Skip to content
Noroxi

Symantec records

571 published records for vendor symantec.

Researcher profile

Entered KEV
1 · 0.2%
Weaponized
27 · 4.7%
Pre-auth RCE
96
With a fix record
0.9%
Median publish → KEV
1545 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

571 records
  • CVE-2017-6327
    76This week

    The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an ind

    HighCVSS 8.8KEVWeaponizedEPSS 36%

    symantec · message gatewayAug 11, 2017

  • CVE-2009-1429
    66This week

    The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec An

    CriticalCVSS 10.0WeaponizedEPSS 88%

    symantec · antivirusApr 29, 2009

  • CVE-2006-2630
    62This week

    Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown

    CriticalCVSS 10.0WeaponizedEPSS 74%

    symantec · client securityMay 27, 2006

  • CVE-2012-0297
    62This week

    The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote

    CriticalCVSS 10.0WeaponizedEPSS 73%

    symantec · web gatewayMay 21, 2012

  • CVE-2017-6326
    62This week

    The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain

    CriticalCVSS 10.0WeaponizedEPSS 73%

    symantec · messaging gatewayJun 26, 2017

  • CVE-2012-2953
    60This week

    The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input

    CriticalCVSS 10.0WeaponizedEPSS 67%

    symantec · web gatewayJul 23, 2012

  • CVE-2007-1689
    60This week

    Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows re

    CriticalCVSS 10.0WeaponizedEPSS 65%

    symantec · norton internet securityMay 16, 2007

  • CVE-2012-0299
    59Plan

    The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code

    CriticalCVSS 10.0WeaponizedEPSS 64%

    symantec · web gatewayMay 21, 2012

  • CVE-2009-1430
    54Plan

    Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used

    CriticalCVSS 9.3WeaponizedEPSS 55%

    symantec · antivirusApr 29, 2009

  • CVE-2007-6016
    52Plan

    Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the

    CriticalCVSS 9.3WeaponizedEPSS 50%

    symantec · backup exec for windows serverFeb 29, 2008

  • CVE-2011-3478
    52Plan

    The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7

    CriticalCVSS 10.0Proof of conceptEPSS 40%

    symantec · pcanywhereJan 25, 2012

  • CVE-2015-1486
    51Plan

    The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authenticat

    HighCVSS 7.5WeaponizedEPSS 68%

    symantec · endpoint protection managerJul 31, 2015

  • CVE-2009-3031
    51Plan

    Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSCo

    CriticalCVSS 9.3WeaponizedEPSS 45%

    symantec · altiris deployment solutionNov 3, 2009

  • CVE-2013-5014
    50Plan

    The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symante

    HighCVSS 7.5WeaponizedEPSS 68%

    symantec · endpoint protection managerFeb 14, 2014

  • CVE-2004-0363
    50Plan

    Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Securit

    HighCVSS 7.5WeaponizedEPSS 67%

    symantec · norton antispamApr 15, 2004

  • CVE-2009-3033
    49Plan

    Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web con

    CriticalCVSS 9.3WeaponizedEPSS 40%

    symantec · altiris deployment solutionNov 25, 2009

  • CVE-2008-4388
    48Plan

    The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly val

    CriticalCVSS 9.3WeaponizedEPSS 38%

    symantec · appstream clientJan 20, 2009

  • CVE-2012-1456
    47Plan

    The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.

    MediumCVSS 4.3No exploitEPSS 100%

    avg · avg anti-virusMar 21, 2012

  • CVE-2012-1459
    47Plan

    The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8

    MediumCVSS 4.3No exploitEPSS 100%

    ahnlab · v3 internet securityMar 21, 2012

  • CVE-2012-1446
    47Plan

    The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Syman

    MediumCVSS 4.3No exploitEPSS 100%

    ca · etrust vet antivirusMar 21, 2012

  • CVE-2012-1443
    47Plan

    The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010

    MediumCVSS 4.3No exploitEPSS 100%

    cat · quick healMar 21, 2012

  • CVE-2016-2211
    47Plan

    The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6

    HighCVSS 7.8No exploitEPSS 53%

    symantec · mail security for microsoft exchangeJun 30, 2016

  • CVE-2010-0111
    47Plan

    HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as

    CriticalCVSS 9.3WeaponizedEPSS 35%

    symantec · antivirusJan 31, 2011

  • CVE-2012-1457
    46Plan

    The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.

    MediumCVSS 4.3No exploitEPSS 98%

    anti-virus · vba32Mar 21, 2012

  • CVE-2012-1462
    46Plan

    The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft

    MediumCVSS 4.3No exploitEPSS 98%

    ahnlab · v3 internet securityMar 21, 2012