comodo Vulnerability Advisory Catalog

Total 77 security vulnerabilities recorded for comodo software and firmware.

← Back to All Vendors
CVE-2019-3970 MEDIUM
Component: antivirus

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe...

📅 2019-07-17
CVSS 5.5 Dossier →
Component: antivirus

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients. A local process ca...

📅 2019-07-17
CVSS 7.8 Dossier →
CVE-2018-17431 CRITICAL
Component: unified_threat_management_firewall

Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL....

📅 2019-01-30
CVSS 9.8 Dossier →
CVE-2014-7872 UNKNOWN
Component: geekbuddy

Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges by connecting to the server....

📅 2015-06-09
CVSS 7.2 Dossier →
CVE-2014-9633 UNKNOWN
Component: backup

The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device handle, which triggers a NULL po...

📅 2015-02-03
CVSS 7.5 Dossier →
CVE-2011-5123 UNKNOWN
Component: comodo_internet_security

The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not check whether X.509 certificates in signed executable files have b...

📅 2012-08-26
CVSS 10.0 Dossier →
CVE-2011-5122 UNKNOWN
Component: comodo_internet_security

The Antivirus component in Comodo Internet Security before 5.3.175888.1227 allows remote attackers to cause a denial of service (application crash) vi...

📅 2012-08-26
CVSS 4.3 Dossier →
CVE-2011-5121 UNKNOWN
Component: comodo_internet_security

The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not properly check whether unspecified X.509 certificates are revoked,...

📅 2012-08-26
CVSS 10.0 Dossier →
CVE-2011-5120 UNKNOWN
Component: comodo_internet_security

The Antivirus component in Comodo Internet Security before 5.4.189822.1355 allows remote attackers to cause a denial of service (application crash) vi...

📅 2012-08-26
CVSS 4.3 Dossier →
CVE-2011-5119 UNKNOWN
Component: comodo_internet_security

Multiple race conditions in Comodo Internet Security before 5.8.211697.2124 allow local users to bypass the Defense+ feature via unspecified vectors....

📅 2012-08-26
CVSS 1.9 Dossier →
CVE-2011-5118 UNKNOWN
Component: comodo_internet_security

Multiple race conditions in Comodo Internet Security before 5.8.213334.2131 allow local users to bypass the Defense+ feature via unspecified vectors....

📅 2012-08-26
CVSS 1.9 Dossier →
CVE-2010-5186 UNKNOWN
Component: comodo_internet_security

The Antivirus component in Comodo Internet Security before 4.1.150349.920 allows remote attackers to cause a denial of service (application crash) via...

📅 2012-08-26
CVSS 4.3 Dossier →
CVE-2010-5185 UNKNOWN
Component: comodo_internet_security

The Antivirus component in Comodo Internet Security before 5.3.174622.1216 does not check whether X.509 certificates in signed executable files have b...

📅 2012-08-26
CVSS 10.0 Dossier →
CVE-2009-5127 UNKNOWN
Component: comodo_internet_security

The Antivirus component in Comodo Internet Security before 3.8.64739.471 allows remote attackers to cause a denial of service (application crash) via ...

📅 2012-08-26
CVSS 4.3 Dossier →
CVE-2009-5126 UNKNOWN
Component: comodo_internet_security

The Antivirus component in Comodo Internet Security before 3.8.65951.477 allows remote attackers to cause a denial of service (application crash) via ...

📅 2012-08-26
CVSS 4.3 Dossier →
CVE-2009-5125 UNKNOWN
Component: comodo_internet_security

Comodo Internet Security before 3.9.95478.509 allows remote attackers to bypass malware detection in an RAR archive via an unspecified manipulation of...

📅 2012-08-26
CVSS 4.3 Dossier →
CVE-2009-5124 UNKNOWN
Component: comodo_internet_security

The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (application crash) vi...

📅 2012-08-26
CVSS 4.3 Dossier →
CVE-2009-5123 UNKNOWN
Component: comodo_internet_security

The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (memory consumption) v...

📅 2012-08-26
CVSS 4.3 Dossier →
CVE-2010-5157 UNKNOWN
Component: comodo_internet_security

Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dan...

📅 2012-08-25
CVSS 6.2 Dossier →
CVE-2012-2273 UNKNOWN
Component: comodo_internet_security

Comodo Internet Security before 5.10.228257.2253 on Windows 7 x64 allows local users to cause a denial of service (system crash) via a crafted 32-bit ...

📅 2012-04-20
CVSS 4.9 Dossier →
CVE-2012-1438 UNKNOWN
Component: comodo_antivirus

The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via an Offi...

📅 2012-03-21
CVSS 4.3 Dossier →
CVE-2012-1437 UNKNOWN
Component: comodo_antivirus

The Microsoft Office file parser in Comodo Antivirus 7425 allows remote attackers to bypass malware detection via an Office file with a \50\4B\53\70\5...

📅 2012-03-21
CVSS 4.3 Dossier →
CVE-2008-1736 UNKNOWN
Component: comodo_personal_firewall

Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table (SSDT) functions, which allows ...

📅 2008-04-30
CVSS 7.2 Dossier →
CVE-2008-0470 UNKNOWN
Component: comodo_antivirus

A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method....

📅 2008-01-29
CVSS 9.3 Dossier →
Page 3 of 4 (77 Total Records)