Lucene search
+L
Checkpoint AdvisoriesMost viewed

13538 matches found

Check Point Advisories
Check Point Advisories
•added 2015/09/08 12:00 a.m.•25 views

Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2486)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory . A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

9.3CVSS7.1AI score0.20243EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2015/08/12 12:00 a.m.•25 views

Google Android Stagefright 3GPP Integer Underflow (CVE-2015-3828)

A remote code execution vulnerability, known as Stagefright Vulnerability, has been reported in Android devices core. The vulnerability is due to an integer underflow condition in multiple MP4 atoms. Successful exploitation would allow an attacker to execute arbitrary code on the target system...

10CVSS4.2AI score0.85378EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2015/08/11 12:00 a.m.•25 views

Microsoft Office Graphics Component Remote Code Execution (MS15-080: CVE-2015-2431)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

9.3CVSS6.9AI score0.29843EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2015/08/11 12:00 a.m.•25 views

Microsoft Office Component Use After Free (MS15-081: CVE-2015-1642)

A remote code execution vulnerability has been reported in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a...

9.3CVSS5AI score0.53213EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2015/07/15 12:00 a.m.•25 views

Google Chrome blink buildShadowAndInstanceTree Use After Free (CVE-2015-1256)

A use-after-free vulnerability exists in Google Chrome, blink component. The vulnerability is due to error when building a shadow tree for a element with a direct reference to a disallowed element. A remote attacker could exploit this vulnerability by enticing a user to open a malicious webpage...

7.5CVSS2.7AI score0.01618EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2015/07/14 12:00 a.m.•25 views

Microsoft Internet Explorer Information Disclosure (MS15-065: CVE-2015-2402)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in validation of registry key locations. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of...

4.3CVSS5.7AI score0.12426EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2015/06/25 12:00 a.m.•25 views

HP SiteScope Log Analyzer Information Disclosure (CVE-2015-2120)

A privilege escalation vulnerability exists in HP SiteScope. The vulnerability is due to improper validation of the log path, allowing the user to read the users.config file. A remote, authenticated attacker may exploit this vulnerability by submitting a crafted log path...

8.7CVSS6.3AI score0.03484EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2015/06/21 12:00 a.m.•25 views

LANDesk Management Suite AMTVersion Cross-Site Scripting (CVE-2014-5360)

A cross-site scripting vulnerability exists in LANDesk Management Suite. The vulnerability is due to improper validation of a user-supplied parameter AMTVersion. A remote attacker could exploit this vulnerability by enticing a target user to view crafted web content...

4.3CVSS2.9AI score0.00991EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2015/05/18 12:00 a.m.•25 views

Microsoft Office Graphics Image Filter WPG Heap Overflow - Ver2 (CVE-2008-3460)

A buffer overflow vulnerability has been reported in Microsoft Works, Microsoft Office Converter Pack and Microsoft Office. An attacker could exploit this vulnerability via a crafted WPG file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on...

9.3CVSS7.4AI score0.32172EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2015/05/18 12:00 a.m.•25 views

MySQL Malformed Password Authentication - Ver2 (CVE-2004-0627)

MySQL is an open-source implementation of a relational database management system. MySQL supports the SQL Structured Query Language database query language. The database product allows remote network connections from client applications over the proprietary MySQL network protocol in addition to...

10CVSS7.1AI score0.69647EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2015/05/12 12:00 a.m.•25 views

Microsoft Internet Explorer Memory Corruption (MS15-043: CVE-2015-1717)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

9.3CVSS4.1AI score0.15631EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2015/04/14 12:00 a.m.•25 views

Microsoft Internet Explorer Memory Corruption (MS15-032: CVE-2015-1657)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

9.3CVSS7AI score0.12932EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2015/04/14 12:00 a.m.•25 views

Microsoft Office Component Use After Free (MS15-033: CVE-2015-1650)

A remote code execution vulnerability has been reported in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a...

