Lucene search
+L
Checkpoint AdvisoriesMost viewed

13538 matches found

Check Point Advisories
Check Point Advisories
•added 2020/09/10 12:00 a.m.•60 views

Technicolor TD5130v2 Oi_Fw_V20 Command Injection (CVE-2019-18396)

A command injection vulnerability exists in Technicolor TD5130v2 OiFwV20. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

9CVSS5.1AI score0.16206EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2020/05/31 12:00 a.m.•60 views

Joomla SimpleCalendar Component SQL Injection (CVE-2018-5974)

A vulnerability exists in Albonico Simplecalendar. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

7.5CVSS5.6AI score0.02652EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2020/05/12 12:00 a.m.•60 views

Microsoft Win32k Elevation of Privilege (CVE-2020-1054)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.2CVSS6AI score0.54158EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2020/03/15 12:00 a.m.•60 views

Apache Tomcat AJP File Inclusion (CVE-2020-10487)

A file inclusion vulnerability exists in Apache Tomcat AJP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

4.3CVSS4.5AI score0.00535EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2020/03/01 12:00 a.m.•60 views

Microsoft Internet Explorer jscript.dll Use After Free (CVE-2019-1429)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS5.2AI score0.72626EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2020/02/27 12:00 a.m.•60 views

WiKID 2FA Enterprise Server SQL Injection (CVE-2019-16917; CVE-2019-17117; CVE-2019-17119)

An SQL injection vulnerability exists in WiKID 2FA Enterprise Server. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL commands against the database on the target server...

6.5CVSS3.6AI score0.02143EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2019/12/26 12:00 a.m.•60 views

mIRC URI Handler Remote Code Execution (CVE-2019-6453)

A remote code execution vulnerability exists in mIRC. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option. Successful exploitation could result in code execution on the target machine in the context of the application...

6.8CVSS8.2AI score0.54292EPSS
SaveExploits8
Check Point Advisories
Check Point Advisories
•added 2019/03/26 12:00 a.m.•60 views

Moodle Remote Code Execution (CVE-2018-1133)

A remote code execution vulnerability exists in Moodle server. The vulnerability is due to improper validation of request parameters. A remote attacker can exploit this vulnerability to execute arbitrary code on the vulnerable Moodle server...

6.5CVSS6.2AI score0.31879EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2019/03/12 12:00 a.m.•60 views

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-0667)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS8.3AI score0.3126EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2018/06/06 12:00 a.m.•60 views

ZIP Slip Arbitrary File Overwrite Remote Code Execution (CVE-2018-1002200; CVE-2018-1002201; CVE-2018-1002203; CVE-2018-1002204; CVE-2018-1002205; CVE-2018-1002206; CVE-2018-1002207; CVE-2018-1261; CVE-2018-8008; CVE-2018-8009; CVE-2021-43555)

A file overwrite vulnerability exist in archive formats. To trigger this issue, an attacker may create a malicious archive that will exploit this vulnerability. Successful exploitation of this vulnerability would allow a remote attacker to overwrite arbitrary files on the vulnerable system and...

6.8CVSS4.4AI score0.37986EPSS
SaveExploits8
Check Point Advisories
Check Point Advisories
•added 2018/03/20 12:00 a.m.•60 views

Microsoft Windows Remote Assistance XXE Injection Information Disclosure (CVE-2018-0878)

An XML external entity XXE injection vulnerability exist in the Remote Assistance component of Microsoft Windows. The vulnerability is due to a failure to properly handle external entity references in XML files. A remote attacker could exploit this vulnerability by enticing a target user into...

2.6CVSS1.8AI score0.2149EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2018/02/25 12:00 a.m.•60 views

Microsoft Windows EOT Font Engine Information Disclosure (CVE-2018-0761)

An information disclosure vulnerability has been reported in the EOT component of Microsoft Windows operating systems. The vulnerability is due to improper handling of objects in the Windows EOT Font Engine. A remote attacker could exploit this vulnerability by enticing a user to open specially...

2.1CVSS4.8AI score0.02322EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2017/10/16 12:00 a.m.•60 views

Schneider Electric U.motion Builder nfcserver.php SQL Injection (CVE-2017-7973)

An SQL injection vulnerability exists in Schneider Electric U.motion Builder. The vulnerability is due to insufficient validation of the sessionid HTTP request parameter in requests made to nfcserver.php.A remote, unauthenticated user can exploit this vulnerability by sending a crafted HTTP reque...

7.5CVSS1.2AI score0.01472EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2016/10/19 12:00 a.m.•60 views

Symantec Endpoint Protection Manager Remote Privilege Escalation (CVE-2015-1487; CVE-2015-1489)

A vulnerability exist in Symantec Endpoint protection. These vulnerability include privilege escalation, path traversal and binary planting. Attackers can exploit this issue to gain elevated privileges on the affected computer...

8.5CVSS6.7AI score0.51977EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2016/09/20 12:00 a.m.•60 views

Realtek SDK Miniigd AddPortMapping SOAP Action Command Injection (CVE-2014-8361)

A command injection vulnerability exists in Realtek SDK. The vulnerability is due to lack of input sanitization on user-supplied data when processing the NewInternalClient requests to the miniigd SOAP service. By sending a crafted SOAP request to the affected service, a remote unauthenticated...

10CVSS8.5AI score0.99975EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2016/05/01 12:00 a.m.•60 views

Apache Struts Dynamic Method Remote Code Execution (CVE-2016-3081)

A remote code execution vulnerability exists in Apache's Struts 2 web application framework. The vulnerability is due to Dynamic Method invocation content. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted HTTP request to a vulnerable server. A successful attac...

9.3CVSS9.3AI score0.93352EPSS
SaveExploits12
Check Point Advisories
Check Point Advisories
•added 2015/05/18 12:00 a.m.•60 views

VMware OVF Tool Format String - Ver2 (CVE-2012-3569)

A format string vulnerability has been reported in VMware OVF Tool.The vulnerability is caused by insufficient sanitization when processing OVF files.A remote attacker can exploit this vulnerability to execute arbitrary code in the security context of the current user...

9.3CVSS7.2AI score0.47719EPSS
SaveExploits12
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:00 a.m.•60 views

Internet Explorer HtmlDlgHelper Class Memory Corruption - Ver2 (CVE-2010-3329)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted when a document in an HTML format is opened in Microsoft Word. Successful exploitation of...

7.1AI score0.28354EPSS
SaveExploits7
Check Point Advisories
Check Point Advisories
•added 2014/02/06 12:00 a.m.•61 views

Oracle Fusion Middleware Showmap Servlet Information Disclosure (CVE-2012-3152; CVE-2012-3153)

An information disclosure vulnerability has been reported in the Oracle Reports component of Oracle Fusion Middleware. The vulnerability is due to incorrect website configuration that could allow a remote attacker to execute unauthenticated network attacks over HTTP...

6.4CVSS1.9AI score0.98793EPSS
SaveExploits11
Check Point Advisories
Check Point Advisories
•added 2013/09/22 12:00 a.m.•60 views

Apple QuickTime alis Volume Name Parsing Stack Buffer Overflow (CVE-2013-1017)

A stack buffer overflow vulnerability has been reported in Apple QuickTime...

6.7AI score0.32553EPSS
SaveExploits11
Check Point Advisories
Check Point Advisories
•added 2012/12/23 12:00 a.m.•61 views

Horde FTP Server Backdoor Arbitrary PHP Code Execution (CVE-2012-0209)

An arbitrary PHP code execution vulnerability has been reported in Horde FTP server...

7.2AI score0.71897EPSS
SaveExploits8
Check Point Advisories
Check Point Advisories
•added 2010/09/24 12:00 a.m.•60 views

Update Protection against CA XOsoft Multiple Products xosoapapi.asmx Buffer Overflow

A buffer overflow vulnerability exists in CA XOsoft Multiple Products. The XOsoft software is a suite of programs which include a control system, engine, web server and a shell. The vulnerability is due to insufficient boundary checking when handling a parameter in an HTTP request. An attacker ca...

10CVSS7.4AI score0.16755EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2009/09/22 12:00 a.m.•60 views

Microsoft Excel SST Record Integer Overflow (MS09-021; CVE-2009-0561; CVE-2009-3037)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The flaw is due to a memory corruption error in Microsoft Excel when loading specially crafted Excel files that include a malformed record object. The...

9.3CVSS7.2AI score0.36897EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2009/03/19 12:00 a.m.•60 views

Cisco Application Networking Manager Default User Credentials Security Bypass (CVE-2009-0616)

Cisco Application Networking Manager ANM is a network management application that manages Cisco Application Control Engine ACE modules or appliances. The vulnerability is due to a design error in the ANM that does not force credential changes during installation. A remote attacker may exploit thi...

10CVSS6.3AI score0.02146EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2006/07/20 12:00 a.m.•60 views

Preemptive Protection against CesarFTP and XM Easy Personal FTP Server Buffer Overflow Vulnerabilities

XM Easy Personal FTP Server fails to validate user-supplied data. Attacker can exploit this issue to execute arbitrary code on the affected server. CesarFTP contains a buffer overflow error in the handling of overly long arguments passed to the MKD command. Remote attackers can compromise a...

7.5CVSS7.7AI score0.61673EPSS
SaveExploits8
Check Point Advisories
Check Point Advisories
•added 2022/11/28 12:00 a.m.•59 views

TOTOLINK X5000R Command Injection (CVE-2022-26213)

A command injection vulnerability exists in TOTOLINK X5000R. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

7.5CVSS5.3AI score0.2558EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/11/21 12:00 a.m.•59 views

Razer Sila Gaming Router Command Injection (CVE-2022-29013)

A command injection vulnerability exists in Razer Sila gaming router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

7.5CVSS6AI score0.77136EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/07/04 12:00 a.m.•59 views

Zoho ManageEngine ADAudit Plus Remote Code Execution (CVE-2022-28219)

A remote code execution vulnerability exists in Zoho ManageEngine ADAudit Plus. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS5.4AI score0.97193EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2021/12/02 12:00 a.m.•59 views

VMware ESXi Remote Code Execution (CVE-2020-3992)

A remote code execution vulnerability exists in VMware ESXi. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

10CVSS5.9AI score0.83015EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2021/08/02 12:00 a.m.•59 views

NETGEAR Command Injection (CVE-2021-33514)

A command injection vulnerability exists in NETGEAR routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

10CVSS7.7AI score0.07863EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2021/01/17 12:00 a.m.•59 views

Apache Flink Directory Traversal (CVE-2020-17518; CVE-2020-17519)

A directory traversal vulnerability exists in Apache Flink. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

5CVSS5.2AI score0.97856EPSS
SaveExploits14
Check Point Advisories
Check Point Advisories
•added 2020/11/05 12:00 a.m.•59 views

Cisco Unified IP Conference Station 7937G Denial of Service (CVE-2020-16139)

A denial-of-service vulnerability exists in Cisco Unified IP Conference Station 7937G. Successful exploitation of this vulnerability could cause a denial-of-service condition...

7.8CVSS2.7AI score0.7977EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2019/05/27 12:00 a.m.•59 views

Oracle Application Testing Suite DownloadServlet Directory Traversal (CVE-2019-2557)

A directory traversal vulnerability exists in Oracle Application Testing Suite. A remote authenticated attacker can exploit this vulnerability by sending a malicious request to the vulnerable server. Successful exploitation results in arbitrary file download from the target server...

6.5CVSS4.9AI score0.05403EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2019/04/29 12:00 a.m.•59 views

Google Chrome Use After Free Denial Of Service (CVE-2019-5788; CVE-2019-5789)

Multiple use-after-free vulnerabilities exist in Google Chrome. Successful exploitation of these vulnerabilities could allow a remote attacker to create a denial of service condition on the affected system...

9.3CVSS4.5AI score0.09259EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2018/10/28 12:00 a.m.•59 views

Primetek Primefaces Weak Encryption Remote Code Execution (CVE-2017-1000486)

Primefaces versions prior to 5.2.21, 5.3.8 or 6.0 are vulnerable to a padding oracle attack, due to the use of weak crypto and default encryption password...

7.5CVSS5.9AI score0.94104EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2017/12/13 12:00 a.m.•59 views

JbossMQ Invocation Layer Deserialization Remote Code Execution (CVE-2017-12149; CVE-2017-7504)

An invocation layer deserialization vulnerability exists in Red Hat JBoss Seam Framework. A remote unauthenticated attacker may exploit this vulnerability by sending a crafted file to the web application...

7.5CVSS8.8AI score0.90713EPSS
SaveExploits17
Check Point Advisories
Check Point Advisories
•added 2017/03/14 12:00 a.m.•59 views

Microsoft Edge Scripting Engine Memory Corruption (MS17-007: CVE-2017-0071; CVE-2017-8548)

A use after free vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker can exploit this vulnerability by enticing the target user to open a specially crafted web page...

7.6CVSS7.6AI score0.67587EPSS
SaveExploits7
Check Point Advisories
Check Point Advisories
•added 2016/06/22 12:00 a.m.•60 views

Liferay Portal User Account Stored Cross Site Scripting (CVE-2016-3670)

A persistent XSS vulnerability exists in the user account creation process in Liferay Portal. The vulnerability is due to insufficient input validation of the firstName, middleName and lastName parameters. Successful exploitation could allow the attacker to inject arbitrary script code into a use...

4.3CVSS3.5AI score0.02291EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2016/01/10 12:00 a.m.•59 views

Microsoft FrontPage Server Extensions Cross Site Scripting (MS06-017: CVE-2006-0015)

A Cross Site Scripting vulnerability exists in Microsoft FrontPage Server Extensions and Microsoft SharePoint Team Services. The vulnerability is caused as a result of the failure of these products to properly validate certain CGI parameters passed to them. This vulnerability allows arbitrary HTM...

