https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T02:16:45.278715+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2008-avi-112 certa-2008-avi-112 — Plusieurs vulnérabilités dans <span class="textit">Symantec Backup Exec for Windows Server</span> permettent l'exécutio… 2026-10-17T02:16:45.282606+00:00 certa-2008-avi-112 https://cve.radiocsirt.org/vuln/euvd-2026-137747 EUVD-2026-137747 2026-10-17T02:16:45.282642+00:00 EUVD-2026-137747 https://cve.radiocsirt.org/vuln/fkie_cve-2007-6016 fkie_cve-2007-6016 2026-10-17T02:16:45.282657+00:00

Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to execute arbitrary code via a long (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, or (19) _MonthText11 property value when executing the Save method. NOTE: the vendor states "Authenticated user involvement required," but authentication is not needed to attack a client machine that loads this control.

 https://cve.radiocsirt.org/vuln/ghsa-q964-x2rc-v787 GHSA-q964-x2rc-v787 2026-10-17T02:16:45.282690+00:00

Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to execute arbitrary code via a long (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, or (19) _MonthText11 property value when executing the Save method. NOTE: the vendor states "Authenticated user involvement required," but authentication is not needed to attack a client machine that loads this control.

 https://cve.radiocsirt.org/vuln/gsd-2007-6016 gsd-2007-6016 2026-10-17T02:16:45.282712+00:00 gsd-2007-6016 https://cve.radiocsirt.org/vuln/jvndb-2008-001311 jvndb-2008-001311 2026-10-17T02:16:45.282723+00:00

The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles long strings assigned to various properties listed below, which can be exploited to cause stack-based buffer overflows. _DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4 _DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2 _MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7 _MonthText8, _MonthText9, _MonthText10, _MonthText11