Записи Kaspersky
62 опубликованных записей вендора kaspersky.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 3
- С записью об исправлении
- 3,2 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-264 Permissions, Privileges, and Access Controls12
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor4
- CWE-20 Improper Input Validation4
- CWE-284 Improper Access Control3
- CWE-427 Uncontrolled Search Path Element2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
62 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
47В плане | CVE-2012-1456Эксплойта нет | The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.avg · avg anti-virus · CWE-264 | Средняя4,3 | — | 99,9 % | 21 мар. 2012 г. |
47В плане | CVE-2012-1459Эксплойта нет | The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8ahnlab · v3 internet security · CWE-264 | Средняя4,3 | — | 99,8 % | 21 мар. 2012 г. |
47В плане | CVE-2012-1446Эксплойта нет | The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symanca · etrust vet antivirus · CWE-264 | Средняя4,3 | — | 99,7 % | 21 мар. 2012 г. |
47В плане | CVE-2012-1443Эксплойта нет | The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010cat · quick heal · CWE-264 | Средняя4,3 | — | 99,6 % | 21 мар. 2012 г. |
47В плане | CVE-2012-1442Эксплойта нет | The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwascat · quick heal · CWE-264 | Средняя4,3 | — | 98,9 % | 21 мар. 2012 г. |
46В плане | CVE-2012-1457Эксплойта нет | The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.anti-virus · vba32 · CWE-264 | Средняя4,3 | — | 98,3 % | 21 мар. 2012 г. |
46В плане | CVE-2012-1462Эксплойта нет | The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoftahnlab · v3 internet security · CWE-264 | Средняя4,3 | — | 97,8 % | 21 мар. 2012 г. |
46В плане | CVE-2012-1453Эксплойта нет | The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Treca · etrust vet antivirus · CWE-264 | Средняя4,3 | — | 97,7 % | 21 мар. 2012 г. |
46В плане | CVE-2012-1420Эксплойта нет | The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.cat · quick heal · CWE-264 | Средняя4,3 | — | 97,1 % | 21 мар. 2012 г. |
45В плане | CVE-2012-1425Эксплойта нет | The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1antiy · avl sdk · CWE-264 | Средняя4,3 | — | 93,1 % | 21 мар. 2012 г. |
45В плане | CVE-2012-1461Эксплойта нет | The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Antanti-virus · vba32 · CWE-264 | Средняя4,3 | — | 91,7 % | 21 мар. 2012 г. |
42В плане | CVE-2017-9811Proof of concept | The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critickaspersky · anti-virus for linux server · CWE-20 | Критическая9,8 | — | 10,4 % | 17 июл. 2017 г. |
42В плане | CVE-2001-0789Эксплойта нет | Format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail allows remote attackers to cause a denial of service or poskaspersky · kaspersky anti-virus | Критическая10,0 | — | 7,2 % | 18 окт. 2001 г. |
41В плане | CVE-2018-6289Эксплойта нет | Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1.kaspersky · secure mail gateway · CWE-74 | Критическая9,8 | — | 6,5 % | 6 февр. 2018 г. |
41В плане | CVE-2009-3177Эксплойта нет | Unspecified vulnerability in Kaspersky Online Scanner 7.0 has unknown impact and attack vectors, as demonstrated by a certain module in Vulnkaspersky · kaspersky anti-virus scanner | Критическая10,0 | — | 2,0 % | 11 сент. 2009 г. |
40В плане | CVE-2022-27534Эксплойта нет | Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in akaspersky · anti-virus | Критическая9,8 | — | 3,1 % | 1 апр. 2022 г. |
40В плане | CVE-2020-36199Эксплойта нет | TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several pkaspersky · tinycheck · CWE-20 | Критическая9,8 | — | 2,2 % | 26 янв. 2021 г. |
39Наблюдать | CVE-2017-12816Эксплойта нет | In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used bkaspersky · internet security · CWE-732 | Критическая9,8 | — | 1,5 % | 25 авг. 2017 г. |
39Наблюдать | CVE-2020-35929Эксплойта нет | In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part ofkaspersky · tinycheck · CWE-798 | Критическая9,8 | — | 1,0 % | 19 янв. 2021 г. |
36Наблюдать | CVE-2019-8285Эксплойта нет | Kaspersky Lab Antivirus Engine version before 04.apr.2019 has a heap-based buffer overflow vulnerability that potentially allow arbitrary cokaspersky · antivirus engine · CWE-787 | Высокая8,8 | — | 4,3 % | 8 мая 2019 г. |
36Наблюдать | CVE-2017-9810Proof of concept | There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critkaspersky · anti-virus for linux server · CWE-352 | Высокая8,8 | — | 1,9 % | 17 июл. 2017 г. |
35Наблюдать | CVE-2018-6288Эксплойта нет | Cross-site Request Forgery leading to Administrative account takeover in Kaspersky Secure Mail Gateway version 1.1.kaspersky · secure mail gateway · CWE-352 | Высокая8,8 | — | 0,6 % | 6 февр. 2018 г. |
35Наблюдать | CVE-2024-1619Эксплойта нет | Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server.kaspersky · security · CWE-74 | Высокая8,8 | — | 0,3 % | 29 февр. 2024 г. |
33Наблюдать | CVE-2017-9812Proof of concept | The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Serverkaspersky · anti-virus for linux server · CWE-200 | Высокая7,5 | — | 11,2 % | 17 июл. 2017 г. |
32Наблюдать | CVE-2018-6306Эксплойта нет | Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538.kaspersky · password manager · CWE-426 | Высокая7,8 | — | 2,6 % | 19 апр. 2018 г. |
- CVE-2012-145647В плане
The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.
