Lucene search
+L
Checkpoint AdvisoriesRecent

13538 matches found

Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•14 views

UltraVNC VNCLog Buffer Overflow - Ver2 (CVE-2006-1652)

UltraVNC is an open source client/server remote control application which uses the Virtual Network Computing VNC protocol. The VNC protocol allows a user to control a remote host by sending mouse and keyboard events, and receiving screen and sound updates. UltraVNC offers several extra features a...

9CVSS7.3AI score0.67398EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•16 views

Dell OpenManage Web Server Buffer Overflow - Ver2 (CVE-2004-0331)

A buffer overflow vulnerability exist in Dell's OpenManage Web Server. The vulnerability is due to an boundary error when handling application parameter. An unauthenticated remote attacker could exploit this vulnerability by sending a crafted request to the vulnerable server...

5CVSS3.2AI score0.1583EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•38 views

Microsoft Message Queue QMGetRemoteQueueName Buffer Overflow - Ver2 (CVE-2008-3479)

A buffer overflow vulnerability has been reported in Microsoft Windows 2000. An attacker could exploit this vulnerability via a crafted RPC call, related to improper processing of parameters to string APIs. Successful exploitation of this vulnerability could allow a remote attacker to execute...

10CVSS7.3AI score0.44474EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•41 views

VLC Media Player ABC File Parsing Buffer Overflow - Ver2 (CVE-2013-4233)

A buffer overflow vulnerability has been reported in VLC Media Player's ABC file parsing. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

6.8CVSS7.4AI score0.04083EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•25 views

Microsoft Excel RealTimeData Record Heap Corruption (MS10-038) - Ver2 (CVE-2010-1247)

Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...

9.3CVSS1.3AI score0.22392EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•12 views

Multiple Products Directory Server LDAP Buffer Overflows - Ver2 (CVE-2006-0717)

An error was found in the way several LDAP servers from several vendors handle malformed LDAP requests. This can be exploited to crash the service via a specially-crafted request sent to the LDAP server port...

5CVSS6.2AI score0.09436EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•9 views

Internet Explorer WMF CreateBrushIndirect DoS - Ver2 (CVE-2006-4071)

A denial-of-service vulnerability has been reported in Microsoft Windows XP and Microsoft Windows Server 2003. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

2.6CVSS3.9AI score0.23995EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•7 views

Internet Explorer XML Object Type Validation Code Execution - Ver2 (CVE-2003-0809)

A code execution vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS7.4AI score0.2667EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•17 views

Apple Computer Finder DMG Volume Name Memory Corruption - Ver2 (CVE-2007-0197)

Apple Computer Mac OS X is the operating system bundled with Apple Macintosh computers. The graphical user interface shell of Mac OS X, Finder, allows for graphical browsing of the system. The Finder is also responsible for user-management of files, disks, network volumes and the launching of oth...

6.8CVSS1.7AI score0.0807EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•37 views

Microsoft Graphics Component Memory Corruption (MS14-007) - Ver2 (CVE-2014-0263)

A remote code execution vulnerability has been reported in Windows Graphics Component. The vulnerability is due to the way Windows components handle specially crafted GIF files. A remote attacker can exploit this issue by enticing a user to view GIF files in shared content. Successful exploitatio...

9.3CVSS7.2AI score0.18885EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•3 views

Mozilla Browsers JavaScript Argument Passing Code Execution - Ver2 (CVE-2007-0777)

Mozilla Firefox and Seamonkey are very popular open source web browsers from Mozilla Foundation, based on the Mozilla Suite code base. The browser is an application designed for tasks related to web browsing, such as displaying HTML pages, downloading files, rendering different media, and so on...

