CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 18/07/2019 |
| CVE-2019-8285 | 高危8.8 | Kaspersky Lab Antivirus Engine version before 04.apr.2019 has a heap-based buffer overflow vulnerability that potentially allow arbitrary code execution | 08/05/2019 |
| CVE-2018-6306 | 高危7.8 | Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538. | 19/04/2018 |
| CVE-2018-6291 | 中危6.1 | WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1. | 06/02/2018 |
| CVE-2018-6290 | 高危7.8 | Local Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1. | 06/02/2018 |
| CVE-2018-6289 | 严重9.8 | Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1. | 06/02/2018 |
| CVE-2018-6288 | 高危8.8 | Cross-site Request Forgery leading to Administrative account takeover in Kaspersky Secure Mail Gateway version 1.1. | 06/02/2018 |
| CVE-2017-12823 | 高危7.8 | Kernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1.2.0.300 leads to local privilege escalation. | 08/12/2017 |
| CVE-2017-12817 | 高危7.5 | In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted. | 25/08/2017 |
| CVE-2017-12816 | 严重9.8 | In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality by using Android IPC. | 25/08/2017 |
| CVE-2017-9813 | 中危6.1 | In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312), the scriptName parameter of the licenseKeyInfo action method is vulnerable to cross-site scripting (XSS). | 17/07/2017 |
| CVE-2017-9812 | 高危7.5 | The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312) to read arbitrary files with kluser privileges. | 17/07/2017 |
| CVE-2017-9811 | 严重9.8 | The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). By abusing the quarantine read and write operations, it is possible to elevate the privileges to root. | 17/07/2017 |
| CVE-2017-9810 | 高危8.8 | There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). This would allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain. | 17/07/2017 |
| CVE-2016-4329 | 中危5.5 | A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. Sending certain unhandled window messages, an attacker can cause application termination and in the same way bypass KAV self-protection mechanism. | 06/01/2017 |
| CVE-2016-4307 | 中危5.5 | A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver. A specially crafted IOCTL signal can cause an access violation in KL1 kernel driver resulting in local system denial of service. An attacker can run a program from user-mode to trigger this vulnerabil | 06/01/2017 |
| CVE-2016-4306 | 中危5.5 | Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Specially crafted IOCTL requests can cause the driver to return out-of-bounds kernel memory, potentially leaking sensitive information such as privileged tokens or kernel memory addresses that may be useful in b | 06/01/2017 |
| CVE-2016-4305 | 中危5.5 | A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver. A specially crafted native api call can cause a access violation in KLIF kernel driver resulting in local denial of service. An attacker can run program from user-mode to trigger this vulnerabilit | 06/01/2017 |