escanav records
28 published records for vendor escanav.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 4
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer6
- CWE-20 Improper Input Validation4
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')3
- CWE-266 Incorrect Privilege Assignment2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
28 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2018-18388No exploit | eScan Agent Application (MWAGENT.EXE) 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local attackers to execute arbitrary cescanav · escan anti-virus | Critical9.8 | — | 1.5% | Dec 20, 2018 |
39Monitor | CVE-2023-33730Proof of concept | Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remotescanav · escan management console · CWE-319 | Critical9.8 | — | 1.1% | May 31, 2023 |
39Monitor | CVE-2024-42919Proof of concept | eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.escanav · escan management console · CWE-284 | Critical9.8 | — | 0.9% | Aug 20, 2024 |
38Monitor | CVE-2025-0798No exploit | MicroWorld eScan Antivirus Quarantine rtscanner os command injectionescanav · escan anti-virus · CWE-77 | Critical9.2 | — | 7.2% | Jan 28, 2025 |
37Monitor | CVE-2023-31703Proof of concept | Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker tescanav · escan management console · CWE-79 | Critical9.0 | — | 4.4% | May 17, 2023 |
36Monitor | CVE-2021-26624No exploit | eScan Anti-Virus Local privilege escalation Vulnerabilityescanav · escan anti-virus · CWE-20 | High8.8 | — | 2.4% | Apr 1, 2022 |
31Monitor | CVE-2018-6203No exploit | In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unescanav · anti-virus · CWE-20 | High7.8 | — | 0.3% | Jan 25, 2018 |
31Monitor | CVE-2018-6202No exploit | In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unescanav · anti-virus · CWE-20 | High7.8 | — | 0.3% | Jan 25, 2018 |
31Monitor | CVE-2018-6201No exploit | In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unescanav · anti-virus · CWE-20 | High7.8 | — | 0.3% | Jan 25, 2018 |
31Monitor | CVE-2023-4383No exploit | MicroWorld eScan Anti-Virus runasroot incorrect execution-assigned permissionsescanav · escan anti-virus · CWE-279 | High7.8 | — | 0.3% | Aug 16, 2023 |
29Monitor | CVE-2023-31702Proof of concept | SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database escanav · escan management console · CWE-89 | High7.2 | — | 4.3% | May 17, 2023 |
24Monitor | CVE-2023-33732Proof of concept | Cross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attackeescanav · escan management console · CWE-79 | Medium6.1 | — | 0.8% | May 31, 2023 |
24Monitor | CVE-2023-33731Proof of concept | Reflected Cross Site Scripting (XSS) in the view dashboard detail feature in Microworld Technologies eScan management console 14.0.1400.2281escanav · escan management console · CWE-79 | Medium6.1 | — | 0.8% | Jun 2, 2023 |
22Monitor | CVE-2023-2875No exploit | eScan Antivirus IoControlCode PROCOBSRVESX.SYS 0x22E008u null pointer dereferenceescanav · escan anti-virus · CWE-476 | Medium5.5 | — | 0.3% | May 24, 2023 |
22Monitor | CVE-2018-10098No exploit | In MicroWorld eScan Internet Security Suite (ISS) for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send escanav · escan internet security suite · CWE-119 | Medium5.5 | — | 0.2% | Jul 13, 2018 |
21Monitor | CVE-2023-34837Proof of concept | A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to executescanav · escan management console · CWE-79 | Medium5.4 | — | 0.8% | Jun 27, 2023 |
21Monitor | CVE-2023-34836Proof of concept | A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to executescanav · escan management console · CWE-79 | Medium5.4 | — | 0.8% | Jun 27, 2023 |
21Monitor | CVE-2023-34838Proof of concept | A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to executescanav · escan management console · CWE-79 | Medium5.4 | — | 0.8% | Jun 27, 2023 |
21Monitor | CVE-2023-34835Proof of concept | A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to executescanav · escan management console · CWE-79 | Medium5.4 | — | 0.7% | Jun 27, 2023 |
20Monitor | CVE-2025-1370No exploit | MicroWorld eScan Antivirus Autoscan USB epsdaemon sprintf os command injectionescanav · escan anti-virus · CWE-77 | Medium4.8 | — | 2.3% | Feb 16, 2025 |
19Monitor | CVE-2025-1364No exploit | MicroWord eScan Antivirus USB Protection Service passPrompt stack-based overflowescanav · escan anti-virus · CWE-119 | Medium4.8 | — | 0.3% | Feb 16, 2025 |
19Monitor | CVE-2025-1367No exploit | MicroWord eScan Antivirus USB Password sprintf buffer overflowescanav · escan anti-virus · CWE-119 | Medium4.8 | — | 0.3% | Feb 16, 2025 |
19Monitor | CVE-2025-1366No exploit | MicroWord eScan Antivirus VirusPopUp strcpy stack-based overflowescanav · escan anti-virus · CWE-119 | Medium4.8 | — | 0.3% | Feb 16, 2025 |
19Monitor | CVE-2025-0797No exploit | MicroWorld eScan Antivirus Quarantine Microworld default permissionescanav · escan anti-virus · CWE-266 | Medium4.8 | — | 0.3% | Jan 28, 2025 |
19Monitor | CVE-2024-13188No exploit | MicroWorld eScan Antivirus Installation var default permissionescanav · escan anti-virus · CWE-266 | Medium4.8 | — | 0.2% | Jan 8, 2025 |
- CVE-2018-1838839Monitor
eScan Agent Application (MWAGENT.EXE) 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local attackers to execute arbitrary c
CriticalCVSS 9.8No exploitEPSS 1%escanav · escan anti-virusDec 20, 2018
- CVE-2023-3373039Monitor
Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remot
CriticalCVSS 9.8Proof of conceptEPSS 1%escanav · escan management consoleMay 31, 2023
- CVE-2024-4291939Monitor
eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.
