symantec Vulnerability Advisory Catalog

Total 518 security vulnerabilities recorded for symantec software and firmware.

← Back to All Vendors
CVE-2012-4349 UNKNOWN
Component: network_access_control

Unquoted Windows search path vulnerability in Symantec Network Access Control (SNAC) 12.1 before RU2 allows local users to gain privileges via unspeci...

📅 2012-12-11
CVSS 7.2 Dossier →
CVE-2012-4347 UNKNOWN
Component: messaging_gateway

Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to r...

📅 2012-12-05
CVSS 5.0 Dossier →
CVE-2012-4953 UNKNOWN
Component: antivirus

The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corpora...

📅 2012-11-14
CVSS 9.3 Dossier →
CVE-2012-0306 UNKNOWN
Component: ghost_solutions_suite

Symantec Ghost Solution Suite 2.x through 2.5.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via...

📅 2012-10-18
CVSS 6.8 Dossier →
CVE-2012-3582 UNKNOWN
Component: pgp_universal_server

Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote atta...

📅 2012-09-04
CVSS 2.9 Dossier →
CVE-2012-3581 UNKNOWN
Component: messaging_gateway

Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers to obtain potentially sensitive information about component versions via unspecif...

📅 2012-08-29
CVSS 3.3 Dossier →
CVE-2012-3580 UNKNOWN
Component: messaging_gateway

Symantec Messaging Gateway (SMG) before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management in...

📅 2012-08-29
CVSS 7.7 Dossier →
CVE-2012-3579 UNKNOWN
Component: messaging_gateway

Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain p...

📅 2012-08-29
CVSS 7.9 Dossier →
CVE-2012-0308 UNKNOWN
Component: messaging_gateway

Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers to hijack the authentication o...

📅 2012-08-29
CVSS 6.8 Dossier →
CVE-2012-0307 UNKNOWN
Component: messaging_gateway

Multiple cross-site scripting (XSS) vulnerabilities in Symantec Messaging Gateway (SMG) before 10.0 allow remote attackers to inject arbitrary web scr...

📅 2012-08-29
CVSS 4.3 Dossier →
CVE-2010-5168 UNKNOWN
Component: norton_internet_security_2010

Race condition in Symantec Norton Internet Security 2010 17.5.0.127 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute ...

📅 2012-08-25
CVSS 6.2 Dossier →
CVE-2010-3497 UNKNOWN
Component: norton_antivirus

Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it ...

📅 2012-08-22
CVSS 6.4 Dossier →
CVE-2012-4178 UNKNOWN
Component: web_gateway

SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL...

📅 2012-08-07
CVSS 7.5 Dossier →
CVE-2012-2977 UNKNOWN
Component: web_gateway

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted input to an app...

📅 2012-07-23
CVSS 5.0 Dossier →
CVE-2012-2976 UNKNOWN
Component: web_gateway

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to ...

📅 2012-07-23
CVSS 10.0 Dossier →
CVE-2012-2961 UNKNOWN
Component: web_gateway

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL c...

📅 2012-07-23
CVSS 7.5 Dossier →
CVE-2012-2957 UNKNOWN
Component: web_gateway

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file incl...

📅 2012-07-23
CVSS 7.2 Dossier →
CVE-2012-2953 UNKNOWN
Component: web_gateway

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to applic...

📅 2012-07-23
CVSS 10.0 Dossier →
CVE-2012-2574 UNKNOWN
Component: web_gateway

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL c...

📅 2012-07-23
CVSS 7.5 Dossier →
CVE-2012-0305 UNKNOWN
Component: backupexec_system_recovery

Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to ...

📅 2012-07-23
CVSS 4.4 Dossier →
CVE-2012-0303 UNKNOWN
Component: message_filter

Multiple cross-site request forgery (CSRF) vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijac...

📅 2012-07-05
CVSS 6.8 Dossier →
CVE-2012-0302 UNKNOWN
Component: message_filter

Cross-site scripting (XSS) vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to inject arbitrary web s...

📅 2012-07-05
CVSS 4.3 Dossier →
CVE-2012-0301 UNKNOWN
Component: message_filter

Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions via unspecif...

📅 2012-07-05
CVSS 5.4 Dossier →
CVE-2012-0300 UNKNOWN
Component: message_filter

Brightmail Control Center in Symantec Message Filter 6.3 does not properly restrict establishment of sessions to the listening port, which allows remo...

📅 2012-07-05
CVSS 3.3 Dossier →
Page 11 of 22 (518 Total Records)