Skip to content
Noroxi

escanav records

28 published records for vendor escanav.

All records

28 records
  • eScan Agent Application (MWAGENT.EXE) 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local attackers to execute arbitrary c

    CriticalCVSS 9.8No exploitEPSS 1%

    escanav · escan anti-virusDec 20, 2018

  • Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remot

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    escanav · escan management consoleMay 31, 2023

  • eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    escanav · escan management consoleAug 20, 2024

  • CVE-2025-0798
    38Monitor

    MicroWorld eScan Antivirus Quarantine rtscanner os command injection

    CriticalCVSS 9.2No exploitEPSS 7%

    escanav · escan anti-virusJan 28, 2025

  • Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker t

    CriticalCVSS 9.0Proof of conceptEPSS 4%

    escanav · escan management consoleMay 17, 2023

  • eScan Anti-Virus Local privilege escalation Vulnerability

    HighCVSS 8.8No exploitEPSS 2%

    escanav · escan anti-virusApr 1, 2022

  • CVE-2018-6203
    31Monitor

    In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have un

    HighCVSS 7.8No exploitEPSS 0%

    escanav · anti-virusJan 25, 2018

  • CVE-2018-6202
    31Monitor

    In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have un

    HighCVSS 7.8No exploitEPSS 0%

    escanav · anti-virusJan 25, 2018

  • CVE-2018-6201
    31Monitor

    In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have un

    HighCVSS 7.8No exploitEPSS 0%

    escanav · anti-virusJan 25, 2018

  • CVE-2023-4383
    31Monitor

    MicroWorld eScan Anti-Virus runasroot incorrect execution-assigned permissions

    HighCVSS 7.8No exploitEPSS 0%

    escanav · escan anti-virusAug 16, 2023

  • SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database

    HighCVSS 7.2Proof of conceptEPSS 4%

    escanav · escan management consoleMay 17, 2023

  • Cross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacke

    MediumCVSS 6.1Proof of conceptEPSS 0%

    escanav · escan management consoleMay 31, 2023

  • Reflected Cross Site Scripting (XSS) in the view dashboard detail feature in Microworld Technologies eScan management console 14.0.1400.2281

    MediumCVSS 6.1Proof of conceptEPSS 0%

    escanav · escan management consoleJun 2, 2023

  • CVE-2023-2875
    22Monitor

    eScan Antivirus IoControlCode PROCOBSRVESX.SYS 0x22E008u null pointer dereference

    MediumCVSS 5.5No exploitEPSS 0%

    escanav · escan anti-virusMay 24, 2023

  • In MicroWorld eScan Internet Security Suite (ISS) for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send

    MediumCVSS 5.5No exploitEPSS 0%

    escanav · escan internet security suiteJul 13, 2018

  • A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execut

    MediumCVSS 5.4Proof of conceptEPSS 0%

    escanav · escan management consoleJun 27, 2023

  • A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execut

    MediumCVSS 5.4Proof of conceptEPSS 0%

    escanav · escan management consoleJun 27, 2023

  • A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execut

    MediumCVSS 5.4Proof of conceptEPSS 0%

    escanav · escan management consoleJun 27, 2023

  • A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execut

    MediumCVSS 5.4Proof of conceptEPSS 0%

    escanav · escan management consoleJun 27, 2023

  • CVE-2025-1370
    20Monitor

    MicroWorld eScan Antivirus Autoscan USB epsdaemon sprintf os command injection

    MediumCVSS 4.8No exploitEPSS 2%

    escanav · escan anti-virusFeb 16, 2025

  • CVE-2025-1364
    19Monitor

    MicroWord eScan Antivirus USB Protection Service passPrompt stack-based overflow

    MediumCVSS 4.8No exploitEPSS 0%

    escanav · escan anti-virusFeb 16, 2025

  • CVE-2025-1367
    19Monitor

    MicroWord eScan Antivirus USB Password sprintf buffer overflow

    MediumCVSS 4.8No exploitEPSS 0%

    escanav · escan anti-virusFeb 16, 2025

  • CVE-2025-1366
    19Monitor

    MicroWord eScan Antivirus VirusPopUp strcpy stack-based overflow

    MediumCVSS 4.8No exploitEPSS 0%

    escanav · escan anti-virusFeb 16, 2025

  • CVE-2025-0797
    19Monitor

    MicroWorld eScan Antivirus Quarantine Microworld default permission

    MediumCVSS 4.8No exploitEPSS 0%

    escanav · escan anti-virusJan 28, 2025

  • MicroWorld eScan Antivirus Installation var default permission

    MediumCVSS 4.8No exploitEPSS 0%

    escanav · escan anti-virusJan 8, 2025