Bitdefender kayıtları
bitdefender üreticisine ait 107 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 21
- Düzeltme kaydı olan
- %2,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-264 Permissions, Privileges, and Access Controls9
- CWE-295 Improper Certificate Validation7
- CWE-59 Improper Link Resolution Before File Access ('Link Following')6
- CWE-918 Server-Side Request Forgery (SSRF)6
- CWE-426 Untrusted Search Path5
- CWE-787 Out-of-bounds Write5
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWEBug bounty kapsamı
Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.
Tüm kayıtlar
107 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
47Planlayın | CVE-2012-1459İstismar yok | The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8ahnlab · v3 internet security · CWE-264 | Orta4,3 | — | %99,8 | 21 Mar 2012 |
47Planlayın | CVE-2012-1443İstismar yok | The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010cat · quick heal · CWE-264 | Orta4,3 | — | %99,6 | 21 Mar 2012 |
47Planlayın | CVE-2007-5775Kavram kanıtı | Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024.bitdefender · antivirus · CWE-94 | Kritik9,8 | — | %26,9 | 1 Kas 2007 |
46Planlayın | CVE-2012-1457İstismar yok | The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.anti-virus · vba32 · CWE-264 | Orta4,3 | — | %98,3 | 21 Mar 2012 |
46Planlayın | CVE-2012-1430İstismar yok | The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Ebitdefender · bitdefender · CWE-264 | Orta4,3 | — | %96,0 | 21 Mar 2012 |
46Planlayın | CVE-2012-1431İstismar yok | The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secbitdefender · bitdefender · CWE-264 | Orta4,3 | — | %96,0 | 21 Mar 2012 |
45Planlayın | CVE-2012-1463İstismar yok | The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5ahnlab · v3 internet security · CWE-264 | Orta4,3 | — | %94,2 | 21 Mar 2012 |
45Planlayın | CVE-2012-1461İstismar yok | The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Antanti-virus · vba32 · CWE-264 | Orta4,3 | — | %91,7 | 21 Mar 2012 |
41Planlayın | CVE-2021-3554İstismar yok | Improper Access Control vulnerability in the patchesUpdate APIbitdefender · endpoint security tools · CWE-284 | Kritik10,0 | — | %2,6 | 24 Kas 2021 |
40Planlayın | CVE-2008-5409Kavram kanıtı | Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Securitbitdefender · antivirus · CWE-119 | Kritik9,3 | — | %11,1 | 10 Ara 2008 |
40Planlayın | CVE-2018-8955İstismar yok | The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which albitdefender · gravityzone · CWE-347 | Kritik9,8 | — | %4,3 | 24 Eki 2018 |
40Planlayın | CVE-2019-17095İstismar yok | Bitdefender BOX 2 bootstrap download_image command injection vulnerabilitybitdefender · box 2 firmware · CWE-78 | Kritik9,8 | — | %4,2 | 27 Oca 2020 |
40Planlayın | CVE-2019-17096İstismar yok | Bitdefender BOX 2 bootstrap get_image_size command injection vulnerabilitybitdefender · box 2 firmware · CWE-78 | Kritik9,8 | — | %2,1 | 27 Oca 2020 |
39İzleyin | CVE-2014-5350Kavram kanıtı | Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files viabitdefender · gravityzone · CWE-22 | Orta5,0 | — | %63,9 | 19 Ağu 2014 |
39İzleyin | CVE-2007-6189Kavram kanıtı | A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remote attackers to execbitdefender · online anti-virus scanner · CWE-119 | Kritik9,3 | — | %8,1 | 29 Kas 2007 |
39İzleyin | CVE-2017-8931İstismar yok | Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors.bitdefender · gravityzone | Kritik9,8 | — | %1,5 | 30 Eki 2018 |
39İzleyin | CVE-2021-3823İstismar yok | Path traversal vulnerability in Bitdefender GravitZone Update Server in relay modebitdefender · gravityzone · CWE-22 | Kritik9,8 | — | %1,1 | 28 Eki 2021 |
39İzleyin | CVE-2022-2830İstismar yok | Deserialization of Untrusted Data in GravityZone Console On-Premise (VA-10573)bitdefender · gravityzone · CWE-502 | Kritik9,8 | — | %0,9 | 5 Eyl 2022 |
39İzleyin | CVE-2024-2224İstismar yok | Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466)bitdefender · endpoint security · CWE-22 | Kritik9,8 | — | %0,7 | 9 Nis 2024 |
39İzleyin | CVE-2024-2223İstismar yok | Incorrect Regular Expression in GravityZone Update Server (VA-11465)bitdefender · endpoint security · CWE-185 | Kritik9,8 | — | %0,5 | 9 Nis 2024 |
39İzleyin | CVE-2024-4177İstismar yok | Host whitelist parser issue in GravityZone Console On-Premise (VA-11554)bitdefender · gravityzone · CWE-116 | Kritik9,8 | — | %0,4 | 6 Haz 2024 |
38İzleyin | CVE-2025-2244İstismar yok | Insecure PHP deserialization issue in GravityZone Console (VA-12634)bitdefender · gravityzone · CWE-502 | Kritik9,5 | — | %1,1 | 4 Nis 2025 |
37İzleyin | CVE-2017-17408İstismar yok | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018.bitdefender · internet security 2018 · CWE-190 | Yüksek8,8 | — | %6,5 | 21 Ara 2017 |
37İzleyin | CVE-2024-13871İstismar yok | Unauthenticated Command Injection in Bitdefender BOX v1bitdefender · box firmware · CWE-77 | Kritik9,4 | — | %0,8 | 12 Mar 2025 |
37İzleyin | CVE-2025-1987İstismar yok | Stored XSS in Psono-Client via Malicious Vault Entry URLsesaqa · psono client · CWE-79 | Kritik9,3 | — | %0,6 | 21 Haz 2025 |
- CVE-2012-145947Planlayın
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8
OrtaCVSS 4,3İstismar yokEPSS %100ahnlab · v3 internet security21 Mar 2012
- CVE-2012-144347Planlayın
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010
OrtaCVSS 4,3İstismar yokEPSS %100cat · quick heal21 Mar 2012
- CVE-2007-577547Planlayın
Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024.
