Skip to main content

Privilege Escalation

14648 CVEs technique

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2012-1461 Mar 21, 10:11 MEDIUM This Month

The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, Ikarus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 83.9% and no vendor patch available.

Privilege Escalation Fortinet Trend Micro Antivirus Gateway +33
NVD
CVSS 2.0
4.3
EPSS
83.9%
CVE-2012-1460 Mar 21, 10:11 MEDIUM This Month

The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin Antivirus 13.0.900, K7. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Antivirus F Prot Antivirus Quick Heal Vba32 +12
NVD
CVSS 2.0
4.3
EPSS
0.6%
CVE-2012-1459 Mar 21, 10:11 MEDIUM This Month

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 79.5% and no vendor patch available.

Privilege Escalation Fortinet Microsoft Trend Micro Antivirus +60
NVD
CVSS 2.0
4.3
EPSS
79.5%
CVE-2012-1458 Mar 21, 10:11 MEDIUM This Month

The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Clamav Sophos Anti Virus Sophos
NVD
CVSS 2.0
4.3
EPSS
8.1%
CVE-2012-1457 Mar 21, 10:11 MEDIUM This Month

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 50.8% and no vendor patch available.

Privilege Escalation Microsoft Trend Micro Antivirus Clamav +47
NVD
CVSS 2.0
4.3
EPSS
50.8%
CVE-2012-1456 Mar 21, 10:11 MEDIUM This Month

The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 18.2% and no vendor patch available.

Privilege Escalation Fortinet Trend Micro Gateway Eset +35
NVD
CVSS 2.0
4.3
EPSS
18.2%
CVE-2012-1455 Mar 21, 10:11 MEDIUM This Month

The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMinor version field. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Eset Nod32 Antivirus Rising Antivirus Rising Global
NVD
CVSS 2.0
4.3
EPSS
0.1%
CVE-2012-1454 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway (formerly Webwasher) 2010.1C, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Gateway Panda Antivirus Dr Web Antivirus +9
NVD
CVSS 2.0
4.3
EPSS
0.1%
CVE-2012-1453 Mar 21, 10:11 MEDIUM This Month

The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 78.5% and no vendor patch available.

Privilege Escalation Fortinet Microsoft Trend Micro Gateway +24
NVD
CVSS 2.0
4.3
EPSS
78.5%
CVE-2012-1452 Mar 21, 10:11 MEDIUM This Month

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Quick Heal Anti Malware Ikarus Virus Utilities T3 Command Line Scanner Cat +2
NVD
CVSS 2.0
4.3
EPSS
5.6%
CVE-2012-1451 Mar 21, 10:11 MEDIUM This Month

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1 and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Anti Malware Ikarus Virus Utilities T3 Command Line Scanner Ikarus Emsisoft
NVD
CVSS 2.0
4.3
EPSS
7.0%
CVE-2012-1450 Mar 21, 10:11 MEDIUM This Month

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 19.5% and no vendor patch available.

Privilege Escalation Sophos Anti Virus Anti Malware Ikarus Virus Utilities T3 Command Line Scanner Sophos +2
NVD
CVSS 2.0
4.3
EPSS
19.5%
CVE-2012-1449 Mar 21, 10:11 MEDIUM This Month

The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMajor field. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Eset Nod32 Antivirus Rising Antivirus Rising Global
NVD
CVSS 2.0
4.3
EPSS
0.1%
CVE-2012-1448 Mar 21, 10:11 MEDIUM This Month

The CAB file parser in Quick Heal (aka Cat QuickHeal) 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Trend Micro HouseCall 9.120.0.1004, and. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Trend Micro Housecall Quick Heal Trend Micro Antivirus +5
NVD
CVSS 2.0
4.3
EPSS
8.3%
CVE-2012-1447 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in Fortinet Antivirus 4.2.254.0, eSafe 7.0.17.0, Dr.Web 5.0.2.03300, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Panda Antivirus Dr Web Antivirus Fortinet Antivirus +5
NVD
CVSS 2.0
4.3
EPSS
0.5%
CVE-2012-1446 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Gateway Symantec Panda Antivirus +24
NVD
CVSS 2.0
4.3
EPSS
2.5%
CVE-2012-1445 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Panda Antivirus Fortinet Antivirus Rising Antivirus +5
NVD
CVSS 2.0
4.3
EPSS
0.1%
CVE-2012-1444 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in eSafe 7.0.17.0, Prevx 3.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Panda Antivirus Fortinet Antivirus Esafe +4
NVD
CVSS 2.0
4.3
EPSS
0.5%
CVE-2012-1443 Mar 21, 10:11 MEDIUM This Month

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 50.2% and no vendor patch available.

