Skip to content

Vendor

escanav vulnerabilities

28 published CVES affecting escanav, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
28
Critical
5
High
6
Medium
16
Low
1
Unscored
0
CISA KEV
0
Atom feed of escanav alerts

Products

Latest escanav CVEs

Newest publication first · page 1 of 2

  2. CVE-2025-1369 MicroWord eScan Antivirus USB Password os command injection

    Published
    LowCVSS 2.0 EPSS 3.0%

    A vulnerability classified as critical was found in MicroWord eScan Antivirus 7.0.32 on Linux. Affected by this vulnerability is an unknown functionality of the component USB Password Handler. The manipulation leads to os command injection. The attack needs to be approached local...

  4. CVE-2025-1367 MicroWord eScan Antivirus USB Password sprintf buffer overflow

    Published
    MediumCVSS 4.8 EPSS 0.36%

    A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been classified as critical. This affects the function sprintf of the component USB Password Handler. The manipulation leads to buffer overflow. An attack has to be approached locally. The vendor was c...

  5. CVE-2025-1366 MicroWord eScan Antivirus VirusPopUp strcpy stack-based overflow

    Published
    MediumCVSS 4.8 EPSS 0.34%

    A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux and classified as critical. Affected by this issue is the function strcpy of the component VirusPopUp. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The expl...

  8. CVE-2025-0797 MicroWorld eScan Antivirus Quarantine Microworld default permission

    Published
    MediumCVSS 4.8 EPSS 0.30%

    A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the file /var/Microworld/ of the component Quarantine Handler. The manipulation leads to incorrect default permissions. The att...

  10. CVE-2024-13188 MicroWorld eScan Antivirus Installation var default permission

    Published
    MediumCVSS 4.8 EPSS 0.29%

    A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this issue is some unknown functionality of the file /opt/MicroWorld/var/ of the component Installation Handler. The manipulation leads to incorrect default permiss...

  18. CVE-2023-33732 Cross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacker to inject arbitrary code via the vulnerable parameters typ...

    Published
    MediumCVSS 6.1 EPSS 0.84%

    Cross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacker to inject arbitrary code via the vulnerable parameters type, txtPolicyType, and Deletefileval.

  21. CVE-2023-31702 SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution....

    Published
    HighCVSS 7.2 EPSS 4.3% Public exploit

    SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1.

  23. CVE-2021-26624 eScan Anti-Virus Local privilege escalation Vulnerability

    Published
    HighCVSS 8.8 EPSS 2.4%

    An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient execution conditions related to "runasroot" command. This vulnerability can induce remote attackers to exploit root privil...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.