Skip to contentSophos vulnerabilities
Newest
- sophos unified threat management softwareThe Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local...CVE-2016-74424.4 Medium
- sophos unified threat management softwareThe Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local...CVE-2016-73974.4 Medium
- sophos mobile control eas proxySophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows...CVE-2016-65978.6 High
- sophos cyberoam cr100ing utm firmware, cyberoam cr35ing utm firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance...CVE-2016-39686.1 Medium
- sophos unified threat management softwareCross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows...CVE-2016-20466.1 Medium
- gnu glibc, canonical ubuntu linux, debian linux +26 more +28 moreMultiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the...CVE-2015-7547Public exploitFix availableEPSS 92.4%8.1 High
- openbsd openssh, apple mac os x, hp virtual customer access system +3 more +5 moreThe (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH...CVE-2016-0778Fix availableEPSS 20.9%8.1 High
- openbsd openssh, apple mac os x, hp remote device access virtual customer access system +3 more +5 moreThe resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7...CVE-2016-0777Public exploitFix availableEPSS 63.5%6.5 Medium
- isc dhcp, canonical ubuntu linux, debian linux +1 more +3 moreISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to...CVE-2015-8605Fix availableEPSS 82.7%6.5 Medium
- sophos anti-virusMultiple cross-site scripting (XSS) vulnerabilities in the web UI in Sophos Anti-Virus for Linux...CVE-2014-23854.3 Medium
- sophos enterprise consoleSophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not...CVE-2014-20056.8 Medium
- sophos web appliance, web appliance firmware +1 moreThe network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2...CVE-2014-2850Public exploitEPSS 57.6%8.5 High
- sophos web appliance, web appliance firmware +1 moreThe Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows...CVE-2014-2849Public exploitEPSS 60.9%8.5 High
- sophos unified threat management, unified threat management software +1 moreMemory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to...CVE-2014-25377.8 High
- sophos web appliance, web appliance firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow...CVE-2013-2643Public exploit4.3 Medium
- sophos web appliance, web appliance firmware +1 moreSophos Web Appliance before 3.7.8.2 allows (1) remote attackers to execute arbitrary commands via...CVE-2013-2642Public exploit9.3 High
- sophos web appliance, web appliance firmware +1 moreDirectory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows...CVE-2013-2641Public exploitEPSS 71.0%5.0 Medium
- sophos anti-virus, scanning engine +1 moreSophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x...CVE-2014-12135.6 Medium
- sophos unified threat management softwareUnspecified vulnerability in WebAdmin in Sophos UTM (aka Astaro Security Gateway) before 9.105...CVE-2013-593210.0 High
- sophos web applianceThe close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9...CVE-2013-4984Public exploit7.2 High
- sophos web appliance firmwareThe get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3...CVE-2013-4983Public exploitEPSS 90.1%10.0 High
- sophos free encryption, safeguard privatecrypto +1 moreUntrusted search path vulnerability in Sophos Free Encryption 2.40.1.1 and Sophos SafeGuard...CVE-2010-52496.9 Medium
- sophos safeguard enterpriseThe Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based...CVE-2012-47363.3 Low
- sophos endpoint security and control** DISPUTED ** Race condition in Sophos Endpoint Security and Control 9.0.5 on Windows XP allows...CVE-2010-5177Disputed6.2 Medium
- sophos disk encryption, safeguard easy device encryption client, safeguard enterprise device encryption +2 moreSophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device...CVE-2011-51176.9 Medium
- astaro security gateway, security gateway software, sophos unified threat management +1 more +3 moreCross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro...CVE-2012-32384.3 Medium
- anti-virus vba32, authentium command antivirus, avg anti-virus +12 more +14 moreThe Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5,...CVE-2012-1461EPSS 98.2%4.3 Medium
- ahnlab v3 internet security, anti-virus vba32, antiy avl sdk +22 more +24 moreThe TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy...CVE-2012-1459Fix availableEPSS 100.0%4.3 Medium
- clamav, sophos anti-virus +1 moreThe Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote...CVE-2012-1458Fix availableEPSS 73.0%4.3 Medium
- aladdin esafe, avg anti-virus, cat quick heal +12 more +14 moreThe TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo...CVE-2012-1456EPSS 99.9%4.3 Medium
- antiy avl sdk, ca etrust vet antivirus, emsisoft anti-malware +10 more +12 moreThe CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti...CVE-2012-1453EPSS 97.5%4.3 Medium
- emsisoft anti-malware, ikarus virus utilities t3 command line scanner, sophos anti-virus +2 moreThe CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus...CVE-2012-1450EPSS 72.4%4.3 Medium
- aladdin esafe, antiy avl sdk, ca etrust vet antivirus +9 more +11 moreThe ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5...CVE-2012-1446EPSS 99.6%4.3 Medium
- ahnlab v3 internet security, aladdin esafe, anti-virus vba32 +23 more +25 moreThe RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal...CVE-2012-1443EPSS 100.0%4.3 Medium
- aladdin esafe, antiy avl sdk, cat quick heal +6 more +8 moreThe ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5...CVE-2012-1442EPSS 98.8%4.3 Medium
- comodo antivirus, sophos anti-virus +1 moreThe Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows...CVE-2012-1438EPSS 13.2%4.3 Medium
- aladdin esafe, authentium command antivirus, bitdefender +4 more +6 moreThe ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe...CVE-2012-1431EPSS 99.5%4.3 Medium
- aladdin esafe, bitdefender, comodo antivirus +4 more +6 moreThe ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti...CVE-2012-1430EPSS 99.5%4.3 Medium
- cat quick heal, sophos anti-virus, norman antivirus \& antispyware +2 moreThe TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos...CVE-2012-1428EPSS 87.1%4.3 Medium
- cat quick heal, sophos anti-virus, norman antivirus \& antispyware +2 moreThe TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos...CVE-2012-1427EPSS 87.1%4.3 Medium
- antiy avl sdk, cat quick heal, jiangmin antivirus +2 more +4 moreThe TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Jiangmin...CVE-2012-1424EPSS 86.8%4.3 Medium
- sophos anti-virusUnspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus...CVE-2010-23087.2 High
- sophos puremessage for microsoft exchangeThe installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti...CVE-2008-71065.0 Medium
- sophos puremessage for microsoft exchangeSophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a...CVE-2008-71055.0 Medium
- sophos puremessage for microsoft exchangeSophos PureMessage Scanner service (PMScanner.exe) in PureMessage for Microsoft Exchange 3.0...CVE-2008-71045.0 Medium
- sophos anti-virus, anti-virus7.6.3 +1 moreMultiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other...CVE-2008-6904EPSS 10.6%10.0 High
- sophos anti-virus, anti-virus7.6.3 +1 moreSophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti...CVE-2008-69034.3 Medium
- sophos anti-virusSophos Anti-Virus 4.33.0, when Internet Explorer 6 or 7 is used, allows remote attackers to...CVE-2008-55419.3 High
- sophos anti-virus, es1000, es4000 +1 more +3 moreSophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure...CVE-2008-31775.0 Medium
- sophos anti-virusSophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled,...CVE-2008-17376.9 Medium
- Show moreLoading…