Lucene search
+L
SymantecMost viewed

6867 matches found

Symantec
Symantec
•added 2009/10/29 12:00 a.m.•37 views

Sun Java SE November 2009 Multiple Security Vulnerabilities

Description Sun has released updates to address multiple security vulnerabilities in Java SE. Successful exploits may allow attackers to bypass certain security restrictions, run untrusted applets with elevated privileges, execute arbitrary code, and cause denial-of-service conditions. Other...

1AI score
SaveExploits0References5Affected Software44
Symantec
Symantec
•added 2009/05/12 12:00 a.m.•37 views

Microsoft PowerPoint Sound Data (CVE-2009-0223) Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious PowerPoint file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...

9.3CVSS7AI score0.27984EPSS
SaveExploits1References2Affected Software1
Symantec
Symantec
•added 2009/03/10 12:00 a.m.•37 views

Microsoft Windows DNS Server Incorrect Caching DNS Spoofing Vulnerability

Description The Microsoft Windows DNS Server is prone to a DNS-spoofing vulnerability because the software fails to cache responses to specially crafted DNS queries. Successfully exploiting this issue allows remote attackers to spoof DNS replies, allowing them to redirect network traffic and to...

SaveExploits0References1Affected Software3
Symantec
Symantec
•added 2007/12/11 12:00 a.m.•37 views

Microsoft Windows Media Format Runtime ASF File Remote Code Execution Vulnerability

Description Windows Media Player is prone to a remote code-execution vulnerability because it fails to properly handle malformed media files. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit...

0.4AI score
SaveExploits0References1Affected Software4
Symantec
Symantec
•added 2007/09/05 8:00 a.m.•37 views

Symantec SYMTDI.SYS Device Driver Local Denial of Service

SUMMARY Some versions of Symantecs device driver SYMTDI.SYS contain a vulnerability which, if successfully exploited, could allow a local attacker to cause the system to crash. Risk Impact Low Remote Access | No ---|--- Local Access | Yes Authentication Required | Yes, to the local system Exploit...

1.9CVSS1.6AI score0.00864EPSS
SaveExploits1Affected Software1
Symantec
Symantec
•added 2007/08/02 12:00 a.m.•37 views

JustSystem Ichitaro Unspecified Code Execution Vulnerability

Description Ichitaro is prone to an unspecified remotely exploitable code-execution vulnerability. Remote attackers may exploit this issue to execute arbitrary code within the context of the currently logged in user. This issue is being exploited in the wild by Trojan.Tarodrop.D. Few details are...

2.1AI score
SaveExploits0References1Affected Software1
Symantec
Symantec
•added 2006/12/12 12:00 a.m.•37 views

Microsoft Windows 2000 Remote Installation Service Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. A remote attacker may exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in a complete compromise of vulnerable computers. Note that this issue affects only...

1.3AI score
SaveExploits0References2Affected Software1
Symantec
Symantec
•added 2005/02/08 8:00 a.m.•37 views

Symantec UPX Parsing Engine Heap Overflow

SUMMARY Symantec resolved a potential remote access compromise vulnerability reported by ISS X-Force. The vulnerability was identified in an early version of a Symantec antivirus scanning module responsible for parsing UPX compressed files that is still in limited use in some Symantec security...

7.5CVSS0.3AI score0.18832EPSS
SaveExploits1Affected Software2
Symantec
Symantec
•added 2020/01/08 12:00 a.m.•36 views

Cisco Webex Centers CVE-2020-3116 Denial of Service Vulnerability

Description Cisco Webex Centers is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. This issue is being tracked by Cisco Bug IDs CSCvr16379, CSCvr16383 and CSCvr16386. Technologies Affected Cisco WebEx Event Center Cisco WebEx...

1.9AI score0.00664EPSS
SaveExploits0References1
Symantec
Symantec
•added 2020/01/08 12:00 a.m.•36 views

Cisco Vision Dynamic Signage Director CVE-2019-16004 Authentication Bypass Vulnerability

Description Cisco Vision Dynamic Signage Director is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass authentication mechanism and perform unauthorized actions with administrative privileges. This may lead to further attacks. This issue is being tracke...

1.9AI score0.01027EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
•added 2019/12/20 12:00 a.m.•36 views

GitLab CVE-2019-15584 Denial of Service Vulnerability

Description GitLab is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. GitLab versions prior to 12.3.2, 12.2.6, and 12.1.10 are vulnerable. Technologies Affected Gitlab GitLab Community Edition 10.2 Gitlab GitLab Community Edition...

1.2AI score0.01198EPSS
SaveExploits1References1Affected Software2
Symantec
Symantec
•added 2019/12/19 12:00 a.m.•36 views

Multiple Dell EMC Products CVE-2019-18588 Cross Site Scripting Vulnerability

Description Multiple Dell EMC products are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

6.5AI score0.00674EPSS
SaveExploits0References1Affected Software2
Symantec
Symantec
•added 2019/12/18 12:00 a.m.•36 views

Sysstat CVE-2019-19725 Memory Corruption Vulnerability

Description Sysstat is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition. sysstat versions through 12.2.0 are vulnerable. Technologies...

7.5CVSS0.4AI score0.02582EPSS
SaveExploits1References4Affected Software1
Symantec
Symantec
•added 2019/12/17 12:00 a.m.•36 views

TYPO3 CVE-2019-19849 Multiple Remote Code Execution Vulnerabilities

Description TYPO3 is prone to multiple remote code-execution vulnerabilities. Successfully exploiting these issues allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. Versions prior to TYPO3 8.7.30,...

2.4AI score0.01267EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
•added 2019/12/16 12:00 a.m.•36 views

Atlassian Crowd CVE-2017-18107 Cross Site Request Forgery Vulnerability

Description Atlassian Crowd is prone to a cross-site request-forgery vulnerability because it fails to properly validate HTTP requests. Exploiting this issue allows a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also...

0.1AI score0.00449EPSS
SaveExploits0References2Affected Software1
Symantec
Symantec
•added 2019/12/14 12:00 a.m.•36 views

Ansible Tower Multiple Security Vulnerabilities

Description Ansible Tower is prone to multiple security vulnerabilities. An attacker can exploit these issues to gain unauthorized access or obtain sensitive information. That may aid in further attacks. Ansible Tower versions 3.6.1 and 3.5.3 are vulnerable; other versions may also be affected...

1.8AI score0.01534EPSS
SaveExploits0References4Affected Software1
Symantec
Symantec
•added 2019/12/11 12:00 a.m.•36 views

Xen CVE-2019-19583 Denial of Service Vulnerability

Description Xen is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Xen Xen version through 4.12.0 are vulnerable. Technologies Affected Citrix Hypervisor 8.0 Citrix XenServer 7.0 Citrix XenServer...

0.4AI score0.02155EPSS
SaveExploits0References1Affected Software3
Symantec
Symantec
•added 2019/12/11 12:00 a.m.•36 views

Xen CVE-2019-19577 Denial of Service Vulnerability

Description Xen is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Xen Xen version through 4.12.0 are vulnerable. Technologies Affected Citrix Hypervisor 8.0 Citrix XenServer 7.0 Citrix XenServer...

0.4AI score0.00503EPSS
SaveExploits0References1Affected Software3
Symantec
Symantec
•added 2019/12/11 12:00 a.m.•36 views

hostapd CVE-2019-5062 Denial of Service Vulnerability

Description hostapd is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. Technologies Affected W1.F1 Hostapd 2.6 Recommendations Run all software as a nonprivileged user with minimal access rights. To reduce the impact of latent...

3.3CVSS7.1AI score0.00545EPSS
SaveExploits0References1
Symantec
Symantec
•added 2019/12/10 12:00 a.m.•36 views

Microsoft Windows COM Server CVE-2019-1478 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsof...

