Skip to main content

F Secure

69 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2024-7240 Nov 22, 22:15 HIGH This Week

F-Secure Total Link Following Local Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation RCE Total F Secure
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2023-49322 Nov 27, 00:15 HIGH This Week

Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Client Security Email And Server Security Server Security Elements Endpoint Protection +4
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2023-49321 Nov 27, 00:15 MEDIUM This Month

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Client Security Email And Server Security Server Security Elements Endpoint Protection +4
NVD
CVSS 3.1
5.3
EPSS
0.6%
CVE-2023-43767 Sep 22, 05:15 HIGH This Week

Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Client Security Email And Server Security Server Security Elements Endpoint Protection +4
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2023-43766 Sep 22, 05:15 HIGH This Week

Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Client Security Email And Server Security Server Security Elements Endpoint Protection +4
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-43765 Sep 22, 05:15 HIGH This Week

Certain WithSecure products allow Denial of Service in the aeelf component. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Client Security Email And Server Security Server Security Elements Endpoint Protection +4
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2023-43761 Sep 22, 05:15 HIGH This Week

Certain WithSecure products allow Denial of Service (infinite loop). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Client Security Email And Server Security Server Security Elements Endpoint Protection +4
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2023-43760 Sep 22, 05:15 HIGH This Week

Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Client Security Email And Server Security Server Security Elements Endpoint Protection +4
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2022-47524 Dec 23, 14:15 MEDIUM This Month

F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Google Safe F Secure
NVD
CVSS 3.1
5.4
EPSS
0.4%
CVE-2022-45871 Dec 13, 15:15 HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Atlant F Secure
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2022-38166 Nov 25, 15:15 HIGH This Week

In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-22_07, the aerdl.dll unpacker handler crashes. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Apple Microsoft Elements Endpoint Protection F Secure
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2022-38164 Nov 07, 19:15 MEDIUM This Month

A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Google Apple Safe F Secure
NVD
CVSS 3.1
6.5
EPSS
0.4%
CVE-2022-38163 Nov 07, 15:15 LOW Monitor

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Google Apple Safe F Secure
NVD
CVSS 3.1
3.5
EPSS
0.5%
CVE-2022-28887 Oct 12, 18:15 HIGH This Week

Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security Elements Endpoint Detection And Response Elements Endpoint Protection +3
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2022-28886 Sep 23, 19:15 MEDIUM This Month

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security Elements Endpoint Protection Cloud Protection For Salesforce +2
NVD
CVSS 3.1
5.5
EPSS
0.4%
CVE-2022-28885 Sep 06, 18:15 HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing the scanning request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Linux Security Atlant F Secure
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2022-28884 Sep 06, 18:15 HIGH This Week

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security Elements Endpoint Protection Business Suite +2
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2022-28883 Aug 23, 16:15 HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security Elements Endpoint Protection Atlant +4
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2022-28882 Aug 23, 16:15 HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security Elements Endpoint Protection Atlant +4
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2022-28881 Aug 10, 20:15 HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security Elements Endpoint Detection And Response Elements Endpoint Protection +5
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2022-28880 Aug 05, 17:15 MEDIUM This Month

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can crash the scanning engine. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security Elements Endpoint Detection And Response Elements Endpoint Protection +5
NVD VulDB
CVSS 3.1
4.3
EPSS
0.2%
CVE-2022-28879 Jul 22, 16:15 HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aepack.dll component can crash the scanning engine. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security Elements Endpoint Protection Atlant +4
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2022-28878 Jul 22, 16:15 HIGH This Week

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash the scanning engine. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security Elements Endpoint Protection Atlant +4
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2022-28877 Jul 21, 16:15 MEDIUM This Month

This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation RCE Microsoft Elements Endpoint Protection F Secure
NVD
CVSS 3.1
6.7
EPSS
0.3%
CVE-2022-28876 Jul 14, 15:15 HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning engine. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security Elements Endpoint Protection Atlant +3
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2022-28875 May 25, 16:15 MEDIUM This Month

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security Elements Endpoint Detection And Response Elements Endpoint Protection +4
NVD
CVSS 3.1
6.5
EPSS
0.5%
CVE-2022-28874 May 23, 11:16 HIGH This Week

Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Linux Security Elements Endpoint Protection Atlant +4
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2022-28873 May 12, 12:15 MEDIUM This Month

