Escanav vulnerabilities
We track 6 vulnerabilities in Escanav products across 2 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on February 17, 2025.
Latest Escanav vulnerabilities
- 7.8 High severity
eScan Antivirus: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux and classified as critical. Affected by this issue is the function strcpy of the component VirusPopUp. The manipulation leads to stack-based buffer overflow. The attack needs to be approach
- 8.1 High severity
eScan Antivirus: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. This issue affects some unknown processing of the file rtscanner of the component Quarantine Handler. The manipulation leads to os command injection. The at
- 7.8 High severity
eScan Antivirus: Incorrect Privilege Assignment
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this issue is some unknown functionality of the file /opt/MicroWorld/var/ of the component Installation Handler. The manipulation leads to incor
- 9.8 Critical severity
Escan Management Console: Cleartext Transmission of Sensitive Information
Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format.
- 9.0 Critical severity
Escan Management Console: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter.
- 7.2 High severity
Escan Management Console: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1.