Lucene search
+L
Checkpoint AdvisoriesRecent

13538 matches found

Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•11 views

Microsoft Windows PPTP Service Buffer Overflow - Ver2 (CVE-2002-1214)

A buffer overflow vulnerability has been reported in Microsoft Windows XP, Microsoft Windows 2000 and Microsoft Windows 2000 Terminal Services. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

7.5CVSS7.5AI score0.50832EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•79 views

Belkin Linksys WRT110 Remote Command Execution - Ver2 (CVE-2013-3568)

A remote command execution vulnerability has been reported in Belkin Linksys WRT110 firmware. The vulnerability is due to the Web interface's failure to sanitize ping targets as well as a lack of CSRF tokens. A remote attacker could exploit this vulnerability by sending a malicious HTTP request t...

6.8CVSS2.5AI score0.25129EPSS
SaveExploits8
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•27 views

RDesktop process_redirect_pdu BSS Overflow Buffer Overflow - Ver2 (CVE-2008-1802)

A buffer overflow vulnerability has been reported in Rdesktop. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

9.3CVSS5AI score0.12978EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•19 views

Linux Kernel SMB Filesystem smb_receive Transaction2 - Ver2 (CVE-2004-0949)

Multiple vulnerabilities have been reported in the smbrecvtrans2 function call in the samba filesystem smbfs in Linux kernel 2.4 and 2.6. Successful exploitation of this vulnerability could allow a remote attacker to read arbitrary kernel information or raise a counter value to an arbitrary numbe...

6.4CVSS3.7AI score0.02626EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•26 views

MostGear Soft EasyLan Folder Share 320100 Activation Denial of Service - Ver2 (CVE-2013-6079)

A denial-of-service vulnerability has been reported in Mostgear Easy Lan Folder Share. An attacker could exploit this vulnerability via a long string in the registration code field in the activate license window or the HKLMSOFTWAREMostGearEasyLanFolderShareV1License registry key. Successful...

7.2CVSS4.8AI score0.0127EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•32 views

ActiveBar ActiveX Method Arbitrary File Write - Ver2 (CVE-2007-3883)

An Overwrite Files vulnerability has been reported in The Data Dynamics ActiveBar ActiveX control. Successful exploitation of this vulnerability could allow a remote attacker to create or overwrite files via a full pathname in the second argument to the Save method, or the first argument to the...

5.1CVSS6.2AI score0.082EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•41 views

Microsoft .NET Framework S.DS.P Namespace Method Buffer Overflow - Ver2 (CVE-2013-0003)

A buffer overflow exists in the System.DirectoryServices.Protocols S.DS.P namespace method in the .NET framework. The vulnerability is due to an error in the validation of the size of objects in memory prior to copying them into an array.An attacker can remotely exploit this vulnerability by...

9.3CVSS7.5AI score0.23843EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•29 views

Microsoft Windows Agent ACF File Handling Memory Corruption (MS06-068) - Ver2 (CVE-2006-3445)

A remote code execution vulnerability exists in Microsoft Agent. Microsoft Agent is a software technology that enables an enriched form of user interaction that can make using and learning to use a computer easier and more natural. . The vulnerability is due to a memory corruption error in the...

7.5CVSS7.6AI score0.40974EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•22 views

Apple QuickTime PictureViewer GIF Rendering Integer Overflow - Ver2 (CVE-2005-1106)

An integer overflow vulnerability has been reported in Apple QuickTime PictureViewer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5CVSS7.4AI score0.01217EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•33 views

CA ARCserve Backup DB Engine Denial of Service - Ver2 (CVE-2008-4399)

CA ARCserve Backup products offer data protection for distributed servers, clients,databases and applications. They provide centralized control over a series of distributed operationsincluding Backup and Restore, Data Migration, and Threat Management. There exists a denial of service vulnerabilit...

5CVSS6.3AI score0.08232EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•20 views

VLC udp Handler Format String Code Execution - Ver2 (CVE-2007-0017)

A code execution vulnerability has been reported in VideoLAN VLC Media Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS5.2AI score0.12061EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•20 views

Microsoft Windows WebDav Mini-Redirector Heap Buffer Overflow (MS08-007) - Ver2 (CVE-2008-0080)

Web Distributed Authoring and Versioning WebDAV is a set of extensions for HTTP that allows allow clients to publish, lock, and manage resources on the Web. . The vulnerability is due to an error in the Microsoft Windows WebDAV Mini-Redirector that fails to properly handle malformed WebDAV...

10CVSS6.2AI score0.40569EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•32 views

Apple QuickTime Text Track Descriptors Heap Buffer Overflow - Ver2 (CVE-2012-0664)

A heap buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to improper validation of parameters lengths. A remote attacker can exploit this vulnerability by enticing a victim to open a specially crafted QuickTime Text file with an affected version of...

9.3CVSS3.8AI score0.06125EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•60 views

Microsoft Windows SSL Library Private Communications Transport Buffer Overflow - Ver2 (CVE-2003-0719)

A buffer overflow vulnerability has been reported in Microsoft Windows SSL Library. The vulnerability is due to the processing of certain messages. A remote attacker can exploit this issue by executing arbitrary code in the context of a local system user when SSL is enabled...

7.5CVSS6.8AI score0.81203EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•13 views

Joomla Component com_webring Remote File Inclusion - Ver2 (CVE-2006-4129)

A file inclusion vulnerability has been reported in Joomla Webring Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS4.8AI score0.03354EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•10 views

Apache 2 mod_ssl Connection Abort Denial of Service possible attack - Ver2 (CVE-2004-0748)

A denial-of-service vulnerability has been reported in Apache Software Foundation Apache HTTP Server. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

5CVSS2.7AI score0.24656EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•24 views

Internet Explorer Mouse Leave Event Handler Memory Corruption (MS10-018) - Ver2 (CVE-2010-0267)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To trigger this...

9.3CVSS7.3AI score0.34408EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•6 views

Mozilla Browsers JavaScript Argument Passing Code Execution - Ver2 (CVE-2007-0777)

Mozilla Firefox and Seamonkey are very popular open source web browsers from Mozilla Foundation, based on the Mozilla Suite code base. The browser is an application designed for tasks related to web browsing, such as displaying HTML pages, downloading files, rendering different media, and so on...

9.3CVSS0.1AI score0.07558EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•39 views

CVS Max-dotdot Protocol Command Integer Overflow - Ver2 (CVE-2004-0417)

Concurrent Versions System CVS is an open-source network-transparent version control system. CVS itself does not listen for, or accept network connections. To implement remote repository access, it can be installed as an inetd service, or invoked with the rsh/ssh command. Data between the server...

5CVSS1.8AI score0.03069EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•17 views

Siemens Gigaset SE361 WLAN Remote Reboot Exploit Denial of Service - Ver2 (CVE-2009-3322)

A denial-of-service vulnerability has been reported in Siemens Gigaset SE361 WLAN router. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

7.8CVSS5.1AI score0.03481EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•40 views

DNS Label Compression Recursion Denial of Service - Ver2 (CVE-2007-1030)

A denial-of-service vulnerability has been reported in Niels Provos Libevent. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

7.8CVSS6AI score0.03011EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•17 views

Novell eDirectory evtFilteredMonitorEventsRequest Invalid free Code Execution - Ver2 (CVE-2006-4510)

A code execution vulnerability has been reported in Novell eDirectory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

10CVSS7.5AI score0.06525EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•33 views

IBM Informix Dynamic Server Long Username Authentication Error Stack Overflow - Ver2 (CVE-2006-3854)

A buffer overflow vulnerability has been reported in IBM Informix Dynamic Database Server. An attacker could exploit this vulnerability via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. Successful exploitation of this vulnerability could all...

7.5CVSS4.6AI score0.03703EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•9 views

Internet Explorer XML Object Type Validation Code Execution - Ver2 (CVE-2003-0809)

A code execution vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS7.4AI score0.27276EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•6 views

Mozilla Firefox Design Mode Deleted Style Reference Memory Corruption - Ver2 (CVE-2007-3734)

A memory corruption vulnerability has been reported in Mozilla Firefox and Mozilla Thunderbird. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9.3CVSS4.3AI score0.02224EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•6 views

Mozilla Firefox Javascript Engine Code Execution - Ver2 (CVE-2006-3806)

A code execution vulnerability has been reported in Mozilla Firefox, Mozilla Thunderbird and Mozilla SeaMonkey. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS3.9AI score0.05459EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•7 views

