# cve.now: Kaspersky LAB

The newest entries naming Kaspersky LAB as an affected vendor (up to 200), of 37 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2019-8280](https://cve.now/CVE-2019-8280.md): UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. (no CVSS)
- [CVE-2019-8277](https://cve.now/CVE-2019-8277.md): UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be (no CVSS)
- [CVE-2019-8276](https://cve.now/CVE-2019-8276.md): UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result i (no CVSS)
- [CVE-2019-8275](https://cve.now/CVE-2019-8275.md): UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being ac (no CVSS)
- [CVE-2019-8274](https://cve.now/CVE-2019-8274.md): UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially (no CVSS)
- [CVE-2019-8273](https://cve.now/CVE-2019-8273.md): UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potential (no CVSS)
- [CVE-2019-8272](https://cve.now/CVE-2019-8272.md): UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. (no CVSS)
- [CVE-2019-8271](https://cve.now/CVE-2019-8271.md): UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially resul (no CVSS)
- [CVE-2019-8270](https://cve.now/CVE-2019-8270.md): UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (D (no CVSS)
- [CVE-2019-8269](https://cve.now/CVE-2019-8269.md): UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial (no CVSS)
- [CVE-2019-8268](https://cve.now/CVE-2019-8268.md): UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadStr (no CVSS)
- [CVE-2019-8267](https://cve.now/CVE-2019-8267.md): UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service (no CVSS)
- [CVE-2019-8266](https://cve.now/CVE-2019-8266.md): UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer funct (no CVSS)
- [CVE-2019-8265](https://cve.now/CVE-2019-8265.md): UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code (no CVSS)
- [CVE-2019-8264](https://cve.now/CVE-2019-8264.md): UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code exec (no CVSS)
- [CVE-2019-8263](https://cve.now/CVE-2019-8263.md): UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, which leads to a denial (no CVSS)
- [CVE-2019-8279](https://cve.now/CVE-2019-8279.md): Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum. (no CVSS)
- [CVE-2019-8278](https://cve.now/CVE-2019-8278.md): Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution. (no CVSS)
- [CVE-2018-20026](https://cve.now/CVE-2018-20026.md): Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0. (no CVSS)
- [CVE-2018-20025](https://cve.now/CVE-2018-20025.md): Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0. (no CVSS)
- [CVE-2018-15360](https://cve.now/CVE-2018-15360.md): An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0. (no CVSS)
- [CVE-2018-15359](https://cve.now/CVE-2018-15359.md): An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware version (no CVSS)
- [CVE-2018-15358](https://cve.now/CVE-2018-15358.md): An authenticated attacker with low privileges can activate high privileged user and use it to expand attack surface in Eltex ESP-200 firmwar (no CVSS)
- [CVE-2018-15357](https://cve.now/CVE-2018-15357.md): An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0. (no CVSS)
- [CVE-2018-15356](https://cve.now/CVE-2018-15356.md): An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0. (no CVSS)
- [CVE-2018-15355](https://cve.now/CVE-2018-15355.md): Usage of SSLv2 and SSLv3 leads to transmitted data decryption in Kraftway 24F2XG Router firmware 3.5.30.1118. (no CVSS)
- [CVE-2018-15354](https://cve.now/CVE-2018-15354.md): A Buffer Overflow exploited through web interface by remote attacker can cause denial of service in Kraftway 24F2XG Router firmware 3.5.30.1 (no CVSS)
- [CVE-2018-15353](https://cve.now/CVE-2018-15353.md): A Buffer Overflow exploited through web interface by remote attacker can cause remote code execution in Kraftway 24F2XG Router firmware 3.5. (no CVSS)
- [CVE-2018-15352](https://cve.now/CVE-2018-15352.md): An attacker with low privileges can cause denial of service in Kraftway 24F2XG Router firmware version 3.5.30.1118. (no CVSS)
- [CVE-2018-15351](https://cve.now/CVE-2018-15351.md): Denial of service via crafting malicious link and sending it to a privileged user can cause Denial of Service in Kraftway 24F2XG Router firm (no CVSS)
- [CVE-2018-15350](https://cve.now/CVE-2018-15350.md): Router Default Credentials in Kraftway 24F2XG Router firmware version 3.5.30.1118 allow remote attackers to get privileged access to the rou (no CVSS)
- [CVE-2018-15125](https://cve.now/CVE-2018-15125.md): Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive information that expands attac (no CVSS)
- [CVE-2018-15124](https://cve.now/CVE-2018-15124.md): Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extrac (no CVSS)
- [CVE-2018-15123](https://cve.now/CVE-2018-15123.md): Insecure configuration storage in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows remote attacker perform (no CVSS)
- [CVE-2018-6306](https://cve.now/CVE-2018-6306.md): Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538. (no CVSS)
- [CVE-2017-12817](https://cve.now/CVE-2017-12817.md): In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted. (no CVSS)
- [CVE-2017-12816](https://cve.now/CVE-2017-12816.md): In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used b (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/kaspersky-lab
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.