bitdefender Vulnerability Advisory Catalog

Total 98 security vulnerabilities recorded for bitdefender software and firmware.

← Back to All Vendors
Component: antivirus_plus

An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool versions prior to 6.6.8.115; and Bitdefender Antivirus...

📅 2019-07-30
CVSS 6.7 Dossier →
Component: safepay

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction i...

📅 2019-06-03
CVSS 8.8 Dossier →
Component: safepay

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction i...

📅 2019-06-03
CVSS 8.8 Dossier →
Component: safepay

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction i...

📅 2019-06-03
CVSS 8.8 Dossier →
Component: scan_engines

An issue was discovered in Bitdefender Engines before 7.76808. A vulnerability has been discovered in the dalvik.xmd parser that results from a lack o...

📅 2019-05-24
CVSS 5.3 Dossier →
Component: scan_engines

An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser that results from a lack of p...

📅 2019-05-24
CVSS 5.3 Dossier →
Component: scan_engines

An issue was discovered in Bitdefender Engines before 7.76662. A vulnerability has been discovered in the iso.xmd parser that results from a lack of p...

📅 2019-05-24
CVSS 5.3 Dossier →
CVE-2017-8931 CRITICAL
Component: gravityzone

Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors....

📅 2018-10-30
CVSS 9.8 Dossier →
CVE-2018-8955 CRITICAL
Component: gravityzone

The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remot...

📅 2018-10-24
CVSS 9.8 Dossier →
Component: total_security

BitDefender Total Security 2018 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of an ...

📅 2018-03-12
CVSS 7.8 Dossier →
Component: internet_security_2018

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interacti...

📅 2017-12-21
CVSS 8.8 Dossier →
Component: internet_security_2018

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interacti...

📅 2017-12-21
CVSS 8.8 Dossier →
Component: internet_security_2018

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interacti...

📅 2017-12-21
CVSS 8.8 Dossier →
Component: internet_security_2018

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security Internet Security 20...

📅 2017-10-31
CVSS 8.8 Dossier →
Component: total_security

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Security 21.0.24.62. An attacker ...

📅 2017-08-29
CVSS 7.0 Dossier →
CVE-2017-6186 MEDIUM
Component: antivirus_plus

Code injection vulnerability in Bitdefender Total Security 12.0 (and earlier), Internet Security 12.0 (and earlier), and Antivirus Plus 12.0 (and earl...

📅 2017-03-21
CVSS 6.7 Dossier →
CVE-2014-5350 UNKNOWN
Component: gravityzone

Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. ...

📅 2014-08-19
CVSS 5.0 Dossier →
CVE-2010-5154 UNKNOWN
Component: bitdefender_total_security_2010

Race condition in BitDefender Total Security 2010 13.0.20.347 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute danger...

📅 2012-08-25
CVSS 6.2 Dossier →
CVE-2008-6661 UNKNOWN
Component: bitdefender_antivirus

Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service (cr...

📅 2009-04-07
CVSS 5.0 Dossier →
CVE-2009-0850 UNKNOWN
Component: internet_security

Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or...

📅 2009-03-09
CVSS 4.3 Dossier →
CVE-2008-5409 UNKNOWN
Component: antivirus

Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Security 8.5, and...

📅 2008-12-10
CVSS 9.3 Dossier →
CVE-2008-1735 UNKNOWN
Component: antivirus

BitDefender Antivirus 2008 20080118 and earlier allows local users to cause a denial of service (system crash) via an invalid pointer to the CLIENT_ID...

📅 2008-04-30
CVSS 4.9 Dossier →
CVE-2008-0396 UNKNOWN
Component: update_server

Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Ente...

📅 2008-01-23
CVSS 7.8 Dossier →
CVE-2007-6189 UNKNOWN
Component: online_anti-virus_scanner

A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remote attackers to execute arbitr...

📅 2007-11-30
CVSS 9.3 Dossier →
Page 4 of 5 (98 Total Records)