9.3CVSS0.1AI score0.07558EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•6 views

MediaDescriptiondispvalue DoS - Ver2 (CVE-2006-3897)

A denial-of-service vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

5CVSS3.9AI score0.23336EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•5 views

Wireshark ENTTEC DMX Data Buffer Overflow - Ver2 (CVE-2010-4538)

A buffer overflow vulnerability has been reported in Wireshark. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

9.3CVSS5.1AI score0.28983EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•4 views

PhpBook mail Parameter PHP Code Execution - Ver2 (CVE-2006-0075)

A code execution vulnerability has been reported in GNU phpBook. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS4.8AI score0.02737EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•15 views

CA BrightStor ARCserve Backup Tape Engine RPC GetGroupStatus Buffer Overflow attack - Ver2 (CVE-2006-6917)

A buffer overflow vulnerability has been reported in CA BrightStor ARCserve Backup system. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

10CVSS7.5AI score0.29353EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•6 views

AltN WebAdmin USER Buffer Overflow - Ver2 (CVE-2003-0471)

A buffer overflow vulnerability has been reported in Alt-N Webadmin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

7.5CVSS7.6AI score0.60953EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•12 views

Adobe Flash Player OP_inclocal and OP_declocal Memory Corruption (APSB12-22) - Ver2 (CVE-2012-5271)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to memory access without bounds checking while verifying certain opcodes. A remote attacker can exploit this issue by enticing the victim to open a specially crafted SWF file with an affected versi...

10CVSS7AI score0.04727EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/28 12:0 a.m.•9 views

Apple CUPS cupsdDoSelect Remote Code Execution attack - Ver2 (CVE-2009-3553)

A code execution vulnerability has been reported in Apple Cups. An attacker could exploit this vulnerability via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. Successful exploitation of this vulnerability could allow a...

5CVSS3.5AI score0.03913EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/25 12:0 a.m.•5 views

OpenSSL Multiple Invalid SRP Parameters Buffer Overflow (CVE-2014-3512)

A heap buffer overflow vulnerability exists in OpenSSL. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted TLS messages to the target. Successful exploitation could lead to arbitrary code execution in context of the OpenSSL server application...

7.5CVSS5.8AI score0.7408EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/25 12:0 a.m.•7 views

Adobe Flash Player Information Disclosure (APSB14-27: CVE-2014-9162)

An Information Disclosure Vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker could exploit these vulnerability by enticing a target user to open a crafted file...

10CVSS1.5AI score0.04672EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/25 12:0 a.m.•36 views

Hikvision DVR Basic Authentication Buffer Overflow (CVE-2014-4880)

A buffer overflow vulnerability has been reported in Hikvision DVR. The vulnerability is due to a boundary error in Basic Authentication Handling of an RTSP transaction. Successful exploitation may cause a denial of service condition or allow the attacker to inject and execute arbitrary code on t...

7.5CVSS7.6AI score0.69969EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2014/12/25 12:0 a.m.•32 views

RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption - ver 2 (CVE-2011-4259)

An memory corruption vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to an integer underflow condition caused while handling MPEG-2 files with a specially crafted width parameter. A remote attacker may exploit this issue by enticing a target user to open a...

9.3CVSS7.3AI score0.02889EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/25 12:0 a.m.•5 views

Adobe Flash Player Type Confusion Code Execution (APSB14-24: CVE-2014-0586)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a type confusion condition while handling a malformed SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file. Successful exploitation...

10CVSS3.2AI score0.05477EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/25 12:0 a.m.•10 views

Adobe Flash Player Double Free (APSB14-24: CVE-2014-0574)

A double free vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error caused by an attempt of the worker thread and the main thread to clear a shared ByteArray simultaneously. This vulnerability could lead to a crash of the player...

10CVSS1.4AI score0.0826EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/25 12:0 a.m.•5 views

Hikvision DVR Request Header and Request Body Buffer Overflow (CVE-2014-4878; CVE-2014-4879)

A buffer overflow vulnerability has been reported in Hikvision DVR. The vulnerability is due to a boundary error in Basic Authentication Request Header Handling and Request Body Handling of an RTSP transaction. Successful exploitation may cause a denial of service condition or allow the attacker ...