Privilege Escalation Fortinet Microsoft Trend Micro Antivirus +62
NVD
CVSS 2.0
4.3
EPSS
50.2%
CVE-2012-1442 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky Anti-Virus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Gateway Panda Antivirus Kaspersky Anti Virus +18
NVD
CVSS 2.0
4.3
EPSS
2.8%
CVE-2012-1441 Mar 21, 10:11 MEDIUM This Month

The Microsoft EXE file parser in eSafe 7.0.17.0 and Prevx 3.0 allows remote attackers to bypass malware detection via an EXE file with a modified value in any of several e_ fields. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Esafe Prevx Aladdin
NVD
CVSS 2.0
4.3
EPSS
0.3%
CVE-2012-1440 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Panda Antivirus Fortinet Antivirus Esafe +7
NVD
CVSS 2.0
4.3
EPSS
0.3%
CVE-2012-1439 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Panda Antivirus Fortinet Antivirus Rising Antivirus +5
NVD
CVSS 2.0
4.3
EPSS
0.1%
CVE-2012-1438 Mar 21, 10:11 MEDIUM This Month

The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via an Office file with a ustar character sequence at a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Sophos Anti Virus Comodo Antivirus Sophos +1
NVD
CVSS 2.0
4.3
EPSS
1.6%
CVE-2012-1437 Mar 21, 10:11 MEDIUM This Month

The Microsoft Office file parser in Comodo Antivirus 7425 allows remote attackers to bypass malware detection via an Office file with a \50\4B\53\70\58 character sequence at a certain location. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Comodo Antivirus Comodo
NVD
CVSS 2.0
4.3
EPSS
0.4%
CVE-2012-1436 Mar 21, 10:11 MEDIUM This Month

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Panda Antivirus V3 Internet Security Esafe +8
NVD
CVSS 2.0
4.3
EPSS
5.6%
CVE-2012-1435 Mar 21, 10:11 MEDIUM This Month

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Panda Antivirus V3 Internet Security Esafe +8
NVD
CVSS 2.0
4.3
EPSS
5.6%
CVE-2012-1434 Mar 21, 10:11 MEDIUM This Month

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Panda Antivirus V3 Internet Security Anti Malware +6
NVD
CVSS 2.0
4.3
EPSS
8.0%
CVE-2012-1433 Mar 21, 10:11 MEDIUM This Month

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Panda Antivirus V3 Internet Security Esafe +8
NVD
CVSS 2.0
4.3
EPSS
5.6%
CVE-2012-1432 Mar 21, 10:11 MEDIUM This Month

The Microsoft EXE file parser in Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Panda Antivirus Esafe Anti Malware +6
NVD
CVSS 2.0
4.3
EPSS
5.6%
CVE-2012-1431 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Gateway (formerly. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Gateway Sophos Anti Virus Bitdefender F Secure Anti Virus +15
NVD
CVSS 2.0
4.3
EPSS
0.5%
CVE-2012-1430 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Gateway Sophos Anti Virus Bitdefender Rising Antivirus +12
NVD
CVSS 2.0
4.3
EPSS
0.5%
CVE-2012-1429 Mar 21, 10:11 MEDIUM This Month

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Gateway Bitdefender F Secure Anti Virus Scan Engine +13
NVD
CVSS 2.0
4.3
EPSS
5.1%
CVE-2012-1428 Mar 21, 10:11 MEDIUM This Month

