symantec Vulnerability Advisory Catalog

Total 518 security vulnerabilities recorded for symantec software and firmware.

← Back to All Vendors
Component: mail_security_for_microsoft_exchange

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Syman...

📅 2016-06-30
CVSS 8.4 Dossier →
Component: endpoint_protection_manager

Race condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows local users to bypass intended restrictions on USB file ...

📅 2016-06-30
CVSS 2.9 Dossier →
CVE-2016-2208 CRITICAL
Component: anti-virus_engine

The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a denia...

📅 2016-05-19
CVSS 9.1 Dossier →
Component: endpoint_encryption

Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11.x before 11.1.1 allows local users to gain privilege...

📅 2016-05-14
CVSS 7.8 Dossier →
Component: messaging_gateway

The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted ...

📅 2016-04-22
CVSS 8.2 Dossier →
Component: messaging_gateway

The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by ...

📅 2016-04-22
CVSS 7.8 Dossier →
CVE-2016-2202 MEDIUM
Component: altiris_it_management_suite

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite (ITMS) through 7.6 HF7 allows local use...

📅 2016-04-20
CVSS 5.5 Dossier →
Component: endpoint_protection_manager

The SysPlant.sys driver in the Application and Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6-MP4 ...

📅 2016-03-18
CVSS 8.8 Dossier →
Component: endpoint_protection_manager

SQL injection vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to execute arbitrary ...

📅 2016-03-18
CVSS 8.8 Dossier →
Component: endpoint_protection_manager

Cross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users t...

📅 2016-03-18
CVSS 8.0 Dossier →
CVE-2015-8151 CRITICAL
Component: encryption_management_server

Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging consol...

📅 2016-02-18
CVSS 9.1 Dossier →
Component: encryption_management_server

Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows local users to obtain root access by modifying a batch file....

📅 2016-02-18
CVSS 7.8 Dossier →
Component: encryption_management_server

The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to cause a denial of service (heap memory c...

📅 2016-02-18
CVSS 7.5 Dossier →
Component: encryption_management_server

The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sensitive information about admin...

📅 2016-02-18
CVSS 7.5 Dossier →
CVE-2015-6556 UNKNOWN
Component: endpoint_encryption

EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption (SEE) before 11.1.0 allows remote authenticated users to ...

📅 2015-12-18
CVSS 2.3 Dossier →
CVE-2015-4334 UNKNOWN
Component: proxysg_firmware

The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forwards authentication challenges ...

📅 2015-12-07
CVSS 5.0 Dossier →
CVE-2015-8113 UNKNOWN
Component: endpoint_protection

Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12.1 before 12.1-RU6-MP3 allows local users to gain privileges...

📅 2015-11-12
CVSS 7.2 Dossier →
CVE-2015-6555 UNKNOWN
Component: endpoint_protection_manager

Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary Java code by connecting to the conso...

📅 2015-11-12
CVSS 8.5 Dossier →
CVE-2015-6554 UNKNOWN
Component: endpoint_protection_manager

Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary OS commands via crafted data....

📅 2015-11-12
CVSS 7.5 Dossier →
CVE-2015-6549 UNKNOWN
Component: netbackup_opscenter

Cross-site scripting (XSS) vulnerability in an application console in the server in Symantec NetBackup OpsCenter before 7.7.1 allows remote authentica...

📅 2015-10-06
CVSS 3.5 Dossier →
CVE-2015-6548 UNKNOWN
Component: web_gateway

Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 D...

📅 2015-09-20
CVSS 5.8 Dossier →
CVE-2015-6547 UNKNOWN
Component: web_gateway

The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute ...

📅 2015-09-20
CVSS 8.3 Dossier →
CVE-2015-5693 UNKNOWN
Component: web_gateway

The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute ...

📅 2015-09-20
CVSS 7.9 Dossier →
CVE-2015-5692 UNKNOWN
Component: web_gateway

admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authentic...

📅 2015-09-20
CVSS 7.9 Dossier →
Page 7 of 22 (518 Total Records)