Show filters
17 Total Results
Displaying 11-17 of 17
Sort by:
Attacker Value
Unknown
CVE-2023-31702
Disclosure Date: May 17, 2023 (last updated October 08, 2023)
SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1.
0
Attacker Value
Unknown
CVE-2021-26624
Disclosure Date: April 01, 2022 (last updated October 07, 2023)
An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient execution conditions related to "runasroot" command. This vulnerability can induce remote attackers to exploit root privileges by manipulating parameter values.
0
Attacker Value
Unknown
CVE-2018-18388
Disclosure Date: December 20, 2018 (last updated November 27, 2024)
eScan Agent Application (MWAGENT.EXE) 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local attackers to execute arbitrary commands by sending a carefully crafted payload to TCP port 2222.
0
Attacker Value
Unknown
CVE-2018-10098
Disclosure Date: July 13, 2018 (last updated November 27, 2024)
In MicroWorld eScan Internet Security Suite (ISS) for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x830020E0 IOCTL request to \\.\econceal to cause a denial of service (BSOD).
0
Attacker Value
Unknown
CVE-2018-6202
Disclosure Date: January 25, 2018 (last updated November 26, 2024)
In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020F8.
0
Attacker Value
Unknown
CVE-2018-6203
Disclosure Date: January 25, 2018 (last updated November 26, 2024)
In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300210C.
0
Attacker Value
Unknown
CVE-2018-6201
Disclosure Date: January 25, 2018 (last updated November 26, 2024)
In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020E0 or 0x830020E4.
0