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Sophos Anti Virus Quick Heal Norman Antivirus Antispyware Sophos +2
NVD
CVSS 2.0
4.3
EPSS
4.1%
CVE-2012-1427 Mar 21, 10:11 MEDIUM This Month

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Sophos Anti Virus Quick Heal Norman Antivirus Antispyware Sophos +2
NVD
CVSS 2.0
4.3
EPSS
4.1%
CVE-2012-1426 Mar 21, 10:11 MEDIUM This Month

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, K7 AntiVirus 9.77.3565, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Antivirus F Prot Antivirus Rising Antivirus Quick Heal +8
NVD
CVSS 2.0
4.3
EPSS
0.3%
CVE-2012-1425 Mar 21, 10:11 MEDIUM This Month

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 54.2% and no vendor patch available.

Privilege Escalation Fortinet Trend Micro Gateway Eset +26
NVD
CVSS 2.0
4.3
EPSS
54.2%
CVE-2012-1424 Mar 21, 10:11 MEDIUM This Month

The TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and Sophos Anti-Virus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Sophos Anti Virus Quick Heal Pc Tools Antivirus Norman Antivirus Antispyware +8
NVD
CVSS 2.0
4.3
EPSS
4.1%
CVE-2012-1423 Mar 21, 10:11 MEDIUM This Month

The TAR file parser in Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, K7. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Antivirus Eset Nod32 Antivirus +17
NVD
CVSS 2.0
4.3
EPSS
3.7%
CVE-2012-1422 Mar 21, 10:11 MEDIUM This Month

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Eset Nod32 Antivirus Rising Antivirus Quick Heal +4
NVD
CVSS 2.0
4.3
EPSS
0.2%
CVE-2012-1421 Mar 21, 10:11 MEDIUM This Month

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Symantec Rising Antivirus Quick Heal Endpoint Protection +4
NVD
CVSS 2.0
4.3
EPSS
0.2%
CVE-2012-1420 Mar 21, 10:11 MEDIUM This Month

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 16.4% and no vendor patch available.

Privilege Escalation Fortinet Microsoft Antivirus Eset +19
NVD
CVSS 2.0
4.3
EPSS
16.4%
CVE-2012-1419 Mar 21, 10:11 MEDIUM This Month

The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial [aliases] character sequence. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Clamav Quick Heal Cat
NVD
CVSS 2.0
4.3
EPSS
0.8%
CVE-2012-1797 Mar 20, 20:55 CRITICAL Act Now

IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation IBM Db2
NVD
CVSS 2.0
10.0
EPSS
0.5%
CVE-2012-0326 Mar 17, 10:55 MEDIUM PATCH This Month

The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.

Privilege Escalation Google Twicca
NVD
CVSS 2.0
5.0
EPSS
0.5%
CVE-2012-1508 Mar 16, 20:55 HIGH This Week

The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges or cause a denial of service (NULL. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Denial Of Service VMware ESXi Esx +1
NVD
CVSS 2.0
7.2
EPSS
0.1%
CVE-2012-0398 Mar 15, 00:55 HIGH This Week

EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Documentum Eroom Emc
NVD
CVSS 2.0
7.5
EPSS
0.5%
CVE-2012-0460 Mar 14, 19:55 MEDIUM This Month

Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Mozilla Firefox Seamonkey Thunderbird +2
NVD
CVSS 2.0
6.4
EPSS
1.8%
CVE-2012-0459 Mar 14, 19:55 HIGH This Week

The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation RCE Denial Of Service Mozilla Firefox +4
NVD
CVSS 2.0
7.5
EPSS
3.4%
CVE-2012-0458 Mar 14, 19:55 MEDIUM POC PATCH This Month

Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available.

Privilege Escalation Chrome Google Mozilla Firefox +3
NVD
CVSS 2.0
6.8
EPSS
2.1%
CVE-2012-0645 Mar 08, 22:55 LOW Monitor

Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that. Rated low severity (CVSS 1.2). No vendor patch available.