9.3CVSS7AI score0.26595EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2015/04/14 12:00 a.m.•25 views

Microsoft Internet Explorer Memory Corruption (MS15-032: CVE-2015-1666)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

9.3CVSS4.1AI score0.12932EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2015/03/26 12:00 a.m.•25 views

VS News System show_news_inc.php newsordner Parameter PHP Code Execution - Ver2 (CVE-2007-1017)

A code execution vulnerability has been reported in Virtualsystem Vs-news-system. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9.3CVSS5.3AI score0.04136EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2015/03/26 12:00 a.m.•25 views

Alcatel OmniPCX Office FastJSDatacgi id2 Parameter Command Execution - Ver2 (CVE-2008-1331)

A command execution vulnerability has been reported in Alcatel-Lucent OmniPCX. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

10CVSS7.3AI score0.08778EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2015/03/26 12:00 a.m.•25 views

Microsoft Windows Task Scheduler Buffer Overflow attack - Ver2 (CVE-2004-0212)

A buffer overflow vulnerability has been reported in Microsoft Windows. A remote attacker can cause arbitrary code execution resulting in a loss of integrity using a specially crafted .job file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code ...

10CVSS7.7AI score0.635EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2015/03/26 12:00 a.m.•25 views

Microsoft Word RTF Object Parsing Memory Corruption (MS08-072) - Ver2 (CVE-2008-4030)

Rich Text Format RTF provides a format for text and graphics interchange that can be used with different operating systems. OLE is the technology that applications use to create and edit compound documents. By using OLE technology, an application can provide embedding and linking support. A remot...

9.3CVSS7.2AI score0.2339EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2015/03/10 12:00 a.m.•25 views

Microsoft Exchange Cross Site Scripting (MS15-026; CVE-2015-1630)

An elevation of privilege vulnerability exists in Microsoft Exchange Server. The vulnerability is caused when Microsoft Exchange Server does not properly sanitize page content in Outlook Web App. A remote attacker can exploit this issue by modifying certain properties within Outlook Web App and...

4.3CVSS6.3AI score0.08876EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2015/03/02 12:00 a.m.•25 views

Symantec Encryption Management Server Database Backup Command Injection (CVE-2014-7288)

A command-injection vulnerability has been reported in Symantec Encryption Management Server. The vulnerability is due to insufficient sanitization of user-supplied input when processing database backup commands from the Web UI. A remote, authenticated attacker could exploit this vulnerability by...

9CVSS6.2AI score0.08116EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•25 views

Internet Explorer 70 Beta 2 BGSOUND DoS - Ver2 (CVE-2006-0544)

A denial-of-service vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

7.5CVSS4.3AI score0.21718EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•25 views

RDesktop process_redirect_pdu BSS Overflow Buffer Overflow - Ver2 (CVE-2008-1802)

A buffer overflow vulnerability has been reported in Rdesktop. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

9.3CVSS5AI score0.12978EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•25 views

MostGear Soft EasyLan Folder Share 320100 Activation Denial of Service - Ver2 (CVE-2013-6079)

A denial-of-service vulnerability has been reported in Mostgear Easy Lan Folder Share. An attacker could exploit this vulnerability via a long string in the registration code field in the activate license window or the HKLMSOFTWAREMostGearEasyLanFolderShareV1License registry key. Successful...

7.2CVSS4.8AI score0.0127EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2014/12/09 12:00 a.m.•25 views

Microsoft Internet Explorer Memory Corruption (MS14-080: CVE-2014-6369)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

9.3CVSS7AI score0.24646EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/11/10 12:00 a.m.•25 views

XOOPS articlephp SQL Injection (CVE-2008-2094)

An SQL injection vulnerability has been reported in Xoops Article Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5AI score0.0098EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2014/11/10 12:00 a.m.•25 views

Joomla Component com_ezautos SQL Injection (CVE-2010-4929)

An SQL injection vulnerability has been reported in Joostina-cms Com Ezautos. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS8.1AI score0.00929EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/11/10 12:00 a.m.•25 views

XOOPS Module dictionary SQL Injection (CVE-2009-4582)

An SQL injection vulnerability has been reported in Xoops Dictionary. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5AI score0.00961EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/10/14 12:00 a.m.•25 views

Microsoft .NET Framework Remote Code Execution (MS14-057; CVE-2014-4121)

A remote code execution vulnerability has been reported in the Microsoft .NET Framework. The vulnerability is due to the way .NET framework parses internationalized resource identifiers. A remote attacker could exploit this vulnerability by sending specially crafted data to the target server that...

