Vulnerabilities > Bitdefender > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-05-15 CVE-2020-8100 Improper Input Validation vulnerability in Bitdefender Engines
Improper Input Validation vulnerability in the cevakrnl.rv0 module as used in the Bitdefender Engines allows an attacker to trigger a denial of service while scanning a specially-crafted sample.
network
low complexity
bitdefender CWE-20
5.0
2020-04-21 CVE-2020-8099 Link Following vulnerability in Bitdefender Antivirus 2020 1.0.15.138
A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location.
local
low complexity
bitdefender CWE-59
4.6
2020-04-07 CVE-2020-8096 Untrusted Search Path vulnerability in Bitdefender Antimalware Software Development KIT
Untrusted Search Path vulnerability in Bitdefender High-Level Antimalware SDK for Windows allows an attacker to load third party code from a DLL library in the search path.
local
low complexity
bitdefender CWE-426
4.6
2020-01-30 CVE-2020-8095 Improper Input Validation vulnerability in Bitdefender Total Security 2020 24.0.12.69/24.0.20.116
A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an attacker to to trigger a denial of service on the affected device.
local
low complexity
bitdefender CWE-20
4.9
2020-01-30 CVE-2020-8093 Injection vulnerability in Bitdefender Antivirus
A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a library using DYLD environment variable to cause third-party code execution
local
low complexity
bitdefender CWE-74
4.6
2020-01-27 CVE-2019-17099 Untrusted Search Path vulnerability in Bitdefender Endpoint Security Tools
An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary DLL file from the search path.
4.4
2020-01-27 CVE-2019-17100 Untrusted Search Path vulnerability in Bitdefender Total Security 2020
An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code.
4.4
2019-10-17 CVE-2019-12611 Allocation of Resources Without Limits or Throttling vulnerability in Bitdefender BOX Firmware
An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that affects the general reliability of the product.
local
low complexity
bitdefender CWE-770
4.9
2019-06-03 CVE-2019-6738 Improper Input Validation vulnerability in Bitdefender Safepay 23.0.10.34
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34.
6.8
2019-06-03 CVE-2019-6736 Improper Input Validation vulnerability in Bitdefender Safepay 23.0.10.34
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34.
6.8