Vulnerabilities > Bitdefender > High

DATE CVE VULNERABILITY TITLE RISK
2017-03-21 CVE-2017-6186 Code Injection vulnerability in Bitdefender Antivirus Plus, Internet Security and Total Security
Code injection vulnerability in Bitdefender Total Security 12.0 (and earlier), Internet Security 12.0 (and earlier), and Antivirus Plus 12.0 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Bitdefender process via a "DoubleAgent" attack.
local
low complexity
bitdefender CWE-94
7.2
2008-01-23 CVE-2008-0396 Path Traversal vulnerability in Bitdefender Update Server
Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Enterprise Manager (BDEM), allows remote attackers to read arbitrary files via ..
network
low complexity
bitdefender CWE-22
7.8
2007-01-19 CVE-2007-0391 Local Format String vulnerability in Bitdefender Client Professionalplus8.02
Format string vulnerability in the log creation functionality of BitDefender Client Professional Plus 8.02 allows attackers to execute arbitrary code via certain scan job settings.
local
low complexity
bitdefender
7.2