Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
anti-virus vulnerabilities and exploits
(subscribe to this query)
4.4
CVSSv2
CVE-2019-17093
An issue exists in Avast antivirus prior to 19.8 and AVG antivirus prior to 19.8. A DLL Preloading vulnerability allows an malicious user to implant %WINDIR%\system32\wbemcomn.dll, which is loaded into a protected-light process (PPL) and might bypass some of the self-defense mech...
Avg Anti-virus
Avast Antivirus
4.6
CVSSv2
CVE-2019-13355
In Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%\TotalDefense\Consumer\ISS\9\ used by ccschedulersvc.exe allows local malicious users to hijack dotnetproxy.exe, which leads to privilege escalation when the ccSchedulerSVC service runs ...
Totaldefense Anti-virus 9.0.0.773
4.6
CVSSv2
CVE-2019-13357
In Total Defense Anti-virus 9.0.0.773, resource acquisition from the untrusted search path C:\ used by caschelp.exe allows local malicious users to hijack ccGUIFrm.dll, which leads to code execution. SYSTEM-level code execution can be achieved when the ccSchedulerSVC service runs...
Totaldefense Anti-virus 9.0.0.773
4.6
CVSSv2
CVE-2019-13356
In Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%\TotalDefense\Consumer\ISS\9\bd\TDUpdate2\ used by AMRT.exe allows local malicious users to hijack bdcore.dll, which leads to privilege escalation when the AMRT service loads the DLL.
Totaldefense Anti-virus 9.0.0.773
6.8
CVSSv2
CVE-2019-13984
Directus 7 API prior to 2.3.0 does not validate uploaded files. Regardless of the file extension or MIME type, there is a direct link to each uploaded file, accessible by unauthenticated users, as demonstrated by the EICAR Anti-Virus Test File.
Rangerstudio Directus 7 Api
4.3
CVSSv2
CVE-2019-8286
Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpage (for example, via clicking phishing link). Vulnerability h...
Kaspersky Free Anti-virus
Kaspersky Anti-virus
Kaspersky Internet Security
Kaspersky Total Security
Kaspersky Small Office Security
6.8
CVSSv2
CVE-2019-11644
In the F-Secure installer in F-Secure SAFE for Windows prior to 17.6, F-Secure Internet Security prior to 17.6, F-Secure Anti-Virus prior to 17.6, F-Secure Client Security Standard and Premium prior to 14.10, F-Secure PSB Workstation Security prior to 12.01, and F-Secure Computer...
F-secure Computer Protection
F-secure Client Security
F-secure Internet Security
F-secure Safe
F-secure Psb Workstation Security
2.1
CVSSv2
CVE-2018-12572
Avast Free Antivirus before 19.1.2360 stores user credentials in memory upon login, which allows local users to obtain sensitive information by dumping AvastUI.exe application memory and parsing the data.
Avast Free Antivirus
7.2
CVSSv2
CVE-2018-20331
Local attackers can trigger a Kernel Pool Buffer Overflow in Antiy AVL ATool v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x...
Antiy Anti Virus Lab Atool 1.0.0.22
7.5
CVSSv2
CVE-2018-18388
eScan Agent Application (MWAGENT.EXE) 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local malicious users to execute arbitrary commands by sending a carefully crafted payload to TCP port 2222.
Escanav Escan Anti-virus 14.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700
CVE-2022-48689
CVE-2024-27956
CVE-2023-6363
SQL
NULL pointer dereference
CVE-2023-41830
CVE-2015-2051
arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »