← Back

Symantec

symantec

571 CVEs • 247 products

Products (247)

Click to collapse
Toggle
Web Gateway
web_gateway
Mail Security
mail_security
Pcanywhere
pcanywhere
Antivirus
antivirus
Norton 360
norton_360
Norton Ghost
norton_ghost
Csapi
csapi
Velociraptor
velociraptor
Web Security
web_security
Pgp Desktop
pgp_desktop
Ngc
ngc
System Center
system_center
Im Manager
im_manager
Liveupdate
liveupdate
Backup Exec
backup_exec
Discovery
discovery
Scan Engine
scan_engine
Norton Family
norton_family

CVEs (571)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Symantec
1Norton Antivirus
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and cause NAV to prematurely stop scanning by using a non-RFC compliant MIME...Show more
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and cause NAV to prematurely stop scanning by using a non-RFC compliant MIME header. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executedShow less
1Symantec
1Norton Antivirus
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass the e-mail scanning via a NULL character in the MIME header before the virus. NOTE: th...Show more
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass the e-mail scanning via a NULL character in the MIME header before the virus. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executedShow less
2Microsoft
Symantec
3Internet Information Server
Internet Information ServicesNorton Internet Security
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while Norton Internet Security is running.
1Symantec
4Enterprise Firewall
Gateway SecurityRaptor Firewall+1 more
Apr 16, 2026
Oct 28, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service (connection...Show more
The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service (connection resource exhaustion) via multiple connection requests to domains whose DNS server is unresponsive or does not exist, which generates a long timeout.Show less
1Symantec
1Norton Antivirus
Apr 16, 2026
Aug 12, 2002
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients.
1Symantec
2Norton Internet Security
Norton Personal Firewall
Apr 16, 2026
Jul 26, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton Internet Security 2001 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large...Show more
Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton Internet Security 2001 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large outgoing HTTP request.Show less
1Symantec
4Enterprise Firewall
Gateway SecurityRaptor Firewall+1 more
Apr 16, 2026
Jul 3, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way that allows remote attackers to redirect FTP data connections to arbitrary ports, a variant of the "FT...Show more
FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way that allows remote attackers to redirect FTP data connections to arbitrary ports, a variant of the "FTP bounce" vulnerability.Show less
1Symantec
1Norton Ghost
Apr 16, 2026
Jun 25, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges.
1Symantec
1Liveupdate
Apr 16, 2026
Jun 25, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server.
1Symantec
1Enterprise Firewall
Apr 16, 2026
May 31, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an address other than the firewall, which co...Show more
SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an address other than the firewall, which could allow remote attackers to determine certain firewall configuration information.Show less
1Symantec
1Enterprise Firewall
Apr 16, 2026
May 31, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Notify daemon for Symantec Enterprise Firewall (SEF) 6.5.x drops large alerts when SNMP is used as the transport, which could prevent some alerts from being sent in the event of an attack.
1Symantec
1Liveupdate
Apr 16, 2026
Oct 5, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site.
1Symantec
1Liveupdate
Apr 16, 2026
Oct 5, 2001
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site.
1Symantec
1Norton Antivirus
Apr 16, 2026
Sep 7, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which...Show more
The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.Show less
1Symantec
1Liveupdate
Apr 16, 2026
Aug 14, 2001
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords.
1Symantec
1Norton Ghost
Apr 16, 2026
Aug 2, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to the Ghost Configuration Server on port 1347, which triggers an error that is not properly...Show more
Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to the Ghost Configuration Server on port 1347, which triggers an error that is not properly handled.Show less
1Symantec
1Raptor Firewall
Apr 16, 2026
Jun 18, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set.
1Symantec
1I Gear
Apr 16, 2026
Dec 11, 2000
N/A· v4
N/A· v3
5.0 MEDIUM· v2
I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors.
2Novell
Symantec
2Client
Norton Antivirus
Apr 16, 2026
Oct 20, 2000
N/A· v4
N/A· v3
10.0 HIGH· v2
Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the system.
1Symantec
1Norton Antivirus
Apr 16, 2026
Jun 14, 2000
N/A· v4
N/A· v3
5.0 MEDIUM· v2
In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server.