2.1AI score0.00827EPSS
SaveExploits0Affected Software2
Symantec
Symantec
•added 2019/12/10 12:00 a.m.•36 views

SAP Business Objects Business Intelligence Platform CVE-2019-0395 Cross Site Scripting Vulnerability

Description SAP BusinessObjects Business Intelligence Platform is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can exploit this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

0.4AI score0.00733EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
•added 2019/12/10 12:00 a.m.•36 views

McAfee TechCheck for Windows CVE-2019-3667 DLL Loading Arbitrary Code Execution Vulnerability

Description McAfee TechCheck is prone to an arbitrary code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial of service condition. McAfee TechCheck versions 3.0.0.17 an...

0.8AI score0.00335EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
•added 2019/12/10 12:00 a.m.•36 views

Multiple Intel Processors CVE-2019-11157 Multiple Security Vulnerabilities

Description Multiple Intel Processors are prone to multiple security vulnerabilities. A local attacker can leverage these issues to obtain sensitive information and gain elevated privileges. This may aid in further attacks. Technologies Affected Intel 6th generation Core processors Intel 7th...

2.7AI score0.00676EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
•added 2019/12/10 12:00 a.m.•36 views

Apple iOS and iPadOS CVE-2019-8841 Arbitrary Code Execution Vulnerability

Description Apple iOS and iPadOS are prone to an arbitrary code execution vulnerability. A remote attacker can leverage this issue to execute arbitrary code with kernel privileges on the affected system. Failed exploit attempts may result in a denial-of-service condition. Technologies Affected...

8AI score0.00414EPSS
SaveExploits0References1Affected Software2
Symantec
Symantec
•added 2019/12/10 12:00 a.m.•36 views

Microsoft Git for Visual Studio CVE-2019-1350 Remote Code Execution Vulnerability

Description Microsoft Git for Visual Studio is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

0.25666EPSS
SaveExploits0Affected Software1
Symantec
Symantec
•added 2019/12/02 12:00 a.m.•36 views

McAfee WebAdvisor TS102991 Multiple Security Vulnerabilities

Description McAfee WebAdvisor is prone to the following security vulnerabilities: 1. A remote code injection vulnerability 2. A security vulnerability. Successfully exploiting these issues may allow attacker to inject and execute arbitrary code. This may lead to other attacks. McAfee WebAdvisor...

1AI score
SaveExploits0References1
Symantec
Symantec
•added 2019/12/02 12:00 a.m.•36 views

Embedthis GoAhead Web Server CVE-2019-5097 Denial of Service Vulnerability

Description Embedthis GoAhead is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause a denial-of-service condition, denying service to legitimate users. GoAhead versions 5.0.1 and prior are vulnerable. Technologies Affected Embedthis Software GoAhead Web Server...

1.2AI score0.45063EPSS
SaveExploits1References3Affected Software1
Symantec
Symantec
•added 2019/11/29 12:00 a.m.•36 views

Linux kernel CVE-2019-19378 Denial of Service Vulnerability

Description Linux kernel is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. Linux kernel 5.0.21 is vulnerable. Technologies Affected Linux kernel 5.0.21 Recommendations Permit local access for trusted individuals only. Where...

1.6AI score0.02354EPSS
SaveExploits1References2Affected Software1
Symantec
Symantec
•added 2019/11/20 12:00 a.m.•36 views

Cisco DNA Spaces: Connector CVE-2019-15995 SQL Injection Vulnerability

Description Cisco DNA Spaces: Connector is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent...

1.2AI score0.0115EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
•added 2019/11/20 12:00 a.m.•36 views

Cisco Unity Express CVE-2019-15986 Local Command Injection Vulnerability

Description Cisco Unity Express is prone to a local command-injection vulnerability. A local attacker can exploit this issue to execute arbitrary commands on the underlying OS with root privileges. This issue is being tracked by Cisco Bug ID CSCvq54120. Versions prior to Cisco Unity Express 10.1...