10CVSS5.7AI score0.19227EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/09/25 12:00 a.m.•25 views

GNU Bash Remote Code Execution (CVE-2014-6271; CVE-2014-6277; CVE-2014-6278; CVE-2014-7169; CVE-2014-7186; CVE-2014-7187)

A remote code execution vulnerability has been reported in several versions of GNU Bash. The vulnerability, aka ShellShock, is due to an error in the way GNU Bash processes trailing strings after function definitions in the values of environment variables...

10CVSS5.1AI score0.99999EPSS
SaveExploits165
Check Point Advisories
Check Point Advisories
•added 2014/07/13 12:00 a.m.•25 views

Oracle Data Quality FileChooserDlg onChangeDirectory Untrusted Pointer Dereference (CVE-2014-2418)

A remote code execution vulnerability exists in Oracle Data Profiling and Data Quality for Data Integrator. The vulnerability is due to dereferencing an arbitrary pointer within the TSS12.DscTools.FileChooserDlg ActiveX control. A remote attacker can exploit this vulnerability by enticing a user ...

3.8AI score0.01343EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/07/08 12:00 a.m.•25 views

Microsoft Internet Explorer Memory Corruption (MS14-037; CVE-2014-1765)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

4.1AI score0.1565EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/06/25 12:00 a.m.•25 views

ISC BIND Recursive Nameservers Prefetch Denial of Service (CVE-2014-3214)

A denial of service vulnerability has been reported in ISC BIND. The vulnerability is due to an assertion failure when processing queries involved in the prefetch feature of recursive nameservers. A remote attacker may exploit this vulnerability by sending a specially crafted query to the affecte...

5CVSS3.8AI score0.17259EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/06/24 12:00 a.m.•25 views

Advantech WebAccess SCADA webvact.ocx AccessCode2 Buffer Overflow (CVE-2014-0768)

A stack buffer overflow exists in Advantech's WebAccess SCADA software. This is due to insufficient input validation on the AccessCode2 parameter of the webvact.ocx ActiveX control, a part of the WebAccess Client. A remote, unauthenticated attacker could exploit this vulnerability by enticing a...

7.5CVSS7.2AI score0.02672EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/06/18 12:00 a.m.•25 views

Oracle Data Quality DscXB onloadstatechange Untrusted Pointer Dereference (CVE-2014-2417)

A remote code execution vulnerability exists in Oracle Data Profiling and Data Quality for Data Integrator. The vulnerability is due to dereferencing an arbitrary pointer within the TSS12.DscXB.XB ActiveX control. A remote attacker can exploit this vulnerability by enticing a user to open a...

5CVSS7.2AI score0.01343EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/04/16 12:00 a.m.•25 views

Microsoft Access ACCDB Memory Corruption - Ver2 (CVE-2013-3155)

A code execution vulnerability has been reported in Microsoft Access. The vulnerability is due to an error in the way that Microsoft Access parses ACCDB files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.3AI score0.20184EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/04/16 12:00 a.m.•25 views

Microsoft Windows Signature Validation Remote Code Execution - Ver2 (CVE-2012-0151)

A code execution vulnerability has been reported in Windows Authenticode Signature Verification function used for portable executable PE files. The vulnerability is due to an error in the way the Authenticode Signature Verification function validates the file digest of a specially crafted PE file...

