symantec Vulnerability Advisory Catalog

Total 518 security vulnerabilities recorded for symantec software and firmware.

← Back to All Vendors
CVE-2014-3436 UNKNOWN
Component: pgp_desktop

Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of ser...

📅 2014-08-22
CVSS 5.0 Dossier →
CVE-2014-3434 UNKNOWN
Component: endpoint_protection

Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business Edition bef...

📅 2014-08-06
CVSS 6.9 Dossier →
CVE-2014-3433 UNKNOWN
Component: data_insight

Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject a...

📅 2014-06-27
CVSS 4.3 Dossier →
CVE-2014-3432 UNKNOWN
Component: data_insight

Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject a...

📅 2014-06-27
CVSS 4.3 Dossier →
CVE-2014-3431 UNKNOWN
Component: encryption_desktop

Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, ...

📅 2014-06-21
CVSS 4.3 Dossier →
CVE-2014-1652 UNKNOWN
Component: web_gateway

Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 allow remote authenticated user...

📅 2014-06-18
CVSS 2.3 Dossier →
CVE-2014-1651 UNKNOWN
Component: web_gateway

SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway (SWG) before 5.2 allows remote attackers to execute ...

📅 2014-06-18
CVSS 5.8 Dossier →
CVE-2014-1650 UNKNOWN
Component: web_gateway

SQL injection vulnerability in user.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote authenticated users to exec...

📅 2014-06-18
CVSS 5.2 Dossier →
CVE-2013-5017 CRITICAL
Component: web_gateway

SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote attackers to execute arbitrary commands via unspecif...

📅 2014-06-18
CVSS 9.8 Dossier →
CVE-2014-1649 UNKNOWN
Component: workspace_streaming

The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a crafted XMLRP...

📅 2014-05-16
CVSS 7.9 Dossier →
CVE-2014-1647 UNKNOWN
Component: pgp_desktop

Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, whic...

📅 2014-04-23
CVSS 2.6 Dossier →
CVE-2014-1646 UNKNOWN
Component: encryption_desktop

Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory copies, which a...

📅 2014-04-23
CVSS 2.6 Dossier →
CVE-2014-1648 UNKNOWN
Component: messaging_gateway

Cross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management console in Symantec Messaging Gate...

📅 2014-04-23
CVSS 4.3 Dossier →
CVE-2014-1645 UNKNOWN
Component: liveupdate_administrator

SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote atta...

📅 2014-03-29
CVSS 7.5 Dossier →
CVE-2014-1644 UNKNOWN
Component: liveupdate_administrator

The forgotten-password feature in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote a...

📅 2014-03-29
CVSS 7.5 Dossier →
CVE-2013-5015 UNKNOWN
Component: endpoint_protection_manager

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4...

📅 2014-02-14
CVSS 6.5 Dossier →
CVE-2013-5014 UNKNOWN
Component: endpoint_protection_manager

The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protecti...

📅 2014-02-14
CVSS 7.5 Dossier →
CVE-2013-5013 UNKNOWN
Component: web_gateway

Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote atta...

📅 2014-02-11
CVSS 4.3 Dossier →
CVE-2013-5012 UNKNOWN
Component: web_gateway

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote authenticated use...

📅 2014-02-11
CVSS 6.5 Dossier →
CVE-2014-1643 UNKNOWN
Component: encryption_management_server

The Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users ...

📅 2014-02-07
CVSS 4.0 Dossier →
CVE-2013-5011 UNKNOWN
Component: endpoint_protection

Unquoted Windows search path vulnerability in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and End...

📅 2014-01-10
CVSS 7.2 Dossier →
CVE-2013-5010 UNKNOWN
Component: endpoint_protection

The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and...

📅 2014-01-10
CVSS 4.6 Dossier →
CVE-2013-5009 UNKNOWN
Component: endpoint_protection

The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Ed...

📅 2014-01-10
CVSS 7.4 Dossier →
CVE-2013-5008 UNKNOWN
Component: management_platform

The agent and task-agent components in Symantec Management Platform 7.0 and 7.1 before 7.1 SP2 Mp1.1v7 rollup, as used in certain Altiris products, us...

📅 2013-10-10
CVSS 4.6 Dossier →
Page 9 of 22 (518 Total Records)