CriticalCVSS 9.8Proof of conceptEPSS 0%escanav · escan management consoleAug 20, 2024
- CVE-2025-079838Monitor
MicroWorld eScan Antivirus Quarantine rtscanner os command injection
CriticalCVSS 9.2No exploitEPSS 7%escanav · escan anti-virusJan 28, 2025
- CVE-2023-3170337Monitor
Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker t
CriticalCVSS 9.0Proof of conceptEPSS 4%escanav · escan management consoleMay 17, 2023
- CVE-2021-2662436Monitor
eScan Anti-Virus Local privilege escalation Vulnerability
HighCVSS 8.8No exploitEPSS 2%escanav · escan anti-virusApr 1, 2022
- CVE-2018-620331Monitor
In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have un
HighCVSS 7.8No exploitEPSS 0%escanav · anti-virusJan 25, 2018
- CVE-2018-620231Monitor
In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have un
HighCVSS 7.8No exploitEPSS 0%escanav · anti-virusJan 25, 2018
- CVE-2018-620131Monitor
In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have un
HighCVSS 7.8No exploitEPSS 0%escanav · anti-virusJan 25, 2018
- CVE-2023-438331Monitor
MicroWorld eScan Anti-Virus runasroot incorrect execution-assigned permissions
HighCVSS 7.8No exploitEPSS 0%escanav · escan anti-virusAug 16, 2023
- CVE-2023-3170229Monitor
SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database
HighCVSS 7.2Proof of conceptEPSS 4%escanav · escan management consoleMay 17, 2023
- CVE-2023-3373224Monitor
Cross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacke
MediumCVSS 6.1Proof of conceptEPSS 0%escanav · escan management consoleMay 31, 2023
- CVE-2023-3373124Monitor
Reflected Cross Site Scripting (XSS) in the view dashboard detail feature in Microworld Technologies eScan management console 14.0.1400.2281
MediumCVSS 6.1Proof of conceptEPSS 0%escanav · escan management consoleJun 2, 2023
- CVE-2023-287522Monitor
eScan Antivirus IoControlCode PROCOBSRVESX.SYS 0x22E008u null pointer dereference
MediumCVSS 5.5No exploitEPSS 0%escanav · escan anti-virusMay 24, 2023
- CVE-2018-1009822Monitor
In MicroWorld eScan Internet Security Suite (ISS) for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send
MediumCVSS 5.5No exploitEPSS 0%escanav · escan internet security suiteJul 13, 2018
- CVE-2023-3483721Monitor
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execut
MediumCVSS 5.4Proof of conceptEPSS 0%escanav · escan management consoleJun 27, 2023
- CVE-2023-3483621Monitor
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execut
MediumCVSS 5.4Proof of conceptEPSS 0%escanav · escan management consoleJun 27, 2023
- CVE-2023-3483821Monitor
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execut
MediumCVSS 5.4Proof of conceptEPSS 0%escanav · escan management consoleJun 27, 2023
- CVE-2023-3483521Monitor
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execut
MediumCVSS 5.4Proof of conceptEPSS 0%escanav · escan management consoleJun 27, 2023
- CVE-2025-137020Monitor
MicroWorld eScan Antivirus Autoscan USB epsdaemon sprintf os command injection
MediumCVSS 4.8No exploitEPSS 2%escanav · escan anti-virusFeb 16, 2025
- CVE-2025-136419Monitor
MicroWord eScan Antivirus USB Protection Service passPrompt stack-based overflow
MediumCVSS 4.8No exploitEPSS 0%escanav · escan anti-virusFeb 16, 2025
- CVE-2025-136719Monitor
MicroWord eScan Antivirus USB Password sprintf buffer overflow
MediumCVSS 4.8No exploitEPSS 0%escanav · escan anti-virusFeb 16, 2025
- CVE-2025-136619Monitor
MicroWord eScan Antivirus VirusPopUp strcpy stack-based overflow
MediumCVSS 4.8No exploitEPSS 0%escanav · escan anti-virusFeb 16, 2025
- CVE-2025-079719Monitor
MicroWorld eScan Antivirus Quarantine Microworld default permission
MediumCVSS 4.8No exploitEPSS 0%escanav · escan anti-virusJan 28, 2025
- CVE-2024-1318819Monitor
MicroWorld eScan Antivirus Installation var default permission
MediumCVSS 4.8No exploitEPSS 0%escanav · escan anti-virusJan 8, 2025