Lucene search
+L
Checkpoint AdvisoriesMost viewed

13538 matches found

Check Point Advisories
Check Point Advisories
•added 2010/02/10 12:00 a.m.•31 views

Digium Asterisk Invalid RTP Payload Type Number Memory Corruption (CVE-2008-1289)

Asterisk is an open source software implementation of a telephone private branch exchange. Like any PBX, it allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. Asterisk supports a wide ran...

7.5CVSS8.1AI score0.11523EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2010/02/01 12:00 a.m.•31 views

Novell iPrint Client ienipp.ocx target-frame Stack Buffer Overflow (CVE-2009-1568)

Novell iPrint Client is an application that allows users to install and manage printers, or submit print jobs from a web browser. Novell iPrint Client is bundled with an ActiveX control that implements various functions. A buffer overflow vulnerability exists in Novell iPrint Client. The...

9.3CVSS7AI score0.32168EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2010/01/13 12:00 a.m.•31 views

Internet Explorer Script Action Handler Buffer Overflow (CVE-2006-1245)

Microsoft Internet Explorer is the most widely used web browser application used today. The browser is capable of processing HTML, scripting languages, and various other popular Internet specifications. A vulnerability has been identified in Microsoft Internet Explorer. The vulnerability is creat...

7.5CVSS7AI score0.61821EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2009/12/31 12:00 a.m.•31 views

Firefox Image File Dragging Malformed Extension (CVE-2005-0230)

The Mozilla web browser and its derivatives, Firefox, Netscape, and K-Meleon are applications designed for tasks related to browsing the web, such as displaying HTML encoded pages and downloading files. The Mozilla web browser allows the user to quickly save images displayed on web pages by...

5.1CVSS6.1AI score0.03256EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2009/12/23 12:00 a.m.•31 views

Update Protection against EMC RepliStor rep_srv and ctrlservice Denial of Service

A denial of service vulnerability exists in EMC RepliStor. EMC RepliStor is a data recovery and protection system designed for Microsoft Windows. The vulnerability is due to an input validation error while parsing a specially crafted packet sent to 'repsrv.exe' and 'ctrlservice.exe' services...

5CVSS6.1AI score0.07271EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2009/12/13 12:00 a.m.•31 views

Citrix Systems Multiple Products IMA Service Buffer Overflow (CVE-2008-0356)

The Citrix MetaFrame products are remote access and application publishing products built on Citrix' Independent Computing Architecture ICA. The products allow for access and control of the remote hosts as well as deploying applications. There exists a buffer overflow vulnerability in Independent...

10CVSS8.2AI score0.72963EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2009/12/01 12:00 a.m.•31 views

VERITAS NetBackup vmd Shared Library Buffer Overflow (CVE-2005-3116)

The Symantec VERITAS NetBackup Server product suite is an enterprise backup system solution available for various platforms. It is capable of performing scheduled automatic backups as well as manual backups invoked by a client. A minimal backup environment consists of backup clients and a master...

10CVSS7.3AI score0.27617EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2009/11/25 12:00 a.m.•31 views

Novell iManager Tomcat HTTP POST Request Handling Denial of Service (CVE-2006-4517)

Novell iManager is a web-based administration console that provides management of many other Novell products. During installation, if the Windows Web Publishing Services IIS is not available, the installation program will install the Apache HTTP server. The iManager service itself is a Java web...

7.8CVSS6.4AI score0.0317EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2009/11/10 12:00 a.m.•31 views

Microsoft Web Services on Devices API Memory Corruption (MS09-063; CVE-2009-2512)

The WSDAPI is an implementation of the Devices Profile for Web Services DPWS for Windows Vista and Windows Server 2008. The DPWS constrains Web Services specifications so that clients can easily discover devices. A remote code execution vulnerability has been reported in the Web Service on Device...

9.3CVSS7.7AI score0.31215EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2009/11/03 12:00 a.m.•31 views

Oracle Database Server SYS.LT.FINDRICSET Function SQL Injection (CVE-2007-5511)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

6.5CVSS8AI score0.31758EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2009/11/03 12:00 a.m.•31 views

Microsoft .NET Framework Pointer Verification Error (MS09-061; CVE-2009-0090)

The Microsoft .NET Framework is a software framework that includes a large library of coded solutions to common programming problems and a virtual machine that manages the execution of programs written specifically for the framework. A remote code execution vulnerability exists in the Microsoft...

