cve-requests@bitdefender.com
organization01
Rollen
Rollen dieser Identität.
02
Referenzen
Weitere Namen und Kennungen dieser Entität.
nvdUS cve-requests@bitdefender.com
03
bewertete Schwachstellen (106)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-6851US | high7.0 | — | ||
An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows a… | ||||
| CVE-2026-10047US | high7.8 | — | ||
The Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the real-mode hook handler, implemented in napoca/kernel/handler.c. The handler uses a… | ||||
| CVE-2026-10046US | high7.8 | — | ||
Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the BIOS INT 0x15 / E820 memory map handler, implemented in napoca/guests/bios_handlers.c.… | ||||
| CVE-2025-7073US | high7.8 | — | ||
A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges. The issue arises from… | ||||
| CVE-2025-5317US | medium5.5OT erhöht | — | ||
An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac (BEST) before 7.20.52.200087 allows local users with administrative privileges to bypass t… | ||||
| CVE-2025-1987US | medium6.1 | — | ||
A Cross-Site Scripting (XSS) vulnerability has been identified in Psono-Client’s handling of vault entries of type website_password and bookmark, as used in Bitdefender SecurePass.… | ||||
| CVE-2025-2245US | medium5.3 | — | ||
A server-side request forgery (SSRF) vulnerability exists in the Bitdefender GravityZone Update Server when operating in Relay Mode. The HTTP proxy component on port 7074 uses a do… | ||||
| CVE-2025-2244US | critical9.8 | — | ||
A vulnerability in the sendMailFromRemoteSource method in Emails.php as used in Bitdefender GravityZone Console unsafely uses php unserialize() on user-supplied input without vali… | ||||
| CVE-2025-2243US | high7.3 | — | ||
A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests.… | ||||
| CVE-2024-13872US | high7.5OT erhöht | — | ||
Bitdefender Box, versions 1.3.11.490 through 1.3.11.505, uses the insecure HTTP protocol to download assets over the Internet to update and restart daemons and detection rules on t… | ||||
| CVE-2024-13871US | high8.8 | — | ||
A command injection vulnerability exists in the /check_image_and_trigger_recovery API endpoint of Bitdefender Box 1 (firmware version 1.3.11.490). This flaw allows an unauthenticat… | ||||
| CVE-2024-13870US | medium5.7 | — | ||
An improper access control vulnerability exists in Bitdefender Box 1 (firmware version 1.3.52.928 and below) that allows an unauthenticated attacker to downgrade the device's firmw… | ||||
| CVE-2020-8094US | high7.8 | — | ||
An untrusted search path vulnerability in testinitsigs.exe as used in Bitdefender Antivirus Free 2020 allows a low-privilege attacker to execute code as SYSTEM via a specially craf… | ||||
| CVE-2024-11128US | high7.8 | — | ||
A vulnerability in the BitdefenderVirusScanner binary as used in Bitdefender Virus Scanner for MacOS may allow .dynamic library injection (DYLD injection) without being blocked by… | ||||
| CVE-2023-49570US | high7.4 | — | ||
A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software trusts a certificate issued by an entity that isn't authorized to… | ||||
| CVE-2023-6058US | medium6.8 | — | ||
A vulnerability has been identified in Bitdefender Safepay's handling of HTTPS connections. The issue arises when the product blocks a connection due to an untrusted server certifi… | ||||
| CVE-2023-6057US | high7.4 | — | ||
A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of certificates issued using the DSA signature alg… | ||||
| CVE-2023-6056US | high7.4 | — | ||
A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of self-signed certificates. The product is found… | ||||
| CVE-2023-6055US | high7.4 | — | ||
A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software fails to properly validate website certificates. Specifically, if… | ||||
| CVE-2023-49567US | medium6.8 | — | ||
A vulnerability has been identified in the Bitdefender Total Security HTTPS scanning functionality where the product incorrectly checks the site's certificate, which allows an atta… | ||||