cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2016-5311,https://securityvulnerability.io/vulnerability/CVE-2016-5311,Privilege Escalation Vulnerability in Symantec Norton Products,"A privilege escalation vulnerability has been identified in a range of Symantec Norton products, stemming from improper DLL preloading that lacks appropriate path restrictions. This security flaw could enable a local malicious user to gain unauthorized system privileges, potentially allowing them to execute arbitrary code with elevated rights, thereby compromising the affected system's integrity and security.",Symantec,"Norton Antivirus, Norton Antivirus With Backup, Norton Security, Norton Security With Backup, Norton Internet Security, Norton 360,Endpoint Protection Small Business Edition Cloud, And Endpoint Protection Cloud Client",7.8,HIGH,0.0022799998987466097,false,,false,false,false,,,false,false,,2020-01-09T19:30:52.000Z,0
CVE-2012-4953,https://securityvulnerability.io/vulnerability/CVE-2012-4953,,"The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and Symantec Scan Engine (SSE) before 5.2.8 does not properly perform bounds checks of the contents of CAB archives, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file.",Symantec,"Antivirus,Scan Engine,Endpoint Protection",,,0.01906999945640564,false,,false,false,false,,,false,false,,2012-11-14T11:00:00.000Z,0
CVE-2010-3497,https://securityvulnerability.io/vulnerability/CVE-2010-3497,,"Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution. NOTE: the researcher indicates that a vendor response was received, stating that this issue ""falls into the work of our Firewall and not our AV (per our methodology of layers of defense).""",Symantec,Norton Antivirus,,,0.00791999977082014,false,,false,false,false,,,false,false,,2012-08-22T10:42:00.000Z,0
CVE-2011-0688,https://securityvulnerability.io/vulnerability/CVE-2011-0688,,"Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discovered by Junaid Bohio, a different vulnerability than CVE-2010-0110 and CVE-2010-0111.  NOTE: some of these details are obtained from third party information.",Symantec,Antivirus,,,0.014179999940097332,false,,false,false,false,,,false,false,,2011-01-31T20:00:00.000Z,0
CVE-2010-0110,https://securityvulnerability.io/vulnerability/CVE-2010-0110,,"Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via (1) a long string to msgsys.exe, related to the AMSSendAlertAct function in AMSLIB.dll in the Intel Alert Handler service (aka Symantec Intel Handler service); a long (2) modem string or (3) PIN number to msgsys.exe, related to pagehndl.dll in the Intel Alert Handler service; or (4) a message to msgsys.exe, related to iao.exe in the Intel Alert Originator service.",Symantec,Antivirus,,,0.8865600228309631,false,,false,false,false,,,false,false,,2011-01-31T20:00:00.000Z,0
CVE-2010-0111,https://securityvulnerability.io/vulnerability/CVE-2010-0111,,"HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary programs by sending msgsys.exe a UNC share pathname, which is used directly in a CreateProcessA (aka CreateProcess) call.",Symantec,Antivirus,,,0.273470014333725,false,,false,false,false,,,false,false,,2011-01-31T20:00:00.000Z,0
CVE-2010-0107,https://securityvulnerability.io/vulnerability/CVE-2010-0107,,"Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.  NOTE: this is only a vulnerability if the attacker can ""masquerade as an authorized site.""",Symantec,"Client Security,Norton Internet Security,Norton 360,Norton Antivirus",,,0.047210000455379486,false,,false,false,false,,,false,false,,2010-02-23T20:00:00.000Z,0
CVE-2010-0108,https://securityvulnerability.io/vulnerability/CVE-2010-0108,,"Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code via a long argument to the SetRemoteComputerName function.",Symantec,"Antivirus,Client Security,Endpoint Protection",,,0.6726099848747253,false,,false,false,false,,,false,false,,2010-02-19T17:00:00.000Z,0