A vulnerability affecting F-Secure SAFE browser was discovered. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Safe F Secure
NVD
CVSS 3.1
4.3
EPSS
0.5%
CVE-2022-28872 May 12, 12:15 HIGH This Week

A vulnerability affecting F-Secure SAFE browser was discovered. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Safe F Secure
NVD
CVSS 3.1
8.8
EPSS
0.5%
CVE-2022-28871 Apr 25, 11:15 HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Atlant F Secure
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2022-28870 Apr 15, 11:15 MEDIUM This Month

A vulnerability affecting F-Secure SAFE browser was discovered. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Safe F Secure
NVD
CVSS 3.1
4.3
EPSS
0.4%
CVE-2022-28869 Apr 15, 11:15 MEDIUM This Month

A vulnerability affecting F-Secure SAFE browser was discovered. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Safe F Secure
NVD
CVSS 3.1
4.3
EPSS
0.4%
CVE-2022-28868 Apr 15, 11:15 MEDIUM This Month

An Address bar spoofing vulnerability was discovered in Safe Browser for Android. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Google Safe F Secure
NVD
CVSS 3.1
4.3
EPSS
0.5%
CVE-2021-40836 Dec 22, 12:15 MEDIUM This Month

A vulnerability affecting F-Secure antivirus engine was discovered whereby scanning MS outlook .pst files can lead to denial-of-service. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Internet Gatekeeper Linux Security Elements Endpoint Detection And Response +4
NVD
CVSS 3.1
5.5
EPSS
0.5%
CVE-2021-40835 Dec 16, 11:15 MEDIUM This Month

An URL Address bar spoofing vulnerability was discovered in Safe Browser for iOS. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Safe F Secure
NVD
CVSS 3.1
4.3
EPSS
0.7%
CVE-2021-40834 Dec 10, 14:15 MEDIUM This Month

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Google Safe F Secure
NVD
CVSS 3.1
4.3
EPSS
0.7%
CVE-2021-40833 Nov 26, 17:15 MEDIUM This Month

A vulnerability affecting F-Secure antivirus engine was discovered whereby unpacking UPX file can lead to denial-of-service. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Internet Gatekeeper Linux Security Elements Endpoint Protection Atlant +2
NVD
CVSS 3.1
5.5
EPSS
0.4%
CVE-2021-40832 Oct 08, 10:15 MEDIUM This Month

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVRDL unpacking module component used in certain F-Secure products can crash while scanning a fuzzed files. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security Elements Endpoint Detection And Response Elements Endpoint Protection +4
NVD
CVSS 3.1
6.5
EPSS
0.5%
CVE-2021-33603 Oct 08, 10:15 MEDIUM This Month

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVPACK module component used in certain F-Secure products can crash while scanning a fuzzed files. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security Elements Endpoint Detection And Response Elements Endpoint Protection +4
NVD
CVSS 3.1
6.5
EPSS
0.5%
CVE-2021-33602 Oct 06, 10:15 MEDIUM This Month

A vulnerability affecting the F-Secure Antivirus engine was discovered when the engine tries to unpack a zip archive (LZW decompression method), and this can crash the scanning engine. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security Atlant Cloud Protection +1
NVD
CVSS 3.1
5.3
EPSS
0.6%
CVE-2021-33601 Sep 28, 10:15 HIGH This Week

A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Internet Gatekeeper F Secure
NVD
CVSS 3.1
8.8
EPSS
0.9%
CVE-2021-33600 Sep 28, 10:15 HIGH This Week

A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper F Secure
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2021-33599 Sep 07, 13:15 MEDIUM This Month

A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service (infinite loop and freezes AV engine scanner). Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Linux Security Elements Endpoint Protection Atlant Cloud Protection For Salesforce +1
NVD
CVSS 3.1
5.5
EPSS
0.4%
CVE-2021-33598 Aug 23, 12:15 MEDIUM This Month

A Denial-of-Service (DoS) vulnerability was discovered in all versions of F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Linux Security Elements Endpoint Protection Atlant F Secure
NVD
CVSS 3.1
6.5
EPSS
0.7%
CVE-2021-33595 Aug 11, 11:15 LOW Monitor

A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Safe F Secure
NVD
CVSS 3.1
3.5
EPSS
1.1%
CVE-2021-33594 Aug 11, 11:15 LOW Monitor

