Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 75.6%.
Buffer Overflow
Microsoft
Norton Security
Protection Engine
Advanced Threat Protection
+15
NVD
Exploit-DB
CVSS 3.0
9.8
EPSS
75.6%
Threat
5.7
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Information Disclosure
Jgroups
Jboss Enterprise Application Platform
NVD
CVSS 3.1
9.8
EPSS
1.5%