pandasecurity vulnerabilities and exploits

(subscribe to this query)

Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products prior to 18.07.03 allow malicious users to queue an event (as an encrypted JSON string) to the system service AgentSvc.exe, w...

Pandasecurity Panda Antivirus Pandasecurity Panda Antivirus Pro Pandasecurity Panda Dome Pandasecurity Panda Global Protection Pandasecurity Panda Gold Protection Pandasecurity Panda Internet Security

1 Github repository

Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.

Pandasecurity Panda Antivirus 2010 Pandasecurity Panda Global Protection 2010 Pandasecurity Panda Internet Security 2010

Unspecified vulnerability in Panda Gold Protection and Global Protection 2014 7.01.01 and previous versions, Internet Security 2014 19.01.01 and previous versions, and AV Pro 2014 13.01.01 and previous versions allows local users to gain privileges via unspecified vectors.

Pandasecurity Panda Av Pro 2014 13.01.01 Pandasecurity Panda Global Protection 2014 7.01.01 Pandasecurity Panda Gold Protection 7.01.01 Pandasecurity Panda Internet Security 2014 19.01.01

Heap-based buffer overflow in the PavTPK.sys kernel mode driver of Panda Security 2014 products before hft131306s24_r1 allows local users to gain privileges via a crafted argument to a 0x222008 IOCTL call.

Pandasecurity Panda Av Pro 2014 13.01.01 Pandasecurity Panda Global Protection 2014 7.01.01 Pandasecurity Panda Internet Security 2014 19.01.01

DLL hijacking in Panda Agent <=1.16.11 in Panda Security, S.L.U. Panda Adaptive Defense 360 <= 8.0.17 allows malicious user to escalate privileges via maliciously crafted DLL file.

Pandasecurity Panda Adaptive Defense 360 Pandasecurity Panda Devices Agent

Panda Antivirus 9.0.0.4, when Internet Explorer 6 or 7 is used, allows remote malicious users to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt ex...

Pandasecurity Panda Antivirus 9.0.0.4

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local malicious users to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the ta...

Pandasecurity Panda Dome 22.02.01

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local malicious users to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the ta...

Pandasecurity Panda Dome 22.02.01

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local malicious users to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the ta...

Pandasecurity Panda Dome 22.02.01

Panda Security Dome VPN DLL Hijacking Local Privilege Escalation Vulnerability. This vulnerability allows local malicious users to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the...

Pandasecurity Panda Dome 22.02.01

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook