cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2020-10947,https://securityvulnerability.io/vulnerability/CVE-2020-10947,,Mac Endpoint for Sophos Central before 9.9.6 and Mac Endpoint for Sophos Home before 2.2.6 allow Privilege Escalation.,Sophos,"Anti-virus For Sophos Central,Anti-virus For Sophos Home",8.8,HIGH,0.0010400000028312206,false,false,false,false,,false,false,2020-04-17T12:38:45.000Z,0 CVE-2014-2385,https://securityvulnerability.io/vulnerability/CVE-2014-2385,,"Multiple cross-site scripting (XSS) vulnerabilities in the web UI in Sophos Anti-Virus for Linux before 9.6.1 allow local users to inject arbitrary web script or HTML via the (1) newListList:ExcludeFileOnExpression, (2) newListList:ExcludeFilesystems, or (3) newListList:ExcludeMountPaths parameter to exclusion/configure or (4) text:EmailServer or (5) newListList:Email parameter to notification/configure.",Sophos,Anti-virus,,,0.0022700000554323196,false,false,false,false,,false,false,2014-07-22T14:00:00.000Z,0 CVE-2014-1213,https://securityvulnerability.io/vulnerability/CVE-2014-1213,,"Sophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set an ACL for certain global and session objects, which allows local users to bypass anti-virus protection, cause a denial of service (resource consumption, CPU consumption, and eventual crash) or spoof ""ready for update"" messages by performing certain operations on mutexes or events including (1) DataUpdateRequest, (2) MmfMutexSAV-****, (3) MmfMutexSAV-Info, (4) ReadyForUpdateSAV-****, (5) ReadyForUpdateSAV-Info, (6) SAV-****, (7) SAV-Info, (8) StateChange, (9) SuspendedSAV-****, (10) SuspendedSAV-Info, (11) UpdateComplete, (12) UpdateMutex, (13) UpdateRequest, or (14) SophosALMonSessionInstance, as demonstrated by triggering a ReadyForUpdateSAV event and modifying the UpdateComplete, UpdateMutex, and UpdateRequest objects.",Sophos,"Sophos Anti-virus,Scanning Engine",,,0.0006000000284984708,false,false,false,false,,false,false,2014-02-10T23:00:00.000Z,0 CVE-2012-1438,https://securityvulnerability.io/vulnerability/CVE-2012-1438,,The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via an Office file with a ustar character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Office parser implementations.,Sophos,"Sophos Anti-virus,Comodo Antivirus",,,0.8440200090408325,false,false,false,false,,false,false,2012-03-21T10:11:00.000Z,0 CVE-2012-1450,https://securityvulnerability.io/vulnerability/CVE-2012-1450,,"The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved3 field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.",Sophos,"Sophos Anti-virus,Ikarus Virus Utilities T3 Command Line Scanner,Anti-malware",,,0.9502500295639038,false,false,false,false,,false,false,2012-03-21T10:00:00.000Z,0 CVE-2010-2308,https://securityvulnerability.io/vulnerability/CVE-2010-2308,,Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function.,Sophos,Anti-virus,,,0.0005699999746866524,false,false,false,false,,false,false,2010-06-16T20:00:00.000Z,0 CVE-2008-6904,https://securityvulnerability.io/vulnerability/CVE-2008-6904,,"Multiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via crafted files that have been packed with (1) armadillo, (2) asprotect, or (3) asprotectSKE.",Sophos,"Anti-virus,Anti-virus7.6.3",,,0.066600002348423,false,false,false,false,,false,false,2009-08-06T01:00:00.000Z,0 CVE-2008-6903,https://securityvulnerability.io/vulnerability/CVE-2008-6903,,"Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti-Virus for OS X before 4.9.18, Anti-Virus for Linux before 6.4.5, Anti-Virus for UNIX before 7.0.5, Anti-Virus for Unix and Netware before 4.37.0, Sophos EM Library, and Sophos small business solutions, when CAB archive scanning is enabled, allows remote attackers to cause a denial of service (segmentation fault) via a ""fuzzed"" CAB archive file, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.",Sophos,"Anti-virus,Anti-virus7.6.3",,,0.013799999840557575,false,false,false,false,,false,false,2009-08-06T00:00:00.000Z,0 CVE-2008-5541,https://securityvulnerability.io/vulnerability/CVE-2008-5541,,"Sophos Anti-Virus 4.33.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka ""EXE info"") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.",Sophos,Anti-virus,,,0.009150000289082527,false,false,false,false,,false,false,2008-12-12T18:13:00.000Z,0 CVE-2008-3177,https://securityvulnerability.io/vulnerability/CVE-2008-3177,,"Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments.",Sophos,"Es1000,Es4000,Sophos Anti-virus,Sophos Puremessage Anti-virus",,,0.04382000118494034,false,false,false,false,,false,false,2008-07-15T18:03:00.000Z,0 CVE-2008-1737,https://securityvulnerability.io/vulnerability/CVE-2008-1737,,"Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service (reboot with the product disabled) and possibly gain privileges via a zero value in a certain length field in the ObjectAttributes argument to the NtCreateKey hooked System Service Descriptor Table (SSDT) function.",Sophos,Anti-virus,,,0.0004199999966658652,false,false,false,false,,false,false,2008-04-30T00:10:00.000Z,0 