The management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read arbitrary files by modifying the file-download...

CVE-2016-2205

Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote...