Login Request a demo
KL
Vendor
Kaspersky Lab
22 products with CVEs on record
93
CVEs
0
On KEV
0
New 30D
Products
KA
Kaspersky Anti-virus
Kaspersky Lab
–
28 CVEs0 on KEV0 new
UL
UltraVNC
Kaspersky Lab
9.8
16 CVEs0 on KEV0 new
KI
Kaspersky Internet Security
Kaspersky Lab
–
10 CVEs0 on KEV0 new
KR
Kraftway
Kaspersky Lab
9.8
6 CVEs0 on KEV0 new
EE
Eltex ESP-200
Kaspersky Lab
8.8
5 CVEs0 on KEV0 new
KA
Kaspersky Anti-virus Personal
Kaspersky Lab
–
5 CVEs0 on KEV0 new
ZZ
Zipato Zipabox Smart Home Controller
Kaspersky Lab
9.8
3 CVEs0 on KEV0 new
CV
CODESYS V3 products
Kaspersky Lab
7.5
2 CVEs0 on KEV0 new
KA
Kaspersky Anti-hacker
Kaspersky Lab
–
2 CVEs0 on KEV0 new
KA
Kaspersky Anti-spam
Kaspersky Lab
–
2 CVEs0 on KEV0 new
KA
Kaspersky Anti-virus Personal Pro
Kaspersky Lab
–
2 CVEs0 on KEV0 new
KA
Kaspersky Antivirus Engine
Kaspersky Lab
–
2 CVEs0 on KEV0 new
IP
Invision Power Board
Kaspersky Lab
6.1
1 CVEs0 on KEV0 new
KA
Kaspersky Anti-virus 2009
Kaspersky Lab
–
1 CVEs0 on KEV0 new
KA
Kaspersky Anti-virus 2010
Kaspersky Lab
–
1 CVEs0 on KEV0 new
KA
Kaspersky Anti-virus 5.5 For Check Point Firewall-
Kaspersky Lab
–
1 CVEs0 on KEV0 new
KI
Kaspersky Internet Security 2009
Kaspersky Lab
–
1 CVEs0 on KEV0 new
KI
Kaspersky Internet Security 2010
Kaspersky Lab
–
1 CVEs0 on KEV0 new
KI
Kaspersky Internet Security Suite
Kaspersky Lab
–
1 CVEs0 on KEV0 new
KP
Kaspersky Personal Security Suite
Kaspersky Lab
–
1 CVEs0 on KEV0 new
OS
Online Scanner
Kaspersky Lab
–
1 CVEs0 on KEV0 new
VF
Vanilla Forums
Kaspersky Lab
5.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2019-8280
UL
UltraVNC
Kaspersky Lab
9.8
4%
Mar 8UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution
CVE-2019-8277
UL
UltraVNC
Kaspersky Lab
7.5
3%
Mar 8UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure
CVE-2019-8276
UL
UltraVNC
Kaspersky Lab
7.5
6%
Mar 8UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service (DoS)
CVE-2019-8275
UL
UltraVNC
Kaspersky Lab
9.8
4%
Mar 8UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users
CVE-2019-8274
UL
UltraVNC
Kaspersky Lab
9.8
8%
Mar 8UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution
CVE-2019-8273
UL
UltraVNC
Kaspersky Lab
9.8
8%
Mar 8UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution
CVE-2019-8272
UL
UltraVNC
Kaspersky Lab
9.8
4%
Mar 8UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution
CVE-2019-8271
UL
UltraVNC
Kaspersky Lab
9.8
8%
Mar 8UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially result code execution
CVE-2019-8270
UL
UltraVNC
Kaspersky Lab
7.5
2%
Mar 8UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (DoS) condition
CVE-2019-8269
UL
UltraVNC
Kaspersky Lab
7.5
6%
Mar 8UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial of service (DoS) condition
CVE-2019-8268
UL
UltraVNC
Kaspersky Lab
9.8
4%
Mar 8UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially…
CVE-2019-8267
UL
UltraVNC
Kaspersky Lab
7.5
2%
Mar 8UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service (DoS) condition
CVE-2019-8266
UL
UltraVNC
Kaspersky Lab
9.8
3%
Mar 8UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VNC client code, which can…
CVE-2019-8265
UL
UltraVNC
Kaspersky Lab
9.8
3%
Mar 8UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code…
CVE-2019-8264
UL
UltraVNC
Kaspersky Lab
9.8
3%
Mar 8UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution
CVE-2019-8263
UL
UltraVNC
Kaspersky Lab
6.5
2%
Mar 5UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, which leads to a denial of service (DoS) condition
CVE-2019-8279
VF
Vanilla Forums
Kaspersky Lab
5.4
1%
Mar 2Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum
CVE-2019-8278
IP
Invision Power Board
Kaspersky Lab
6.1
2%
Mar 2Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution
CVE-2018-20026
CV
CODESYS V3 products
Kaspersky Lab
7.5
3%