Privilege Escalation Apple Iphone Os
NVD
CVSS 2.0
1.2
EPSS
0.1%
CVE-2012-0643 Mar 08, 22:55 CRITICAL Act Now

The kernel in Apple iOS before 5.1 does not properly handle debug system calls, which allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a crafted program. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation RCE Apple Iphone Os
NVD
CVSS 2.0
9.3
EPSS
1.4%
CVE-2012-0585 Mar 08, 22:55 MEDIUM This Month

The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Apple Iphone Os
NVD
CVSS 2.0
5.0
EPSS
0.8%
CVE-2012-0322 Mar 05, 21:55 MEDIUM This Month

The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly restrict access, which allows remote attackers to read arbitrary files via vectors involving an. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Google Es File Explorer Estrongs
NVD
CVSS 2.0
4.3
EPSS
0.2%
CVE-2012-0371 Mar 01, 01:55 CRITICAL Act Now

Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Cisco Wireless Lan Controller Software 2000 Wireless Lan Controller 2100 Wireless Lan Controller +10
NVD
CVSS 2.0
9.3
EPSS
0.5%
CVE-2012-0366 Mar 01, 01:55 CRITICAL Act Now

Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Cisco Unity Connection
NVD
CVSS 2.0
9.0
EPSS
0.4%
CVE-2012-0364 Feb 25, 04:21 HIGH PATCH This Week

Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity.

Privilege Escalation Cisco Small Business Srp521W Small Business Srp526W Small Business Srp527W +9
NVD
CVSS 2.0
7.8
EPSS
0.7%
CVE-2012-1078 Feb 14, 17:55 MEDIUM This Month

The System Utilities (sysutils) extension 1.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unspecified vectors related to improper "protection" of the "backup. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Sysutils
NVD
CVSS 2.0
5.0
EPSS
0.4%
CVE-2012-1056 Feb 14, 00:55 MEDIUM PATCH This Month

The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.

Privilege Escalation Forward Sean Robertson
NVD
CVSS 2.0
5.0
EPSS
0.4%
CVE-2012-1011 Feb 07, 21:55 HIGH POC PATCH This Week

actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP WordPress Privilege Escalation Allwebmenus Plugin Likno
NVD Exploit-DB
CVSS 2.0
7.5
EPSS
7.7%
CVE-2012-0396 Feb 06, 20:55 MEDIUM This Month

EMC Documentum xPlore 1.0, 1.1 before P07, and 1.2 does not properly enforce the requirement for BROWSE permission, which allows remote authenticated users to determine the existence of an object, or. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Documentum Xplore Emc
NVD
CVSS 2.0
4.0
EPSS
0.3%
CVE-2012-0057 Feb 02, 00:55 MEDIUM PATCH This Month

PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity.

PHP Privilege Escalation
NVD
CVSS 2.0
6.4
EPSS
1.6%
CVE-2012-0450 Feb 01, 16:55 LOW Monitor

Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Mozilla Firefox Seamonkey
NVD
CVSS 2.0
2.1
EPSS
0.1%
CVE-2012-0445 Feb 01, 16:55 MEDIUM This Month

Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Mozilla Firefox Seamonkey Thunderbird
NVD
CVSS 2.0
5.0
EPSS
0.5%
CVE-2012-0056 Jan 27, 15:55 MEDIUM POC THREAT This Month

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by. Rated medium severity (CVSS 6.9). Public exploit code available and EPSS exploitation probability 73.9%.

Privilege Escalation Linux Linux Kernel
NVD Exploit-DB
CVSS 2.0
6.9
EPSS
73.9%
Threat
5.1
CVE-2012-0030 Jan 13, 18:55 MEDIUM PATCH This Month

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable.

Privilege Escalation Openstack Essex Nova
NVD GitHub
CVSS 2.0
4.9
EPSS
0.5%
CVE-2012-0005 Jan 10, 21:55 MEDIUM This Month

The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean. Rated medium severity (CVSS 6.9). No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 Windows Xp Windows Server 2003 +1
NVD
CVSS 2.0
6.9
EPSS
3.7%
CVE-2012-0393 Jan 08, 15:55 Maven MEDIUM POC PATCH THREAT This Month

The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 58.5%.