1.5AI score0.00404EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
•added 2019/11/18 12:00 a.m.•36 views

Apache Shiro CVE-2019-12422 Information Disclosure Vulnerability

Description Apache Shiro is prone to an information-disclosure vulnerability. Successfully exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks. Versions prior to Apache Shiro 1.4.2 are vulnerable. Technologies Affected Apache Apache Shiro...

5CVSS2.1AI score0.09101EPSS
SaveExploits0References6Affected Software1
Symantec
Symantec
•added 2019/11/14 12:00 a.m.•36 views

Siemens SIMATIC S7-1200 CVE-2019-13945 Local Unauthorized Access Vulnerability

...

3.2AI score0.00532EPSS
SaveExploits0
Symantec
Symantec
•added 2019/11/12 12:00 a.m.•36 views

Adobe Media Encoder CVE-2019-8246 Out of Bounds Arbitrary Code Execution Vulnerability

Description Adobe Media Encoder is prone to an unspecified remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected applications. Failed exploit attempts will likely cause a denial-of-service condition. Adobe...

1AI score0.04582EPSS
SaveExploits0Affected Software1
Symantec
Symantec
•added 2019/11/12 12:00 a.m.•36 views

Adobe Animate CVE-2019-7960 DLL Loading Local Privilege Escalation Vulnerability

Description Adobe Animate is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Animate 19.2.1 and prior are vulnerable. Technologies Affected Adobe Animate 14.2.0.20 Adobe Animate 15.0.0.173 Adobe Animate 15.0.1.179 Adobe...

2.5AI score0.00777EPSS
SaveExploits0Affected Software1
Symantec
Symantec
•added 2019/11/12 12:00 a.m.•36 views

Microsoft Windows Win32k CVE-2019-1393 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

2AI score0.01327EPSS
SaveExploits0Affected Software3
Symantec
Symantec
•added 2019/11/12 12:00 a.m.•36 views

TIBCO EBX CVE-2019-17330 Multiple Unspecified Cross-Site Scripting Vulnerabilities

Description TIBCO EBX is prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site...

0.1AI score0.00968EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
•added 2019/11/12 12:00 a.m.•36 views

Microsoft Windows Remote Procedure Call CVE-2019-1409 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...

1.2AI score0.01307EPSS
SaveExploits0Affected Software3
Symantec
Symantec
•added 2019/11/11 12:00 a.m.•36 views

Envoy CVE-2019-18836 Remote Denial of Service Vulnerability

Description Envoy is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause denial of service conditions. Technologies Affected Envoy Envoy 1.12.0 Istio Istio 1.3.0 Istio Istio 1.3.1 Istio Istio 1.3.2 Istio Istio 1.3.3 Recommendations Block external access ...

5CVSS1.8AI score0.01938EPSS
SaveExploits1References3Affected Software2
Symantec
Symantec
•added 2019/11/07 12:00 a.m.•36 views

Philips Tasy EMR CVE-2019-13557 Information Disclosure Vulnerability

Description Philips Tasy EMR is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain unauthorized access to sensitive information. This may lead to further attacks. Philips Tasy EMR version 3.02.1744 and prior are affected. Philips Tasy WebPortal version...

1.1AI score0.01154EPSS
SaveExploits0References1Affected Software2
Symantec
Symantec
•added 2019/11/06 12:00 a.m.•36 views

Cisco Web Security Appliance CVE-2019-15969 Cross Site Scripting Vulnerability

Description Cisco Web Security Appliance is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Thi...

0.4AI score0.00801EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
•added 2019/11/04 12:00 a.m.•36 views

IBM QRadar SIEM CVE-2019-4470 Unspecified Cross Site Scripting Vulnerability

Description IBM QRadar SIEM is prone to an unspecified cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based...