3.1AI score
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/23 12:0 a.m.•35 views

PHP-Fusion Multiple SQL Injections (CVE-2014-8596)

SQL injection vulnerability has been reported in PHP-Fusion. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS4.9AI score0.03255EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2014/12/22 12:0 a.m.•4 views

Multiple Web Servers king injector Backdoor Command Execution

A command execution vulnerability has been reported in multiple Web servers. The vulnerability is due to the existence of a backdoor file on the Web server within a specific library. A remote attacker can exploit this vulnerability by sending a request to the malicious backdoor file...

4.9AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/22 12:0 a.m.•8 views

Adobe Flash Player Type Confusion (APSB14-24: CVE-2014-0584)

A type confusion vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an...

10CVSS3.1AI score0.05477EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/22 12:0 a.m.•5 views

Adobe Flash Player Type Confusion (APSB14-24: CVE-2014-0585)

A type confusion vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an...

10CVSS3.1AI score0.04545EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/21 12:0 a.m.•10 views

ISC BIND Recursive Resolver Resource Consumption Denial of Service (CVE-2014-8500)

A denial of service vulnerability exists in ISC BIND. The vulnerability is due to a design weakness in the way BIND follows DNS delegations. A remote attacker can exploit these vulnerabilities by sending a request to a recursive resolver forcing the resolver to issue a large number possibly...

7.8CVSS4.1AI score0.57522EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/21 12:0 a.m.•48 views

Technicolor DT5130 Router Command Injection (CVE-2014-9144)

A command injection vulnerability has been reported in Technicolor DT5130 Router. Successful exploitation would allow an attacker to execute commands in the security context of the logged on user...

7.5CVSS3.6AI score0.08564EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2014/12/21 12:0 a.m.•4 views

Multiple Web Servers Smart Shell Backdoor Command Execution

A command execution vulnerability has been reported in multiple web servers. The vulnerability is due to the existence of a backdoor file on the web server within a specific library. A remote attacker can exploit this vulnerability by sending a request to the malicious backdoor file...

4.6AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/18 12:0 a.m.•24 views

Microsoft Graphics Component Information Disclosure (MS14-085) - ver 2 (CVE-2014-6355)

An information disclosure vulnerability has been reported in the Microsoft Graphics Component. The vulnerability is due to the way Microsoft Graphics Component improperly handles the decoding of JPEG images in memory. A remote attacker can exploit this vulnerability by enticing a user to download...

5CVSS5.7AI score0.34203EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/18 12:0 a.m.•4 views

WebRooT Hack Tools

A command execution vulnerability has been reported in multiple PHP servers. The vulnerability is due to the existence of a backdoor file on the PHP server within a specific library. A remote attacker can exploit this vulnerability by sending a request to the malicious backdoor file...

4.7AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/17 12:0 a.m.•48 views

ManageEngine NetFlow Analyzer And IT360 DisplayChartPDF Directory Traversal (CVE-2014-5446)

A directory traversal vulnerability exists in ManageEngine Netflow Analyzer and IT360. The vulnerability is due to lack of authentication and insufficient input validation on the filename parameter sent to the DisplayChartPDF servlet in HTTP requests. A remote unauthenticated attacker can downloa...

5CVSS3AI score0.54715EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2014/12/17 12:0 a.m.•8 views

Adobe Flash Player Memory Corruption (APSB14-26: CVE-2014-8439)

A write what where vulnerability exists in Adobe Flash Player. The vulnerability is due to a memory corruption when handling ByteArray objects. A remote attacker can exploit this vulnerability by enticing a target user to open a crafted file. A successful attack could result in the execution of...

10CVSS2.8AI score0.20008EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/17 12:0 a.m.•56 views

ManageEngine EventLog Analyzer Hostdetails Information Disclosure (CVE-2014-6039)

An information disclosure vulnerability exists in ManageEngine EventLog Analyzer. The vulnerability is due to a failure to restrict access to confidential data in the HostDataServlet servlet...