Privilege Escalation Apache Java Struts
NVD Exploit-DB
CVSS 2.0
6.4
EPSS
58.5%
Threat
4.5
CVE-2012-1461
EPSS 84% CVSS 4.3
MEDIUM This Month

The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, Ikarus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 83.9% and no vendor patch available.

Privilege Escalation Fortinet Trend Micro +35
NVD
CVE-2012-1460
EPSS 1% CVSS 4.3
MEDIUM This Month

The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin Antivirus 13.0.900, K7. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Antivirus F Prot Antivirus +14
NVD
CVE-2012-1459
EPSS 80% CVSS 4.3
MEDIUM This Month

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 79.5% and no vendor patch available.

Privilege Escalation Fortinet Microsoft +62
NVD
CVE-2012-1458
EPSS 8% CVSS 4.3
MEDIUM This Month

The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Clamav +2
NVD
CVE-2012-1457
EPSS 51% CVSS 4.3
MEDIUM This Month

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 50.8% and no vendor patch available.

Privilege Escalation Microsoft Trend Micro +49
NVD
CVE-2012-1456
EPSS 18% CVSS 4.3
MEDIUM This Month

The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 18.2% and no vendor patch available.

Privilege Escalation Fortinet Trend Micro +37
NVD
CVE-2012-1455
EPSS 0% CVSS 4.3
MEDIUM This Month

The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMinor version field. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Eset Nod32 Antivirus +2
NVD
CVE-2012-1454
EPSS 0% CVSS 4.3
MEDIUM This Month

The ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway (formerly Webwasher) 2010.1C, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Gateway +11
NVD
CVE-2012-1453
EPSS 78% CVSS 4.3
MEDIUM This Month

The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 78.5% and no vendor patch available.

Privilege Escalation Fortinet Microsoft +26
NVD
CVE-2012-1452
EPSS 6% CVSS 4.3
MEDIUM This Month

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Quick Heal Anti Malware +4
NVD
CVE-2012-1451
EPSS 7% CVSS 4.3
MEDIUM This Month

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1 and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Anti Malware Ikarus Virus Utilities T3 Command Line Scanner +2
NVD
CVE-2012-1450
EPSS 20% CVSS 4.3
MEDIUM This Month

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 19.5% and no vendor patch available.

Privilege Escalation Sophos Anti Virus Anti Malware +4
NVD
CVE-2012-1449
EPSS 0% CVSS 4.3
MEDIUM This Month

The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMajor field. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Eset Nod32 Antivirus +2
NVD
CVE-2012-1448
EPSS 8% CVSS 4.3
MEDIUM This Month

The CAB file parser in Quick Heal (aka Cat QuickHeal) 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Trend Micro HouseCall 9.120.0.1004, and. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Trend Micro Housecall +7
NVD
CVE-2012-1447
EPSS 0% CVSS 4.3
MEDIUM This Month

The ELF file parser in Fortinet Antivirus 4.2.254.0, eSafe 7.0.17.0, Dr.Web 5.0.2.03300, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Panda Antivirus +7
NVD
CVE-2012-1446
EPSS 3% CVSS 4.3
MEDIUM This Month

The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Gateway +26
NVD
CVE-2012-1445
EPSS 0% CVSS 4.3
MEDIUM This Month

The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Panda Antivirus +7
NVD
CVE-2012-1444
EPSS 0% CVSS 4.3
MEDIUM This Month

The ELF file parser in eSafe 7.0.17.0, Prevx 3.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Panda Antivirus +6
NVD
CVE-2012-1443
EPSS 50% CVSS 4.3
MEDIUM This Month

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 50.2% and no vendor patch available.