СредняяCVSS 4,3Эксплойта нетEPSS 99 %avg · avg anti-virus21 мар. 2012 г.
- CVE-2012-145947В плане
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8
СредняяCVSS 4,3Эксплойта нетEPSS 99 %ahnlab · v3 internet security21 мар. 2012 г.
- CVE-2012-144647В плане
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Syman
СредняяCVSS 4,3Эксплойта нетEPSS 99 %ca · etrust vet antivirus21 мар. 2012 г.
- CVE-2012-144347В плане
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010
СредняяCVSS 4,3Эксплойта нетEPSS 99 %cat · quick heal21 мар. 2012 г.
- CVE-2012-144247В плане
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwas
СредняяCVSS 4,3Эксплойта нетEPSS 98 %cat · quick heal21 мар. 2012 г.
- CVE-2012-145746В плане
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.
СредняяCVSS 4,3Эксплойта нетEPSS 98 %anti-virus · vba3221 мар. 2012 г.
- CVE-2012-146246В плане
The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft
СредняяCVSS 4,3Эксплойта нетEPSS 97 %ahnlab · v3 internet security21 мар. 2012 г.
- CVE-2012-145346В плане
The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Tre
СредняяCVSS 4,3Эксплойта нетEPSS 97 %ca · etrust vet antivirus21 мар. 2012 г.
- CVE-2012-142046В плане
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.
СредняяCVSS 4,3Эксплойта нетEPSS 97 %cat · quick heal21 мар. 2012 г.
- CVE-2012-142545В плане
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1
СредняяCVSS 4,3Эксплойта нетEPSS 93 %antiy · avl sdk21 мар. 2012 г.
- CVE-2012-146145В плане
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Ant
СредняяCVSS 4,3Эксплойта нетEPSS 91 %anti-virus · vba3221 мар. 2012 г.
- CVE-2017-981142В плане
The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critic
КритическаяCVSS 9,8Proof of conceptEPSS 10 %kaspersky · anti-virus for linux server17 июл. 2017 г.
- CVE-2001-078942В плане
Format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail allows remote attackers to cause a denial of service or pos
КритическаяCVSS 10,0Эксплойта нетEPSS 7 %kaspersky · kaspersky anti-virus18 окт. 2001 г.
- CVE-2018-628941В плане
Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1.
КритическаяCVSS 9,8Эксплойта нетEPSS 6 %kaspersky · secure mail gateway6 февр. 2018 г.
- CVE-2009-317741В плане
Unspecified vulnerability in Kaspersky Online Scanner 7.0 has unknown impact and attack vectors, as demonstrated by a certain module in Vuln
КритическаяCVSS 10,0Эксплойта нетEPSS 2 %kaspersky · kaspersky anti-virus scanner11 сент. 2009 г.
- CVE-2022-2753440В плане
Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %kaspersky · anti-virus1 апр. 2022 г.
- CVE-2020-3619940В плане
TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several p
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %kaspersky · tinycheck26 янв. 2021 г.
- CVE-2017-1281639Наблюдать
In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used b
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %kaspersky · internet security25 авг. 2017 г.
- CVE-2020-3592939Наблюдать
In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %kaspersky · tinycheck19 янв. 2021 г.
- CVE-2019-828536Наблюдать
Kaspersky Lab Antivirus Engine version before 04.apr.2019 has a heap-based buffer overflow vulnerability that potentially allow arbitrary co
ВысокаяCVSS 8,8Эксплойта нетEPSS 4 %kaspersky · antivirus engine8 мая 2019 г.
- CVE-2017-981036Наблюдать
There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Crit
ВысокаяCVSS 8,8Proof of conceptEPSS 1 %kaspersky · anti-virus for linux server17 июл. 2017 г.
- CVE-2018-628835Наблюдать
Cross-site Request Forgery leading to Administrative account takeover in Kaspersky Secure Mail Gateway version 1.1.
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %kaspersky · secure mail gateway6 февр. 2018 г.
- CVE-2024-161935Наблюдать
Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server.
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %kaspersky · security29 февр. 2024 г.
- CVE-2017-981233Наблюдать
The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server
ВысокаяCVSS 7,5Proof of conceptEPSS 11 %kaspersky · anti-virus for linux server17 июл. 2017 г.
- CVE-2018-630632Наблюдать
Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538.
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %kaspersky · password manager19 апр. 2018 г.