Lucene search
+L
Checkpoint AdvisoriesRecent

13538 matches found

Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•4 views

OpenSSL DTLS Retransmission Denial of Service - Ver2 (CVE-2013-6450)

A denial-of-service vulnerability has been reported in OpenSSL Project OpenSSL. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

5.8CVSS4.7AI score0.14542EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•18 views

Microsoft Windows WebDav Mini-Redirector Heap Buffer Overflow (MS08-007) - Ver2 (CVE-2008-0080)

Web Distributed Authoring and Versioning WebDAV is a set of extensions for HTTP that allows allow clients to publish, lock, and manage resources on the Web. . The vulnerability is due to an error in the Microsoft Windows WebDAV Mini-Redirector that fails to properly handle malformed WebDAV...

10CVSS6.2AI score0.40569EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•16 views

Microsoft Office Project Memory Validation Remote Code Execution (MS09-074) - Ver2 (CVE-2009-0102)

Microsoft Project is a project management software program designed to assist project managers to stay informed, keep project teams aligned, increase productivity and control project work, schedules, and finances. A remote code execution vulnerability has been identified in the way Microsoft...

9.3CVSS2.1AI score0.23504EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•21 views

PTC IsoView ActiveX Control Multiple Methods Buffer Overflow (CVE-2014-9267)

Multiple stack-based buffer overflow vulnerabilities exist in the PTC IsoView ActiveX Control. These vulnerabilities are caused by insufficient validation of the Object identifier arguments to multiple methods of the ActiveX control. A remote attacker can exploit these vulnerabilities by enticing...

6.8CVSS4.5AI score0.03448EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•12 views

HP Data Protector Opcode 45 and 46 Code Execution - Ver2 (CVE-2013-2348)

Multiple vulnerabilities have been reported in HP Data Protector. Both vulnerabilities are due to insufficient input validation on a string supplied with a message containing opcodes 45 or 46. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the...

10CVSS7.2AI score0.10436EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•6 views

CVS Entry Line Flag Remote Heap Overflow - Ver2 (CVE-2004-0396)

Concurrent Versions System CVS is an open-source network-transparent version control system. CVS itself does not listen for, or accept network connections. To implement remote repository access, it can be installed as an inetd service, or invoked with the rsh/ssh command. Data between the server...

7.5CVSS2.3AI score0.67525EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•44 views

Microsoft IIS idq.dll IDAIDQ ISAPI Overflow Buffer Overflow - Ver2 (CVE-2001-0500)

A buffer overflow vulnerability has been reported in Microsoft IIS, Microsoft Inbex Server and Microsoft Indexing Service. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

10CVSS7.4AI score0.96731EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•14 views

UltraVNC VNCLog Buffer Overflow - Ver2 (CVE-2006-1652)

UltraVNC is an open source client/server remote control application which uses the Virtual Network Computing VNC protocol. The VNC protocol allows a user to control a remote host by sending mouse and keyboard events, and receiving screen and sound updates. UltraVNC offers several extra features a...

9CVSS7.3AI score0.67398EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•16 views

Dell OpenManage Web Server Buffer Overflow - Ver2 (CVE-2004-0331)

A buffer overflow vulnerability exist in Dell's OpenManage Web Server. The vulnerability is due to an boundary error when handling application parameter. An unauthenticated remote attacker could exploit this vulnerability by sending a crafted request to the vulnerable server...

5CVSS3.2AI score0.1583EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•38 views

Microsoft Message Queue QMGetRemoteQueueName Buffer Overflow - Ver2 (CVE-2008-3479)

A buffer overflow vulnerability has been reported in Microsoft Windows 2000. An attacker could exploit this vulnerability via a crafted RPC call, related to improper processing of parameters to string APIs. Successful exploitation of this vulnerability could allow a remote attacker to execute...

10CVSS7.3AI score0.44474EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•41 views

VLC Media Player ABC File Parsing Buffer Overflow - Ver2 (CVE-2013-4233)

A buffer overflow vulnerability has been reported in VLC Media Player's ABC file parsing. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

6.8CVSS7.4AI score0.04083EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•25 views

Microsoft Excel RealTimeData Record Heap Corruption (MS10-038) - Ver2 (CVE-2010-1247)

Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...