Privilege Escalation Fortinet Microsoft +64
NVD
CVE-2012-1442
EPSS 3% CVSS 4.3
MEDIUM This Month

The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky Anti-Virus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Gateway +20
NVD
CVE-2012-1441
EPSS 0% CVSS 4.3
MEDIUM This Month

The Microsoft EXE file parser in eSafe 7.0.17.0 and Prevx 3.0 allows remote attackers to bypass malware detection via an EXE file with a modified value in any of several e_ fields. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Esafe +2
NVD
CVE-2012-1440
EPSS 0% CVSS 4.3
MEDIUM This Month

The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Panda Antivirus +9
NVD
CVE-2012-1439
EPSS 0% CVSS 4.3
MEDIUM This Month

The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Panda Antivirus +7
NVD
CVE-2012-1438
EPSS 2% CVSS 4.3
MEDIUM This Month

The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via an Office file with a ustar character sequence at a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Sophos Anti Virus +3
NVD
CVE-2012-1437
EPSS 0% CVSS 4.3
MEDIUM This Month

The Microsoft Office file parser in Comodo Antivirus 7425 allows remote attackers to bypass malware detection via an Office file with a \50\4B\53\70\58 character sequence at a certain location. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Comodo Antivirus +1
NVD
CVE-2012-1436
EPSS 6% CVSS 4.3
MEDIUM This Month

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Panda Antivirus +10
NVD
CVE-2012-1435
EPSS 6% CVSS 4.3
MEDIUM This Month

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Panda Antivirus +10
NVD
CVE-2012-1434
EPSS 8% CVSS 4.3
MEDIUM This Month

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Panda Antivirus +8
NVD
CVE-2012-1433
EPSS 6% CVSS 4.3
MEDIUM This Month

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Panda Antivirus +10
NVD
CVE-2012-1432
EPSS 6% CVSS 4.3
MEDIUM This Month

The Microsoft EXE file parser in Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Microsoft Panda Antivirus +8
NVD
CVE-2012-1431
EPSS 1% CVSS 4.3
MEDIUM This Month

The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Gateway (formerly. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Gateway Sophos Anti Virus +17
NVD
CVE-2012-1430
EPSS 1% CVSS 4.3
MEDIUM This Month

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Gateway Sophos Anti Virus +14
NVD
CVE-2012-1429
EPSS 5% CVSS 4.3
MEDIUM This Month

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Gateway Bitdefender +15
NVD
CVE-2012-1428
EPSS 4% CVSS 4.3
MEDIUM This Month

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Sophos Anti Virus Quick Heal +4
NVD
CVE-2012-1427
EPSS 4% CVSS 4.3
MEDIUM This Month

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Sophos Anti Virus Quick Heal +4
NVD
CVE-2012-1426
EPSS 0% CVSS 4.3
MEDIUM This Month

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, K7 AntiVirus 9.77.3565, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Antivirus F Prot Antivirus +10
NVD
CVE-2012-1425
EPSS 54% CVSS 4.3
MEDIUM This Month

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 54.2% and no vendor patch available.

Privilege Escalation Fortinet Trend Micro +28
NVD
CVE-2012-1424
EPSS 4% CVSS 4.3
MEDIUM This Month

The TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and Sophos Anti-Virus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Sophos Anti Virus Quick Heal +10
NVD
CVE-2012-1423
EPSS 4% CVSS 4.3
MEDIUM This Month

The TAR file parser in Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, K7. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Fortinet Antivirus +19
NVD
CVE-2012-1422
EPSS 0% CVSS 4.3
MEDIUM This Month

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Eset Nod32 Antivirus +6
NVD
CVE-2012-1421
EPSS 0% CVSS 4.3
MEDIUM This Month

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Symantec Rising Antivirus +6
NVD
CVE-2012-1420
EPSS 16% CVSS 4.3
MEDIUM This Month

The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 16.4% and no vendor patch available.

Privilege Escalation Fortinet Microsoft +21
NVD
CVE-2012-1419
EPSS 1% CVSS 4.3
MEDIUM This Month

The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial [aliases] character sequence. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Clamav Quick Heal +1
NVD
CVE-2012-1797
EPSS 0% CVSS 10.0
CRITICAL Act Now

IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation IBM Db2
NVD
CVE-2012-0326
EPSS 1% CVSS 5.0
MEDIUM PATCH This Month

The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.

