symantec Vulnerability Advisory Catalog

Total 518 security vulnerabilities recorded for symantec software and firmware.

← Back to All Vendors
CVE-2015-5691 UNKNOWN
Component: web_gateway

Multiple cross-site scripting (XSS) vulnerabilities in PHP scripts in the management console on Symantec Web Gateway (SWG) appliances with software be...

📅 2015-09-20
CVSS 4.3 Dossier →
CVE-2015-5690 UNKNOWN
Component: web_gateway

The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to bypass i...

📅 2015-09-20
CVSS 8.5 Dossier →
CVE-2015-5689 UNKNOWN
Component: deployment_solution

ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution (DS) before...

📅 2015-09-20
CVSS 6.8 Dossier →
CVE-2014-9229 UNKNOWN
Component: endpoint_protection

Multiple SQL injection vulnerabilities in interface PHP scripts in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allow rem...

📅 2015-09-20
CVSS 6.5 Dossier →
CVE-2014-9228 UNKNOWN
Component: endpoint_protection

sysplant.sys in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allows local users to cause a denial of service (blocked sys...

📅 2015-09-20
CVSS 4.9 Dossier →
CVE-2014-9227 UNKNOWN
Component: endpoint_protection

Multiple untrusted search path vulnerabilities in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allow local users to gain ...

📅 2015-09-20
CVSS 4.4 Dossier →
CVE-2015-1492 UNKNOWN
Component: endpoint_protection_manager

Untrusted search path vulnerability in the client in Symantec Endpoint Protection 12.1 before 12.1-RU6-MP1 allows local users to gain privileges via a...

📅 2015-08-01
CVSS 8.5 Dossier →
CVE-2015-1491 UNKNOWN
Component: endpoint_protection_manager

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authentica...

📅 2015-08-01
CVSS 6.0 Dossier →
CVE-2015-1490 UNKNOWN
Component: endpoint_protection_manager

Directory traversal vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote auth...

📅 2015-08-01
CVSS 5.5 Dossier →
CVE-2015-1489 UNKNOWN
Component: endpoint_protection_manager

The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges vi...

📅 2015-08-01
CVSS 8.5 Dossier →
CVE-2015-1488 UNKNOWN
Component: endpoint_protection_manager

An unspecified action handler in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenti...

📅 2015-08-01
CVSS 4.0 Dossier →
CVE-2015-1487 UNKNOWN
Component: endpoint_protection_manager

The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary...

📅 2015-08-01
CVSS 5.5 Dossier →
CVE-2015-1486 UNKNOWN
Component: endpoint_protection_manager

The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a ...

📅 2015-08-01
CVSS 7.5 Dossier →
CVE-2015-1485 UNKNOWN
Component: data_loss_prevention

Cross-site request forgery (CSRF) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5...

📅 2015-06-28
CVSS 6.8 Dossier →
CVE-2014-9230 UNKNOWN
Component: data_loss_prevention

Cross-site scripting (XSS) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allo...

📅 2015-06-28
CVSS 4.3 Dossier →
CVE-2015-1484 UNKNOWN
Component: workspace_streaming

Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming (SWS) 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppM...

📅 2015-04-22
CVSS 6.9 Dossier →
CVE-2015-1483 UNKNOWN
Component: netbackup_opscenter

Symantec NetBackup OpsCenter 7.6.0.2 through 7.6.1 on Linux and UNIX allows remote attackers to execute arbitrary JavaScript code via unspecified vect...

📅 2015-03-06
CVSS 7.5 Dossier →
CVE-2014-7288 UNKNOWN
Component: encryption_management_server

Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell c...

📅 2015-02-01
CVSS 9.0 Dossier →
CVE-2014-7287 UNKNOWN
Component: encryption_management_server

The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to trigger uni...

📅 2015-02-01
CVSS 5.0 Dossier →
CVE-2014-7286 UNKNOWN
Component: deployment_solution

Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via uns...

📅 2014-12-22
CVSS 7.2 Dossier →
CVE-2014-7285 UNKNOWN
Component: web_gateway

The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by ...

📅 2014-12-17
CVSS 6.5 Dossier →
CVE-2014-3439 UNKNOWN
Component: endpoint_protection_manager

ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vect...

📅 2014-11-07
CVSS 6.1 Dossier →
CVE-2014-3438 UNKNOWN
Component: endpoint_protection_manager

Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allow ...

📅 2014-11-07
CVSS 4.3 Dossier →
CVE-2014-3437 UNKNOWN
Component: endpoint_protection_manager

The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requ...

📅 2014-11-07
CVSS 7.5 Dossier →
Page 8 of 22 (518 Total Records)