9.3CVSS9.4AI score0.20982EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2009/10/15 12:00 a.m.•31 views

Microsoft GDI+ TIFF Memory Corruption (MS09-062; CVE-2009-2503)

The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer.A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory.The vulnerability is due to the way that GDI+ renders...

9.3CVSS9.2AI score0.22205EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2009/10/14 12:00 a.m.•31 views

CVS File Existence Information Disclosure (CVE-2004-0788)

Concurrent Versions System CVS is an open-source network-transparent version control system. CVS itself does not listen for, or accept network connections. To implement remote repository access, it can be installed as an inetd service, or invoked with the rsh/ssh command. Data between the server...

5CVSS7AI score0.05917EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2009/10/13 12:00 a.m.•31 views

Preemptive Protection against Microsoft GDI+ PNG Integer Overflow Vulnerability (MS09-062)

A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may trigger this issue via a...

9.3CVSS9.3AI score0.23461EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2009/09/17 12:00 a.m.•31 views

Update Protection against Adobe JRun 4 Management Console Cross-Site Scripting Vulnerability (APSB09-12)

A Cross Site Scripting XSS vulnerability has been discovered in Adobe JRun Management Console. JRun is an application server based on Java 2 Platform, Enterprise Edition J2EE. It works with popular Web servers including Apache and IIS. A remote attacker could exploit this issue to execute a...

4.3CVSS5.7AI score0.01751EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2009/09/14 12:00 a.m.•31 views

Adobe Flex SDK Cross-Site Scripting (APSB09-13; CVE-2009-1879)

An instance of a DOM-based Cross Site Scripting XSS vulnerability has been discovered in Adobe Flex SDK. Adobe Flex is a software development kit released by Adobe Systems for the development and deployment of cross-platform rich Internet applications based on the Adobe Flash platform. A remote...

2.6CVSS5.4AI score0.08253EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2009/08/11 12:00 a.m.•31 views

Microsoft Remote Desktop Connection DWORD Heap Overflow (MS09-044; CVE-2009-1133)

A remote code execution vulnerability has been reported in the way Microsoft Remote Desktop Connection processes specific parameters returned by the RDP server. The Microsoft Remote Desktop Protocol RDP provides remote display and input capabilities over network connections for Microsoft...

9.3CVSS7.9AI score0.30496EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2009/06/09 12:00 a.m.•31 views

Microsoft Word Multiple SPRM Records Buffer Overflow (MS09-027; CVE-2009-0563)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to an error in Microsoft Word that fails to properly handle Word files. A remote attacker could trigger this flaw by convincing a victim to...

9.3CVSS3AI score0.63081EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2009/05/12 12:00 a.m.•31 views

Microsoft PowerPoint Converter NoteSlide Record Memory Corruption (MS09-017; CVE-2009-0220)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially craft...

9.3CVSS7.3AI score0.37107EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2009/04/14 12:00 a.m.•31 views

Microsoft WordPad Word 97 Text Converter Text Location Stack Overflow (MS09-010; CVE-2009-0235)

WordPad Text Converters allow users who do not have Microsoft Office Word installed to open documents in other Microsoft Windows applications. They also allow users to save documents in the Word 97 file format. The vulnerability is due to a memory corruption error when a user opens a specially...

9.3CVSS6.8AI score0.33616EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2009/02/13 12:00 a.m.•31 views

Update Protection against Akamai Download Manager Arbitrary Program Execution

In its Update Rollup for ActiveX Kill Bits from February 2009 960715, Microsoft has released a security update to set a kill bit for an ActiveX control developed by Akamai Technologies. Akamai Technologies has released a security update that addresses a vulnerability in the affected...

6.8CVSS6.7AI score0.10988EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2009/02/10 12:00 a.m.•31 views

Workaround for Microsoft Office Visio Malformed File Parsing Remote Code Execution Vulnerabilities (MS09-005)

Multiple remote code execution vulnerabilities have been reported in Microsoft Visio. Microsoft Visio is a diagram creation software for Microsoft Windows. A remote attacker can exploit these vulnerabilities via a specially crafted Visio file. Successful exploitation may allow execution of...