6.8CVSS6AI score0.24408EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2015/04/06 12:00 a.m.•59 views

Apache Qpid Session.gap Denial of Service (CVE-2015-0203)

A denial of service vulnerability exists in Apache Qpid. The vulnerability is due to an assertion failure prior to session establishment when processing the session.gap control segment. A remote, authenticated attacker could exploit this vulnerability by sending an out of sequence session.gap...

4CVSS4.6AI score0.08523EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•59 views

EMC Replication Manager Command Execution - Ver2 (CVE-2011-0647)

A command execution vulnerability has been reported in Emc Replication Manager and Emc Networker Module. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

10CVSS5.7AI score0.63676EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2014/05/14 12:00 a.m.•59 views

Red Hat CloudForms AgentController Directory Traversal (CVE-2013-2068)

A directory traversal vulnerability has been reported in Red Hat CloudForms. This vulnerability is due to improper sanitization of of the "filename" GET parameter passed to the "linuxpkgs" method of the AgentController. A remote unauthenticated attacker can exploit this vulnerability by sending...

9.4CVSS6.5AI score0.58624EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2014/05/04 12:00 a.m.•59 views

IcoFX Stack Buffer Overflow (CVE-2013-4988)

A stack buffer overflow has been reported in IcoFX. The vulnerability is due to an error while parsing specially crafted .ico files. A remote attacker can exploit this issue by enticing a user to open a malicious .ico file...

9.3CVSS6.6AI score0.66998EPSS
SaveExploits14
Check Point Advisories
Check Point Advisories
•added 2014/04/16 12:00 a.m.•59 views

Microsoft Excel Version Information Handling Code Execution (MS07-036) - Ver2 (CVE-2008-0081)

Microsoft Excel is a popular spreadsheet application. Multiple vulnerabilities have been identified in Microsoft Excel. A remote attacker could exploit these issues via a malformed Excel file. Successful exploitation of these vulnerabilities may allow execution of arbitrary code on a target syste...

9.3CVSS7.2AI score0.57908EPSS
SaveExploits7
Check Point Advisories
Check Point Advisories
•added 2014/04/16 12:00 a.m.•59 views

Mozilla Firefox JIT escape Function Memory Corruption - Ver2 (CVE-2009-2477)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, and various graphic formats, and so on. The browser runs on Windows,...

9.3CVSS9.4AI score0.42689EPSS
SaveExploits12
Check Point Advisories
Check Point Advisories
•added 2014/03/03 12:00 a.m.•59 views

Microsoft Windows LNK PIF Code Execution - Ver2 (CVE-2010-2568)

A code execution vulnerability has been reported in Microsoft Windows 7, Microsoft Windows Vista, Microsoft Windows Xp, Microsoft Windows 2003 Server, Microsoft Windows Server 2003 and Microsoft Windows Server 2008. Successful exploitation of this vulnerability could allow a remote attacker to...

8.8AI score0.91324EPSS
SaveExploits14
Check Point Advisories
Check Point Advisories
•added 2014/03/03 12:00 a.m.•59 views

Microsoft Office Excel Featheader Record Memory Corruption (MS09-067) - Ver2 (CVE-2009-3129)

Microsoft Excel is a popular spreadsheet application. . A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

9.3CVSS7.2AI score0.85731EPSS
SaveExploits11
Check Point Advisories
Check Point Advisories
•added 2013/10/27 12:00 a.m.•59 views

Graphite Web Unsafe Module Handling Code Execution (CVE-2013-5093)

A command injection vulnerability has been reported in Graphite Web...

7AI score0.38668EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2011/09/27 12:00 a.m.•59 views

HP Easy Printer Care Software HPTicketMgr.dll Directory Traversal (CVE-2011-2404)

A code execution vulnerability has been reported in HP Easy Printer Care Software. The vulnerability is due to insufficient input validation by an ActiveX control within the affected product. A remote attacker may exploit this vulnerability by enticing an affected user to open a malicious link...

7.5CVSS7.2AI score0.7374EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2010/08/10 12:00 a.m.•59 views

Microsoft Windows Cinepak Codec Remote Code Execution (MS10-055; CVE-2010-2553)

The Cinepak codec is a media encoder and decoder supported by the Windows Media Player. A remote code execution vulnerability has been reported in the way the Cinepak codec handles supported format files. The vulnerability is due to an error in the Cinepak codec that fails to properly handle...

9.3CVSS7.2AI score0.30895EPSS
SaveExploits6
Total number of security vulnerabilities5000