9.3CVSS1.3AI score0.22392EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•12 views

Multiple Products Directory Server LDAP Buffer Overflows - Ver2 (CVE-2006-0717)

An error was found in the way several LDAP servers from several vendors handle malformed LDAP requests. This can be exploited to crash the service via a specially-crafted request sent to the LDAP server port...

5CVSS6.2AI score0.09436EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•9 views

Internet Explorer WMF CreateBrushIndirect DoS - Ver2 (CVE-2006-4071)

A denial-of-service vulnerability has been reported in Microsoft Windows XP and Microsoft Windows Server 2003. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

2.6CVSS3.9AI score0.23995EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•7 views

Internet Explorer XML Object Type Validation Code Execution - Ver2 (CVE-2003-0809)

A code execution vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS7.4AI score0.2667EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•17 views

Apple Computer Finder DMG Volume Name Memory Corruption - Ver2 (CVE-2007-0197)

Apple Computer Mac OS X is the operating system bundled with Apple Macintosh computers. The graphical user interface shell of Mac OS X, Finder, allows for graphical browsing of the system. The Finder is also responsible for user-management of files, disks, network volumes and the launching of oth...

6.8CVSS1.7AI score0.0807EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•37 views

Microsoft Graphics Component Memory Corruption (MS14-007) - Ver2 (CVE-2014-0263)

A remote code execution vulnerability has been reported in Windows Graphics Component. The vulnerability is due to the way Windows components handle specially crafted GIF files. A remote attacker can exploit this issue by enticing a user to view GIF files in shared content. Successful exploitatio...

9.3CVSS7.2AI score0.18885EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•17 views

UltraVNC VNCLog Buffer Overflow - Ver2 (CVE-2006-1652)

UltraVNC is an open source client/server remote control application which uses the Virtual Network Computing VNC protocol. The VNC protocol allows a user to control a remote host by sending mouse and keyboard events, and receiving screen and sound updates. UltraVNC offers several extra features a...

9CVSS7.3AI score0.67398EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2014/12/25 12:0 a.m.•4 views

Hikvision DVR Request Header and Request Body Buffer Overflow (CVE-2014-4878; CVE-2014-4879)

A buffer overflow vulnerability has been reported in Hikvision DVR. The vulnerability is due to a boundary error in Basic Authentication Request Header Handling and Request Body Handling of an RTSP transaction. Successful exploitation may cause a denial of service condition or allow the attacker ...

3.1AI score
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/25 12:0 a.m.•9 views

Adobe Flash Player Double Free (APSB14-24: CVE-2014-0574)

A double free vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error caused by an attempt of the worker thread and the main thread to clear a shared ByteArray simultaneously. This vulnerability could lead to a crash of the player...

10CVSS1.4AI score0.0826EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/25 12:0 a.m.•36 views

Hikvision DVR Basic Authentication Buffer Overflow (CVE-2014-4880)

A buffer overflow vulnerability has been reported in Hikvision DVR. The vulnerability is due to a boundary error in Basic Authentication Handling of an RTSP transaction. Successful exploitation may cause a denial of service condition or allow the attacker to inject and execute arbitrary code on t...

7.5CVSS7.6AI score0.69969EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2014/12/25 12:0 a.m.•32 views

RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption - ver 2 (CVE-2011-4259)

An memory corruption vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to an integer underflow condition caused while handling MPEG-2 files with a specially crafted width parameter. A remote attacker may exploit this issue by enticing a target user to open a...

9.3CVSS7.3AI score0.02889EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/25 12:0 a.m.•6 views

Adobe Flash Player Information Disclosure (APSB14-27: CVE-2014-9162)

An Information Disclosure Vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker could exploit these vulnerability by enticing a target user to open a crafted file...

10CVSS1.5AI score0.04672EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/25 12:0 a.m.•4 views

OpenSSL Multiple Invalid SRP Parameters Buffer Overflow (CVE-2014-3512)

A heap buffer overflow vulnerability exists in OpenSSL. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted TLS messages to the target. Successful exploitation could lead to arbitrary code execution in context of the OpenSSL server application...

7.5CVSS5.8AI score0.7408EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/25 12:0 a.m.•4 views

Adobe Flash Player Type Confusion Code Execution (APSB14-24: CVE-2014-0586)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a type confusion condition while handling a malformed SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file. Successful exploitation...

10CVSS3.2AI score0.05477EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/23 12:0 a.m.•35 views

PHP-Fusion Multiple SQL Injections (CVE-2014-8596)

SQL injection vulnerability has been reported in PHP-Fusion. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS4.9AI score0.03255EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2014/12/22 12:0 a.m.•4 views

Adobe Flash Player Type Confusion (APSB14-24: CVE-2014-0585)

A type confusion vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an...

10CVSS3.1AI score0.04545EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/22 12:0 a.m.•8 views

Adobe Flash Player Type Confusion (APSB14-24: CVE-2014-0584)

A type confusion vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an...

10CVSS3.1AI score0.05477EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/22 12:0 a.m.•3 views

Multiple Web Servers king injector Backdoor Command Execution

A command execution vulnerability has been reported in multiple Web servers. The vulnerability is due to the existence of a backdoor file on the Web server within a specific library. A remote attacker can exploit this vulnerability by sending a request to the malicious backdoor file...

4.9AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/21 12:0 a.m.•48 views

Technicolor DT5130 Router Command Injection (CVE-2014-9144)

A command injection vulnerability has been reported in Technicolor DT5130 Router. Successful exploitation would allow an attacker to execute commands in the security context of the logged on user...

7.5CVSS3.6AI score0.08564EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2014/12/21 12:0 a.m.•9 views

ISC BIND Recursive Resolver Resource Consumption Denial of Service (CVE-2014-8500)

A denial of service vulnerability exists in ISC BIND. The vulnerability is due to a design weakness in the way BIND follows DNS delegations. A remote attacker can exploit these vulnerabilities by sending a request to a recursive resolver forcing the resolver to issue a large number possibly...

7.8CVSS4.1AI score0.57522EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/21 12:0 a.m.•4 views

Multiple Web Servers Smart Shell Backdoor Command Execution

A command execution vulnerability has been reported in multiple web servers. The vulnerability is due to the existence of a backdoor file on the web server within a specific library. A remote attacker can exploit this vulnerability by sending a request to the malicious backdoor file...

4.6AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/18 12:0 a.m.•23 views

Microsoft Graphics Component Information Disclosure (MS14-085) - ver 2 (CVE-2014-6355)

An information disclosure vulnerability has been reported in the Microsoft Graphics Component. The vulnerability is due to the way Microsoft Graphics Component improperly handles the decoding of JPEG images in memory. A remote attacker can exploit this vulnerability by enticing a user to download...

5CVSS5.7AI score0.34203EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/18 12:0 a.m.•3 views

WebRooT Hack Tools

A command execution vulnerability has been reported in multiple PHP servers. The vulnerability is due to the existence of a backdoor file on the PHP server within a specific library. A remote attacker can exploit this vulnerability by sending a request to the malicious backdoor file...

4.7AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/17 12:0 a.m.•48 views

ManageEngine NetFlow Analyzer And IT360 DisplayChartPDF Directory Traversal (CVE-2014-5446)

A directory traversal vulnerability exists in ManageEngine Netflow Analyzer and IT360. The vulnerability is due to lack of authentication and insufficient input validation on the filename parameter sent to the DisplayChartPDF servlet in HTTP requests. A remote unauthenticated attacker can downloa...

5CVSS3AI score0.54715EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2014/12/17 12:0 a.m.•3 views

Adobe Flash Player Privilege Escalation (APSB14-24; CVE-2014-8442; CVE-2015-3101)

A privilege escalation vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

7.5CVSS4.9AI score0.05337EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/17 12:0 a.m.•56 views

ManageEngine EventLog Analyzer Hostdetails Information Disclosure (CVE-2014-6039)

An information disclosure vulnerability exists in ManageEngine EventLog Analyzer. The vulnerability is due to a failure to restrict access to confidential data in the HostDataServlet servlet...

