Lucene search
+L
Checkpoint AdvisoriesMost viewed

13538 matches found

Check Point Advisories
Check Point Advisories
•added 2020/02/25 12:00 a.m.•30 views

Apache Tomcat AJP File Inclusion (CVE-2020-1938; CVE-2022-26377)

A file inclusion vulnerability exists in Apache Tomcat AJP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS4.5AI score0.9927EPSS
SaveExploits52
Check Point Advisories
Check Point Advisories
•added 2020/02/11 12:00 a.m.•30 views

Jenkins Pipeline Groovy Remote Code Execution (CVE-2019-1003001)

A remote code execution vulnerability exists in Jenkins pipeline groovy. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.5CVSS5.3AI score0.86054EPSS
SaveExploits10
Check Point Advisories
Check Point Advisories
•added 2020/01/29 12:00 a.m.•30 views

MediaWiki Reflected Cross-Site Scripting (CVE-2017-8809)

A reflected cross-site scripting vulnerability exists in MediaWiki. The vulnerability is due to insufficient input validation on user input in the api.php component. A remote user can exploit this vulnerability by enticing a user to click on a malicious link...

7.5CVSS2.3AI score0.07714EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/11/26 12:00 a.m.•30 views

Dovecot Submission-Login Service NULL Pointer Dereference Denial of Service (CVE-2019-11494)

A denial-of-service vulnerability exists in the Dovecot server. The vulnerability is due to a NULL pointer dereference in the submission-login service when authentication is aborted. Successful exploitation of this vulnerability could cause a partial denial of service of the affected system...

5CVSS3.3AI score0.02433EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/11/25 12:00 a.m.•30 views

HPE Intelligent Management Center Remote Code Execution (CVE-2019-5385)

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. The vulnerability is due to insufficient validation of the beanName request parameter in perfSelectTask endpoint.Successful exploitation results in the execution of arbitrary code under the security contex...

9CVSS2.8AI score0.0364EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/11/25 12:00 a.m.•30 views

Microsoft Remote Desktop Services Remote Code Execution (CVE-2019-1182)

A buffer overflow vulnerability exists in Microsoft Remote Desktop Services. A remote attacker could exploit this vulnerability by sending a specially crafted RDP packet. Successful exploitation of this vulnerability could lead to execution of arbitrary code on the target server...

10CVSS5.2AI score0.16764EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/11/25 12:00 a.m.•30 views

Advantech WebAccess SCADA Buffer Overflow (CVE-2019-3953)

A stack buffer overflow exists in Advantech WebAccess SCADA. The vulnerability is due to improper validation of user-supplied data in the request submitted to the target server with IOCTL 10012. Successful exploitation could lead to arbitrary code execution under context of Administrator...

7.5CVSS4.1AI score0.03988EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2019/11/12 12:00 a.m.•30 views

Microsoft VBScript Remote Code Execution (CVE-2019-1390)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS9AI score0.07465EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/11/05 12:00 a.m.•30 views

Electronic Arts Origin Client URI Handler Remote Code Execution (CVE-2019-12828)

A remote code execution vulnerability exists in the Electronic Arts Origin Client. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option regarding the DLL loading path. A remote attacker could exploit the vulnerability by...

6.8CVSS2.7AI score0.13274EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2019/08/08 12:00 a.m.•30 views

WordPress MapSVG Lite Plugin Cross Site Request Forgery (CVE-2019-1000003)

A cross site request forgery vulnerability exists in WordPress MapSVG Lite plugin. Successful exploitation of this vulnerability can result in the execution of arbitrary code in the effected system...

6.8CVSS3AI score0.00795EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2019/07/24 12:00 a.m.•30 views

WordPress WP Live Chat Plugin Arbitrary File Upload (CVE-2019-11185)

An Arbitrary File Upload vulnerability exists in WordPress Live Chat Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the effected system...

7.5CVSS4.5AI score0.04349EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2019/07/24 12:00 a.m.•30 views

Palo Alto Networks GlobalProtect SSL VPN Remote Code Execution (CVE-2019-1579)

A Remote Code Execution vulnerability exists in Palo Alto Networks GlobalProtect SSL VPN Gateway. An unauthenticated attacker could exploit the vulnerability by sending a specially crafted request to a vulnerable SSL VPN target. Successful exploitation of this vulnerability would allow remote...

6.8CVSS4AI score0.46239EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2019/07/09 12:00 a.m.•30 views

Microsoft Excel Information Disclosure (CVE-2019-1112)

...

4.3CVSS0.5AI score0.08743EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/06/11 12:00 a.m.•30 views

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1024)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS7.9AI score0.02403EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/06/11 12:00 a.m.•30 views

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0991)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS5.1AI score0.02474EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/06/11 12:00 a.m.•30 views

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-1005)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS4.9AI score0.03345EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/06/11 12:00 a.m.•30 views

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-0920)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS4.9AI score0.05524EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/05/23 12:00 a.m.•30 views

Sierra Wireless AirLink Information Disclosure (CVE-2018-4069)

An information disclosure vulnerability exists in Sierra Wireless AirLink. This vulnerability is due to lack of encryption of the user credentials. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability...