An address bar spoofing vulnerability was discovered in Safe Browser for Android. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Google Safe F Secure
NVD
CVSS 3.1
3.5
EPSS
1.1%
CVE-2021-33597 Aug 05, 20:15 MEDIUM This Month

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Client Security Linux Security Elements Endpoint Protection Business Suite +1
NVD
CVSS 3.1
5.5
EPSS
0.5%
CVE-2021-33596 Aug 05, 20:15 MEDIUM This Month

Showing the legitimate URL in the address bar while loading the content from other domain. Rated medium severity (CVSS 4.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Safe F Secure
NVD
CVSS 3.1
4.1
EPSS
0.8%
CVE-2021-33572 Jun 21, 12:15 MEDIUM This Month

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Endpoint Protection Linux Security Cloud Protection For Salesforce +2
NVD
CVSS 3.1
6.5
EPSS
0.7%
CVE-2020-14978 Jun 23, 20:15 HIGH POC This Week

An issue was discovered in F-Secure SAFE 17.7 on macOS. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Apple Safe F Secure
NVD
CVSS 3.1
8.1
EPSS
3.1%
CVE-2020-14977 Jun 23, 20:15 HIGH POC This Week

An issue was discovered in F-Secure SAFE 17.7 on macOS. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Apple Safe F Secure
NVD
CVSS 3.1
8.1
EPSS
2.8%
CVE-2020-9342 Feb 22, 23:15 MEDIUM This Month

The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Internet Gatekeeper Email And Server Security Cloud Protection For Salesforce F Secure
NVD
CVSS 3.1
5.5
EPSS
1.6%
CVE-2019-11644 May 17, 21:29 HIGH This Week

In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure Client Security Standard and Premium before. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Internet Security Safe Client Security +3
NVD
CVSS 3.0
7.8
EPSS
1.3%
CVE-2018-10403 Jun 13, 22:29 HIGH POC This Week

An issue was discovered in F-Secure XFENCE and Little Flocker. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Apple Xfence F Secure
NVD
CVSS 3.0
7.8
EPSS
0.8%
CVE-2018-6324 Feb 16, 04:29 MEDIUM This Month

F-Secure Radar (on-premises) before 2018-02-15 has an Unvalidated Redirect via the ReturnUrl parameter that triggers upon a user login. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Open Redirect Radar F Secure
NVD
CVSS 3.0
6.1
EPSS
0.9%
CVE-2018-6189 Feb 16, 04:29 MEDIUM This Month

F-Secure Radar (on-premises) before 2018-02-15 has XSS via vectors involving the Tags parameter in the JSON request body in an outbound request for the /api/latest/vulnerabilityscans/tags/batch. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Radar F Secure
NVD
CVSS 3.0
6.1
EPSS
0.9%
CVE-2015-8264 Aug 02, 19:29 HIGH This Week

Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE F Secure Online Scanner F Secure
NVD
CVSS 3.0
7.8
EPSS
0.7%
CVE-2017-6466 Mar 11, 06:59 HIGH This Week

F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Software Updater F Secure
NVD
CVSS 3.0
8.1
EPSS
0.7%
CVE-2014-2844 Apr 18, 14:55 LOW POC Monitor

Cross-site scripting (XSS) vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Secure Messaging Secure Gateway F Secure
NVD VulDB
CVSS 2.0
3.5
EPSS
0.2%
CVE-2013-7369 Apr 18, 14:55 HIGH This Week

SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09,. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Microsoft Citrix Anti Virus Email And Server Security +2
NVD VulDB
CVSS 2.0
7.5
EPSS
0.4%
CVE-2012-6646 Apr 18, 14:55 LOW Monitor

F-Secure Anti-Virus, Safe Anywhere, and PSB Workstation Security before 11500 for Mac OS X allows local users to disable the Mac OS X firewall via unspecified vectors. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Anti Virus Psb Workstation Security Safe Anywhere F Secure
NVD VulDB
CVSS 2.0
2.1
EPSS
0.1%
CVE-2012-1463 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Panda Antivirus Bitdefender F Secure Anti Virus F Prot Antivirus +20
NVD
CVSS 2.0
4.3
EPSS
1.0%
CVE-2012-1461 Mar 21, 10:11 MEDIUM This Month

The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, Ikarus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 83.9% and no vendor patch available.

