Lucene search

K

MicroWorld Security Vulnerabilities

cve
cve

CVE-2023-4383

A vulnerability, which was classified as critical, was found in MicroWorld eScan Anti-Virus 7.0.32 on Linux. This affects an unknown part of the file runasroot. The manipulation leads to incorrect execution-assigned permissions. The attack needs to be approached locally. The exploit has been...

7.8CVSS

7.6AI Score

0.0004EPSS

2023-08-16 08:15 PM
30
cve
cve

CVE-2021-26624

An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient execution conditions related to "runasroot" command. This vulnerability can induce remote attackers to exploit root privileges by...

8.8CVSS

8.8AI Score

0.006EPSS

2022-04-01 11:15 PM
66
cve
cve

CVE-2008-3726

Cross-site scripting (XSS) vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to inject arbitrary web script or HTML via the...

5.7AI Score

0.006EPSS

2008-08-20 04:41 PM
19
cve
cve

CVE-2008-3727

Directory traversal vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to read arbitrary files via a .. (dot dot) in the...

6.6AI Score

0.011EPSS

2008-08-20 04:41 PM
18
cve
cve

CVE-2008-3728

Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to determine the installation path, IP addresses, and error messages via direct requests to files under...

6.3AI Score

0.01EPSS

2008-08-20 04:41 PM
16
cve
cve

CVE-2008-3729

Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to bypass authentication and obtain administrative access via a direct request with (1) an IsAdmin=true cookie value or (2) no...

6.9AI Score

0.011EPSS

2008-08-20 04:41 PM
19
cve
cve

CVE-2008-1221

Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (aka eScan Server) 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR (get)...

6.7AI Score

0.03EPSS

2008-03-10 05:44 PM
16
cve
cve

CVE-2007-4649

MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions (Everyone:Full Control) for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by...

6.6AI Score

0.0004EPSS

2007-08-31 11:17 PM
24
cve
cve

CVE-2007-2687

Stack-based buffer overflow in the MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan before 9.0.718.1 allows remote attackers to execute arbitrary code via a long...

8AI Score

0.139EPSS

2007-05-24 02:30 AM
26
cve
cve

CVE-2007-0655

The MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan 8.0.671.1, and possibly other versions, allows remote or local attackers to gain privileges and execute arbitrary commands by connecting directly to TCP port...

7.8AI Score

0.003EPSS

2007-05-02 06:19 PM
29