Wireshark ENTTEC DMX Data Buffer Overflow - Ver2 (CVE-2010-4538)

A buffer overflow vulnerability has been reported in Wireshark. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

9.3CVSS5.1AI score0.28983EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•6 views

Firefox wyciwyg Cache Manipulation Flaw Information Disclosure - Ver2 (CVE-2007-3656)

An information disclosure vulnerability has been reported in Mozilla Firefox. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

6.8CVSS2AI score0.01966EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•27 views

Php libpath Parameter PHP Code Execution - Ver2 (CVE-2006-1688)

A code execution vulnerability has been reported in Squery. An attacker could exploit this vulnerability via a URL in the libpath parameter to scripts in the lib directory including ase.php, devi.php, doom3.php, et.php, flashpoint.php, gameSpy.php, gameSpy2.php, gore.php, gsvari.php, halo.php,...

7.5CVSS4.6AI score0.07416EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•43 views

Microsoft Host Integration Server Remote Command Execution (MS08-059) - Ver2 (CVE-2008-3466)

Microsoft Host Integration Server HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging, and security systems. . A remote code execution vulnerability has been...

10CVSS7.6AI score0.77741EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•18 views

Microsoft Visual Basic 6 Enterprise SP6 vb6stkitdll Buffer Overflow - Ver2 (CVE-2008-2959)

A buffer overflow vulnerability has been reported in Microsoft Visual Basic Enterprise Edition. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

9.3CVSS5.2AI score0.24805EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•20 views

Internet Explorer OnLoad Event Memory Corruption (MS11-081) - Ver2 (CVE-2011-1997)

A memory corruption vulnerability has been reported in Internet Explorer. The vulnerability is due to an error in the way IE accesses objects that have been deleted. A remote attacker may exploit this vulnerability by enticing a user to open a malicious web-page. Successful exploitation may cause...

9.3CVSS7.4AI score0.14476EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•74 views

Piwigo Photo Gallery Project install script Directory Traversal - Ver2 (CVE-2013-1469)

A directory traversal vulnerability has been reported in Piwigo. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

4CVSS4.5AI score0.56011EPSS
SaveExploits12
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•29 views

Microsoft Fax Cover Page Editor Buffer Overflow - Ver2 (CVE-2010-4701)

A heap buffer overflow vulnerability has been discovered in Microsoft Windows Fax Services. The Windows Fax Service is a component that allows a Windows system to act as a Fax server. One of the tools within this fax suite is the Fax Console, which allows a user to monitor the sending and receivi...

7.6CVSS7.5AI score0.47832EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•33 views

Microsoft Graphics Device Interface Integer Overflow - Ver2 (CVE-2013-3940)

An integer overflow vulnerability has been reported in the way that the Windows Graphics Device Interface GDI processes specially crafted image files. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted Windows Write file. Successful exploitation of this...

9.3CVSS5.5AI score0.34452EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•56 views

Adobe Shockwave Player Chunk Parsing Uninitialized Object Access (APSB12-13) - Ver2 (CVE-2012-2030)

A remote code execution vulnerability has been reported in Adobe Shockwave player. The vulnerability is due to an error in Adobe Shockwave Player while parsing crafted data inside rcsL RIFF chunk in DIR or DCR files. A remote attacker can exploit this issue by enticing a target user to open a...

10CVSS7.3AI score0.06169EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•46 views

Symantec System Center Alert Management System Arbitrary Command Execution - Ver2 (CVE-2009-1429)

A command execution vulnerability has been reported in Symantec Antivirus Central Quarantine Server, Symantec Antivirus, Symantec Endpoint Protection, Symantec System Center and Symantec Client Security. Successful exploitation of this vulnerability could allow a remote attacker to execute...

10CVSS7.2AI score0.87725EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•12 views

MIT Kerberos ASN.1 asn1_decode_generaltime Uninitialized Pointer Reference - Ver2 (CVE-2009-0846)

MIT Kerberos V5 is an implementation of the Kerberos protocol that allows for the negotiation of an authenticated, and optionally encrypted, communication channel between two points on a network. The MIT Kerberos V5 server utilizes the encrypted SUN-RPC protocol to communicate with its remote...