Privilege Escalation Fortinet Trend Micro Antivirus Gateway +33
NVD
CVSS 2.0
4.3
EPSS
83.9%
CVE-2012-1459 Mar 21, 10:11 MEDIUM This Month

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 79.5% and no vendor patch available.

Privilege Escalation Fortinet Microsoft Trend Micro Antivirus +60
NVD
CVSS 2.0
4.3
EPSS
79.5%
CVE-2012-1443 Mar 21, 10:11 MEDIUM This Month

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 50.2% and no vendor patch available.

Privilege Escalation Fortinet Microsoft Trend Micro Antivirus +62
NVD
CVSS 2.0
4.3
EPSS
50.2%
CVE-2012-1442 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky Anti-Virus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Gateway Panda Antivirus Kaspersky Anti Virus +18
NVD
CVSS 2.0
4.3
EPSS
2.8%
CVE-2012-1431 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Gateway (formerly. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Gateway Sophos Anti Virus Bitdefender F Secure Anti Virus +15
NVD
CVSS 2.0
4.3
EPSS
0.5%
CVE-2012-1430 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Gateway Sophos Anti Virus Bitdefender Rising Antivirus +12
NVD
CVSS 2.0
4.3
EPSS
0.5%
CVE-2012-1429 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Gateway Bitdefender F Secure Anti Virus Scan Engine +13
NVD
CVSS 2.0
4.3
EPSS
5.1%
CVE-2024-7240
EPSS 0% CVSS 7.8
HIGH This Week

F-Secure Total Link Following Local Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation RCE Total +1
NVD
CVE-2023-49322
EPSS 1% CVSS 7.5
HIGH This Week

Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Client Security Email And Server Security +6
NVD
CVE-2023-49321
EPSS 1% CVSS 5.3
MEDIUM This Month

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Client Security Email And Server Security +6
NVD
CVE-2023-43767
EPSS 1% CVSS 7.5
HIGH This Week

Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Client Security Email And Server Security +6
NVD
CVE-2023-43766
EPSS 0% CVSS 7.8
HIGH This Week

Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Client Security Email And Server Security +6
NVD
CVE-2023-43765
EPSS 1% CVSS 7.5
HIGH This Week

Certain WithSecure products allow Denial of Service in the aeelf component. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Client Security Email And Server Security +6
NVD
CVE-2023-43761
EPSS 1% CVSS 7.5
HIGH This Week

Certain WithSecure products allow Denial of Service (infinite loop). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Client Security Email And Server Security +6
NVD
CVE-2023-43760
EPSS 1% CVSS 7.5
HIGH This Week

Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Client Security Email And Server Security +6
NVD
CVE-2022-47524
EPSS 0% CVSS 5.4
MEDIUM This Month

F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Google Safe +1
NVD
CVE-2022-45871
EPSS 0% CVSS 7.5
HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Atlant F Secure
NVD
CVE-2022-38166
EPSS 1% CVSS 7.5
HIGH This Week

In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-22_07, the aerdl.dll unpacker handler crashes. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Apple Microsoft +2
NVD
CVE-2022-38164
EPSS 0% CVSS 6.5
MEDIUM This Month

A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Google Apple +2
NVD
CVE-2022-38163
EPSS 1% CVSS 3.5
LOW Monitor

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Google Apple +2
NVD
CVE-2022-28887
EPSS 0% CVSS 7.5
HIGH This Week

Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security +5
NVD
CVE-2022-28886
EPSS 0% CVSS 5.5
MEDIUM This Month

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security +4
NVD
CVE-2022-28885
EPSS 0% CVSS 7.5
HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing the scanning request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Linux Security Atlant +1
NVD
CVE-2022-28884
EPSS 0% CVSS 7.5
HIGH This Week

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security +4
NVD
CVE-2022-28883
EPSS 1% CVSS 7.5
HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security +6
NVD
CVE-2022-28882
EPSS 0% CVSS 7.5
HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security +6
NVD
CVE-2022-28881
EPSS 0% CVSS 7.5
HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security +7
NVD
CVE-2022-28880
EPSS 0% CVSS 4.3
MEDIUM This Month