Feb 19Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0
CVE-2018-20025
CV
CODESYS V3 products
Kaspersky Lab
7.5
3%
Feb 19Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0
CVE-2018-15357
EE
Eltex ESP-200
Kaspersky Lab
6.5
1%
Aug 17An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0
CVE-2018-15360
EE
Eltex ESP-200
Kaspersky Lab
7.3
2%
Aug 17An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0
CVE-2018-15359
EE
Eltex ESP-200
Kaspersky Lab
8.8
2%
Aug 17An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware version 1.2.0
CVE-2018-15358
EE
Eltex ESP-200
Kaspersky Lab
8.8
1%
Aug 17An authenticated attacker with low privileges can activate high privileged user and use it to expand attack surface in Eltex ESP-200 firmware version 1.2.0
CVE-2018-15356
EE
Eltex ESP-200
Kaspersky Lab
8.8
2%
Aug 17An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0
CVE-2018-15351
KR
Kraftway
Kaspersky Lab
6.5
2%
Aug 17Denial of service via crafting malicious link and sending it to a privileged user can cause Denial of Service in Kraftway 24F2XG Router firmware version 3.5.30.1118
CVE-2018-15355
KR
Kraftway
Kaspersky Lab
5.9
1%
Aug 17Usage of SSLv2 and SSLv3 leads to transmitted data decryption in Kraftway 24F2XG Router firmware 3.5.30.1118
CVE-2018-15354
KR
Kraftway
Kaspersky Lab
7.5
2%
Aug 17A Buffer Overflow exploited through web interface by remote attacker can cause denial of service in Kraftway 24F2XG Router firmware 3.5.30.1118
CVE-2018-15353
KR
Kraftway
Kaspersky Lab
9.8
8%
Aug 17A Buffer Overflow exploited through web interface by remote attacker can cause remote code execution in Kraftway 24F2XG Router firmware 3.5.30.1118
CVE-2018-15352
KR
Kraftway
Kaspersky Lab
6.5
1%
Aug 17An attacker with low privileges can cause denial of service in Kraftway 24F2XG Router firmware version 3.5.30.1118
CVE-2018-15350
KR
Kraftway
Kaspersky Lab
9.8
5%
Aug 17Router Default Credentials in Kraftway 24F2XG Router firmware version 3.5.30.1118 allow remote attackers to get privileged access to the router
CVE-2018-15123
ZZ
Zipato Zipabox Smart Home Controller
Kaspersky Lab
9.8
2%
Aug 13Insecure configuration storage in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows remote attacker perform new attack vectors and take under…
CVE-2018-15125
ZZ
Zipato Zipabox Smart Home Controller
Kaspersky Lab
7.5
2%
Aug 13Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive information that expands attack surface
CVE-2018-15124
ZZ
Zipato Zipabox Smart Home Controller
Kaspersky Lab
9.8
1%
Aug 13Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root…
CVE-2009-4452
KI
Kaspersky Internet Security 2009
Kaspersky Lab
–
1%
Dec 29Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); and Internet Security 7 (7.0.1.325),…
CVE-2009-0449
KA
Kaspersky Anti-virus
Kaspersky Lab
–
1%
Feb 10Buffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008 allows local users to gain privileges via an IOCTL 0x80052110 call
CVE-2008-5426
KI
Kaspersky Internet Security Suite
Kaspersky Lab
–
1%
Dec 11Kaspersky Internet Security Suite 2009 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type:…
CVE-2008-1518
KA
Kaspersky Anti-virus
Kaspersky Lab
–
0%
Jun 5Stack-based buffer overflow in kl1.sys in Kaspersky Anti-Virus 6.0 and 7.0 and Internet Security 6.0 and 7.0 allows local users to gain privileges via an IOCTL 0x800520e8 call
CVE-2007-3675
OS
Online Scanner
Kaspersky Lab
–
5%
Oct 12Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control (kavwebscan.dll) in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute…
CVE-2007-5086
KI
Kaspersky Internet Security
Kaspersky Lab
–
0%
Sep 26Kaspersky Anti-Virus (KAV) and Internet Security 7.0 build 125 do not properly validate certain parameters to System Service Descriptor Table (SSDT) and Shadow SSDT function…
CVE-2007-5043
KI
Kaspersky Internet Security
Kaspersky Lab
