Skip to contentSophos vulnerabilities
Newest
- sophos connect, connect client +1 moreA malicious website could execute code remotely in Sophos Connect Client before version 2.1.CVE-2021-252658.8 High
- sophos cyberoamosAn SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows...CVE-2020-29574In KEV9.8 Critical
- sophos sg utm, unified threat management +1 moreA remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5,...CVE-2020-25223In KEVPublic exploitEPSS 96.8%9.8 Critical
- sophos xg firewall firmwareTwo OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08...CVE-2020-173528.8 High
- sophos xg firewall firmwareA SQL injection vulnerability in the user and admin web interfaces of Sophos XG Firewall v18.0...CVE-2020-155049.8 Critical
- sophos xg firewall, xg firewall firmware +1 moreSophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via...CVE-2020-15069In KEVEPSS 10.7%9.8 Critical
- sophos secure emailThe Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate...CVE-2020-149805.9 Medium
- sophos sfosA heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and...CVE-2020-115039.8 Critical
- sophos sfosA SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG...CVE-2020-12271In KEVEPSS 43.3%10.0 Critical
- sophos anti-virus for sophos central, anti-virus for sophos home +1 moreMac Endpoint for Sophos Central before 9.9.6 and Mac Endpoint for Sophos Home before 2.2.6 allow...CVE-2020-109478.8 High
- sophos hitmanpro.alertSophos HitmanPro.Alert before build 861 allows local elevation of privilege.CVE-2020-95407.8 High
- sophos cloud optix, endpoint protection, intercept x endpoint +3 more +5 moreThe Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP...CVE-2020-93637.8 High
- sophos cyberoamosA shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before...CVE-2019-170599.8 Critical
- sophos sfosSQL injection vulnerability in AccountStatus.jsp in Admin Portal of Sophos XG firewall 17.0.8 MR...CVE-2018-161168.8 High
- sophos sfosA shell escape vulnerability in /webconsole/Controller in Admin Portal of Sophos XG firewall 17.0...CVE-2018-16117EPSS 43.7%8.8 High
- sophos sfosA shell escape vulnerability in /webconsole/APIController in the API Configuration component of...CVE-2018-161188.1 High
- sophos ipsec client, ncp-e ncp secure entry client +1 moreThe Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e...CVE-2017-170238.1 High
- sophos ssl vpn clientLack of administrator control over security vulnerability in client.cgi in Synology SSL VPN...CVE-2018-132838.8 High
- sophos hitmanpro.alert, talos sophos +1 moreAn exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality...CVE-2018-39719.3 Critical
- sophos hitmanpro.alert, talos sophos +1 moreAn exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality...CVE-2018-39704.0 Medium
- sophos safeguard easy device encryption client, safeguard enterprise client, safeguard lan crypt client +2 moreSophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt...CVE-2018-68577.8 High
- sophos safeguard easy device encryption client, safeguard enterprise client, safeguard lan crypt client +2 moreSophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt...CVE-2018-68567.8 High
- sophos safeguard easy device encryption client, safeguard enterprise client, safeguard lan crypt client +2 moreSophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt...CVE-2018-68557.8 High
- sophos safeguard easy device encryption client, safeguard enterprise client, safeguard lan crypt client +2 moreSophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt...CVE-2018-68547.8 High
- sophos safeguard easy device encryption client, safeguard enterprise client, safeguard lan crypt client +2 moreSophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt...CVE-2018-68537.8 High
- sophos safeguard easy device encryption client, safeguard enterprise client, safeguard lan crypt client +2 moreSophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt...CVE-2018-68527.8 High
- sophos safeguard easy device encryption client, safeguard enterprise client, safeguard lan crypt client +2 moreSophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt...CVE-2018-68517.8 High
- sophos ssl vpn clientImproper restriction of communication channel to intended endpoints vulnerability in HTTP daemon...CVE-2018-89297.3 High
- invincea x, sophos invincea-x +1 moreAn exploitable double fetch vulnerability exists in the SboxDrv.sys driver functionality of...CVE-2016-90387.8 High
- invincea dell protected workspace, sophos invincea dell protected workspace +1 moreMultiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected...CVE-2016-87327.8 High
- sophos endpoint protectionSophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%...CVE-2018-9233Public exploit7.8 High
- sophos endpoint protectionSophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection...CVE-2018-4863Public exploit5.5 Medium
- sophos testerIn Sophos Tester Tool 3.2.0.7 Beta, the driver accepts a special DeviceIoControl code that doesn...CVE-2018-63195.5 Medium
- sophos testerIn Sophos Tester Tool 3.2.0.7 Beta, the driver loads (in the context of the application used to...CVE-2018-63187.8 High
- sophos puremessageCross-site scripting (XSS) vulnerability in Sophos PureMessage for UNIX before 6.3.2 allows...CVE-2016-62176.1 Medium
- sophos sfosAn NC-25986 issue was discovered in the Logging subsystem of Sophos XG Firewall with SFOS before...CVE-2017-180146.1 Medium
- sophos astaro security gateway firmwareAstaro Security Gateway (aka ASG) 7 allows remote attackers to execute arbitrary code via a...CVE-2017-6315Public exploitEPSS 16.6%9.8 Critical
- sophos hitmanproIn Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution...CVE-2017-74417.8 High
- sophos hitmanproA kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20...CVE-2017-6008Public exploit7.8 High
- sophos hitmanproA kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20...CVE-2017-60075.5 Medium
- rarlab unrar, sophos threat detection engine +1 moreA VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus...CVE-2012-6706Fix availableEPSS 10.1%9.8 Critical
- sophos web applianceThe Sophos Web Appliance before 4.3.2 has XSS in the FTP redirect page, aka NSWA-1342.CVE-2017-95236.1 Medium
- sophos cyberoam firmwareAn XSS vulnerability allows remote attackers to execute arbitrary client side script on...CVE-2016-9834Public exploit6.1 Medium
- sophos cyberoam cr25ing utm firmwareSophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended...CVE-2016-7786Public exploit8.8 High
- sophos web applianceIn Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.CVE-2017-6412Public exploit8.1 High
- sophos web applianceIn Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible...CVE-2017-61844.7 Medium
- sophos web applianceIn Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities...CVE-2017-61837.2 High
- sophos web applianceIn Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible...CVE-2017-6182Public exploitEPSS 16.7%9.8 Critical
- sophos web applianceThe Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a...CVE-2016-9554Public exploitEPSS 25.1%7.2 High
- sophos web applianceThe Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection...CVE-2016-9553Public exploitEPSS 19.8%7.2 High
- Show moreLoading…