KritikCVSS 9,8Kavram kanıtıEPSS %27bitdefender · antivirus1 Kas 2007
- CVE-2012-145746Planlayın
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.
OrtaCVSS 4,3İstismar yokEPSS %98anti-virus · vba3221 Mar 2012
- CVE-2012-143046Planlayın
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning E
OrtaCVSS 4,3İstismar yokEPSS %96bitdefender · bitdefender21 Mar 2012
- CVE-2012-143146Planlayın
The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Sec
OrtaCVSS 4,3İstismar yokEPSS %96bitdefender · bitdefender21 Mar 2012
- CVE-2012-146345Planlayın
The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5
OrtaCVSS 4,3İstismar yokEPSS %94ahnlab · v3 internet security21 Mar 2012
- CVE-2012-146145Planlayın
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Ant
OrtaCVSS 4,3İstismar yokEPSS %92anti-virus · vba3221 Mar 2012
- CVE-2021-355441Planlayın
Improper Access Control vulnerability in the patchesUpdate API
KritikCVSS 10,0İstismar yokEPSS %3bitdefender · endpoint security tools24 Kas 2021
- CVE-2008-540940Planlayın
Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Securit
KritikCVSS 9,3Kavram kanıtıEPSS %11bitdefender · antivirus10 Ara 2008
- CVE-2018-895540Planlayın
The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which al
KritikCVSS 9,8İstismar yokEPSS %4bitdefender · gravityzone24 Eki 2018
- CVE-2019-1709540Planlayın
Bitdefender BOX 2 bootstrap download_image command injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %4bitdefender · box 2 firmware27 Oca 2020
- CVE-2019-1709640Planlayın
Bitdefender BOX 2 bootstrap get_image_size command injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %2bitdefender · box 2 firmware27 Oca 2020
- CVE-2014-535039İzleyin
Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via
OrtaCVSS 5,0Kavram kanıtıEPSS %64bitdefender · gravityzone19 Ağu 2014
- CVE-2007-618939İzleyin
A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remote attackers to exec
KritikCVSS 9,3Kavram kanıtıEPSS %8bitdefender · online anti-virus scanner29 Kas 2007
- CVE-2017-893139İzleyin
Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors.
KritikCVSS 9,8İstismar yokEPSS %2bitdefender · gravityzone30 Eki 2018
- CVE-2021-382339İzleyin
Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode
KritikCVSS 9,8İstismar yokEPSS %1bitdefender · gravityzone28 Eki 2021
- CVE-2022-283039İzleyin
Deserialization of Untrusted Data in GravityZone Console On-Premise (VA-10573)
KritikCVSS 9,8İstismar yokEPSS %1bitdefender · gravityzone5 Eyl 2022
- CVE-2024-222439İzleyin
Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466)
KritikCVSS 9,8İstismar yokEPSS %1bitdefender · endpoint security9 Nis 2024
- CVE-2024-222339İzleyin
Incorrect Regular Expression in GravityZone Update Server (VA-11465)
KritikCVSS 9,8İstismar yokEPSS %1bitdefender · endpoint security9 Nis 2024
- CVE-2024-417739İzleyin
Host whitelist parser issue in GravityZone Console On-Premise (VA-11554)
KritikCVSS 9,8İstismar yokEPSS %0bitdefender · gravityzone6 Haz 2024
- CVE-2025-224438İzleyin
Insecure PHP deserialization issue in GravityZone Console (VA-12634)
KritikCVSS 9,5İstismar yokEPSS %1bitdefender · gravityzone4 Nis 2025
- CVE-2017-1740837İzleyin
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018.
YüksekCVSS 8,8İstismar yokEPSS %6bitdefender · internet security 201821 Ara 2017
- CVE-2024-1387137İzleyin
Unauthenticated Command Injection in Bitdefender BOX v1
KritikCVSS 9,4İstismar yokEPSS %1bitdefender · box firmware12 Mar 2025
- CVE-2025-198737İzleyin
Stored XSS in Psono-Client via Malicious Vault Entry URLs
KritikCVSS 9,3İstismar yokEPSS %1esaqa · psono client21 Haz 2025