3.5CVSS0.4AI score0.00561EPSS
SaveExploits0Affected Software1
Symantec
Symantec
•added 2019/11/04 12:00 a.m.•36 views

Red Hat '389-ds-base' CVE-2019-14824 Security Bypass Vulnerability

Description Red Hat '389-ds-base' is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions, obtain sensitive information and perform unauthorized actions. This may aid in further attacks. Technologies Affected Redhat 389-ds-base Redhat...

6.6AI score0.01311EPSS
SaveExploits0References3Affected Software5
Symantec
Symantec
•added 2019/10/30 12:00 a.m.•36 views

PHP 'FFI::cast()' Memory Leak Denial of Service Vulnerability

Description PHP is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause a denial of service condition. Versions prior to PHP 7.4.0 are vulnerable. Technologies Affected PHP PHP 7.3.0 PHP PHP 7.3.1 PHP PHP 7.3.10 PHP PHP 7.3.11 PHP PHP 7.3.12 PHP PHP 7.3.2 PHP PHP...

1.7AI score
SaveExploits0References4Affected Software1
Symantec
Symantec
•added 2019/10/29 12:00 a.m.•36 views

Apple macOS/watchOS/iCloud for Windows CVE-2019-8750 Memory Corruption Vulnerability

Description Apple macOS, watchOS and iCloud for Windows are prone to a memory corruption vulnerability. Attackers can exploit this issue to execute arbitrary code and perform unauthorized actions. Failed exploit attempts may result in a denial-of-service condition. Technologies Affected Apple Wat...

0.8AI score0.01635EPSS
SaveExploits0References1Affected Software3
Symantec
Symantec
•added 2019/10/23 12:00 a.m.•36 views

Multiple IBM Products CVE-2019-4459 Cross Site Scripting Vulnerability

Description Multiple IBM Products are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

0.5AI score0.00561EPSS
SaveExploits0Affected Software2
Symantec
Symantec
•added 2019/10/23 12:00 a.m.•36 views

Multiple IBM Products CVE-2019-4395 Local Information Disclosure Vulnerability

Description Multiple IBM products are prone to a local information-disclosure vulnerability. Exploiting this issue may allow a local attacker to obtain sensitive information that may aid in further attacks. Technologies Affected IBM Cloud Orchestrator 2.4 IBM Cloud Orchestrator 2.4.0.1 IBM Cloud...

2.1CVSS1.2AI score0.00307EPSS
SaveExploits0Affected Software2
Symantec
Symantec
•added 2019/10/16 12:00 a.m.•36 views

Cisco Identity Services Engine CVE-2019-15282 Information Disclosure Vulnerability

Description Cisco Identity Services Engine is prone to an information disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may aid in further attacks. This issue is being tracked by Cisco bug ID CSCvq52402. Technologies Affected Cisco Identity Services...

1.1AI score0.01221EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
•added 2019/10/16 12:00 a.m.•36 views

ISC BIND CVE-2019-6475 Authentication Bypass Vulnerability

Description ISC BIND is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to perform unauthorized actions. This may aid in further attacks. ISC BIND versions 9.14.0 through 9.14.6, and 9.15.0 through 9.15.4 are vulnerable. Technologies Affected ISC Bind 9.14.0 IS...

0.8AI score0.01273EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
•added 2019/10/10 12:00 a.m.•36 views

Phoenix Contact Automation Worx CVE-2019-16675 Remote Code Execution Vulnerability

Description Phoenix Contact Automation Worx is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely cause a denial-of-service condition. The...

1.4AI score0.03306EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
•added 2019/10/09 12:00 a.m.•36 views

Juniper Junos J-Web CVE-2019-0047 HTML Injection Vulnerability

Description Juniper Junos is prone to an HTML-injection vulnerability. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is...

0.2AI score0.01557EPSS
SaveExploits0References1Affected Software1
Total number of security vulnerabilities5000