CVE-2010-0106,https://securityvulnerability.io/vulnerability/CVE-2010-0106,,"The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled, allows remote attackers to cause a denial of service (prevention of on-demand scanning) via ""specific events"" that prevent the user from having read access to unspecified resources.",Symantec,"Antivirus,Client Security,Endpoint Protection",,,0.001930000027641654,false,,false,false,false,,,false,false,,2010-02-19T17:00:00.000Z,0
CVE-2009-3104,https://securityvulnerability.io/vulnerability/CVE-2009-3104,,"Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning is installed and enabled, allows remote attackers to cause a denial of service (CPU consumption and persistent connection loss) via unknown attack vectors.",Symantec,"Client Security,Norton Internet Security,Antivirus,Norton Antivirus",,,0.00394000019878149,false,,false,false,false,,,false,false,,2009-09-08T22:00:00.000Z,0
CVE-2009-1432,https://securityvulnerability.io/vulnerability/CVE-2009-1432,,"Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) before 11.0 MR2, allows remote attackers to inject arbitrary text into the login screen, and possibly conduct phishing attacks, via vectors involving a URL that is not properly handled.",Symantec,"Antivirus,Client Security,Endpoint Protection",,,0.03359999880194664,false,,false,false,false,,,false,false,,2009-04-30T20:00:00.000Z,0
CVE-2009-1431,https://securityvulnerability.io/vulnerability/CVE-2009-1431,,"XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary code by placing the code on a (1) share or (2) WebDAV server, and then sending the UNC share pathname to this service.",Symantec,"Client Security,Antivirus,Antivirus Central Quarantine Server,Endpoint Protection,System Center",,,0.9380300045013428,false,,false,false,false,,,false,false,,2009-04-29T15:00:00.000Z,0
CVE-2009-1430,https://securityvulnerability.io/vulnerability/CVE-2009-1430,,"Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allow remote attackers to execute arbitrary code via (1) a crafted packet or (2) data that ostensibly arrives from the MsgSys.exe process.",Symantec,"Client Security,Antivirus,Antivirus Central Quarantine Server,Endpoint Protection,System Center",,,0.971809983253479,false,,false,false,false,,,false,false,,2009-04-29T15:00:00.000Z,0
CVE-2009-1429,https://securityvulnerability.io/vulnerability/CVE-2009-1429,,"The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary commands via a crafted packet whose contents are interpreted as a command to be launched in a new process by the CreateProcessA function.",Symantec,"Client Security,Antivirus,Antivirus Central Quarantine Server,Endpoint Protection,System Center",,,0.9597899913787842,false,,false,false,false,,,false,false,,2009-04-29T15:00:00.000Z,0
CVE-2009-1428,https://securityvulnerability.io/vulnerability/CVE-2009-1428,,"Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection (SEP) 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, related to ""two parsing errors.""",Symantec,"Norton Internet Security,Antivirus,Endpoint Protection,Norton 360",,,0.011789999902248383,false,,false,false,false,,,false,false,,2009-04-29T15:00:00.000Z,0
CVE-2008-5543,https://securityvulnerability.io/vulnerability/CVE-2008-5543,,"Symantec AntiVirus (SAV) 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka ""EXE info"") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.",Symantec,Antivirus,,,0.005030000116676092,false,,false,false,false,,,false,false,,2008-12-12T18:13:00.000Z,0
CVE-2008-0313,https://securityvulnerability.io/vulnerability/CVE-2008-0313,,"The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly determine the location of the AutoFix Tool, which allows remote attackers to execute arbitrary code via a remote (1) WebDAV or (2) SMB share.",Symantec,"Norton Internet Security,Norton Antivirus,System Works,Norton 360",,,0.009469999931752682,false,,false,false,false,,,false,false,,2008-04-08T17:00:00.000Z,0
