Kaspersky Lab vulnerabilities
74 vulnerabilities
Known vulnerabilities in Kaspersky Lab products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 24 products.
Products
24- Kaspersky Anti Virus26 vulnerabilities
- Ultravnc16 vulnerabilities
- Kaspersky Internet Security10 vulnerabilities
- Kraftway6 vulnerabilities
- Eltex ESP 2005 vulnerabilities
- Kaspersky Anti Virus Personal5 vulnerabilities
- Zipato Zipabox Smart Home Controller3 vulnerabilities
- Codesys V3 Products2 vulnerabilities
- Kaspersky Anti Hacker2 vulnerabilities
- Kaspersky Anti Spam2 vulnerabilities
- Kaspersky Anti Virus Personal Pro2 vulnerabilities
- Kaspersky Antivirus Engine2 vulnerabilities
- Kaspersky Lab Kaspersky Internet Security For Android 11.12.4.16222 vulnerabilities
- Invision Power Board1 vulnerabilities
- Kaspersky Anti Virus 20091 vulnerabilities
- Kaspersky Anti Virus 20101 vulnerabilities
- Kaspersky Anti Virus 5.5 For Check Point Firewall1 vulnerabilities
- Kaspersky Internet Security 20091 vulnerabilities
- Kaspersky Internet Security 20101 vulnerabilities
- Kaspersky Internet Security Suite1 vulnerabilities
- Kaspersky Password Manager1 vulnerabilities
- Kaspersky Personal Security Suite1 vulnerabilities
- Online Scanner1 vulnerabilities
- Vanilla Forums1 vulnerabilities
CVE-2018-20025codesyscontrol_for_beaglebone_sl+15
EPSS score2.56%
Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.CVE-2018-20026codesyscontrol_for_beaglebone_sl+18EPSS score3.04%
Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.CVE-2018-15357eltexesp-200_firmware+1EPSS score1.10%
An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0.CVE-2018-15124kaspersky labzipato zipabox smart home controller+1EPSS score1.07%
Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root access on the device.CVE-2018-15354kaspersky labkraftway+1EPSS score2.10%
A Buffer Overflow exploited through web interface by remote attacker can cause denial of service in Kraftway 24F2XG Router firmware 3.5.30.1118.CVE-2018-15359eltexesp-200_firmware+1EPSS score1.62%
An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware version 1.2.0.CVE-2018-15355kaspersky labkraftway+1EPSS score0.79%
Usage of SSLv2 and SSLv3 leads to transmitted data decryption in Kraftway 24F2XG Router firmware 3.5.30.1118.CVE-2018-15352kaspersky labkraftway+1EPSS score1.38%
An attacker with low privileges can cause denial of service in Kraftway 24F2XG Router firmware version 3.5.30.1118.CVE-2018-15358eltexesp-200_firmware+1EPSS score1.33%
An authenticated attacker with low privileges can activate high privileged user and use it to expand attack surface in Eltex ESP-200 firmware version 1.2.0.CVE-2018-15123kaspersky labzipato zipabox smart home controller+1EPSS score2.44%
Insecure configuration storage in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows remote attacker perform new attack vectors and take under control device and smart home.CVE-2018-15350kaspersky labkraftway+1EPSS score4.70%
Router Default Credentials in Kraftway 24F2XG Router firmware version 3.5.30.1118 allow remote attackers to get privileged access to the router.CVE-2018-15351kaspersky labkraftway+1EPSS score2.04%
Denial of service via crafting malicious link and sending it to a privileged user can cause Denial of Service in Kraftway 24F2XG Router firmware version 3.5.30.1118.CVE-2018-15353kaspersky labkraftway+1EPSS score7.74%
A Buffer Overflow exploited through web interface by remote attacker can cause remote code execution in Kraftway 24F2XG Router firmware 3.5.30.1118.CVE-2018-15360eltexesp-200_firmware+1EPSS score1.60%
An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0.CVE-2018-15356eltexesp-200_firmware+1EPSS score2.52%
An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0.CVE-2018-15125kaspersky labzipato zipabox smart home controller+1EPSS score1.53%
Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive information that expands attack surface.CVE-2018-6306kaspersky labkaspersky password manager+1EPSS score2.60%
Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538.CVE-2003-1443kaspersky_labkaspersky_anti-virusEPSS score0.48%
Kaspersky Antivirus (KAV) 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which allows local users to bypass virus protection, as demonstrated using aux.vbs and aux.com.CVE-2003-1444kaspersky_labkaspersky_anti-virusEPSS score0.40%
Kaspersky Antivirus (KAV) 4.0.9.0 allows local users to cause a denial of service (CPU consumption or crash) and prevent malicious code from being detected via a file with a long pathname.CVE-2007-1880kaspersky_labkaspersky_anti-virus+1EPSS score0.42%
Integer overflow in the _NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File Server 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows context-dependent attackers to execute arbitrary code via a large, unsigned "data size argument," which results in a heap overflow.