Vulnerability index

Browse CVEs

409 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Norton Antispam HIGH 7.5
CVE-2004-0363EPSS 67%

Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, a…

Patch available
Fix from $1,950 2004-04-15
Norton Internet Security HIGH 7.5
CVE-2004-0364

The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute …

Patch available
Fix from $1,950 2004-04-15
Antivirus Scan Engine HIGH 7.0
CVE-2004-0217

The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to a…

Patch available
Fix from $1,950 2004-04-15
Firewall Vpn Appliance 100 HIGH 7.5
CVE-2004-0190

Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator…

Patch available
Fix from $1,950 2004-03-15
Gateway Security 5400 MEDIUM 6.8
CVE-2004-0192

Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hij…

Patch available
Fix from $1,600 2004-03-15
Norton Antivirus HIGH 7.2
CVE-2003-0994

The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004,…

Mitigation only
Fix from $1,950 2004-02-03
Norton Antivirus MEDIUM 6.4
CVE-2003-1451

Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attachment with a compressed ZIP fi…

Mitigation only
Fix from $1,600 2003-12-31
Pcanywhere HIGH 7.2
CVE-2003-0936

Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe.

Patch available
Fix from $1,950 2003-12-15
Security Check HIGH 7.5
CVE-2003-0470EPSS 9%

Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Check servic…

Mitigation only
Fix from $1,950 2003-08-07
Enterprise Firewall HIGH 7.5
CVE-2002-1463EPSS 7%

Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security …

Patch available
Fix from $1,950 2003-06-09
Enterprise Firewall HIGH 7.5
CVE-2003-0106

The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-en…

Patch available
Fix from $1,950 2003-04-02
Norton Antivirus HIGH 7.2
CVE-2002-1540

The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with raised pri…

Patch available
Fix from $1,950 2003-03-31
Enterprise Firewall MEDIUM 5.0
CVE-2002-1535

Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal n…

Patch available
Fix from $1,600 2003-03-31
Java HIGH 10.0
CVE-2002-2281EPSS 10%

Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via a…

No fix yet
Fix from $1,950 2002-12-31
Sygate Personal Firewall HIGH 10.0
CVE-2002-2397

Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed (1) source IP address of 127.0.0.1 or (2) network ad…

Mitigation only
Fix from $1,950 2002-12-31
Norton Antivirus HIGH 7.8
CVE-2002-2206

The POP3 proxy service (POPROXY.EXE) in Norton AntiVirus 2001 allows local users to cause a denial of service (CPU consumption and crash) via a long …

Mitigation only
Fix from $1,950 2002-12-31
Velociraptor HIGH 7.8
CVE-2002-2317

Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumpt…

Patch available
Fix from $1,950 2002-12-31
Norton Antivirus HIGH 7.5
CVE-2002-1774

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass the e-mail scann…

Mitigation only
Fix from $1,950 2002-12-31
Norton Antivirus HIGH 7.5
CVE-2002-1775

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and c…

Mitigation only
Fix from $1,950 2002-12-31
Norton Antivirus HIGH 7.5
CVE-2002-1776

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro …

Mitigation only
Fix from $1,950 2002-12-31
Norton Antivirus HIGH 7.5
CVE-2002-1777

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass e-mail scanning via a filena…

Mitigation only
Fix from $1,950 2002-12-31
Norton Personal Firewall HIGH 7.5
CVE-2002-1778

Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a (1) SYN/FIN, (2) SYN/FIN/URG, (3) SYN/FIN…

Mitigation only
Fix from $1,950 2002-12-31
Norton Personal Firewall HIGH 7.5
CVE-2002-1779

The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 (NPW) does not properly protect against certain attacks on Windows…

Mitigation only
Fix from $1,950 2002-12-31
Firewall Vpn Appliance 100 MEDIUM 5.0
CVE-2002-1937

Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote a…

Mitigation only
Fix from $1,600 2002-12-31
Enterprise Firewall MEDIUM 5.0
CVE-2002-2294

Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300,…

Patch available
Fix from $1,600 2002-12-31
Enterprise Firewall MEDIUM 5.0
CVE-2002-0990

The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Se…

Patch available
Fix from $1,600 2002-10-28
Norton Antivirus HIGH 7.5
CVE-2002-0485

Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mi…

Mitigation only
Fix from $1,950 2002-08-12
Norton Internet Security HIGH 7.5
CVE-2002-0663

Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton Internet Security 2001 allows remote attackers to ca…

Patch available
Fix from $1,950 2002-07-26
Enterprise Firewall HIGH 7.5
CVE-2002-0538

FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way that allows remote attackers to…

Patch available
Fix from $1,950 2002-07-03
Norton Ghost HIGH 7.5
CVE-2002-0345

Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges.

Patch available
Fix from $1,950 2002-06-25