CVE-2008-0312,https://securityvulnerability.io/vulnerability/CVE-2008-0312,,"Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute arbitrary code via a long argument to the GetEventLogInfo method.  NOTE: some of these details are obtained from third party information.",Symantec,"Norton 360,Norton Antivirus,Norton Internet Security,Norton System Works",,,0.07197000086307526,false,,false,false,false,,,false,false,,2008-04-08T17:00:00.000Z,0
CVE-2008-0308,https://securityvulnerability.io/vulnerability/CVE-2008-0308,,"Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service (memory consumption) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).",Symantec,"Symantec Antivirus Filtering Domino Mpe,Symantec Antivirus Ms Isa,Symantec Antivirus Scan Engine,Symantec Antivirus Messaging,Scan Engine,Symantec Antivirus Microsoft Sharepoint,Symantec Mail Security Exchange,Symantec Antivirus Clearswift,Symantec Antivirus Scan Engine Caching,Symantec Antivirus Network Attached Storage",,,0.014990000054240227,false,,false,false,false,,,false,false,,2008-02-28T20:00:00.000Z,0
CVE-2008-0309,https://securityvulnerability.io/vulnerability/CVE-2008-0309,,"Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).",Symantec,"Symantec Antivirus Filtering Domino Mpe,Symantec Mail Security For Microsoft Exchange,Symantec Antivirus Scan Engine For Ms Isa,Symantec Antivirus Scan Engine Clearswift,Symantec Antivirus Scan Engine,Scan Engine,Symantec Antivirus Scan Engine For Microsoft Sharepoint,Symantec Antivirus Scan Engine Messaging,Symantec Antivirus Scan Engine Caching,Symantec Antivirus Network Attached Storage",,,0.09509000182151794,false,,false,false,false,,,false,false,,2008-02-28T20:00:00.000Z,0
CVE-2007-5829,https://securityvulnerability.io/vulnerability/CVE-2007-5829,,"The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions (group writable), which allows local admin users to gain root privileges by replacing unspecified files, which are executed when a user with physical access inserts a disk and the ""Show Progress During Mount Scans"" option is enabled.",Symantec,"Norton Antivirus,Norton Internet Security",,,0.0005000000237487257,false,,false,false,false,,,false,false,,2007-11-05T19:00:00.000Z,0
CVE-2007-0447,https://securityvulnerability.io/vulnerability/CVE-2007-0447,,Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.,Symantec,"Mail Security,Client Security,Norton Antivirus,Norton Internet Security,Antivirus Scan Engine,Web Security,Brightmail Antispam,Norton System Works,Symantec Antivirus Filtering \+for Domino,Norton Personal Firewall",,,0.1824599951505661,false,,false,false,false,,,false,false,,2007-10-05T21:00:00.000Z,0
CVE-2007-3699,https://securityvulnerability.io/vulnerability/CVE-2007-3699,,The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.,Symantec,"Mail Security,Client Security,Norton Antivirus,Norton Internet Security,Antivirus Scan Engine,Web Security,Brightmail Antispam,Norton System Works,Symantec Antivirus Filtering \+for Domino,Norton Personal Firewall",,,0.0521400012075901,false,,false,false,false,,,false,false,,2007-10-05T21:00:00.000Z,0
CVE-2007-2955,https://securityvulnerability.io/vulnerability/CVE-2007-2955,,"Multiple unspecified ""input validation error"" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via (1) the AnomalyList property to AxSysListView32 and (2) Anomaly property to AxSysListView32OAA.",Symantec,"Norton System Works,Norton Internet Security,Norton Antivirus",,,0.9056199789047241,false,,false,false,false,,,false,false,,2007-08-09T21:00:00.000Z,0
CVE-2007-3800,https://securityvulnerability.io/vulnerability/CVE-2007-3800,,"Unspecified vulnerability in the Real-time scanner (RTVScan) component in Symantec AntiVirus Corporate Edition 9.0 through 10.1 and Client Security 2.0 through 3.1, when the Notification Message window is enabled, allows local users to gain privileges via crafted code.",Symantec,"Norton Antivirus,Client Security",,,0.0004299999854993075,false,,false,false,false,,,false,false,,2007-07-16T23:30:00.000Z,0