9.3CVSS7.7AI score0.23477EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2008/12/09 12:00 a.m.•31 views

Workaround for Microsoft Windows Saved Search Remote Code Execution Vulnerability (MS08-075)

A remote code execution vulnerability was reported in the way Windows Explorer saves specially crafted search files. Windows Search is a standard component of Windows Vista that allows instant search capabilities for most common file and data types. Windows Search has XML-based files that save...

8.5CVSS7AI score0.20682EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2008/08/12 12:00 a.m.•31 views

Microsoft Excel Axisparent Record Index Handling Code Execution (MS08-043; CVE-2008-3004)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the way Microsoft Excel handles index values. The vulnerability is due to an error in Microsoft Excel that fails to properly validate index values when loading Excel files into memor...

9.3CVSS7.5AI score0.32172EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2008/08/08 12:00 a.m.•31 views

Update Protection against TFTP Server Error Packet Handling Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in TFTP Server. The Trivial File Transfer Protocol TFTP is used for file transfer, allowing a remote user to download or upload files to the server. TFTP Server is an open source TFTP server service that facilitates the transfer of files to or fro...

10CVSS9.8AI score0.65284EPSS
SaveExploits7
Check Point Advisories
Check Point Advisories
•added 2008/05/29 12:00 a.m.•31 views

Microsoft PowerPoint TxMasterStyle10Atom Processing Code Execution (MS08-051; CVE-2008-1455)

Microsoft PowerPoint is a popular presentation program. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory calculation error in Microsoft PowerPoint when parsing bullet list values in specially crafted PowerPoint files. A remote...

6.8CVSS7.2AI score0.25513EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2007/11/18 12:00 a.m.•31 views

Preemptive Protection against Microsoft Windows DNS Server Spoofing Vulnerability (MS07-062)

A DNS Cache Poisoning vulnerability has been reported in Microsoft DNS servers. DNS cache poisoning occurs when false DNS records are injected into a DNS server's cache tables. Once the cache tables have been altered, a remote attacker may inspect, capture or corrupt any information exchanged...

6.4CVSS6.4AI score0.52306EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2007/10/24 12:00 a.m.•31 views

Microsoft Visual Studio PDWizard.ocx ActiveX Control Code Execution (CVE-2007-4891)

Microsoft Visual Studio is a software development product for computer programmers. It centers on an integrated development environment which lets programmers create standalone applications, web sites, web applications, and web services.The vulnerability is due to an error in the Microsoft Visual...

6.8CVSS6.8AI score0.31003EPSS
SaveExploits7
Check Point Advisories
Check Point Advisories
•added 2007/09/12 12:00 a.m.•31 views

Preemptive Protection against Microsoft Agent Remote Code Execution Vulnerability (MS07-051)

A remote code execution vulnerability exists in Microsoft Agent. Microsoft Agent is a software technology that enables an enriched form of user interaction that can make using and learning to use a computer easier. A remote attacker can exploit this issue to execute arbitrary code on the affected...

9.3CVSS7.5AI score0.54428EPSS
SaveExploits7
Check Point Advisories
Check Point Advisories
•added 2007/05/01 12:00 a.m.•31 views

Symantec Products SupportSoft ActiveX Control Multiple Buffer Overflows (CVE-2006-6490)

Multiple vulnerabilities have been reported in Symantec SupportSoft ActiveX controls. SupportSoft provides third party ActiveX controls used for remote assistance and other technical support functions. A remote attacker could cause the browser to crash allowing execution of arbitrary commands.The...

10CVSS8AI score0.1034EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2007/04/11 12:00 a.m.•31 views

Preemptive Protection against Mercury Mail IMAP Buffer Overflow Vulnerability

Multiple buffer overflow vulnerabilities exist in Mercury Mail Transport System. Mercury Mail Transport System is a free mail server program that supports various email access and exchange protocols, including the Internet Message Access Protocol IMAP. IMAP is a standard protocol for accessing...

10CVSS7.5AI score0.72459EPSS
SaveExploits14
Check Point Advisories
Check Point Advisories
•added 2022/11/23 12:00 a.m.•30 views

Pimcore Cross Site Scripting (CVE-2022-0831; CVE-2022-0832)

A cross site scripting vulnerability exists in Pimcore. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary script into the affected system...