CVE-2007-4787,https://securityvulnerability.io/vulnerability/CVE-2007-4787,,"The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.",Sophos,"Sophos Anti-virus,Scanning Engine",,,0.06418000161647797,false,false,false,false,,false,false,2007-09-10T21:00:00.000Z,0 CVE-2007-4512,https://securityvulnerability.io/vulnerability/CVE-2007-4512,,Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows remote attackers to inject arbitrary web script or HTML via an archive with a file that matches a virus signature and has a crafted filename that is not properly handled by the print function in SavMain.exe.,Sophos,Anti-virus,,,0.0033400000538676977,false,false,false,false,,false,false,2007-09-10T17:00:00.000Z,0 CVE-2007-4577,https://securityvulnerability.io/vulnerability/CVE-2007-4577,,"Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a ""BZip bomb"").",Sophos,"Anti-virus,Small Business Suite,Scanning Engine",,,0.030799999833106995,false,false,false,false,,false,false,2007-08-28T18:00:00.000Z,0 CVE-2007-4578,https://securityvulnerability.io/vulnerability/CVE-2007-4578,,"Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an ""integer cast around"". NOTE: as of 20070828, the vendor says this is a DoS and the researcher says this allows code execution, but the researcher is reliable.",Sophos,"Anti-virus,Small Business Suite,Scanning Engine",,,0.09210000187158585,false,false,false,false,,false,false,2007-08-28T18:00:00.000Z,0 CVE-2006-6335,https://securityvulnerability.io/vulnerability/CVE-2006-6335,,"Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via (1) a SIT archive with a long filename that is not null-terminated, which triggers a heap-based overflow in veex.dll due to improper length calculation, and (2) a CPIO archive, with a long filename that is not null-terminated, which triggers a stack-based overflow in veex.dll.",Sophos,Sophos Anti-virus,,,0.09645000100135803,false,false,false,false,,false,false,2006-12-12T20:00:00.000Z,0 CVE-2006-5647,https://securityvulnerability.io/vulnerability/CVE-2006-5647,,"Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a malformed CHM file with a large name length in the CHM chunk header, aka ""CHM name length memory consumption vulnerability.""",Sophos,"Anti-virus,Endpoint Security",,,0.12110999971628189,false,false,false,false,,false,false,2006-11-01T15:00:00.000Z,0 CVE-2006-5646,https://securityvulnerability.io/vulnerability/CVE-2006-5646,,"Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service (memory corruption) via a CHM file with an LZX decompression header that specifies a Window_size of 0.",Sophos,"Anti-virus,Endpoint Security",,,0.5958999991416931,false,false,false,false,,false,false,2006-11-01T15:00:00.000Z,0 CVE-2006-5645,https://securityvulnerability.io/vulnerability/CVE-2006-5645,,"Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when ""Enabled scanning of archives"" is set, allows remote attackers to cause a denial of service (infinite loop) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero.",Sophos,"Anti-virus,Endpoint Security",,,0.18569999933242798,false,false,false,false,,false,false,2006-11-01T15:00:00.000Z,0 CVE-2006-4839,https://securityvulnerability.io/vulnerability/CVE-2006-4839,,Sophos Anti-Virus 5.1 allows remote attackers to cause a denial of service (memory consumption) via a file that is compressed with Petite and contains a large number of sections.,Sophos,Sophos Anti-virus,,,0.030549999326467514,false,false,false,false,,false,false,2006-11-01T15:00:00.000Z,0 CVE-2006-0994,https://securityvulnerability.io/vulnerability/CVE-2006-0994,,"Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, allows remote attackers to execute arbitrary code via a CAB file with ""invalid folder count values,"" which leads to heap corruption.",Sophos,Sophos Anti-virus,,,0.9435999989509583,false,false,false,false,,false,false,2006-05-10T10:00:00.000Z,0 CVE-2005-4680,https://securityvulnerability.io/vulnerability/CVE-2005-4680,,"Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned.",Sophos,Sophos Anti-virus,,,0.0037899999879300594,false,false,false,false,,false,false,2005-12-31T05:00:00.000Z,0 CVE-2005-3382,https://securityvulnerability.io/vulnerability/CVE-2005-3382,,"Multiple interpretation error in Sophos 3.91 with the 2.28.4 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an ""MZ"" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a ""triple headed"" program that contains EXE, EML, and HTML content, aka the ""magic byte bug.""",Sophos,Sophos Anti-virus,,,0.01054999977350235,false,false,false,false,,false,false,2005-10-30T14:34:00.000Z,0 CVE-2005-3216,https://securityvulnerability.io/vulnerability/CVE-2005-3216,,"Multiple interpretation error in unspecified versions of Sophos Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.",Sophos,Sophos Anti-virus,,,0.0037299999967217445,false,false,false,false,,false,false,2005-10-14T04:00:00.000Z,0 CVE-2005-2768,https://securityvulnerability.io/vulnerability/CVE-2005-2768,,"Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote attackers to execute arbitrary code via a Visio file with a crafted sub record length.",Sophos,Sophos Anti-virus,,,0.11845000088214874,false,false,false,false,,false,false,2005-09-02T23:03:00.000Z,0