Lucene search
+L
Checkpoint AdvisoriesRecent

13538 matches found

Check Point Advisories
Check Point Advisories
•added 2022/05/30 12:0 a.m.•29 views

WordPress Documentor Plugin SQL Injection (CVE-2022-0773)

An SQL injection vulnerability exists in WordPress Documentor Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS4.9AI score0.43259EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2022/05/30 12:0 a.m.•12 views

Piwigo SQL Injection (CVE-2020-19213)

An SQL injection vulnerability exists in Piwigo. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.3AI score0.15878EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/05/30 12:0 a.m.•95 views

WordPress Tatsu Plugin Remote Code Execution (CVE-2021-25094)

A remote code execution vulnerability exists in WordPress Tatsu plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS5.6AI score0.83354EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2022/05/30 12:0 a.m.•58 views

Google Android Denial Of Service (CVE-2013-4710)

A denial of service vulnerability exists in Google Android. Successful exploitation of this vulnerability would allow remote attackers to cause denial of service on the affected system...

9.3CVSS6.2AI score0.42623EPSS
SaveExploits8
Check Point Advisories
Check Point Advisories
•added 2022/05/30 12:0 a.m.•4 views

Multiple Websites Distributed Denial of Service

A denial of service vulnerability exists in multiple websites. The vulnerability is due to the placing of the malicious JavaScript code BrownFlood. Successful exploitation of this vulnerability would allow remote attackers to cause denial of service on the affected system...

5.1AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/05/30 12:0 a.m.•38 views

ShopWind Remote Code Execution (CVE-2022-30453)

A remote code execution vulnerability exists in ShopWind. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS5.4AI score0.15697EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/05/29 12:0 a.m.•31 views

Cisco NFVIS Improper Access Control (CVE-2022-20777)

An improper access control vulnerability exists in Cisco NFVIS. Successful exploitation of this vulnerability could allow a remote attacker to compromise the NFVIS host completely...

9CVSS4.2AI score0.11067EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/05/29 12:0 a.m.•35 views

VMware Authentication Bypass (CVE-2022-22972)

An authentication bypass vulnerability exists in VMware. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...

7.5CVSS5.9AI score0.56305EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2022/05/26 12:0 a.m.•35 views

Naviwebs Navigate CMS Directory Traversal (CVE-2018-17553)

A directory traversal vulnerability exists in Naviwebs Navigate CMS. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

6.5CVSS5.5AI score0.78994EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2022/05/24 12:0 a.m.•32 views

Checkbox Survey Remote Code Execution (CVE-2021-27852)

A remote code execution vulnerability exists in Checkbox Survey. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS5.4AI score0.31946EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/05/24 12:0 a.m.•53 views

D-Link DIR-825 OS Command Injection (CVE-2021-46441; CVE-2021-46442)

A command injection vulnerability exists in D-Link DIR-825. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

9CVSS5.6AI score0.5554EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2022/05/24 12:0 a.m.•28 views

Sophos MR3 Firewall Remote Code Execution (CVE-2022-1040)

A remote code execution vulnerability exists in Sophos MR3 Firewall. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS5.6AI score0.99796EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2022/05/24 12:0 a.m.•110 views

IRZ Mobile Router Remote Code Execution (CVE-2022-27226)

A remote code execution vulnerability exists in IRZ Mobile Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9.3CVSS5.7AI score0.30647EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2022/05/24 12:0 a.m.•8 views

Apple Multiple Products Type Confusion (CVE-2021-1789)

A type confusion vulnerability exists in multiple Apple products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS4.8AI score0.1322EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/05/23 12:0 a.m.•110 views

WordPress MasterStudy LMS Plugin Privilege Escalation (CVE-2022-0441)

A privilege escalation exists in WordPress MasterStudy LMS plugin. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

7.5CVSS6.6AI score0.85334EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2022/05/23 12:0 a.m.•17 views

Zimbra Collaboration Suite Cross Site Scripting (CVE-2018-6882)

A cross-site scripting vulnerability exists in Zimbra Collaboration Suite. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

4.3CVSS5AI score0.25231EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2022/05/23 12:0 a.m.•29 views

MediaWiki Semantic Drilldown SQL Injection (CVE-2022-29904)