5CVSS2.7AI score0.04065EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2019/05/14 12:00 a.m.•30 views

Adobe Flash Player Use After Free (APSB19-26: CVE-2019-7837)

A use-after-free vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9.3CVSS4.9AI score0.09732EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/05/01 12:00 a.m.•30 views

Microsoft Windows DHCP Client Remote Code Execution (CVE-2019-0726)

A remote code execution vulnerability exists in Microsoft DHCP Client. The vulnerability is due to improper processing of DHCP response messages, causing memory corruption. A remote attacker could exploit this vulnerability by sending maliciously crafted DHCP responses to a vulnerable target...

7.5CVSS9.2AI score0.54459EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/04/18 12:00 a.m.•30 views

Verizon Fios Quantum Gateway Authenticated Command Injection (CVE-2019-3914)

A command injection vulnerability exists in Verizon Fios Quantum Gateway G1100 firmware. Successful exploitation of this vulnerability could result in the execution of arbitrary commands with root privileges...

9CVSS4.9AI score0.29885EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2019/04/18 12:00 a.m.•30 views

Apache Tomcat CGI Servlet Remote Code Execution (CVE-2019-0232)

A remote code execution vulnerability exists in Apache Tomcat CGI Servlet. Successful exploitation of this vulnerability could lead to remote code execution on the target server...

9.3CVSS2.6AI score0.99652EPSS
SaveExploits11
Check Point Advisories
Check Point Advisories
•added 2019/04/09 12:00 a.m.•30 views

Microsoft Graphics Components Remote Code Execution (CVE-2019-0822)

A remote code execution vulnerability exists in Microsoft Microsoft Graphics Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9.3CVSS5.4AI score0.1371EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/03/12 12:00 a.m.•30 views

Microsoft Browser Scripting Engine Memory Corruption (CVE-2019-0609)

A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS5AI score0.09846EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/02/24 12:00 a.m.•30 views

Drupal Core Remote Code Execution (CVE-2019-6340)

A code execution vulnerability exists in Drupal Core. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS5.6AI score0.92017EPSS
SaveExploits23
Check Point Advisories
Check Point Advisories
•added 2019/02/17 12:00 a.m.•30 views

GNU Libextractor ZIP File Comment Out-of-Bounds Read (CVE-2018-16430)

An out-of-bounds read vulnerability exists in Libextractor. The vulnerability is due to improper handling of long File Comment fields within ZIP files. Successful exploitation of this vulnerability could lead to denial-of-service conditions or disclosure of sensitive information...

6.8CVSS1AI score0.02646EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2019/01/24 12:00 a.m.•30 views

Rockwell RSLogix 5000 RNA Denial of Service (CVE-2011-3489)

A denial of service vulnerability exists in Rockwell RSLogix 5000. A remote attacker could exploit this vulnerability by sending a specially crafted request to the target system...

5CVSS5.2AI score0.08746EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2018/12/13 12:00 a.m.•30 views

Dell EMC Storage Manager EmConfigMigration Servlet Directory Traversal (CVE-2017-14384)

A directory traversal vulnerability exists in the Dell Storage Manager. The vulnerability is due to an input validation error in the EmConfigMigration Servlet...

4CVSS3.4AI score0.01808EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2018/12/11 12:00 a.m.•30 views

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-8618)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS7.4AI score0.10886EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2018/11/13 12:00 a.m.•30 views

Adobe Flash Player Out-of-bounds read (APSB18-39: CVE-2018-15978)

A out of bounds read vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

5CVSS2.9AI score0.0743EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2018/10/07 12:00 a.m.•30 views

Google PDFium Out-of-bounds read (CVE-2018-16076)

An out-of-bounds and vulnerability exists in Google PDFium. The vulnerability is due to an error in parsing a malformed JBIG2 image stream in a PDF document. Successful exploitation could result in sensitive data exposure and memory corruption...

6.8CVSS3AI score0.01469EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2018/07/10 12:00 a.m.•30 views

Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-5044; CVE-2019-7771; CVE-2019-7780)

A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

5CVSS3.6AI score0.08425EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2018/07/09 12:00 a.m.•30 views

mySCADA myPRO 7 Authentication Bypass (CVE-2018-11311)

An authentication bypass vulnerability has been reported in mySCADA myPRO 7 FTP Server. The vulnerability is due to the presence of hard coded credentials. A remote attacker can exploit this vulnerability by accessing the FTP Server using those credentials...

6.4CVSS2.1AI score0.15737EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2018/07/09 12:00 a.m.•30 views

CMS Made Simple File Manager Remote Code Execution (CVE-2018-1000094)

A remote command execution vulnerability exists in the File Manager interface of CMS Made Simple 2.2.5. By uploading a malicious file, an authenticated attacker with administrator privileges can exploit this vulnerability for execution of arbitrary code...

6.5CVSS4.5AI score0.38802EPSS
SaveExploits8
Check Point Advisories
Check Point Advisories
•added 2018/07/05 12:00 a.m.•30 views

D-Link DIR-620 Command Injection (CVE-2018-6211)

A command injection vulnerability exists in D-Link DIR-620 routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands...

