Kaspersky

Latest CVEs · RSS

• CVE-2026-2334 2026-08-20 · CVSS 9.4
  An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation in the "Import via C
• CVE-2025-14601 2026-08-20 · CVSS 8.6
  An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands d
• CVE-2025-14602 2026-08-20 · CVSS 5.3
  The application generates uploaded file names using a weak and predictable method based on the request timestamp. This allows a remote attacker to accurately gu
• CVE-2025-14600 2026-08-19 · CVSS 9.3
  An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized administrative access. By manipulating application configurati
• CVE-2025-14603 2026-08-19 · CVSS 8.8
  The application component processes user-supplied parameters insecurely, passing them into SQL queries. This can enable blind SQL injection, potentially exposin
• CVE-2026-72530 2026-08-19 · CVSS 9.0
  A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier
• CVE-2026-72529 2026-08-19 · CVSS 9.8
  A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier
• CVE-2024-13942 2026-08-19 · CVSS 7.6
  Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD). T
• CVE-2026-8398 2026-05-15 · CVSS 9.8
  A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distributed from t
• CVE-2025-64984 2025-11-20 · CVSS 6.1
  Kaspersky has fixed a security issue in Kaspersky Endpoint Security for Linux (any version with anti-virus databases prior to 18.11.2025), Kaspersky Industrial
• CVE-2025-9060 2025-08-15 · CVSS 9.1
  A vulnerability has been found in the  MSoft MFlash application that allows execution of arbitrary code on the server. The issue occurs in the integration c
• CVE-2025-7771 2025-08-06 · CVSS 8.7
  ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function.
• CVE-2024-13614 2025-02-06 · CVSS 5.3
  Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for
• CVE-2019-15690 2025-01-24 · CVSS 8.8
  LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/cursor.c. An attacke
• CVE-2024-8653 2024-09-19 · CVSS 5.9
  A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific paths on the site. This issue affects N
• CVE-2024-8652 2024-09-19 · CVSS 5.9
  A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site. This issue affects Ne
• CVE-2024-8651 2024-09-19 · CVSS 6.9
  A vulnerability in NetCat CMS allows an attacker to send a specially crafted http request that can be used to check whether a user exists in the system, which c
• CVE-2024-5866 2024-07-02 · CVSS 5.0
  Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing listing of arbitrary di
• CVE-2024-5865 2024-07-02 · CVSS 7.7
  Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing arbitrary files reading
• CVE-2023-3943 2024-05-21 · CVSS 10.0
  Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary code. Due to the lack of protection mech
• CVE-2023-3942 2024-05-21 · CVSS 7.5
  An 'SQL Injection' vulnerability, due to improper neutralization of special elements used in SQL commands, exists in ZKTeco-based OEM devices. This vulnerabilit
• CVE-2023-3941 2024-05-21 · CVSS 10.0
  Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to write any file on the system with root privileges. This issue affect
• CVE-2023-3940 2024-05-21 · CVSS 7.5
  Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to access any file on the system. This issue affects ZkTeco-based OEM d
• CVE-2023-3939 2024-05-21 · CVSS 10.0
  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in ZkTeco-based OEM devices allows OS Command Injecti
• CVE-2023-3938 2024-05-21 · CVSS 4.6
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ZkTeco-based OEM devices allows an attacker to authent