An SQL injection vulnerability exists in MediaWiki Semantic Drilldown. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.9AI score0.16802EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/05/19 12:0 a.m.•46 views

Zoho Multiple Products Authentication Bypass (CVE-2022-29081)

An authentication bypass vulnerability exists in multiple Zoho products. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

7.5CVSS3.9AI score0.83543EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/05/19 12:0 a.m.•29 views

Zyxel USG Command Injection (CVE-2022-30525)

A command injection vulnerability exists in Zyxel USG. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

10CVSS5.6AI score0.99944EPSS
SaveExploits27
Check Point Advisories
Check Point Advisories
•added 2022/05/17 12:0 a.m.•63 views

Kaseya Unitrends Backup Remote Code Execution (CVE-2017-12478)

A remote code execution vulnerability exists in Kaseya Unitrends Backup. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

10CVSS6AI score0.78269EPSS
SaveExploits13
Check Point Advisories
Check Point Advisories
•added 2022/05/17 12:0 a.m.•52 views

Microsoft Windows Network File System Remote Code Execution (CVE-2022-26937)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS5.4AI score0.76531EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2022/05/17 12:0 a.m.•55 views

Gogs File Upload Command Injection (CVE-2022-0415)

A command injection vulnerability exists in Gogs File Upload. Successful exploitation of this vulnerability could result in code execution on the affected system...

6.5CVSS3AI score0.65237EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/05/17 12:0 a.m.•7 views

Develar SnakeYAML Entity Expansion (CVE-2017-18640)

An entity expansion vulnerability exists in Develar SnakeYAML. Successful exploitation of this vulnerability would allow remote attackers to cause the affected system to crash or become unresponsive...

5CVSS5.6AI score0.26723EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/05/15 12:0 a.m.•13 views

Dojo Prototype Pollution (CVE-2021-23450)

A prototype pollution vulnerability exists in Dojo. Successful exploitation of this vulnerability could result in run arbitrary code on the victim machine...

7.5CVSS3.2AI score0.30367EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/05/15 12:0 a.m.•81 views

Jenkins Script Security Plugin Remote Code Execution (CVE-2019-1003029)

A remote code execution vulnerability exists in Jenkins Script Security Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.5CVSS4.6AI score0.73854EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2022/05/12 12:0 a.m.•24 views

pfSense Remote Code Execution (CVE-2021-41282)

A remote code execution vulnerability exists in pfSense. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9CVSS5.5AI score0.87113EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2022/05/12 12:0 a.m.•35 views

RiteCMS Directory Traversal (CVE-2022-24248)

A directory traversal vulnerability exists in RiteCMS. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

8.5CVSS5.4AI score0.20963EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/05/11 12:0 a.m.•13 views

Oracle Java SE Authentication Bypass (CVE-2022-21449)

An authentication bypass vulnerability exists in Oracle Java SE. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...

5CVSS6.2AI score0.60336EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2022/05/10 12:0 a.m.•11 views

Microsoft Active Directory Domain Services Elevation of Privilege (CVE-2022-26923)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9CVSS6.2AI score0.82989EPSS
SaveExploits8
Check Point Advisories
Check Point Advisories
•added 2022/05/10 12:0 a.m.•29 views

Microsoft Windows Kernel Elevation of Privilege (CVE-2022-29142)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.9CVSS5.8AI score0.05236EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/05/10 12:0 a.m.•27 views

Microsoft Windows ALPC Elevation of Privilege (CVE-2022-23279)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

4.4CVSS5.9AI score0.04861EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/05/10 12:0 a.m.•37 views

Microsoft Point-to-Point Tunneling Protocol Remote Code Execution (CVE-2022-23270)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9.3CVSS5.5AI score0.7035EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/05/10 12:0 a.m.•32 views

Microsoft Windows Print Spooler Elevation of Privilege (CVE-2022-29104)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

4.6CVSS5.7AI score0.1209EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/05/10 12:0 a.m.•17 views

Microsoft Remote Desktop Client Remote Code Execution (CVE-2022-22017)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9.3CVSS5.4AI score0.37987EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/05/10 12:0 a.m.•6 views

