Vulnerabilities > Bitdefender > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-01-27 | CVE-2019-17102 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Bitdefender BOX 2 Firmware An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. | 8.1 |
| 2019-10-31 | CVE-2019-12612 | Unspecified vulnerability in Bitdefender BOX Firmware An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitrary code to the BOX appliance via the web API. | 7.8 |
| 2019-08-21 | CVE-2019-15295 | Untrusted Search Path vulnerability in Bitdefender Antivirus 2020 An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to load an arbitrary DLL file from the search path. | 7.8 |
| 2019-06-03 | CVE-2019-6738 | OS Command Injection vulnerability in Bitdefender Safepay 23.0.10.34 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. | 8.8 |
| 2019-06-03 | CVE-2019-6737 | Unspecified vulnerability in Bitdefender Safepay 23.0.10.34 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. | 8.8 |
| 2019-06-03 | CVE-2019-6736 | OS Command Injection vulnerability in Bitdefender Safepay 23.0.10.34 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. | 8.8 |
| 2018-03-12 | CVE-2018-6183 | Unspecified vulnerability in Bitdefender Total Security 2018 BitDefender Total Security 2018 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of an "insecurely created named pipe". | 7.8 |
| 2017-12-21 | CVE-2017-17410 | Out-of-bounds Write vulnerability in Bitdefender Internet Security 2018 7.72918/73447 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. | 8.8 |
| 2017-12-21 | CVE-2017-17409 | Integer Overflow or Wraparound vulnerability in Bitdefender Internet Security 2018 7.72918/73447 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. | 8.8 |
| 2017-12-21 | CVE-2017-17408 | Integer Overflow or Wraparound vulnerability in Bitdefender Internet Security 2018 7.72918/73447 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. | 8.8 |