Vulnerability index

Browse CVEs

124 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Web Appliance Firmware MEDIUM 5.0
CVE-2013-2641EPSS 71%

Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id p…

Fix: after 3.7.8.1
Fix from $1,600 2014-03-18
Scanning Engine MEDIUM 5.6
CVE-2014-1213

Sophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set …

Fix: after 3.48
Fix from $1,600 2014-02-10
Unified Threat Management Software HIGH 10.0
CVE-2013-5932EPSS 5%

Unspecified vulnerability in WebAdmin in Sophos UTM (aka Astaro Security Gateway) before 9.105 has unknown impact and attack vectors.

No fix yet
Fix from $1,950 2013-09-23
Web Appliance HIGH 7.2
CVE-2013-4984EPSS 8%

The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain…

Fix: after 3.7.9
Fix from $1,950 2013-09-10
Web Appliance Firmware HIGH 10.0
CVE-2013-4983EPSS 90%

The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute …

Fix: after 3.7.9
Fix from $1,950 2013-09-10
Free Encryption MEDIUM 6.9
CVE-2010-5249

Untrusted search path vulnerability in Sophos Free Encryption 2.40.1.1 and Sophos SafeGuard PrivateCrypto 2.40.1.2 allows local users to gain privile…

Mitigation only
Fix from $1,600 2012-09-07
Sophos Endpoint Security And Control MEDIUM 6.2
CVE-2010-5177

Race condition in Sophos Endpoint Security and Control 9.0.5 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute danger…

Mitigation only
Fix from $1,600 2012-08-25
Safeguard Enterprise Device Encryption MEDIUM 6.9
CVE-2011-5117

Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryptio…

Patch available
Fix from $1,600 2012-08-24
Anti Virus HIGH 7.2
CVE-2010-2308

Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via c…

Fix: after 7.6.19
Fix from $1,950 2010-06-16
Puremessage For Microsoft Exchange MEDIUM 5.0
CVE-2008-7104

Sophos PureMessage Scanner service (PMScanner.exe) in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial o…

Patch available
Fix from $1,600 2009-08-27
Puremessage For Microsoft Exchange MEDIUM 5.0
CVE-2008-7105

Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (EdgeTransport.exe termination) via a…

Patch available
Fix from $1,600 2009-08-27
Puremessage For Microsoft Exchange MEDIUM 5.0
CVE-2008-7106

The installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti-virus and anti-spam are supported, does not create or …

Patch available
Fix from $1,600 2009-08-27
Anti Virus HIGH 10.0
CVE-2008-6904EPSS 11%

Multiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to cause a …

Mitigation only
Fix from $1,950 2009-08-06
Anti Virus HIGH 9.3
CVE-2008-5541EPSS 8%

Sophos Anti-Virus 4.33.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placin…

Mitigation only
Fix from $1,950 2008-12-12
Es1000 MEDIUM 5.0
CVE-2008-3177EPSS 5%

Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI…

Mitigation only
Fix from $1,600 2008-07-15
Anti Virus MEDIUM 6.9
CVE-2008-1737

Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service (reboo…

Mitigation only
Fix from $1,600 2008-04-30
Scanning Engine MEDIUM 5.0
CVE-2007-4787EPSS 6%

The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified h…

Patch available
Fix from $1,600 2007-09-10
Anti Virus HIGH 7.8
CVE-2007-4577EPSS 6%

Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that re…

Patch available
Fix from $1,950 2007-08-28
Anti Virus MEDIUM 6.8
CVE-2007-4578EPSS 7%

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbi…

Patch available
Fix from $1,600 2007-08-28
Sophos Anti Virus HIGH 10.0
CVE-2006-6335EPSS 12%

Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via (1) a SIT archive wit…

Fix: after 2.3
Fix from $1,950 2006-12-12
Anti Virus MEDIUM 6.4
CVE-2006-5647EPSS 21%

Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to …

Fix: after 6.04
Fix from $1,600 2006-11-01
Sophos Anti Virus MEDIUM 5.0
CVE-2006-4839

Sophos Anti-Virus 5.1 allows remote attackers to cause a denial of service (memory consumption) via a file that is compressed with Petite and contain…

Patch available
Fix from $1,600 2006-11-01
Anti Virus MEDIUM 5.0
CVE-2006-5645EPSS 18%

Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of …

Fix: after 6.04
Fix from $1,600 2006-11-01
Anti Virus MEDIUM 5.0
CVE-2006-5646EPSS 18%

Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.…

Fix: after 6.04
Fix from $1,600 2006-11-01
Sophos Anti Virus HIGH 7.5
CVE-2006-0994EPSS 22%

Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, …

Fix: 4.05 / 5.2.1+
Fix from $1,950 2006-05-10
Sophos Anti Virus MEDIUM 5.0
CVE-2005-4680EPSS 8%

Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data v…

Fix: 4.02 / 4.5.9+
Fix from $1,600 2005-12-31
Sophos Anti Virus MEDIUM 5.0
CVE-2005-3382

Multiple interpretation error in Sophos 3.91 with the 2.28.4 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, an…

Mitigation only
Fix from $1,600 2005-10-30
Sophos Anti Virus MEDIUM 5.1
CVE-2005-3216

Multiple interpretation error in unspecified versions of Sophos Antivirus allows remote attackers to bypass virus detection via a malicious executabl…

No fix yet
Fix from $1,600 2005-10-14
Sophos Anti Virus HIGH 7.5
CVE-2005-2768EPSS 13%

Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote …

Mitigation only
Fix from $1,950 2005-09-02
Sophos Anti Virus MEDIUM 5.0
CVE-2005-1530EPSS 6%

Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite …

Patch available
Fix from $1,600 2005-07-19