9CVSS7.4AI score0.05768EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2018/07/02 12:00 a.m.•30 views

HP AIO Archive Query Server Stack Buffer Overflow - Ver2 (CVE-2013-6189)

A remote code execution vulnerability exists in Application Information Optimizer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

10CVSS4.3AI score0.16607EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2018/06/28 12:00 a.m.•30 views

Microsoft WordPad Font Conversion Remote Code Execution (CVE-2004-0901) - Ver2

A remote code execution vulnerability exists in Microsoft. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

10CVSS7.7AI score0.31921EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2018/05/14 12:00 a.m.•30 views

Node.js Foundation Node.js zlib windowBits Denial of Service (CVE-2017-14919)

A denial of service vulnerability exists in Node.js. The vulnerability is due to a newer version of zlib that does not permit a value of 8 for windowBits, and crashes or throws an exception when passed said value...

5CVSS3.9AI score0.08303EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2018/05/02 12:00 a.m.•30 views

Oracle WebLogic Remote Diagnosis Assistant rda_tfa_hrs Command Injection (CVE-2018-2616)

A command injection vulnerability exists in the web console of the Oracle WebLogic Remote Diagnosis Assistant. The vulnerability is due to a failure on the part of the application to properly parse input supplied to the rdatfahrs menu command...

6.5CVSS8.7AI score0.27068EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2018/04/10 12:00 a.m.•30 views

Microsoft Excel Remote Code Execution (CVE-2018-1027)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9.3CVSS5.6AI score0.19167EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2018/03/13 12:00 a.m.•30 views

Microsoft Windows Shell Remote Code Execution (CVE-2018-0883)

A Path Traversal vulnerability exists in Microsoft Explorer. A remote attacker can exploit this issue by enticing a target user to open a specially crafted ZIP file. Successful exploitation of this vulnerability could result in Remote Code Execution...

7.6CVSS7.2AI score0.14535EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2018/02/27 12:00 a.m.•30 views

Joomla com_jssupportticket Component Cross-Site Scripting (CVE-2018-6007)

A cross-site scripting vulnerability exists in Joomla comjssupportticket Component. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

6.8CVSS4.9AI score0.02264EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2018/02/13 12:00 a.m.•30 views

Adobe Acrobat and Reader Out-of-bounds read (APSB18-02: CVE-2018-4894)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

4.3CVSS5.5AI score0.10792EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2017/11/23 12:00 a.m.•30 views

HPE Intelligent Management Center mibFileServlet file Directory Traversal (CVE-2017-12559)

A directory traversal vulnerability exists in HPE Intelligent Management Center PLAT. The vulnerability is due to an input validation error in the mibFileServlet Servlet. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted packet to a vulnerable server...

6.8CVSS4AI score0.02545EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2017/11/14 12:00 a.m.•30 views

Adobe Acrobat and Reader Buffer Over-read (APSB17-36: CVE-2017-16384)

A buffer over-read vulnerability exists in the exif processing module for a PNG file during XPS conversion. The vulnerability is due to an invalid input leads to an incorrect memory buffer location. A remote attacker may exploit this vulnerability by enticing a target user to open a specially...

9.3CVSS4.9AI score0.06882EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2017/11/14 12:00 a.m.•30 views

Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36: CVE-2017-16415)

A out-of-bounds write vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an out of range pointer offset that is used to access sub-elements of an internal data structure. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted P...

9.3CVSS4.4AI score0.11212EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2017/10/15 12:00 a.m.•30 views

Apache HTTP OptionsBleed Memory Leak Scanner (CVE-2017-9798)

OptionsBleed Scanner is a vulnerability scanning product. Remote attackers can use OptionsBleed Scanner to detect vulnerabilities on a target server...

5CVSS2AI score0.94999EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2017/09/11 12:00 a.m.•30 views

HPE Intelligent Management Center saveSelectedDevices Expression Language Injection (CVE-2017-12491)

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. The vulnerability is due to insufficient handling of a parameter passed to the saveSelectedDevices method through a GWT RPC request. A remote, authenticated attacker can exploit this vulnerability by sendi...

9CVSS2.2AI score0.05614EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2017/08/28 12:00 a.m.•30 views

Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-8635)

A memory corruption vulnerability exists in Microsoft Browsers. The vulnerability is due to an error when handling objects in memory. A remote attacker can exploit this vulnerability and execute arbitrary code in the context of the current user...

7.6CVSS8AI score0.55883EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2017/06/28 12:00 a.m.•30 views

HPE Intelligent Management Center dbman RestoreZipFile Command Injection (CVE-2017-5821)

A command injection vulnerability exists in the dbman component of HPE Intelligent Management Center. The vulnerability is due to missing validation of user-provided parameters when handling RestoreZipFile commands. A remote, unauthenticated attacker can exploit the vulnerability by sending a...

10CVSS9.4AI score0.16544EPSS
SaveExploits0
Total number of security vulnerabilities5000