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can crash the scanning engine. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security +7
NVD VulDB
CVE-2022-28879
EPSS 0% CVSS 7.5
HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aepack.dll component can crash the scanning engine. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security +6
NVD
CVE-2022-28878
EPSS 0% CVSS 7.5
HIGH This Week

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash the scanning engine. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security +6
NVD
CVE-2022-28877
EPSS 0% CVSS 6.7
MEDIUM This Month

This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation RCE Microsoft +2
NVD
CVE-2022-28876
EPSS 0% CVSS 7.5
HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning engine. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security +5
NVD
CVE-2022-28875
EPSS 0% CVSS 6.5
MEDIUM This Month

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security +6
NVD
CVE-2022-28874
EPSS 1% CVSS 7.5
HIGH This Week

Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Linux Security +6
NVD
CVE-2022-28873
EPSS 1% CVSS 4.3
MEDIUM This Month

A vulnerability affecting F-Secure SAFE browser was discovered. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Safe F Secure
NVD
CVE-2022-28872
EPSS 0% CVSS 8.8
HIGH This Week

A vulnerability affecting F-Secure SAFE browser was discovered. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Safe F Secure
NVD
CVE-2022-28871
EPSS 1% CVSS 7.5
HIGH This Week

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Atlant F Secure
NVD
CVE-2022-28870
EPSS 0% CVSS 4.3
MEDIUM This Month

A vulnerability affecting F-Secure SAFE browser was discovered. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Safe F Secure
NVD
CVE-2022-28869
EPSS 0% CVSS 4.3
MEDIUM This Month

A vulnerability affecting F-Secure SAFE browser was discovered. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Safe F Secure
NVD
CVE-2022-28868
EPSS 1% CVSS 4.3
MEDIUM This Month

An Address bar spoofing vulnerability was discovered in Safe Browser for Android. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Google Safe +1
NVD
CVE-2021-40836
EPSS 0% CVSS 5.5
MEDIUM This Month

A vulnerability affecting F-Secure antivirus engine was discovered whereby scanning MS outlook .pst files can lead to denial-of-service. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Internet Gatekeeper +6
NVD
CVE-2021-40835
EPSS 1% CVSS 4.3
MEDIUM This Month

An URL Address bar spoofing vulnerability was discovered in Safe Browser for iOS. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Safe F Secure
NVD
CVE-2021-40834
EPSS 1% CVSS 4.3
MEDIUM This Month

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Google Safe +1
NVD
CVE-2021-40833
EPSS 0% CVSS 5.5
MEDIUM This Month

A vulnerability affecting F-Secure antivirus engine was discovered whereby unpacking UPX file can lead to denial-of-service. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Internet Gatekeeper Linux Security +4
NVD
CVE-2021-40832
EPSS 1% CVSS 6.5
MEDIUM This Month

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVRDL unpacking module component used in certain F-Secure products can crash while scanning a fuzzed files. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security +6
NVD
CVE-2021-33603
EPSS 1% CVSS 6.5
MEDIUM This Month

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVPACK module component used in certain F-Secure products can crash while scanning a fuzzed files. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security +6
NVD
CVE-2021-33602
EPSS 1% CVSS 5.3
MEDIUM This Month

A vulnerability affecting the F-Secure Antivirus engine was discovered when the engine tries to unpack a zip archive (LZW decompression method), and this can crash the scanning engine. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper Linux Security +3
NVD
CVE-2021-33601
EPSS 1% CVSS 8.8
HIGH This Week

A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Internet Gatekeeper F Secure
NVD
CVE-2021-33600
EPSS 1% CVSS 7.5
HIGH This Week

A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Internet Gatekeeper F Secure
NVD
CVE-2021-33599
EPSS 0% CVSS 5.5
MEDIUM This Month

A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service (infinite loop and freezes AV engine scanner). Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Linux Security Elements Endpoint Protection +3
NVD
CVE-2021-33598
EPSS 1% CVSS 6.5
MEDIUM This Month

A Denial-of-Service (DoS) vulnerability was discovered in all versions of F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Linux Security Elements Endpoint Protection +2
NVD
CVE-2021-33595
EPSS 1% CVSS 3.5
LOW Monitor

A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Safe F Secure
NVD
CVE-2021-33594
EPSS 1% CVSS 3.5
LOW Monitor