5CVSS1.5AI score0.68779EPSS
SaveExploits9
Check Point Advisories
Check Point Advisories
•added 2014/12/17 12:0 a.m.•7 views

Adobe Acrobat and Adobe Reader Deflate Parameter Integer Overflow (CVE-2009-3459)

Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. Successful exploitation of this issue will cause the application to become non-responsive, and m...

9.3CVSS6.9AI score0.86583EPSS
SaveExploits12
Check Point Advisories
Check Point Advisories
•added 2014/12/17 12:0 a.m.•55 views

WordPress Slider Revolution Plugin Local File Inclusion (CVE-2014-9734; CVE-2015-1579)

An information disclosure vulnerability has been reported in WordPress Slider Revolution Plugin. Successful exploitation of this vulnerability could allow a remote attacker to download local files, and may lead to disclosure of database credentials...

5CVSS2.4AI score0.22055EPSS
SaveExploits8
Check Point Advisories
Check Point Advisories
•added 2014/12/17 12:0 a.m.•4 views

Adobe Flash Player Privilege Escalation (APSB14-24; CVE-2014-8442; CVE-2015-3101)

A privilege escalation vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

7.5CVSS4.9AI score0.05337EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/16 12:0 a.m.•41 views

FreePBX Framework Asterisk Recording Interface unserialize Code Execution (CVE-2014-7235)

A code execution vulnerability exists in FreePBX. The vulnerability is due to an input validation issue in the index.php file of the recordings directory...

10CVSS3.5AI score0.43262EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2014/12/15 12:0 a.m.•2 views

Fast Wordpress Index Changer

Fast Wordpress Index Changer is a computer program that allows users to change Wordpress index pages. This tool is commonly used by attackers, and therefore upload of files created by this tool may indicate an attempt to deface a web server...

4AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/15 12:0 a.m.•4 views

Adobe Flash Player Memory Corruption (APSB14-24: CVE-2014-0581)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

10CVSS4.4AI score0.03599EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/15 12:0 a.m.•6 views

Adobe Flash Player Heap Buffer Overflow (APSB14-24: CVE-2014-0583)

A heap buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

7.5CVSS4.3AI score0.06528EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/14 12:0 a.m.•19 views

PHP Web Shell Generic Backdoor (CVE-2020-24186)

An attacker might upload a web shell backdoor to a PHP server. A successful exploitation might allow the attacker to run arbitrary code, or use the server as a bot for further attacks...

7.5CVSS2.4AI score0.94535EPSS
SaveExploits19
Check Point Advisories
Check Point Advisories
•added 2014/12/14 12:0 a.m.•5 views

Adobe Flash Player Stack Buffer Overflow (CVE-2014-9163)

A stack-based buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient sanity check. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

10CVSS4.6AI score0.20356EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/11 12:0 a.m.•3 views

Joomla and Wordpress Mass Defacer Tool

Joomla and Wordpress Mass Defacer is a computer program that allows users to create HTML pages, in order to upload them to web servers and deface them. This tool is commonly used by attackers, and therefore upload of files created by this tool may indicate an attempt to deface a web server...

3AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/11 12:0 a.m.•4 views

Web Servers CryptoPHP Backdoor

Some free themes for Joomla, WordPress and Drupal CMS include a backdoor to the service. By installing these themes the system administrator installs the CryptoPHP backdoor...

3.4AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/12/11 12:0 a.m.•29 views

Microsoft Internet Explorer Use After Free Remote Code Execution (CVE-2014-8967)

A use after free vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to an error while handling certain objects when processing HTML and script code. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafte...

6.8CVSS7.1AI score0.12403EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/12/10 12:0 a.m.•5 views

Adobe Flash Player Memory Corruption (APSB14-24: CVE-2014-8440)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

10CVSS4.4AI score0.81943EPSS
SaveExploits5
Total number of security vulnerabilities13538