cve-2020-11177 vulnerabilities and exploits

(subscribe to this query)

4.6

CVSSv2

A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects: Bitdefender Antivirus Free versions prior to 1.0.17....

Bitdefender Antivirus 2020

3.6

CVSSv2

A vulnerability in the improper handling of symbolic links in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects Bitdefender Antivirus Free versions prior to 1.0.17.178....

Bitdefender Antivirus 20206 Github repositories available

9.3

CVSSv2

An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to load an arbitrary DLL file from the search path....

Bitdefender Antivirus 20205 Articles available

5

CVSSv2

In the Voatz application 2020-01-01 for Android, the amount of data transmitted during a single voter's vote depends on the different lengths of the metadata across the available voting choices, which makes it easier for remote attackers to discover this voter's choice...

Voatz Voatz 2020-01-01

7.5

CVSSv2

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely....

Rubetek Smarthome Firmware 2020

4.3

CVSSv2

An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the user and admin accounts can be taken over in a DOM-Based XSS attack....

Topmanage Olk Webstore 2020

2.1

CVSSv2

Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension where an attacker could supply a kernel pointer and leak several bytes of memory. An attacker must first obtain the ability to execute high-privileged code on the target system in...

Trendmicro Antivirus 2019 Trendmicro Antivirus 2020

4.4

CVSSv2

An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69....

Bitdefender Total Security 2020

4.9

CVSSv2

A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an attacker to to trigger a denial of service on the affected device....

Bitdefender Total Security 2020

10

CVSSv2

Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors....

Symantec Client Security 3.0 Symantec Client Security 3.0.2.2010 Symantec Client Security 3.0.2.2020 Symantec Client Security 3.1 Symantec Client Security 3.1.394 Symantec Client Security 3.1.400 Symantec Norton Antivirus 10.0 Symantec Norton Antivirus 10.0.2.2010 Symantec Norton Antivirus 10.0.2.2020 Symantec Norton Antivirus 10.0.2.2021 Symantec Norton Antivirus 10.1 Symantec Norton Antivirus 10.1.4001 EDB exploit available1 Metasploit module available1 Github repository available

« PREV 1 2 3 4 5 6 7 8 NEXT »