An address bar spoofing vulnerability was discovered in Safe Browser for Android. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Google Safe +1
NVD
CVE-2021-33597
EPSS 1% CVSS 5.5
MEDIUM This Month

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Client Security Linux Security +3
NVD
CVE-2021-33596
EPSS 1% CVSS 4.1
MEDIUM This Month

Showing the legitimate URL in the address bar while loading the content from other domain. Rated medium severity (CVSS 4.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Safe F Secure
NVD
CVE-2021-33572
EPSS 1% CVSS 6.5
MEDIUM This Month

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Endpoint Protection +4
NVD
CVE-2020-14978
EPSS 3% CVSS 8.1
HIGH POC This Week

An issue was discovered in F-Secure SAFE 17.7 on macOS. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Apple Safe +1
NVD
CVE-2020-14977
EPSS 3% CVSS 8.1
HIGH POC This Week

An issue was discovered in F-Secure SAFE 17.7 on macOS. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Apple Safe +1
NVD
CVE-2020-9342
EPSS 2% CVSS 5.5
MEDIUM This Month

The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Internet Gatekeeper Email And Server Security +2
NVD
CVE-2019-11644
EPSS 1% CVSS 7.8
HIGH This Week

In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure Client Security Standard and Premium before. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Internet Security +5
NVD
CVE-2018-10403
EPSS 1% CVSS 7.8
HIGH POC This Week

An issue was discovered in F-Secure XFENCE and Little Flocker. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Apple Xfence +1
NVD
CVE-2018-6324
EPSS 1% CVSS 6.1
MEDIUM This Month

F-Secure Radar (on-premises) before 2018-02-15 has an Unvalidated Redirect via the ReturnUrl parameter that triggers upon a user login. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Open Redirect Radar F Secure
NVD
CVE-2018-6189
EPSS 1% CVSS 6.1
MEDIUM This Month

F-Secure Radar (on-premises) before 2018-02-15 has XSS via vectors involving the Tags parameter in the JSON request body in an outbound request for the /api/latest/vulnerabilityscans/tags/batch. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Radar F Secure
NVD
CVE-2015-8264
EPSS 1% CVSS 7.8
HIGH This Week

Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE F Secure Online Scanner F Secure
NVD
CVE-2017-6466
EPSS 1% CVSS 8.1
HIGH This Week

F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Software Updater F Secure
NVD
CVE-2014-2844
EPSS 0% CVSS 3.5
LOW POC Monitor

Cross-site scripting (XSS) vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Secure Messaging Secure Gateway F Secure
NVD VulDB
CVE-2013-7369
EPSS 0% CVSS 7.5
HIGH This Week

SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09,. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Microsoft Citrix +4
NVD VulDB
CVE-2012-6646
EPSS 0% CVSS 2.1
LOW Monitor

F-Secure Anti-Virus, Safe Anywhere, and PSB Workstation Security before 11500 for Mac OS X allows local users to disable the Mac OS X firewall via unspecified vectors. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Anti Virus Psb Workstation Security +2
NVD VulDB
CVE-2012-1463
EPSS 1% CVSS 4.3
MEDIUM This Month

The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Panda Antivirus Bitdefender +22
NVD
CVE-2012-1461
EPSS 84% CVSS 4.3
MEDIUM This Month

The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, Ikarus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 83.9% and no vendor patch available.

Privilege Escalation Fortinet Trend Micro +35
NVD
CVE-2012-1459
EPSS 80% CVSS 4.3
MEDIUM This Month

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 79.5% and no vendor patch available.

Privilege Escalation Fortinet Microsoft +62
NVD
CVE-2012-1443
EPSS 50% CVSS 4.3
MEDIUM This Month

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 50.2% and no vendor patch available.

Privilege Escalation Fortinet Microsoft +64
NVD
CVE-2012-1442
EPSS 3% CVSS 4.3
MEDIUM This Month

The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky Anti-Virus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Gateway +20
NVD
CVE-2012-1431
EPSS 1% CVSS 4.3
MEDIUM This Month

The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Gateway (formerly. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Gateway Sophos Anti Virus +17
NVD
CVE-2012-1430
EPSS 1% CVSS 4.3
MEDIUM This Month

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Gateway Sophos Anti Virus +14
NVD
CVE-2012-1429
EPSS 5% CVSS 4.3
MEDIUM This Month

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Gateway Bitdefender +15
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy