Lucene search
+L
Checkpoint AdvisoriesMost viewed

13538 matches found

Check Point Advisories
Check Point Advisories
•added 2022/11/09 12:00 a.m.•27 views

Lansweeper SQL Injection (CVE-2022-21234)

An SQL injection vulnerability exists in Lansweeper. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

6.5CVSS5.1AI score0.72601EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/11/03 12:00 a.m.•27 views

Hitron CHITA Command Injection (CVE-2022-25017)

A command injection vulnerability exists in Hitron CHITA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9CVSS5.5AI score0.29097EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/11/03 12:00 a.m.•27 views

C-DATA Command Injection (CVE-2022-29337)

A command injection vulnerability exists in C-DATA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

7.5CVSS5.6AI score0.35463EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/10/31 12:00 a.m.•27 views

Atlassian Bitbucket Command Injection (CVE-2022-36804)

A command injection vulnerability exists in Atlassian Bitbucket. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

6.5AI score0.99174EPSS
SaveExploits25
Check Point Advisories
Check Point Advisories
•added 2022/10/27 12:00 a.m.•27 views

Microsoft Azure Service Fabric Explorer Cross Site Scripting (CVE-2022-35829)

A cross-site scripting vulnerability exists in Microsoft Azure Service Fabric Explorer. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

4.8AI score0.19915EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/10/24 12:00 a.m.•27 views

Advantech WebAccess Directory Traversal (CVE-2018-15706)

A directory traversal vulnerability exists in Advantech WebAccess. Successful exploitation of this vulnerability could allow a remote attacker to disclose or access arbitrary files on the vulnerable server...

6.8CVSS5.3AI score0.32367EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/10/18 12:00 a.m.•27 views

Adobe Acrobat and Reader Stack-based Buffer Overflow (APSB22-46: CVE-2022-42339)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

5.6AI score0.02872EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/08/09 12:00 a.m.•27 views

Adobe Acrobat and Reader Use After Free (APSB22-39: CVE-2022-35665)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5.6AI score0.03847EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/07/25 12:00 a.m.•27 views

FlatCore CMS Server-Side Request Forgery (CVE-2021-41403)

A server-side request forgery vulnerability exists in FlatCore CMS. Successful exploitation of this vulnerability could allow an attacker to access internal resources...

7.5CVSS3.6AI score0.19103EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/04/17 12:00 a.m.•27 views

D-Link DCS-930L Remote Code Execution (CVE-2016-11021)

A remote code execution vulnerability exists in D-Link DCS-930L. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9CVSS5.8AI score0.6887EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2022/04/03 12:00 a.m.•27 views

Pulse Connect Secure Authentication Bypass (CVE-2021-22893)

An authentication bypass vulnerability exists in Pulse Connect Secure. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

7.5CVSS4.5AI score0.47172EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2022/03/08 12:00 a.m.•27 views

Microsoft Windows PDEV Elevation of Privilege (CVE-2022-23299)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.2CVSS5.8AI score0.07618EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/03/01 12:00 a.m.•27 views

Apache Struts Denial of Service (CVE-2006-1547)

A denial-of-service vulnerability exists in Apache Struts. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

7.8CVSS5.5AI score0.54635EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/01/11 12:00 a.m.•27 views

Adobe Acrobat and Reader Violation of Secure Design Principles (APSB22-01: CVE-2021-44714)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

4.3CVSS5.3AI score0.02474EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2021/09/29 12:00 a.m.•27 views

Symantec Web Gateway Local File Inclusion (CVE-2012-2957)

A local file inclusion vulnerability exists in Symantec Web Gateway. Successful exploitation of this vulnerability could allow a remote attacker to damage user systems...

7.2CVSS6AI score0.59287EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2021/09/14 12:00 a.m.•27 views

Microsoft Win32k Elevation of Privilege (CVE-2021-38639)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

4.6CVSS7.6AI score0.01352EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2021/09/14 12:00 a.m.•27 views

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-36963)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

4.6CVSS6.1AI score0.01144EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2021/08/23 12:00 a.m.•27 views

Advantech iView runProViewUpgrade Command Injection (CVE-2021-32930)

A remote command execution exists in Advantech iView. The vulnerability is due to improper input sanitization...

7.5CVSS4.4AI score0.08055EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2021/04/21 12:00 a.m.•27 views

Apple Quicktime Remote Code Execution (CVE-2015-3788)

A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS9.4AI score0.0364EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2021/02/16 12:00 a.m.•27 views

Intel Security VirusScan Enterprise Linux Cross-Site Scripting (CVE-2016-8019)

A cross-site scripting vulnerability exists in Intel Security VirusScan Enterprise Linux. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

4.3CVSS5.1AI score0.04006EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2021/02/01 12:00 a.m.•27 views

OpenCATS Remote Code Execution (CVE-2021-25294)

A remote code execution vulnerability exists in OpenCATS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

10CVSS5.7AI score0.10679EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2020/12/08 12:00 a.m.•27 views

Microsoft Windows SMB Server Information Disclosure (CVE-2020-17140)

An information disclosure vulnerability has been reported in the SMBv2 component of Microsoft Windows SMB server. The vulnerability is due to improper handling of SMB2SETINFO messages. A remote, authenticated attacker can exploit this vulnerability by sending crafted SMBv2 messages to the target...

4CVSS6AI score0.13098EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2020/12/08 12:00 a.m.•27 views

Microsoft Windows SMB Remote Code Execution (CVE-2020-17096)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9CVSS9.3AI score0.1954EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2020/11/10 12:00 a.m.•27 views

Microsoft SharePoint Remote Code Execution (CVE-2020-17061)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.5CVSS8.8AI score0.04256EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2020/10/28 12:00 a.m.•27 views

Alcatel Lucent Stack Overflow (CVE-2019-3922)

A stack overflow vulnerability exists in Alcatel Lucent. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

7.5CVSS5.3AI score0.05238EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2020/10/13 12:00 a.m.•27 views

Microsoft Windows Spoofing (CVE-2020-16922)

A spoofing vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to impersonate and present itself as a legitimate host...

2.1CVSS6.6AI score0.00806EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2020/10/07 12:00 a.m.•27 views

Ozeki NG SMS Gateway Directory Traversal (CVE-2020-14028)

A directory traversal vulnerability exists in Ozeki NG SMS Gateway. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server...

9CVSS5.6AI score0.01864EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2020/09/01 12:00 a.m.•27 views

Cisco UCS Director saveStaticConfig Directory Traversal (CVE-2020-3248)

A directory traversal vulnerability exists in Cisco UCS Directory. The vulnerability is due to insufficient validation of user input in the saveStaticConfig method...

10CVSS3.1AI score0.74438EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2020/07/01 12:00 a.m.•27 views

Zivif Webcams Remote Code Execution (CVE-2017-17107)

A remote code execution vulnerability exists in Zivif Webcams. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

10CVSS6.1AI score0.03879EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2020/06/08 12:00 a.m.•27 views

osTicket Cross-Site Scripting (CVE-2020-12629)

A cross site scripting vulnerability exists in osTicket. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

3.5CVSS5.6AI score0.01504EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2020/05/12 12:00 a.m.•27 views

Microsoft Windows Graphics Component Elevation of Privilege (CVE-2020-1135)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.2CVSS6.2AI score0.00972EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2020/04/14 12:00 a.m.•27 views

Microsoft Win32k Elevation of Privilege (CVE-2020-0958)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.2CVSS8.2AI score0.00914EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2020/02/25 12:00 a.m.•27 views

Microsoft Windows Jet Database Remote Code Execution (CVE-2019-1249)

A remote code execution vulnerability exists in the Jet Database Engine component of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit this vulnerability by enticing a target user into opening a crafted file. Successful...

9.3CVSS8.3AI score0.11924EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2020/02/11 12:00 a.m.•27 views

Microsoft Remote Desktop Client Remote Code Execution (CVE-2020-0734)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9.3CVSS8.5AI score0.16529EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/11/26 12:00 a.m.•27 views

Microsoft Windows DHCP Client DhcpExtractFullOptions Code Execution (CVE-2019-0697)

A remote code execution vulnerability exists in Microsoft DHCP Client. A remote attacker could exploit this vulnerability by sending maliciously crafted DHCP responses to a vulnerable Windows system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code...

7.5CVSS9.4AI score0.32915EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/11/26 12:00 a.m.•27 views

Microsoft Office Word Security Feature Bypass (CVE-2019-0540)

An information disclosure vulnerability exists in the Word component of Microsoft Office. This vulnerability is due to improper handling of fields. Successful exploitation could cause an information disclosure...

4.3CVSS0.9AI score0.12783EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/11/19 12:00 a.m.•27 views

Oracle WebLogic Server AbstractPlatformTransactionManager Insecure Deserialization (CVE-2018-3191)

An insecure deserialization vulnerability has been reported in Oracle WebLogic Server. A remote attacker can exploit this vulnerability by sending a specially crafted serialized object. Successful exploitation can result in arbitrary code execution in the context of the user account running...

7.5CVSS9.2AI score0.63188EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/11/19 12:00 a.m.•27 views

Asterisk Denial of Service (CVE-2018-12228)

A denial-of-service vulnerability has been reported in Asterisk. The vulnerability is due to improper handling of client abrupt disconnection or client-supplied messages when client is connecting via TLS. A remote user can exploit the vulnerability by abruptly disconnecting or sending specially...

6.8CVSS1.8AI score0.06698EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2019/11/07 12:00 a.m.•27 views

Zoho ManageEngine OpManager Image Arbitrary File Upload (CVE-2018-18475)

An arbitrary file upload vulnerability exists in Zoho ManageEngine OpManager. The vulnerability is due to insufficient validation of uploaded images. Successful exploitation could result in unrestricted file upload and possible further attacks...

7.5CVSS2.7AI score0.20409EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/10/16 12:00 a.m.•27 views

Adobe Acrobat and Reader Use After Free (APSB19-49: CVE-2019-8213)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS5.6AI score0.041EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/09/04 12:00 a.m.•27 views

Pulse Connect Secure File Disclosure (CVE-2019-11510)

A file disclosure vulnerability exists in Pulse Connect Secure. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

7.5CVSS2.8AI score0.99999EPSS
SaveExploits22
Check Point Advisories
Check Point Advisories
•added 2019/08/13 12:00 a.m.•27 views

Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB19-41: CVE-2019-8045)

An untrusted pointer dereference vulnerability exists in Adobe Acrobat and Reader. A remote unauthenticated attacker could exploit this vulnerability by enticing a target to view a specially crafted pdf file. Successful exploitation of this vulnerability could allow a remote attacker to damage...

7.5CVSS5.1AI score0.16018EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2019/08/13 12:00 a.m.•27 views

Microsoft Windows Kernel Elevation of Privilege (CVE-2019-1159)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.2CVSS5.8AI score0.11333EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/07/16 12:00 a.m.•27 views

Zoom Client Webcam Denial of Service (CVE-2019-13449)

A denial of service vulnerability exists in Zoom Client Webcam. Successful exploitation of this vulnerability could result in denial of service conditions...

4.3CVSS2.8AI score0.01997EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2019/06/27 12:00 a.m.•27 views

D-Link DCS-1130 Network Camera Command Injection (CVE-2017-8408)

A Command Injection vulnerability exists in D-Link DCS 1130. An authenticated attacker can send a specially crafted HTTP request to the affected target host and trigger arbitrary command execution...

10CVSS3AI score0.05123EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2019/06/11 12:00 a.m.•27 views

Microsoft Edge Scripting Engine Information Disclosure (CVE-2019-0990)

An information disclosure vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

4.3CVSS6.5AI score0.05406EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/06/11 12:00 a.m.•27 views

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1052)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS7.9AI score0.02403EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/06/11 12:00 a.m.•27 views

Microsoft Edge Scripting Engine Information Disclosure (CVE-2019-1023)

An information disclosure vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

4.3CVSS6.5AI score0.05406EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/05/14 12:00 a.m.•27 views

Microsoft Windows Storage Service Elevation of Privilege (CVE-2019-0931)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.9CVSS5.9AI score0.00853EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2019/05/14 12:00 a.m.•27 views

Microsoft Browser Scripting Engine Memory Corruption (CVE-2019-0884)

A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS7.9AI score0.07513EPSS
SaveExploits0
Total number of security vulnerabilities5000