f-secure Vulnerability Advisory Catalog

Total 101 security vulnerabilities recorded for f-secure software and firmware.

← Back to All Vendors
Component: atlant

A Denial-of-Service (DoS) vulnerability was discovered in all versions of F-Secure Atlant whereby the SAVAPI component used in certain F-Secure produc...

📅 2021-08-23
CVSS 4.6 Dossier →
Component: safe

A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address bar while loading the content f...

📅 2021-08-11
CVSS 3.5 Dossier →
Component: safe

An address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted a malicious URL, it appears ...

📅 2021-08-11
CVSS 3.5 Dossier →
Component: client_security

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash whi...

📅 2021-08-05
CVSS 3.5 Dossier →
Component: safe

Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a...

📅 2021-08-05
CVSS 3.5 Dossier →
Component: cloud_protection_for_salesforce

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can cr...

📅 2021-06-21
CVSS 3.5 Dossier →
Component: safe

An issue was discovered in F-Secure SAFE 17.7 on macOS. Due to incorrect client version verification, an attacker can connect to a privileged XPC serv...

📅 2020-06-23
CVSS 8.1 Dossier →
Component: safe

An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attacker to pe...

📅 2020-06-23
CVSS 8.1 Dossier →
CVE-2020-9342 MEDIUM
Component: cloud_protection_for_salesforce

The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects ver...

📅 2020-02-22
CVSS 5.5 Dossier →
Component: client_security

In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure ...

📅 2019-05-17
CVSS 7.8 Dossier →
Component: xfence

An issue was discovered in F-Secure XFENCE and Little Flocker. A maliciously crafted Universal/fat binary can evade third-party code signing checks. B...

📅 2018-06-13
CVSS 7.8 Dossier →
CVE-2018-6324 MEDIUM
Component: radar

F-Secure Radar (on-premises) before 2018-02-15 has an Unvalidated Redirect via the ReturnUrl parameter that triggers upon a user login....

📅 2018-02-16
CVSS 6.1 Dossier →
CVE-2018-6189 MEDIUM
Component: radar

F-Secure Radar (on-premises) before 2018-02-15 has XSS via vectors involving the Tags parameter in the JSON request body in an outbound request for th...

📅 2018-02-16
CVSS 6.1 Dossier →
Component: f-secure_online_scanner

Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via...

📅 2017-08-02
CVSS 7.8 Dossier →
Component: software_updater

F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file...

📅 2017-03-11
CVSS 8.1 Dossier →
CVE-2014-2844 UNKNOWN
Component: secure_messaging_secure_gateway

Cross-site scripting (XSS) vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to in...

📅 2014-04-18
CVSS 3.5 Dossier →
CVE-2013-7369 UNKNOWN
Component: anti-virus

SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Ant...

📅 2014-04-18
CVSS 7.5 Dossier →
CVE-2012-6646 UNKNOWN
Component: anti-virus

F-Secure Anti-Virus, Safe Anywhere, and PSB Workstation Security before 11500 for Mac OS X allows local users to disable the Mac OS X firewall via uns...

📅 2014-04-18
CVSS 2.1 Dossier →
CVE-2010-5161 UNKNOWN
Component: f-secure_internet_security_2010

Race condition in F-Secure Internet Security 2010 10.00 build 246 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute da...

📅 2012-08-25
CVSS 6.2 Dossier →
CVE-2010-3499 UNKNOWN
Component: anti-virus

F-Secure Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for ...

📅 2012-08-22
CVSS 6.4 Dossier →
CVE-2011-1103 UNKNOWN
Component: policy_manager

The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before h...

📅 2011-02-25
CVSS 5.0 Dossier →
CVE-2011-1102 UNKNOWN
Component: policy_manager

Cross-site scripting (XSS) vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Wind...

📅 2011-02-25
CVSS 4.3 Dossier →
CVE-2011-0453 UNKNOWN
Component: internet_gatekeeper

F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtai...

📅 2011-02-18
CVSS 5.0 Dossier →
CVE-2010-1425 UNKNOWN
Component: anti-virus

F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier; Internet Gatekeepe...

📅 2010-04-15
CVSS 5.0 Dossier →
Page 3 of 5 (101 Total Records)