Skip to content
Noroxi

Kaspersky records

62 published records for vendor kaspersky.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
3.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

62 records
  • CVE-2012-1456
    47Plan

    The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.

    MediumCVSS 4.3No exploitEPSS 99%

    avg · avg anti-virusMar 21, 2012

  • CVE-2012-1459
    47Plan

    The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8

    MediumCVSS 4.3No exploitEPSS 99%

    ahnlab · v3 internet securityMar 21, 2012

  • CVE-2012-1446
    47Plan

    The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Syman

    MediumCVSS 4.3No exploitEPSS 99%

    ca · etrust vet antivirusMar 21, 2012

  • CVE-2012-1443
    47Plan

    The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010

    MediumCVSS 4.3No exploitEPSS 99%

    cat · quick healMar 21, 2012

  • CVE-2012-1442
    47Plan

    The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwas

    MediumCVSS 4.3No exploitEPSS 98%

    cat · quick healMar 21, 2012

  • CVE-2012-1457
    46Plan

    The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.

    MediumCVSS 4.3No exploitEPSS 98%

    anti-virus · vba32Mar 21, 2012

  • CVE-2012-1462
    46Plan

    The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft

    MediumCVSS 4.3No exploitEPSS 97%

    ahnlab · v3 internet securityMar 21, 2012

  • CVE-2012-1453
    46Plan

    The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Tre

    MediumCVSS 4.3No exploitEPSS 97%

    ca · etrust vet antivirusMar 21, 2012

  • CVE-2012-1420
    46Plan

    The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.

    MediumCVSS 4.3No exploitEPSS 97%

    cat · quick healMar 21, 2012

  • CVE-2012-1425
    45Plan

    The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1

    MediumCVSS 4.3No exploitEPSS 93%

    antiy · avl sdkMar 21, 2012

  • CVE-2012-1461
    45Plan

    The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Ant

    MediumCVSS 4.3No exploitEPSS 91%

    anti-virus · vba32Mar 21, 2012

  • CVE-2017-9811
    42Plan

    The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critic

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    kaspersky · anti-virus for linux serverJul 17, 2017

  • CVE-2001-0789
    42Plan

    Format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail allows remote attackers to cause a denial of service or pos

    CriticalCVSS 10.0No exploitEPSS 7%

    kaspersky · kaspersky anti-virusOct 18, 2001

  • CVE-2018-6289
    41Plan

    Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1.

    CriticalCVSS 9.8No exploitEPSS 6%

    kaspersky · secure mail gatewayFeb 6, 2018

  • CVE-2009-3177
    41Plan

    Unspecified vulnerability in Kaspersky Online Scanner 7.0 has unknown impact and attack vectors, as demonstrated by a certain module in Vuln

    CriticalCVSS 10.0No exploitEPSS 2%

    kaspersky · kaspersky anti-virus scannerSep 11, 2009

  • CVE-2022-27534
    40Plan

    Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a

    CriticalCVSS 9.8No exploitEPSS 3%

    kaspersky · anti-virusApr 1, 2022

  • CVE-2020-36199
    40Plan

    TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several p

    CriticalCVSS 9.8No exploitEPSS 2%

    kaspersky · tinycheckJan 26, 2021

  • CVE-2017-12816
    39Monitor

    In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used b

    CriticalCVSS 9.8No exploitEPSS 1%

    kaspersky · internet securityAug 25, 2017

  • CVE-2020-35929
    39Monitor

    In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of

    CriticalCVSS 9.8No exploitEPSS 1%

    kaspersky · tinycheckJan 19, 2021

  • CVE-2019-8285
    36Monitor

    Kaspersky Lab Antivirus Engine version before 04.apr.2019 has a heap-based buffer overflow vulnerability that potentially allow arbitrary co

    HighCVSS 8.8No exploitEPSS 4%

    kaspersky · antivirus engineMay 8, 2019

  • CVE-2017-9810
    36Monitor

    There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Crit

    HighCVSS 8.8Proof of conceptEPSS 1%

    kaspersky · anti-virus for linux serverJul 17, 2017

  • CVE-2018-6288
    35Monitor

    Cross-site Request Forgery leading to Administrative account takeover in Kaspersky Secure Mail Gateway version 1.1.

    HighCVSS 8.8No exploitEPSS 0%

    kaspersky · secure mail gatewayFeb 6, 2018

  • CVE-2024-1619
    35Monitor

    Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server.

    HighCVSS 8.8No exploitEPSS 0%

    kaspersky · securityFeb 29, 2024

  • CVE-2017-9812
    33Monitor

    The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server

    HighCVSS 7.5Proof of conceptEPSS 11%

    kaspersky · anti-virus for linux serverJul 17, 2017

  • CVE-2018-6306
    32Monitor

    Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538.

    HighCVSS 7.8No exploitEPSS 2%

    kaspersky · password managerApr 19, 2018