cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2016-5311,https://securityvulnerability.io/vulnerability/CVE-2016-5311,Privilege Escalation Vulnerability in Symantec Norton Products,"A privilege escalation vulnerability has been identified in a range of Symantec Norton products, stemming from improper DLL preloading that lacks appropriate path restrictions. This security flaw could enable a local malicious user to gain unauthorized system privileges, potentially allowing them to execute arbitrary code with elevated rights, thereby compromising the affected system's integrity and security.",Symantec,"Norton Antivirus, Norton Antivirus With Backup, Norton Security, Norton Security With Backup, Norton Internet Security, Norton 360,Endpoint Protection Small Business Edition Cloud, And Endpoint Protection Cloud Client",7.8,HIGH,0.0022799998987466097,false,,false,false,false,,,false,false,,2020-01-09T19:30:52.000Z,0
CVE-2018-18366,https://securityvulnerability.io/vulnerability/CVE-2018-18366,Kernel Memory Disclosure in Symantec Norton Security and SEP Products,"A vulnerability exists in Symantec Norton Security and SEP products, where a specially crafted IRP request can lead to kernel memory disclosure. This issue allows the driver to return uninitialized memory, potentially exposing sensitive data in the system memory. Users of affected versions are advised to upgrade their software to mitigate the risk and enhance the security of their systems.",Symantec Corporation,"Norton Security,Sep (windows Client),Sep Sbe,Sep Cloud",6.5,MEDIUM,0.00044999999227002263,false,,false,false,false,,,false,false,,2019-04-25T19:13:05.000Z,0
CVE-2010-0107,https://securityvulnerability.io/vulnerability/CVE-2010-0107,,"Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.  NOTE: this is only a vulnerability if the attacker can ""masquerade as an authorized site.""",Symantec,"Client Security,Norton Internet Security,Norton 360,Norton Antivirus",,,0.047210000455379486,false,,false,false,false,,,false,false,,2010-02-23T20:00:00.000Z,0
CVE-2010-0108,https://securityvulnerability.io/vulnerability/CVE-2010-0108,,"Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code via a long argument to the SetRemoteComputerName function.",Symantec,"Antivirus,Client Security,Endpoint Protection",,,0.6726099848747253,false,,false,false,false,,,false,false,,2010-02-19T17:00:00.000Z,0
CVE-2010-0106,https://securityvulnerability.io/vulnerability/CVE-2010-0106,,"The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled, allows remote attackers to cause a denial of service (prevention of on-demand scanning) via ""specific events"" that prevent the user from having read access to unspecified resources.",Symantec,"Antivirus,Client Security,Endpoint Protection",,,0.001930000027641654,false,,false,false,false,,,false,false,,2010-02-19T17:00:00.000Z,0
CVE-2009-3104,https://securityvulnerability.io/vulnerability/CVE-2009-3104,,"Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning is installed and enabled, allows remote attackers to cause a denial of service (CPU consumption and persistent connection loss) via unknown attack vectors.",Symantec,"Client Security,Norton Internet Security,Antivirus,Norton Antivirus",,,0.00394000019878149,false,,false,false,false,,,false,false,,2009-09-08T22:00:00.000Z,0
CVE-2009-1432,https://securityvulnerability.io/vulnerability/CVE-2009-1432,,"Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) before 11.0 MR2, allows remote attackers to inject arbitrary text into the login screen, and possibly conduct phishing attacks, via vectors involving a URL that is not properly handled.",Symantec,"Antivirus,Client Security,Endpoint Protection",,,0.03359999880194664,false,,false,false,false,,,false,false,,2009-04-30T20:00:00.000Z,0
CVE-2009-1431,https://securityvulnerability.io/vulnerability/CVE-2009-1431,,"XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary code by placing the code on a (1) share or (2) WebDAV server, and then sending the UNC share pathname to this service.",Symantec,"Client Security,Antivirus,Antivirus Central Quarantine Server,Endpoint Protection,System Center",,,0.9380300045013428,false,,false,false,false,,,false,false,,2009-04-29T15:00:00.000Z,0
CVE-2009-1430,https://securityvulnerability.io/vulnerability/CVE-2009-1430,,"Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allow remote attackers to execute arbitrary code via (1) a crafted packet or (2) data that ostensibly arrives from the MsgSys.exe process.",Symantec,"Client Security,Antivirus,Antivirus Central Quarantine Server,Endpoint Protection,System Center",,,0.971809983253479,false,,false,false,false,,,false,false,,2009-04-29T15:00:00.000Z,0
CVE-2009-1429,https://securityvulnerability.io/vulnerability/CVE-2009-1429,,"The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary commands via a crafted packet whose contents are interpreted as a command to be launched in a new process by the CreateProcessA function.",Symantec,"Client Security,Antivirus,Antivirus Central Quarantine Server,Endpoint Protection,System Center",,,0.9597899913787842,false,,false,false,false,,,false,false,,2009-04-29T15:00:00.000Z,0
CVE-2007-0447,https://securityvulnerability.io/vulnerability/CVE-2007-0447,,Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.,Symantec,"Mail Security,Client Security,Norton Antivirus,Norton Internet Security,Antivirus Scan Engine,Web Security,Brightmail Antispam,Norton System Works,Symantec Antivirus Filtering \+for Domino,Norton Personal Firewall",,,0.1824599951505661,false,,false,false,false,,,false,false,,2007-10-05T21:00:00.000Z,0
