Skip to content
Noroxi

panda records

24 published records for vendor panda.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
8
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    24 records
    • CVE-2007-3026
      40Plan

      Integer overflow in Panda Software AdminSecure allows remote attackers to execute arbitrary code via crafted packets with modified length va

      CriticalCVSS 9.3No exploitEPSS 9%

      panda · adminsecureJul 25, 2007

    • CVE-2008-3155
      39Monitor

      Stack-based buffer overflow in the ActiveX control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to cause a deni

      CriticalCVSS 9.3Proof of conceptEPSS 8%

      panda · panda activescanJul 11, 2008

    • CVE-2009-3735
      39Monitor

      The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads soft

      CriticalCVSS 9.3No exploitEPSS 6%

      panda · panda activescanFeb 11, 2010

    • CVE-2007-3969
      39Monitor

      Buffer overflow in Panda Antivirus before 20070720 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from

      CriticalCVSS 9.3No exploitEPSS 6%

      panda · panda antivirusJul 25, 2007

    • CVE-2008-3156
      38Monitor

      The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary c

      CriticalCVSS 9.3Proof of conceptEPSS 4%

      panda · panda activescanJul 11, 2008

    • CVE-2005-3922
      32Monitor

      Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted

      HighCVSS 7.5No exploitEPSS 6%

      panda · panda activescanNov 30, 2005

    • CVE-2007-1673
      32Monitor

      unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loo

      HighCVSS 7.8No exploitEPSS 3%

      amavis · amavisMay 8, 2007

    • CVE-2007-1670
      32Monitor

      Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a diren

      HighCVSS 7.8No exploitEPSS 3%

      panda · panda activescanMay 8, 2007

    • CVE-2004-1904
      31Monitor

      Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property fo

      HighCVSS 7.5Proof of conceptEPSS 5%

      panda · activescanDec 31, 2004

    • CVE-2008-1471
      28Monitor

      The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system c

      HighCVSS 7.2Proof of conceptEPSS 1%

      panda · panda antivirus and firewallMar 24, 2008

    • CVE-2000-0541
      28Monitor

      The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command.

      HighCVSS 7.2No exploitEPSS 1%

      panda · panda antivirusJun 17, 2000

    • CVE-2006-4657
      28Monitor

      Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with

      HighCVSS 7.2No exploitEPSS 0%

      panda · panda platinum internet securitySep 8, 2006

    • CVE-2007-4191
      27Monitor

      Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users t

      MediumCVSS 6.9Proof of conceptEPSS 1%

      panda · panda antivirusAug 7, 2007

    • CVE-2006-5966
      26Monitor

      Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to (1) reboot the system using the Reinicializar method

      MediumCVSS 6.4No exploitEPSS 2%

      panda · activescanNov 17, 2006

    • CVE-2006-5967
      21Monitor

      Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execut

      MediumCVSS 5.1No exploitEPSS 2%

      panda · activescanNov 17, 2006

    • CVE-2006-4658
      21Monitor

      Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if

      MediumCVSS 5.0No exploitEPSS 2%

      panda · panda platinum internet securitySep 8, 2006

    • CVE-2006-4659
      21Monitor

      The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, whic

      MediumCVSS 5.0No exploitEPSS 2%

      panda · panda platinum internet securitySep 8, 2006

    • CVE-2005-3230
      21Monitor

      Multiple interpretation error in unspecified versions of Panda Antivirus allows remote attackers to bypass virus detection via a malicious e

      MediumCVSS 5.1No exploitEPSS 2%

      panda · activescanOct 14, 2005

    • CVE-2004-1905
      21Monitor

      ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service (crash) by calling the SetSitesFile function.

      MediumCVSS 5.0No exploitEPSS 2%

      panda · activescanDec 31, 2004

    • CVE-2005-3380
      20Monitor

      Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML,

      MediumCVSS 5.0No exploitEPSS 1%

      panda · titanium 2005Oct 30, 2005

    • CVE-2001-1149
      20Monitor

      Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selects an action for a ma

      MediumCVSS 5.0No exploitEPSS 1%

      panda · panda antivirus platinumAug 21, 2001

    • CVE-2006-4295
      18Monitor

      Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script o

      MediumCVSS 4.3Proof of conceptEPSS 2%

      panda · panda activescanAug 22, 2006

    • CVE-2000-0265
      18Monitor

      Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet.

      MediumCVSS 4.6No exploitEPSS 0%

      panda · panda securityApr 17, 2000

    • CVE-2000-0264
      8Monitor

      Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or

      LowCVSS 2.1Proof of conceptEPSS 1%

      panda · panda securityApr 17, 2000