CVE-2015-6547

The management console on Symantec Web Gateway SWG appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands at boot time via unspecified vectors...

CVE-2015-5693

Symantec Web Gateway (SWG) appliances running before 5.2.2 with database 5.0.0.1277 are affected by CVE-2015-5693 (Traffic Capture EoP). The vulnerability is tied to the hostname/configuration processing path that allows an authenticated, remote attacker to inject commands executed with root priv...

CVE-2015-5692

adminmessages.php in the management console on Symantec Web Gateway SWG appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary code by uploading a file with a safe extension and content type, and then leveraging an improper Sudo configuration to...

CVE-2015-5691

Multiple cross-site scripting XSS vulnerabilities in PHP scripts in the management console on Symantec Web Gateway SWG appliances with software before 5.2.2 DB 5.0.0.1277 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, as demonstrated an attack against...

CVE-2014-9228

sysplant.sys in the Manager component in Symantec Endpoint Protection SEP before 12.1.6 allows local users to cause a denial of service blocked system shutdown by triggering an unspecified deadlock condition...

CVE-2015-5689

ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite GSS before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution DS before 7.6 HF4 12.0.0.7045 performs improper sign-extend operations before array-element accesses, which allows remote attackers to execute arbitrary code,...

Symantec Web Gateway Security Bypass Vulnerability

Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. A security bypass vulnerability exists in Symantec Web Gateway that could be exploited by an attacker to bypass security restrictions and submit a special...

Symantec Web Gateway OS Command Injection Vulnerability (CNVD-2015-06070)

Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. An OS command injection vulnerability exists in Symantec Web Gateway, which allows remote attackers to exploit the vulnerability by submitting a specially...

Symantec Web Gateway Arbitrary File Upload Vulnerability

Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. A security vulnerability exists in Symantec Web Gateway that allows an attacker to submit a special file that can be uploaded and executed bypassing...

Symantec Web Gateway SQL Injection Vulnerability (CNVD-2015-06066)

Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. A SQL injection vulnerability exists in Symantec Web Gateway, which allows remote attackers to exploit the vulnerability by submitting specially crafted SQL...

Symantec Web Gateway Code Injection Vulnerability (CNVD-2015-06069)

Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. A code injection certificate vulnerability exists in Symantec Web Gateway, which allows remote attackers to exploit the vulnerability by submitting a special...

Symantec Web Gateway Cross-Site Scripting Vulnerability (CNVD-2015-06067)

Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. A cross-site scripting vulnerability exists in Symantec Web Gateway, which allows remote attackers to exploit the vulnerability to inject malicious script or...

Symantec Web Gateway Arbitrary PHP File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Web Gateway. Authentication is required to exploit this vulnerability, however it can be bypassed via reflected cross-site scripting. The specific flaw exists within the adminmessages.php...

Symantec Web Gateway Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Web Gateway. Authentication is not required to exploit this vulnerability. The specific flaw exists within the path processing for command URLs accessed through the management port of the...

Symantec Ghost Out-of-Bounds Indexing Remote Code Execution Vulnerability

Symantec Ghost Explorer Utility is GHO file browsing tool. Symantec Ghost has an out-of-bounds indexing remote code execution vulnerability that can be exploited by an attacker to cause a denial of service or access unauthorized data...

Symantec Ghost Out-Of-Bounds Indexing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Ghost. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Symantec Endpoint Protection Manager authentication bypass

Added: 08/26/2015 CVE: CVE-2015-1486 BID: 76074 Background Symantec Endpoint Protection, by Symantec Corporation, is an antivirus and personal firewall product designed to be centrally managed in corporate environments by the Symantec Endpoint Protection Manager SEPM. Problem Symantec Endpoint...

Symantec Endpoint Protection Manager authentication bypass

Added: 08/26/2015 CVE: CVE-2015-1486 BID: 76074 Background Symantec Endpoint Protection, by Symantec Corporation, is an antivirus and personal firewall product designed to be centrally managed in corporate environments by the Symantec Endpoint Protection Manager SEPM. Problem Symantec Endpoint...

Symantec Endpoint Protection Manager authentication bypass

Added: 08/26/2015 CVE: CVE-2015-1486 BID: 76074 Background Symantec Endpoint Protection, by Symantec Corporation, is an antivirus and personal firewall product designed to be centrally managed in corporate environments by the Symantec Endpoint Protection Manager SEPM. Problem Symantec Endpoint...

Symantec Endpoint Protection Manager authentication bypass

Added: 08/26/2015 CVE: CVE-2015-1486 BID: 76074 Background Symantec Endpoint Protection, by Symantec Corporation, is an antivirus and personal firewall product designed to be centrally managed in corporate environments by the Symantec Endpoint Protection Manager SEPM. Problem Symantec Endpoint...