Browse / Kaspersky

Kaspersky

See its reports on the map

What gets reported to Kaspersky

• Code Execution5
• Information Disclosure4
• Cross-site Scripting2
• Cryptography2
• Access Control2
• Insecure Direct Object Reference1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Web protection component in Anti-Virus products family uses predictable links for certificate warningsInsecure Direct Object Reference (IDOR) · medium
   65 votes
2. URL Advisor component in KIS products family is vulnerable to Universal XSSCross-site Scripting (XSS) - Generic · high
   65 votes
3. Kaspersky Password Manager allows websites to access user's address dataInformation Disclosure · medium
   64 votes
4. In App purchase Hack Use of a Key Past its Expiration Date · critical
   47 votes
5. Web protection component in Anti-Virus products family ignores HSTS security policyMan-in-the-Middle · medium
   41 votes
6. Kaspersky Password Manager is vulnerable to HTML injection in the browser action pop-up via user nameCross-site Scripting (XSS) - Stored · medium
   32 votes
7. KeysInformation Disclosure · low
   29 votes
8. No Rate Limit On Forgot Password PageImproper Access Control - Generic · low
   27 votes
9. Stored credentials instantly autofilled within sandboxed iframesInformation Disclosure · low
   23 votes
10. Unauthorized command execution in Web protection component of Anti-Virus products family [IE]Command Injection - Generic · medium
    22 votes
11. Kaspersky Protection extension for Google Chrome is vulnerable to abuse its featuresCommand Injection - Generic · medium
    21 votes
12. Several domains on kaspersky.com are vulnerable to Web Cache Deception attackInsecure Storage of Sensitive Information · medium
    20 votes
13. Hard Coded username and password in registryUse of Hard-coded Credentials
    17 votes
14. [Fixed] A vulnerability in KAVKIS 2020 products family allows full disabling of protectionCode Injection · high
    15 votes
15. Unauthorized command execution in Web protection component of Anti-Virus products familyCommand Injection - Generic · medium
    13 votes
16. Certificate warnings and similar UI elements in Web protection of Anti-Virus products family are susceptible to clickjackingUI Redressing (Clickjacking) · medium
    11 votes
17. [Fixed] KIS for macOS is vulnerable to AV bypass due to improper client authorization on XPC serviceImproper Access Control - Generic · medium
    10 votes
18. test reportHeap Overflow · medium
    9 votes
19. Unauthorized command execution in Web protection component of Anti-Virus products family [FF, Chrome]Command Injection - Generic · medium
    7 votes