symantec Vulnerability Advisory Catalog

Total 518 security vulnerabilities recorded for symantec software and firmware.

← Back to All Vendors
Component: reporter

The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated ...

📅 2019-01-24
CVSS 7.2 Dossier →
Component: norton_app_lock

Norton App Lock prior to 1.4.0.445 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent ...

📅 2019-01-24
CVSS 6.2 Dossier →
Component: norton_password_manager

Norton Password Manager for Android (formerly Norton Identity Safe) may be susceptible to a cross site scripting (XSS) exploit, which is a type of iss...

📅 2018-12-06
CVSS 6.1 Dossier →
Component: endpoint_protection

Symantec Endpoint Protection prior to 14.2 MP1 may be susceptible to a DLL Preloading vulnerability, which in this case is an issue that can occur whe...

📅 2018-11-29
CVSS 7.8 Dossier →
Component: endpoint_protection

Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE...

📅 2018-11-29
CVSS 6.8 Dossier →
Component: endpoint_protection

Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE...

📅 2018-11-29
CVSS 7.8 Dossier →
Component: security_analytics

The Symantec Security Analytics (SA) 7.x prior to 7.3.4 Web UI is susceptible to a reflected cross-site scripting (XSS) vulnerability. A remote attack...

📅 2018-11-27
CVSS 6.1 Dossier →
Component: web_isolation

Symantec Web Isolation (WI) 1.11 prior to 1.11.21 is susceptible to a reflected cross-site scripting (XSS) vulnerability. A remote attacker can target...

📅 2018-10-22
CVSS 6.1 Dossier →
Component: messaging_gateway

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to a XML external entity (XXE) exploit, which is a type of issue where XML i...

📅 2018-09-19
CVSS 8.8 Dossier →
CVE-2018-12242 CRITICAL
Component: messaging_gateway

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow...

📅 2018-09-19
CVSS 9.8 Dossier →
Component: norton_password_manager

The Norton Identity Safe product prior to 5.3.0.976 may be susceptible to a privilege escalation issue via a hard coded IV, which is a type of vulnera...

📅 2018-08-29
CVSS 5.9 Dossier →
Component: norton_power_eraser

Norton Power Eraser (prior to 5.3.0.24) and SymDiag (prior to 2.1.242) may be susceptible to a DLL Preloading vulnerability, which is a type of issue ...

📅 2018-08-22
CVSS 7.8 Dossier →
CVE-2018-5235 MEDIUM
Component: norton_utilities

Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an applicatio...

📅 2018-08-22
CVSS 6.0 Dossier →
Component: encryption_management_server

The Symantec Encryption Management Server (SEMS) product, prior to version 3.4.2 MP1, may be susceptible to a denial of service (DoS) exploit. A DoS a...

📅 2018-08-20
CVSS 7.5 Dossier →
Component: inventory

The Inventory Plugin for Symantec Management Agent prior to 7.6 POST HF7, 8.0 POST HF6, or 8.1 RU7 may be susceptible to a privilege escalation vulner...

📅 2018-07-25
CVSS 8.0 Dossier →
CVE-2018-5239 MEDIUM
Component: norton_app_lock

Norton App Lock prior to v1.3.0.332 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent...

📅 2018-07-16
CVSS 6.2 Dossier →
Component: endpoint_protection

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of iss...

📅 2018-06-20
CVSS 8.8 Dossier →
CVE-2018-5236 MEDIUM
Component: endpoint_protection

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard). This type of issue occurs i...

📅 2018-06-20
CVSS 5.3 Dossier →
CVE-2018-5242 MEDIUM
Component: norton_app_lock

Norton App Lock prior to version 1.3.0.329 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to cir...

📅 2018-06-13
CVSS 6.2 Dossier →
Component: norton_core_firmware

The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arb...

📅 2018-04-30
CVSS 8.0 Dossier →
Component: management_console

The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0_POST_HF6, and ITMS 7.6_POST_HF7 has an issue whereby XML input containing a reference ...

📅 2018-04-16
CVSS 8.0 Dossier →
Component: endpoint_protection

Symantec Endpoint Protection clients place detected malware in quarantine as part of the intended product functionality. The quarantine logs can be ex...

📅 2018-04-16
CVSS 7.8 Dossier →
Component: endpoint_protection

A version of the SymEvent Driver that shipped with Symantec Endpoint Protection 12.1 RU6 MP6 and earlier fails to properly sanitize logged-in user inp...

📅 2018-04-16
CVSS 7.0 Dossier →
Component: norton_app_lock

The Norton App Lock prior to version 1.3.0.13 can be susceptible to an authentication bypass exploit. In this type of circumstance, the exploit can al...

📅 2018-03-26
CVSS 6.7 Dossier →
Page 4 of 22 (518 Total Records)