10CVSS3.4AI score0.08898EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•45 views

Rocket Servergraph Admin Center fileRequestor Directory Traversal - Ver2 (CVE-2014-3914)

A code execution vulnerability exists in Rocket Servergraph Admin Center. The vulnerability occurs when making an HTTP POST request to the URI /SGPAdmin/fileRequest with the parameters cmd=writeDataFile, cmd=run, cmd=runClear or cmd=del, which can be present in the Body of the request. A remote...

10CVSS2.6AI score0.72606EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•18 views

Multiple PDF products Launch Action Command Code Execution (APSB10-15) - Ver2 (CVE-2010-1240)

Portable Document Format PDF is an open file format created by Adobe Systems. A vulnerability has been discovered in Adobe Reader. The vulnerability is due to an error in the Adobe Reader that fails to restrict the contents of one text field in the Launch File warning dialog, which makes it easie...

9.3CVSS5.4AI score0.73617EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•11 views

Internet Explorer WMF CreateBrushIndirect DoS - Ver2 (CVE-2006-4071)

A denial-of-service vulnerability has been reported in Microsoft Windows XP and Microsoft Windows Server 2003. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

2.6CVSS3.9AI score0.23995EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•26 views

Novell Groupwise Addressbook Integer Overflow - Ver2 (CVE-2012-0418)

A code execution vulnerability has been reported in Novell GroupWise. The vulnerability is due to a heap buffer overflow while parsing tokens within a specially crafted Novell Address Book .nab file. A remote attacker can exploit this issue by enticing a target user to open a specially crafted .n...

9.3CVSS4.1AI score0.03753EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•11 views

Oracle Java AtomicReferenceArray Sandbox Breach Code Execution - Ver2 (CVE-2012-0507)

A code execution vulnerability has been reported in Oracle Java SE. The vulnerability is due to a design flaw in the implementation of the AtomicReferenceArray class in Java SE. An attacker could exploit this vulnerability by enticing a target user to open a specially crafted Java application...

10CVSS3.7AI score0.98113EPSS
SaveExploits13
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•23 views

Apple Computer Finder DMG Volume Name Memory Corruption - Ver2 (CVE-2007-0197)

Apple Computer Mac OS X is the operating system bundled with Apple Macintosh computers. The graphical user interface shell of Mac OS X, Finder, allows for graphical browsing of the system. The Finder is also responsible for user-management of files, disks, network volumes and the launching of oth...

6.8CVSS1.7AI score0.08129EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•26 views

Mitsubishi MCWorkX ActiveX Control File Execution Command Execution - Ver2 (CVE-2013-2817)

A command execution vulnerability has been reported in Mitsubishielectric Mc-worx Suite. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

9.3CVSS5.4AI score0.0593EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•14 views

OpenSSL TLS Connection Record Handling Denial of Service - Ver2 (CVE-2010-0740)

OpenSSL is an open-source library that implements Secure Sockets Layer SSL and Transport Layer Security TLS protocol functionality. A remote attacker may exploit this vulnerability to create a denial of service condition. The vulnerability is due to an error in the OpenSSL ssl3getrecord function...

5CVSS2.4AI score0.2035EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•44 views

VLC Media Player ABC File Parsing Buffer Overflow - Ver2 (CVE-2013-4233)

A buffer overflow vulnerability has been reported in VLC Media Player's ABC file parsing. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

6.8CVSS7.4AI score0.04083EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•32 views

RealNetworks HELIX Server Denial of Service - Ver2 (CVE-2004-0389)

A denial-of-service vulnerability has been reported in Realnetworks Helix Universal Server. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

7.8CVSS5AI score0.54923EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•32 views

Digium Asterisk Manager User Shell Command Execution - Ver2 (CVE-2012-2414)

A security bypass vulnerability has been reported in Digium Asterisk. The vulnerability is due to an error in the way the server validates permissions while executing shell commands from unauthorized users. A remote attacker can exploit this issue by sending specially crafted AMI requests to the...

6.5CVSS1.9AI score0.02686EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:00 a.m.•9 views

MediaDescriptiondispvalue DoS - Ver2 (CVE-2006-3897)

A denial-of-service vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

5CVSS3.9AI score0.23336EPSS
SaveExploits2
Total number of security vulnerabilities13538