–
0%
Sep 24Kaspersky Internet Security 7.0.0.125 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to (1)…
CVE-2007-4206
KA
Kaspersky Anti-spam
Kaspersky Lab
–
0%
Aug 8Kaspersky Anti-Spam 3.0 MP1 before Critical Fix 2 (3.0.278.4) sets incorrect permissions for application files in certain upgrade scenarios, which might allow local users to gain…
CVE-2007-3906
KA
Kaspersky Anti-virus 5.5 For Check Point Firewall-
Kaspersky Lab
–
2%
Jul 19Unspecified vulnerability in Kaspersky Anti-Virus for Check Point FireWall-1 before Critical Fix 1 (5.5.161.0) might allow attackers to cause a denial of service (kernel hang) via…
CVE-2007-3502
KA
Kaspersky Anti-spam
Kaspersky Lab
–
2%
Jun 30Unspecified vulnerability in the web-based product configuration system in Kaspersky Anti-Spam before 3.0 MP1 allows remote attackers to obtain access to certain directories
CVE-2007-1112
KA
Kaspersky Anti-virus
Kaspersky Lab
–
5%
Apr 6Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a) AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and (b) AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll)…
CVE-2007-1881
KA
Kaspersky Anti-virus
Kaspersky Lab
–
1%
Apr 6Unspecified vulnerability in KLIF (klif.sys) in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before…
CVE-2007-1880
KA
Kaspersky Anti-virus
Kaspersky Lab
–
0%
Apr 6Integer overflow in the _NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File Server 6.0, and Internet Security 6.0 before…
CVE-2007-1879
KA
Kaspersky Anti-virus
Kaspersky Lab
–
3%
Apr 6The StartUploading function in KL.SysInfo ActiveX control (AxKLSysInfo.dll) in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows…
CVE-2007-0445
KA
Kaspersky Anti-virus
Kaspersky Lab
–
9%
Apr 6Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet…
CVE-2007-1281
KA
Kaspersky Antivirus Engine
Kaspersky Lab
–
3%
Mar 6Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service (CPU consumption) via a crafted UPX compressed file with…
CVE-2007-0125
KA
Kaspersky Antivirus Engine
Kaspersky Lab
–
3%
Jan 9Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional…
CVE-2006-6408
KA
Kaspersky Anti-virus
Kaspersky Lab
–
2%
Dec 10Kaspersky Anti-Virus for Linux Mail Servers 5.5.10 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a…
CVE-2006-4926
KA
Kaspersky Anti-virus
Kaspersky Lab
–
1%
Oct 20The NDIS-TDI Hooking Engine, as used in the (1) KLICK (KLICK.SYS) and (2) KLIN (KLIN.SYS) device drivers 2.0.0.281 for in Kaspersky Labs Anti-Virus 6.0.0.303 and other Anti-Virus…
CVE-2006-4265
KA
Kaspersky Anti-hacker
Kaspersky Lab
–
1%
Aug 21Kaspersky Anti-Hacker 1.8.180, when Stealth Mode is enabled, allows remote attackers to obtain responses to ICMP (1) timestamp and (2) netmask requests, which is inconsistent with…
CVE-2006-1091
KA
Kaspersky Anti-virus
Kaspersky Lab
–
3%
Mar 9Kaspersky Antivirus 5.0.5 and 5.5.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via unknown attack vectors
CVE-2005-3664
KA
Kaspersky Anti-virus
Kaspersky Lab
–
4%
Nov 18Heap-based buffer overflow in Kaspersky Anti-Virus Engine, as used in Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux…
CVE-2005-3663
KA
Kaspersky Anti-virus
Kaspersky Lab
–
0%
Nov 18Unquoted Windows search path vulnerability in Kaspersky Anti-Virus 5.0 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder
CVE-2005-3376
KA
Kaspersky Anti-virus
Kaspersky Lab
–
1%
Oct 30Multiple interpretation error in Kaspersky 5.0.372 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is…
CVE-2005-3210
KA
Kaspersky Anti-virus
Kaspersky Lab
–
2%
Oct 14Multiple interpretation error in unspecified versions of Kaspersky Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted…
CVE-2005-3142
KA
Kaspersky Anti-virus
Kaspersky Lab
–
42%
Oct 5Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arbitrary code via a CAB file with large…