CveMateVulnerability intelligence

Symantec vulnerabilities, page 5

569 vulnerabilities

Known vulnerabilities in Symantec products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 261 products.

CVE-2015-5692symantecweb_gateway11y ago20-09-2015 20:00

admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary code by uploading a file with a safe extension and content type, and then leveraging an improper Sudo configuration to make this a setuid-root file.CVE-2015-6556symantecendpoint_encryption10y ago18-12-2015 11:00

EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption (SEE) before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump.CVE-2015-6548symantecweb_gateway11y ago20-09-2015 20:00

Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.CVE-2015-6549symantecnetbackup_opscenter11y ago03-10-2015 10:00

Cross-site scripting (XSS) vulnerability in an application console in the server in Symantec NetBackup OpsCenter before 7.7.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.CVE-2015-6547symantecweb_gateway11y ago20-09-2015 20:00

The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands at boot time via unspecified vectors.CVE-2015-6555symantecendpoint_protection_manager10y ago12-11-2015 02:00

Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary Java code by connecting to the console Java port.CVE-2015-6554symantecendpoint_protection_manager10y ago12-11-2015 02:00

Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary OS commands via crafted data.CVE-2015-8149symantecencryption_management_server10y ago18-02-2016 22:00

The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to cause a denial of service (heap memory corruption and service outage) via crafted requests.CVE-2015-8151symantecencryption_management_server10y ago18-02-2016 22:00

Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access.CVE-2015-8148symantecencryption_management_server10y ago18-02-2016 22:00

The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request.CVE-2015-8801symantecendpoint_protection_manager10y ago30-06-2016 23:00

Race condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the SEP device manager recognizes a new USB device.CVE-2015-8113symantecendpoint_protection10y ago12-11-2015 02:00

Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install package. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1492.CVE-2015-8152symantecendpoint_protection_manager10y ago18-03-2016 14:00

Cross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script.CVE-2015-8154symantecendpoint_protection_manager10y ago18-03-2016 14:00

The SysPlant.sys driver in the Application and Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6-MP4 allows remote attackers to execute arbitrary code via a crafted HTML document, related to "RWX Permissions."CVE-2015-8153symantecendpoint_protection_manager10y ago18-03-2016 14:00

SQL injection vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.CVE-2015-8156symantecendpoint_encryption10y ago14-05-2016 01:00

Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11.x before 11.1.1 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.CVE-2015-8150symantecencryption_management_server10y ago18-02-2016 22:00

Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows local users to obtain root access by modifying a batch file.CVE-2007-2514centennialdiscovery+219y ago06-06-2007 10:00

Stack-based buffer overflow in XferWan.exe as used in multiple products including (1) Symantec Discovery 6.5, (2) Numara Asset Manager 8.0, and (3) Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a long request. NOTE: this might be a reservation duplicate of CVE-2007-1173.CVE-2007-2896symantecenterprise_security_manager19y ago30-05-2007 01:00

Race condition in the Symantec Enterprise Security Manager (ESM) 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service (CPU consumption and application hang) via certain network scans to ESM ports.CVE-2007-2950centennialdiscovery+219y ago23-07-2007 16:00

Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2) Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges.