Vulnerabilities

Summary — last 7 days

New vulnerabilities2,570▼ 302 vs. last week
Critical / high1,352▲ 100 vs. last week
New active exploitation (KEV)5▼ 7 vs. last week
Unscored (no CVSS)56▼ 472 vs. last week
–

3 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedHigh (7.5)3.8%—Symantec Enterprise FirewallSymantec Firewall VPN Appliance 100Symantec Firewall VPN Appliance 200Symantec Gateway Security 300+611/23/20056/16/2026
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as…
ModifiedMedium (5)1.6%—Symantec Enterprise FirewallSymantec VelociraptorSymantec Gateway Security 5300Symantec Gateway Security 54005/2/20056/16/2026
Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to poison the DNS cache and redirect users to malicious sites.
ModifiedHigh (7.5)4.4%—Entrust Libkmp Isakmp LibrarySymantec Enterprise FirewallSymantec VelociraptorSymantec Gateway Security 5300+112/31/20046/16/2026
Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.