Browse CVEs

HIGH 7.8 CVE-2020-8093 A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a library using DYLD environment … Antivirus 8.0.0+ Fix from $1,9502020-01-30 MEDIUM 5.5 CVE-2020-8092 A privilege escalation vulnerability in BDLDaemon as used in Bitdefender Antivirus for Mac allows a local attacker to obtain authentication tokens fo… Antivirus 8.0.0+ Fix from $1,6002020-01-30 CRITICAL 9.8 CVE-2019-17095 A command injection vulnerability has been discovered in the bootstrap stage of Bitdefender BOX 2, versions 2.1.47.42 and 2.1.53.45. The API method `… Box 2 Firmware No fix yet Fix from $2,3002020-01-27 HIGH 7.8 CVE-2019-17099 An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an… Endpoint Security Tools 6.6.11.163+ Fix from $1,9502020-01-27 CRITICAL 9.8 CVE-2019-17096 A OS Command Injection vulnerability in the bootstrap stage of Bitdefender BOX 2 allows the manipulation of the `get_image_url()` function in special… Box 2 Firmware 2.0.66 / 2.0.66.88+ Fix from $2,3002020-01-27 MEDIUM 5.5 CVE-2019-17103 An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker to elevate permissions to read… Antivirus 8.0.0+ Fix from $1,6002020-01-27 HIGH 8.1 CVE-2019-17102 An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method `/api/update_s… Box 2 Firmware 2.1.47.36+ Fix from $1,9502020-01-27 MEDIUM 6.5 CVE-2019-17100 An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code.… Total Security 2020 24.0.12.69+ Fix from $1,6002020-01-27 HIGH 7.8 CVE-2019-12612 An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitrary code to the BOX appliance … Box Firmware 2.1.37.37-34+ Fix from $1,9502019-10-31 HIGH 7.8 CVE-2019-15295 An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 v… Antivirus 2020 1.0.15.138+ Fix from $1,9502019-08-21 MEDIUM 6.7 CVE-2019-14242 An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool versions prior to 6.6.8.115; and Bitdefender Antiviru… Antivirus Plus 6.6.8.115 / 23.0.24.120+ Fix from $1,6002019-07-30 HIGH 8.8 CVE-2019-6736 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction … Safepay Mitigation only Fix from $1,9502019-06-03 HIGH 8.8 CVE-2019-6737 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction … Safepay Mitigation only Fix from $1,9502019-06-03 HIGH 8.8 CVE-2019-6738 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction … Safepay Mitigation only Fix from $1,9502019-06-03 MEDIUM 5.3 CVE-2018-18058 An issue was discovered in Bitdefender Engines before 7.76662. A vulnerability has been discovered in the iso.xmd parser that results from a lack of … Scan Engines 7.76662+ Fix from $1,6002019-05-24 MEDIUM 5.3 CVE-2018-18059 An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser that results from a lack of … Scan Engines 7.76675+ Fix from $1,6002019-05-24 MEDIUM 5.3 CVE-2018-18060 An issue was discovered in Bitdefender Engines before 7.76808. A vulnerability has been discovered in the dalvik.xmd parser that results from a lack … Scan Engines 7.76808+ Fix from $1,6002019-05-24 CRITICAL 9.8 CVE-2017-8931 Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors. Gravityzone 6.2.1-35+ Fix from $2,3002018-10-30 CRITICAL 9.8 CVE-2018-8955 The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remo… Gravityzone No fix yet Fix from $2,3002018-10-24 HIGH 7.8 CVE-2018-6183 BitDefender Total Security 2018 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of an… Total Security Mitigation only Fix from $1,9502018-03-12 HIGH 8.8 CVE-2017-17408EPSS 6% This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interact… Internet Security 2018 after 73447 Fix from $1,9502017-12-21 HIGH 8.8 CVE-2017-17409 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interact… Internet Security 2018 73456+ Fix from $1,9502017-12-21 HIGH 8.8 CVE-2017-17410 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interact… Internet Security 2018 73456+ Fix from $1,9502017-12-21 HIGH 8.8 CVE-2017-10954 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security Internet Security 2… Internet Security 2018 7.72918+ Fix from $1,9502017-10-31 HIGH 7.0 CVE-2017-10950 This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Security 21.0.24.62. An attacker… Total Security Mitigation only Fix from $1,9502017-08-29 MEDIUM 6.7 CVE-2017-6186 Code injection vulnerability in Bitdefender Total Security 12.0 (and earlier), Internet Security 12.0 (and earlier), and Antivirus Plus 12.0 (and ear… Antivirus Plus after 12.0 Fix from $1,6002017-03-21 MEDIUM 5.0 CVE-2014-5350EPSS 64% Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) ..… Gravityzone after 5.1.5.386 Fix from $1,6002014-08-19 MEDIUM 6.2 CVE-2010-5154 Race condition in BitDefender Total Security 2010 13.0.20.347 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dange… Bitdefender Total Security 2010 Mitigation only Fix from $1,6002012-08-25 MEDIUM 5.0 CVE-2008-6661 Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service (c… Bitdefender Antivirus after 7.60825 Fix from $1,6002009-04-07 HIGH 9.3 CVE-2008-5409EPSS 11% Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Security 8.5, an… Antivirus No fix yet Fix from $1,9502008-12-10