4.2AI score0.83534EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/04/10 12:00 a.m.•25 views

IBM Lotus Domino LDAP Server Memory Exception (CVE-2006-0580; CVE-2006-4510)

A denial of service vulnerability exists in the IBM Lotus Domino LDAP Server component. The flaw is caused by improper validation of the user supplied data in an LDAP bind request. An attacker can exploit this vulnerability to terminate the target server which causes a denial of service condition...

10CVSS5.9AI score0.06525EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:00 a.m.•25 views

Windows URI Handling Arbitrary Code Execution - Ver2 (CVE-2007-5020)

A code execution vulnerability has been reported in Adobe Acrobat and Adobe Acrobat Reader. An attacker could exploit this vulnerability via a crafted PDF file, related to the mailto: option and Internet Explorer 7 on Windows XP. Successful exploitation of this vulnerability could allow a remote...

7.3AI score0.2043EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/03/12 12:00 a.m.•25 views

HP Data Protector Opcode 45 and 46 Code Execution (CVE-2013-2348)

Multiple vulnerabilities have been reported in HP Data Protector. Both vulnerabilities are due to insufficient input validation on a string supplied with a message containing opcodes 45 or 46. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the...

2.9AI score0.10436EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/03/11 12:00 a.m.•25 views

Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0304)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

9.3CVSS7.6AI score0.2098EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/03/03 12:00 a.m.•25 views

CCRP Control BrowseDialog Denial of Service - Ver2 (CVE-2007-0371)

A denial-of-service vulnerability has been reported in Common Controls Replacement Project Browsedialog Server. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

6.2AI score0.02334EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/02/03 12:00 a.m.•25 views

Microsoft Internet Explorer HTML Dynamic Page Reloading Memory Corruption - Ver2 (CVE-2007-0946)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer. A remote attacker could trigger this vulnerability by enticing a vulnerable target to access a specially crafted HTML document. Successful exploitation of this vulnerability could allow a remote attacker to execut...

7.1AI score0.30978EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/02/03 12:00 a.m.•25 views

Adobe Acrobat and Reader Use After Free Code Execution (APSB14-01; CVE-2014-0496)

A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...

6.1AI score0.40243EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/01/07 12:00 a.m.•25 views

PHPLiveHelper global.php abs_path Parameter PHP Code Execution - Ver2 (CVE-2006-4051)

A code execution vulnerability has been reported in Turnkey Web Tools PHP Live Helper. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS7.6AI score0.08144EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2013/12/10 12:00 a.m.•25 views

Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5048)

A remote code execution vulnerability has been reported in Internet Explorer...

7.4AI score0.12635EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2013/11/18 12:00 a.m.•25 views

Borland Software InterBase ibserver.exe Service Attach Request Buffer Overflow (CVE-2008-1910)

A buffer overflow vulnerability has been reported in Borland InterBase Server...

6.9AI score0.07291EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2013/07/23 12:00 a.m.•25 views

Trimble Navigation SketchUp PICT File Buffer Overflow - Improved Performance (CVE-2013-3664)

A remote code execution vulnerability has been reported in Trimble SketchUp. The vulnerability is due to a stack buffer overflow while processing PICT files which contain a malicious number of ARGB entries. A remote attacker can exploit this vulnerability by enticing a target user to open a...

9.3CVSS7.5AI score0.29778EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2013/07/09 12:00 a.m.•25 views

Microsoft Internet Explorer Memory Corruption (MS13-055; CVE-2013-3150)

A use after free vulnerability has been reported in Microsoft Internet Explorer...

6.4AI score0.25039EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2013/07/09 12:00 a.m.•25 views

Microsoft Internet Explorer Deleted HTML Object Code Execution (MS13-055; CVE-2013-3164)

A remote code execution vulnerability has been reported in Internet Explorer...

7.4AI score0.23587EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2013/06/30 12:00 a.m.•25 views

Novell GroupWise Client ActiveX gwabdlg.dll Untrusted Pointer Dereference (CVE-2013-0804)

An untrusted pointer dereference vulnerability has been reported in Novell GroupWise Client for Windows...

6.4AI score0.12398EPSS
SaveExploits1
Total number of security vulnerabilities5000