5CVSS1.5AI score0.68779EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2014/12/17 12:0 a.m.•7 views

Adobe Flash Player Memory Corruption (APSB14-26: CVE-2014-8439)

A write what where vulnerability exists in Adobe Flash Player. The vulnerability is due to a memory corruption when handling ByteArray objects. A remote attacker can exploit this vulnerability by enticing a target user to open a crafted file. A successful attack could result in the execution of...

10CVSS2.8AI score0.20008EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/17 12:0 a.m.•7 views

Adobe Acrobat and Adobe Reader Deflate Parameter Integer Overflow (CVE-2009-3459)

Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. Successful exploitation of this issue will cause the application to become non-responsive, and m...

9.3CVSS6.9AI score0.86583EPSS
SaveExploits12
Check Point Advisories
Check Point Advisories
•added 2014/12/17 12:0 a.m.•55 views

WordPress Slider Revolution Plugin Local File Inclusion (CVE-2014-9734; CVE-2015-1579)

An information disclosure vulnerability has been reported in WordPress Slider Revolution Plugin. Successful exploitation of this vulnerability could allow a remote attacker to download local files, and may lead to disclosure of database credentials...

5CVSS2.4AI score0.22055EPSS
SaveExploits8
Check Point Advisories
Check Point Advisories
•added 2014/12/16 12:0 a.m.•40 views

FreePBX Framework Asterisk Recording Interface unserialize Code Execution (CVE-2014-7235)

A code execution vulnerability exists in FreePBX. The vulnerability is due to an input validation issue in the index.php file of the recordings directory...

10CVSS3.5AI score0.43262EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2014/12/15 12:0 a.m.•5 views

Adobe Flash Player Heap Buffer Overflow (APSB14-24: CVE-2014-0583)

A heap buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

7.5CVSS4.3AI score0.06528EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/15 12:0 a.m.•3 views

Adobe Flash Player Memory Corruption (APSB14-24: CVE-2014-0581)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

10CVSS4.4AI score0.03599EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/15 12:0 a.m.•1 views

Fast Wordpress Index Changer

Fast Wordpress Index Changer is a computer program that allows users to change Wordpress index pages. This tool is commonly used by attackers, and therefore upload of files created by this tool may indicate an attempt to deface a web server...

4AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/14 12:0 a.m.•4 views

Adobe Flash Player Stack Buffer Overflow (CVE-2014-9163)

A stack-based buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient sanity check. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

10CVSS4.6AI score0.20356EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/14 12:0 a.m.•18 views

PHP Web Shell Generic Backdoor (CVE-2020-24186)

An attacker might upload a web shell backdoor to a PHP server. A successful exploitation might allow the attacker to run arbitrary code, or use the server as a bot for further attacks...

7.5CVSS2.4AI score0.94535EPSS
SaveExploits19
Check Point Advisories
Check Point Advisories
•added 2014/12/11 12:0 a.m.•28 views

Microsoft Internet Explorer Use After Free Remote Code Execution (CVE-2014-8967)

A use after free vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to an error while handling certain objects when processing HTML and script code. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafte...

6.8CVSS7.1AI score0.12403EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/11 12:0 a.m.•3 views

Joomla and Wordpress Mass Defacer Tool

Joomla and Wordpress Mass Defacer is a computer program that allows users to create HTML pages, in order to upload them to web servers and deface them. This tool is commonly used by attackers, and therefore upload of files created by this tool may indicate an attempt to deface a web server...

3AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/11 12:0 a.m.•3 views

Web Servers CryptoPHP Backdoor

Some free themes for Joomla, WordPress and Drupal CMS include a backdoor to the service. By installing these themes the system administrator installs the CryptoPHP backdoor...

3.4AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/10 12:0 a.m.•5 views

Adobe Flash Player Memory Corruption (APSB14-24: CVE-2014-8440)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

10CVSS4.4AI score0.81943EPSS
SaveExploits5
Total number of security vulnerabilities13538