Adobe ColdFusion Cross-site Scripting (APSB22-22: CVE-2022-28818)

A cross-site scripting vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

4.3CVSS5AI score0.44044EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/05/09 12:0 a.m.•3 views

Seowon SLC-130 Router Remote Code Execution

A remote code execution vulnerability exists in Seowon SLC-130 Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5.8AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/05/08 12:0 a.m.•65 views

D-Link DIR-846 Command Injection (CVE-2021-46314; CVE-2021-46315; CVE-2021-46319)

A command injection vulnerability exists in D-Link DIR-846. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

10CVSS5.6AI score0.33287EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2022/05/08 12:0 a.m.•23 views

Kaseya VSA Remote Code Execution (CVE-2018-20753)

A remote code execution vulnerability exists in Kaseya VSA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS5.9AI score0.29336EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/05/08 12:0 a.m.•7 views

Mozilla Firefox Use After Free (CVE-2020-26950)

A use-after-free vulnerability exists in Mozilla Firefox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9.3CVSS4.9AI score0.42327EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2022/05/08 12:0 a.m.•34 views

Ubiquiti AirOS Command Injection (CVE-2010-5330)

A command injection vulnerability exists in Ubiquiti AirOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

5CVSS5.4AI score0.34641EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/05/03 12:0 a.m.•30 views

WSO2 Multiple Products Remote Code Execution (CVE-2022-29464)

A remote code execution vulnerability exists in WSO2 Multiple Products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

10CVSS5.5AI score0.99999EPSS
SaveExploits22
Check Point Advisories
Check Point Advisories
•added 2022/05/03 12:0 a.m.•100 views

Oracle WebLogic Server Remote Code Execution (CVE-2022-21371)

A remote code execution vulnerability exists in Oracle WebLogic Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5CVSS5.5AI score0.92649EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2022/05/02 12:0 a.m.•40 views

D-Link DIR-820L Command Injection (CVE-2022-26258)

A command injection vulnerability exists in D-Link DIR-820L. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

7.5CVSS5.6AI score0.79813EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/05/02 12:0 a.m.•38 views

RiteCMS Remote Code Execution (CVE-2021-46367)

A remote code execution vulnerability exists in RiteCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9CVSS5.5AI score0.29715EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/05/02 12:0 a.m.•32 views

TOTOLink A3000R Command Injection (CVE-2022-25075)

A command injection vulnerability exists in TOTOLink A3000R. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

7.5CVSS5.3AI score0.54071EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/05/02 12:0 a.m.•44 views

TOTOLink A3100R Command Injection (CVE-2022-25077)

A command injection vulnerability exists in TOTOLink A3100R. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

7.5CVSS5.3AI score0.32552EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2022/05/02 12:0 a.m.•130 views

TP-LINK WR-886N Multiple Buffer Overflow Vulnerabilities (CVE-2021-44622; CVE-2021-44623; CVE-2021-44625; CVE-2021-44626; CVE-2021-44627; CVE-2021-44628; CVE-2021-44629; CVE-2021-44630; CVE-2021-44631; CVE-2021-44632)

Multiple buffer overflow vulnerabilities exist in TP-LINK WR-886N. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

10CVSS4.5AI score0.02576EPSS
SaveExploits10
Check Point Advisories
Check Point Advisories
•added 2022/05/02 12:0 a.m.•14 views

Exim Remote Code Execution (CVE-2010-4345)

A remote code execution vulnerability exists in Exim. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.9CVSS5.6AI score0.18105EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2022/05/02 12:0 a.m.•14 views

Cisco Small Business RV Series Routers Denial Of Service (CVE-2022-20699)

A denial of service vulnerability exists in Cisco Small Business RV Series Routers. Successful exploitation of this vulnerability would allow remote attackers to cause denial of service on the affected system...

10CVSS5.8AI score0.72458EPSS
SaveExploits7
Check Point Advisories
Check Point Advisories
•added 2022/05/02 12:0 a.m.•60 views

Studio-42 elFinder Remote Code Execution (CVE-2022-27115)

A remote code execution vulnerability exists in Studio-42 elFinder. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS5.6AI score0.28594EPSS
SaveExploits1
Total number of security vulnerabilities13538