symantec Vulnerability Advisory Catalog

Total 518 security vulnerabilities recorded for symantec software and firmware.

← Back to All Vendors
CVE-2013-4679 UNKNOWN
Component: workspace_virtualization

Symantec Workspace Virtualization before 6.x before 6.4.1953.0, when a virtual application layer is configured, allows local users to gain privileges ...

📅 2013-08-05
CVSS 6.6 Dossier →
CVE-2013-4678 UNKNOWN
Component: backup_exec

The NDMP protocol implementation in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote authenticated users to obtain se...

📅 2013-08-05
CVSS 2.7 Dossier →
CVE-2013-4677 UNKNOWN
Component: backup_exec

Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions (Everyone: Read and Everyone: Change) for backup data files,...

📅 2013-08-05
CVSS 4.3 Dossier →
CVE-2013-4676 UNKNOWN
Component: backup_exec

Multiple cross-site scripting (XSS) vulnerabilities in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allow remote attackers to i...

📅 2013-08-05
CVSS 4.3 Dossier →
CVE-2013-4575 UNKNOWN
Component: backup_exec

Heap-based buffer overflow in the utility program in the Linux agent in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows rem...

📅 2013-08-05
CVSS 7.9 Dossier →
CVE-2013-1610 UNKNOWN
Component: encryption_desktop

Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before M...

📅 2013-08-05
CVSS 6.8 Dossier →
CVE-2013-4673 UNKNOWN
Component: web_gateway

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS authentication, which allows remote...

📅 2013-08-01
CVSS 5.8 Dossier →
CVE-2013-4672 UNKNOWN
Component: web_gateway

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an incorrect sudoers file, which allows local users to bypass inte...

📅 2013-08-01
CVSS 7.2 Dossier →
CVE-2013-4671 UNKNOWN
Component: web_gateway

Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authe...

📅 2013-08-01
CVSS 6.0 Dossier →
CVE-2013-4670 UNKNOWN
Component: web_gateway

Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote at...

📅 2013-08-01
CVSS 4.3 Dossier →
CVE-2013-1617 UNKNOWN
Component: web_gateway

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated a...

📅 2013-08-01
CVSS 7.4 Dossier →
CVE-2013-1616 UNKNOWN
Component: web_gateway

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a c...

📅 2013-08-01
CVSS 8.3 Dossier →
CVE-2013-4674 UNKNOWN
Component: encryption_management_server

Cross-site scripting (XSS) vulnerability in the Web Email Protection component in Symantec Encryption Management Server (formerly Symantec PGP Univers...

📅 2013-07-31
CVSS 4.3 Dossier →
CVE-2013-1615 UNKNOWN
Component: security_information_manager

The management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote att...

📅 2013-07-08
CVSS 2.9 Dossier →
CVE-2013-1614 UNKNOWN
Component: security_information_manager

Multiple cross-site scripting (XSS) vulnerabilities in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) a...

📅 2013-07-08
CVSS 4.3 Dossier →
CVE-2013-1613 UNKNOWN
Component: security_information_manager

SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x...

📅 2013-07-08
CVSS 4.7 Dossier →
CVE-2013-1612 UNKNOWN
Component: endpoint_protection_manager

Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec Endpoint Pro...

📅 2013-06-20
CVSS 7.9 Dossier →
CVE-2013-1611 UNKNOWN
Component: brightmail_gateway

Multiple cross-site scripting (XSS) vulnerabilities in administrative-interface pages in the management console in Symantec Brightmail Gateway 9.5.x a...

📅 2013-05-09
CVSS 3.5 Dossier →
Component: enterprise_vault_for_file_system_archiving

Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vault (EV) fo...

📅 2013-03-26
CVSS 7.8 Dossier →
CVE-2013-1608 UNKNOWN
Component: netbackup_appliance

Directory traversal vulnerability in the Management Console on the Symantec NetBackup (NBU) appliance 2.0.x allows remote attackers to read arbitrary ...

📅 2013-03-26
CVSS 6.7 Dossier →
CVE-2012-6533 UNKNOWN
Component: pgp_desktop

Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and Server 2003 allows local users ...

📅 2013-02-18
CVSS 4.4 Dossier →
CVE-2012-4351 UNKNOWN
Component: encryption_desktop

Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local users to gain privileges via a craf...

📅 2013-02-18
CVSS 6.9 Dossier →
CVE-2012-4350 UNKNOWN
Component: enterprise_security_manager

Multiple unquoted Windows search path vulnerabilities in the (1) Manager and (2) Agent components in Symantec Enterprise Security Manager (ESM) before...

📅 2012-12-18
CVSS 7.2 Dossier →
CVE-2012-4348 UNKNOWN
Component: endpoint_protection

The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business ...

📅 2012-12-18
CVSS 7.2 Dossier →
Page 10 of 22 (518 Total Records)