3.5CVSS4.9AI score0.6662EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2022/11/14 12:00 a.m.•30 views

WikiDocs Arbitrary File Upload (CVE-2022-23375)

An arbitrary file upload vulnerability exists in WikiDocs. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.5CVSS5AI score0.19872EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/11/09 12:00 a.m.•30 views

Nagios IM Command Injection (CVE-2019-9202)

A command injection vulnerability exists in Nagios IM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

6.5CVSS5.8AI score0.2377EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2022/11/08 12:00 a.m.•30 views

Microsoft Windows Win32 Kernel Subsystem Elevation of Privilege (CVE-2022-41113)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5.6AI score0.08716EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/10/31 12:00 a.m.•30 views

Linux Kernel Privilege Escalation (CVE-2022-0847)

A privilege escalation vulnerability exists in Linux Kernel. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

7.2CVSS6AI score0.88606EPSS
SaveExploits101
Check Point Advisories
Check Point Advisories
•added 2022/10/18 12:00 a.m.•30 views

Adobe Acrobat and Reader Out-of-bounds Read (APSB22-46: CVE-2022-38449

An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

3.6AI score0.0217EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/10/02 12:00 a.m.•30 views

Cisco NFVIS Improper Access Control (CVE-2021-34746)

An improper access control vulnerability exists in Cisco NFVIS. Successful exploitation of this vulnerability could allow a remote attacker to read sensitive files on the affected system...

9.3CVSS4.9AI score0.17661EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/09/20 12:00 a.m.•30 views

Kamailio Buffer Overflow (CVE-2018-8828)

A buffer overflow vulnerability exists in Kamailio. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

7.5CVSS5.3AI score0.30918EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/08/09 12:00 a.m.•30 views

Adobe Acrobat and Reader Use After Free (APSB22-39: CVE-2022-35670)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5.6AI score0.02404EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/08/09 12:00 a.m.•30 views

Microsoft Windows Win32k Elevation of Privilege (CVE-2022-34699)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5.8AI score0.04354EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/06/27 12:00 a.m.•30 views

Cisco Adaptive Security Appliance Privilege Escalation (CVE-2022-20759)

A privilege escalation vulnerability exists in Cisco Adaptive Security Appliance. Successful exploitation of this vulnerability could allow a remote attacker to easily elevate their privilege to that of a domain admin once he compromises a regular user in the domain...

8.5CVSS5.1AI score0.29223EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/06/07 12:00 a.m.•30 views

QNAP FileStation Cross Site Scripting (CVE-2018-19953)

A cross site scripting vulnerability exists in QNAP FileStation. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

4.3CVSS4.9AI score0.23894EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/05/19 12:00 a.m.•30 views

Zyxel USG Command Injection (CVE-2022-30525)

A command injection vulnerability exists in Zyxel USG. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

10CVSS5.6AI score0.99944EPSS
SaveExploits27
Check Point Advisories
Check Point Advisories
•added 2022/05/10 12:00 a.m.•30 views

Microsoft Windows Kernel Elevation of Privilege (CVE-2022-29142)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.9CVSS5.8AI score0.05236EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/04/12 12:00 a.m.•30 views

Microsoft Windows DWM Core Library Elevation of Privilege (CVE-2022-24546)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

4.6CVSS6.2AI score0.00793EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/04/05 12:00 a.m.•30 views

D-Link DSL-2760U Gateway Cross Site Scripting (CVE-2013-5223)

A cross-site scripting vulnerability exists in D-Link DSL-2760U Gateway. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

3.5CVSS5.1AI score0.33567EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2022/03/08 12:00 a.m.•30 views

Microsoft Remote Desktop Client Remote Code Execution (CVE-2022-23285)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS8.8AI score0.25628EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/03/02 12:00 a.m.•30 views

Zabbix Web Frontend Authentication Bypass (CVE-2022-23131)

An authentication bypass vulnerability exists in Zabbix Web Frontend. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...

5.1CVSS5.4AI score0.95683EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2021/12/27 12:00 a.m.•30 views

Victure WR1200 WiFi Router Command Injection (CVE-2021-43283)

A command injection vulnerability exists in Victure WR1200 WiFi Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

9CVSS5.8AI score0.04567EPSS
SaveExploits3
Total number of security vulnerabilities5000