CVE-2007-3699,https://securityvulnerability.io/vulnerability/CVE-2007-3699,,The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.,Symantec,"Mail Security,Client Security,Norton Antivirus,Norton Internet Security,Antivirus Scan Engine,Web Security,Brightmail Antispam,Norton System Works,Symantec Antivirus Filtering \+for Domino,Norton Personal Firewall",,,0.0521400012075901,false,,false,false,false,,,false,false,,2007-10-05T21:00:00.000Z,0
CVE-2007-3800,https://securityvulnerability.io/vulnerability/CVE-2007-3800,,"Unspecified vulnerability in the Real-time scanner (RTVScan) component in Symantec AntiVirus Corporate Edition 9.0 through 10.1 and Client Security 2.0 through 3.1, when the Notification Message window is enabled, allows local users to gain privileges via crafted code.",Symantec,"Norton Antivirus,Client Security",,,0.0004299999854993075,false,,false,false,false,,,false,false,,2007-07-16T23:30:00.000Z,0
CVE-2007-3771,https://securityvulnerability.io/vulnerability/CVE-2007-3771,,"Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service (service crash) via a long (1) To, (2) From, or (3) Subject header in an outbound SMTP e-mail message.  NOTE: the original vendor advisory referenced CVE-2006-3456, but this was an error.",Symantec,"Client Security,Norton Antivirus",,,0.0006000000284984708,false,,false,false,false,,,false,false,,2007-07-15T22:00:00.000Z,0
CVE-2007-3673,https://securityvulnerability.io/vulnerability/CVE-2007-3673,,"Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewall, and System Works 2005 and 2006; allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in an IOCTL 0x83022323 request to \\symTDI\, which results in memory overwrite.",Symantec,"Norton Antivirus,Client Security,Norton System Works,Norton Antispam,Norton Personal Firewall,Norton Internet Security",,,0.0004199999966658652,false,,false,false,false,,,false,false,,2007-07-15T21:00:00.000Z,0
CVE-2007-3095,https://securityvulnerability.io/vulnerability/CVE-2007-3095,,"Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to ""disable the authentication system"" and bypass authentication via unknown vectors.",Symantec,"Norton Antivirus,Client Security,Reporting Server",,,0.002839999971911311,false,,false,false,false,,,false,false,,2007-06-06T22:00:00.000Z,0
CVE-2007-3022,https://securityvulnerability.io/vulnerability/CVE-2007-3022,,"Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks.",Symantec,"Norton Antivirus,Client Security,Reporting Server",,,0.03773000091314316,false,,false,false,false,,,false,false,,2007-06-05T21:00:00.000Z,0
CVE-2007-3021,https://securityvulnerability.io/vulnerability/CVE-2007-3021,,"Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export.",Symantec,"Norton Antivirus,Client Security,Reporting Server",,,0.012609999626874924,false,,false,false,false,,,false,false,,2007-06-05T21:00:00.000Z,0
CVE-2007-1793,https://securityvulnerability.io/vulnerability/CVE-2007-1793,,"SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions.  NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.",Symantec,"Client Security,Antivirus,Norton Internet Security,Norton System Works,Norton Antivirus,Norton Personal Firewall,Norton Antispam,Norton 360",,,0.0006600000197067857,false,,false,false,false,,,false,false,,2007-04-02T22:00:00.000Z,0
CVE-2007-1476,https://securityvulnerability.io/vulnerability/CVE-2007-1476,,"The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver's \Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855.",Symantec,"Norton Antivirus,Client Security,Norton System Works,Norton Personal Firewall,Norton Antispam,Norton Internet Security",,,0.0004299999854993075,false,,false,false,false,,,false,false,,2007-03-16T21:00:00.000Z,0
CVE-2006-3455,https://securityvulnerability.io/vulnerability/CVE-2006-3455,,"The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function.",Symantec,"Norton Antivirus,Client Security",,,0.0006000000284984708,false,,false,false,false,,,false,false,,2006-10-23T20:00:00.000Z,0
CVE-2006-4855,https://securityvulnerability.io/vulnerability/CVE-2006-4855,,"The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.",Symantec,"Norton Antivirus,Client Security,Norton Internet Security,Norton Personal Firewall,Norton System Works,Pcanywhere,Host Ids",,,0.0004199999966658652,false,,false,false,false,,,false,false,,2006-09-19T18:00:00.000Z,0
CVE-2006-4802,https://securityvulnerability.io/vulnerability/CVE-2006-4802,,"Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a ""second format string vulnerability"" as found by the vendor.",Symantec,"Client Security,Norton Antivirus",,,0.024739999324083328,false,,false,false,false,,,false,false,,2006-09-14T22:00:00.000Z,0
CVE-2006-3454,https://securityvulnerability.io/vulnerability/CVE-2006-3454,,"Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in (1) Tamper Protection and (2) Virus Alert Notification messages.",Symantec,"Client Security,Norton Antivirus",,,0.0010999999940395355,false,,false,false,false,,,false,false,,2006-09-14T00:00:00.000Z,0
CVE-2006-2630,https://securityvulnerability.io/vulnerability/CVE-2006-2630,,Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors.,Symantec,"Norton Antivirus,Client Security",,,0.971809983253479,false,,false,false,false,,,false,false,,2006-05-27T21:00:00.000Z,0