Show filters
185 Total Results
Displaying 151-160 of 185
Sort by:
Attacker Value
Unknown

CVE-2013-5010

Disclosure Date: January 10, 2014 (last updated October 05, 2023)
The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly handle custom polices, which allows local users to bypass intended policy restrictions and access files or directories via unspecified vectors.
0
Attacker Value
Unknown

CVE-2013-5011

Disclosure Date: January 10, 2014 (last updated October 05, 2023)
Unquoted Windows search path vulnerability in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 allows local users to gain privileges via a crafted program in the %SYSTEMDRIVE% directory.
0
Attacker Value
Unknown

CVE-2013-5009

Disclosure Date: January 10, 2014 (last updated October 05, 2023)
The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging access to a limited-admin account.
0
Attacker Value
Unknown

CVE-2013-1612

Disclosure Date: June 20, 2013 (last updated October 05, 2023)
Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec Endpoint Protection Center (SPC) Small Business Edition 12.0.x, allows remote attackers to execute arbitrary code via unspecified vectors.
0
Attacker Value
Unknown

CVE-2012-4348

Disclosure Date: December 18, 2012 (last updated October 05, 2023)
The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via unspecified vectors.
0
Attacker Value
Unknown

CVE-2012-4953

Disclosure Date: November 14, 2012 (last updated October 05, 2023)
The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and Symantec Scan Engine (SSE) before 5.2.8 does not properly perform bounds checks of the contents of CAB archives, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file.
0
Attacker Value
Unknown

CVE-2011-5101

Disclosure Date: August 22, 2012 (last updated October 04, 2023)
The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam.
0
Attacker Value
Unknown

CVE-2012-1821

Disclosure Date: May 24, 2012 (last updated October 04, 2023)
The Network Threat Protection module in the Manager component in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.700x on Windows Server 2003 allows remote attackers to cause a denial of service (web-server outage, or daemon crash or hang) via a flood of packets that triggers automated blocking of network traffic.
0
Attacker Value
Unknown

CVE-2012-0294

Disclosure Date: May 23, 2012 (last updated October 04, 2023)
Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to delete files via unspecified vectors.
0
Attacker Value
Unknown

CVE-2012-0289

Disclosure Date: May 23, 2012 (last updated October 04, 2023)
Buffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec Network Access Control (SNAC) 11.0.600x through 11.0.710x allows local users to gain privileges, and modify data or cause a denial of service, via a crafted script.
0