Privilege Escalation Google Twicca
NVD
CVE-2012-1508
EPSS 0% CVSS 7.2
HIGH This Week

The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges or cause a denial of service (NULL. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Denial Of Service VMware +3
NVD
CVE-2012-0398
EPSS 0% CVSS 7.5
HIGH This Week

EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Documentum Eroom Emc
NVD
CVE-2012-0460
EPSS 2% CVSS 6.4
MEDIUM This Month

Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Mozilla Firefox +4
NVD
CVE-2012-0459
EPSS 3% CVSS 7.5
HIGH This Week

The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation RCE Denial Of Service +6
NVD
CVE-2012-0458
EPSS 2% CVSS 6.8
MEDIUM POC PATCH This Month

Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available.

Privilege Escalation Chrome Google +5
NVD
CVE-2012-0645
EPSS 0% CVSS 1.2
LOW Monitor

Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that. Rated low severity (CVSS 1.2). No vendor patch available.

Privilege Escalation Apple Iphone Os
NVD
CVE-2012-0643
EPSS 1% CVSS 9.3
CRITICAL Act Now

The kernel in Apple iOS before 5.1 does not properly handle debug system calls, which allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a crafted program. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation RCE Apple +1
NVD
CVE-2012-0585
EPSS 1% CVSS 5.0
MEDIUM This Month

The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Apple Iphone Os
NVD
CVE-2012-0322
EPSS 0% CVSS 4.3
MEDIUM This Month

The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly restrict access, which allows remote attackers to read arbitrary files via vectors involving an. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Google Es File Explorer +1
NVD
CVE-2012-0371
EPSS 0% CVSS 9.3
CRITICAL Act Now

Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Cisco Wireless Lan Controller Software +12
NVD
CVE-2012-0366
EPSS 0% CVSS 9.0
CRITICAL Act Now

Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Cisco Unity Connection
NVD
CVE-2012-0364
EPSS 1% CVSS 7.8
HIGH PATCH This Week

Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity.

Privilege Escalation Cisco Small Business Srp521W +11
NVD
CVE-2012-1078
EPSS 0% CVSS 5.0
MEDIUM This Month

The System Utilities (sysutils) extension 1.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unspecified vectors related to improper "protection" of the "backup. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Sysutils
NVD
CVE-2012-1056
EPSS 0% CVSS 5.0
MEDIUM PATCH This Month

The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.

Privilege Escalation Forward Sean Robertson
NVD
CVE-2012-1011
EPSS 8% CVSS 7.5
HIGH POC PATCH This Week

actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP WordPress Privilege Escalation +2
NVD Exploit-DB
CVE-2012-0396
EPSS 0% CVSS 4.0
MEDIUM This Month

EMC Documentum xPlore 1.0, 1.1 before P07, and 1.2 does not properly enforce the requirement for BROWSE permission, which allows remote authenticated users to determine the existence of an object, or. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Documentum Xplore Emc
NVD
CVE-2012-0057
EPSS 2% CVSS 6.4
MEDIUM PATCH This Month

PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity.

PHP Privilege Escalation
NVD
CVE-2012-0450
EPSS 0% CVSS 2.1
LOW Monitor

Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Mozilla Firefox +1
NVD
CVE-2012-0445
EPSS 1% CVSS 5.0
MEDIUM This Month

Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Mozilla Firefox +2
NVD
CVE-2012-0056
EPSS 74% 5.1 CVSS 6.9
MEDIUM POC THREAT This Month

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by. Rated medium severity (CVSS 6.9). Public exploit code available and EPSS exploitation probability 73.9%.

Privilege Escalation Linux Linux Kernel
NVD Exploit-DB
CVE-2012-0030
EPSS 1% CVSS 4.9
MEDIUM PATCH This Month

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable.

Privilege Escalation Openstack Essex +1
NVD GitHub
CVE-2012-0005
EPSS 4% CVSS 6.9
MEDIUM This Month

The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean. Rated medium severity (CVSS 6.9). No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 +3
NVD
CVE-2012-0393 Maven
EPSS 59% 4.5 CVSS 6.4
MEDIUM POC PATCH THREAT This Month

The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 58.5%.

Privilege Escalation Apache Java +1
NVD Exploit-DB
Prev Page 163 of 163

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy