CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 14/01/2022 |
| CVE-2021-1405 | ALTO7.5 | A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.1 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper variable initialization that may result in an NULL poi | 08/04/2021 |
| CVE-2021-1404 | ALTO7.5 | A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a heap buffer over-read. A | 08/04/2021 |
| CVE-2021-1252 | ALTO7.5 | A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper error handling that may result in an infinite loop. An | 08/04/2021 |
| CVE-2021-27506 | MÉDIO5.5 | The ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) is subject to DoS in case of parsing of malformed png files. This affect Netasq versions 9.1.0 to 9.1.11 and SNS versions 1.0.0 to 4.2.0. This issue is fixed in SNS 3.7.19, 3.11.7 and 4.2.1. | 19/03/2021 |
| CVE-2020-3481 | ALTO7.5 | A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a null pointer dereference. An attacker could exploit this vulnerabil | 20/07/2020 |
| CVE-2020-3123 | ALTO7.5 | A vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software versions 0.102.1 and 0.102.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to an out-of-bounds read affecting users that have enabled the | 05/02/2020 |
| CVE-2019-15961 | MÉDIO6.5 | A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to inefficient MIME parsing routines that result in extremely long scan | 15/01/2020 |
| CVE-2013-7089 | ALTO7.5 | ClamAV before 0.97.7: dbg_printhex possible information leak | 15/11/2019 |
| CVE-2013-7088 | CRÍTICO9.8 | ClamAV before 0.97.7 has buffer overflow in the libclamav component | 15/11/2019 |
| CVE-2013-7087 | CRÍTICO9.8 | ClamAV before 0.97.7 has WWPack corrupt heap memory | 15/11/2019 |
| CVE-2007-6745 | CRÍTICO9.8 | clamav 0.91.2 suffers from a floating point exception when using ScanOLE2. | 07/11/2019 |
| CVE-2007-0899 | CRÍTICO9.8 | There is a possible heap overflow in libclamav/fsg.c before 0.100.0. | 06/11/2019 |
| CVE-2019-1789 | ALTO7.5 | ClamAV versions prior to 0.101.2 are susceptible to a denial of service (DoS) vulnerability. An out-of-bounds heap read condition may occur when scanning PE files. An example is Windows EXE and DLL files that have been packed using Aspack as a result of inadequate bound-checking. | 05/11/2019 |
| CVE-2019-12625 | ALTO7.5 | ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service condition by sending crafted messages to an affected system. | 05/11/2019 |
| CVE-2019-1798 | MÉDIO5.5 | A vulnerability in the Portable Executable (PE) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of proper input and validation check | 08/04/2019 |
| CVE-2019-1788 | MÉDIO5.5 | A vulnerability in the Object Linking & Embedding (OLE2) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of proper input and validat | 08/04/2019 |
| CVE-2019-1787 | MÉDIO5.5 | A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of proper data handling mecha | 08/04/2019 |