Web Security (Symantec) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 19 known versions, newest CVE from 2007-10-05. Vendor: Symantec.
CVEs of Web Security
- CVE-2007-3699 - CVSS 9.3 (critical), 2007-10-05: The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the…
- CVE-2007-0447 - CVSS 9.3 (critical), 2007-10-05: Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted…
- CVE-2007-0563 - CVSS 4.3 (medium), 2007-01-30: Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or…
- CVE-2007-0564 - CVSS 4 (medium), 2007-01-30: The license registering interface in Symantec Web Security (SWS) before 3.0.1.85 allows attackers to cause a denial of service (CPU consumption) by submitting…
- CVE-2005-1346 - CVSS 2.6 (low), 2005-05-02: Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus…
- CVE-2005-0249 - CVSS 7.5 (high), 2005-02-08: Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file…
- CVE-2004-2755 - CVSS 4.3 (medium), 2004-12-31: Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script…
