PG
Vendor
Pgp
32
CVEs
0
On KEV
0
New 30D
Products
PG–
Pgp
Pgp
6 CVEs0 on KEV0 new
CD5.5
Corporate Desktop
Pgp
4 CVEs0 on KEV0 new
DE–
Desktop
Pgp
4 CVEs0 on KEV0 new
FR5.5
Freeware
Pgp
3 CVEs0 on KEV0 new
PP7.5
Personal Privacy
Pgp
3 CVEs0 on KEV0 new
PS5.5
Personal Security
Pgp
3 CVEs0 on KEV0 new
KE–
Keyserver
Pgp
2 CVEs0 on KEV0 new
CS–
Certificate Server
Pgp
1 CVEs0 on KEV0 new
DF–
Desktop For Mac
Pgp
1 CVEs0 on KEV0 new
DF–
Desktop For Windows
Pgp
1 CVEs0 on KEV0 new
DS–
Desktop Security
Pgp
1 CVEs0 on KEV0 new
ES–
E-business Server
Pgp
1 CVEs0 on KEV0 new
E3–
E-ppliance 300
Pgp
1 CVEs0 on KEV0 new
OP–
Openpgp
Pgp
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2010-3618 | DF Desktop For Windows Pgp | – | Nov 20 | PGP Desktop 10.0.x before 10.0.3 SP2 and 10.1.0 before 10.1.0 SP1 does not properly implement the "Decrypt/Verify File via Right-Click" functionality for multi-packet OpenPGP… |
| CVE-2010-3397 | DE Desktop Pgp | – | Sep 15 | Untrusted search path vulnerability in PGP Desktop 9.9.0 Build 397, 9.10.x, 10.0.0 Build 2732, and probably other versions allows local users, and possibly remote attackers, to… |
| CVE-2009-0681 | DE Desktop Pgp | – | Apr 15 | PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of service (crash) and… |
| CVE-2008-5731 | DE Desktop Pgp | – | Dec 26 | The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and… |
| CVE-2007-0603 | CD Corporate Desktop Pgp | – | Jan 30 | PGP Desktop before 9.5.1 does not validate data objects received over the (1) \pipe\pgpserv named pipe for PGPServ.exe or the (2) \pipe\pgpsdkserv named pipe for PGPsdkServ.exe,… |
| CVE-2005-4151 | DE Desktop Pgp | – | Dec 10 | The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster for the file, which… |
| CVE-2002-1977 | PG Pgp Pgp | – | Dec 31 | Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without… |
| CVE-2002-2069 | PP Personal Privacy Pgp | 7.5 | Dec 31 | PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was… |
| CVE-2002-1696 | PP Personal Privacy Pgp | 5.5 | Dec 31 | Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when opening messages"… |
| CVE-2002-0850 | CD Corporate Desktop Pgp | – | Oct 4 | Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted document that has a long filename when it is decrypted |
| CVE-2002-0788 | CD Corporate Desktop Pgp | 5.5 | Aug 12 | An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped… |
| CVE-2002-0685 | FR Freeware Pgp | – | Jul 23 | Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and… |
| CVE-2001-1252 | KE Keyserver Pgp | – | Sep 28 | Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of… |
| CVE-2001-1456 | E3 E-ppliance 300 Pgp | – | Sep 4 | Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message |
| CVE-2001-1016 | CD Corporate Desktop Pgp | – | Sep 4 | PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invalid userID's are used… |
| CVE-2001-1320 | KE Keyserver Pgp | – | Jul 16 | Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly… |
| CVE-2001-0435 | PG Pgp Pgp | – | Jul 2 | The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the… |
| CVE-2001-0381 | OP Openpgp Pgp | – | Jun 27 | The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and… |
| CVE-2001-0265 | PG Pgp Pgp | – | Jun 18 | ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file |
| CVE-2000-0802 | PP Personal Privacy Pgp | – | Oct 20 | The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local users to obtain access to the menu by modifying the registry… |
| CVE-2000-0678 | PG Pgp Pgp | – | Oct 20 | PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an attacker who can… |
| CVE-2000-0543 | CS Certificate Server Pgp | – | Jun 14 | The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not have a reverse DNS entry and they… |
| CVE-2000-0445 | PG Pgp Pgp | – | May 24 | The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys |