Lucene search
+L
Checkpoint AdvisoriesRecent

13538 matches found

Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•27 views

Microsoft Access Snapshot Viewer ActiveX Control Arbitrary File Download - Ver2 (CVE-2008-2463)

Microsoft Snapshot Viewer is an application that allows viewing of snapshots created with any version of Microsoft Access. A remote code execution vulnerability has been discovered in the Snapshot Viewer for Microsoft Access. The vulnerability is due to an error in the Snapshot Viewer ActiveX...

6.8CVSS7.3AI score0.59125EPSS
SaveExploits10
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•52 views

Microsoft MPEG Layer-3 Audio Decoder Stack Overflow (MS10-026) - Ver2 (CVE-2010-0480)

MPEG Layer-3 audio codecs are the MPEG Layer-3 Audio Codec for Microsoft DirectShow l3codecx.ax and the Fraunhofer IIS MPEG Layer-3 ACM codecs L3codeca.acm and L3codecp.acm. These MPEG Layer-3 audio codecs are provided along with Windows Media files on affected versions of Microsoft Windows. A...

9.3CVSS6.8AI score0.67888EPSS
SaveExploits14
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•28 views

Microsoft Windows Shell MSHTA Script Execution in OLE Files (MS05-016) - Ver2 (CVE-2005-0063)

The Windows operating system provides facilities that make it possible to invoke different applications to handle different types of files. This makes it possible for a user to double click on a known image type file, for instance, and by that action launch the proper application to display or ed...

7.5CVSS6.6AI score0.47646EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•63 views

Microsoft Windows Cinepak Codec Remote Code Execution (MS10-055) - Ver2 (CVE-2010-2553)

The Cinepak codec is a media encoder and decoder supported by the Windows Media Player. A remote code execution vulnerability has been reported in the way the Cinepak codec handles supported format files. The vulnerability is due to an error in the Cinepak codec that fails to properly handle...

9.3CVSS7.2AI score0.30895EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•30 views

EasyMail Object EMSMTP.DLL ActiveX Control Buffer Overflow - Ver2 (CVE-2007-4607)

A buffer overflow vulnerability has been reported in Quiksoft EasyMail. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9.3CVSS7.5AI score0.56379EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•26 views

Apple Webkit HTML Parsing Rowspan Denial of Service - Ver2 (CVE-2007-0342)

A denial-of-service vulnerability has been reported in Apple Mac OS X. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

4.3CVSS6.2AI score0.02159EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•35 views

Apache Win32 DOS Batch File Arbitrary Command Execution - Ver2 (CVE-2002-0061)

A command execution vulnerability has been reported in Apache Software Foundation Apache HTTP Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

7.2AI score0.56701EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•31 views

Movable Type 4.2x 4.3x Upgrade Script RCE Script Injection - Ver2 (CVE-2012-6315)

A script injection and execution vulnerability has been reported in Movable Type. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary Perl code and SQL commands on the affected system...

8.1AI score
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•22 views

Microsoft Paint JPEG Image Parsing Integer Overflow - Ver2 (CVE-2010-0028)

An integer overflow vulnerability has been reported in Microsoft Paint. The vulnerability is due to an integer overflow error when Microsoft Paint fails to properly decode a malformed JPEG image file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary...

5.1AI score0.48452EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•10 views

Akarru main_content.php bm_content Parameter PHP Code Execution - Ver2 (CVE-2006-4645)

A code execution vulnerability has been reported in Akarru Social Bookmarking Engine. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5.9AI score0.03282EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•19 views

Squery libpath Parameter PHP Code Execution - Ver2 (CVE-2006-1610)

A code execution vulnerability has been reported in Squery. An attacker could exploit this vulnerability via a URL in the libpath parameter. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5.8AI score0.07481EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•10 views

Cyberlink Power2Go p2g Project Buffer Overflow - Ver2 (CVE-2011-5171)

A buffer overflow vulnerability has been reported in Cyberlink Power2go. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5.5AI score0.45786EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•12 views

Best Software SalesLogix Authentication Bypass - Ver2 (CVE-2004-1612)

An authentication bypass vulnerability has been reported in Saleslogix Corporation Saleslogix. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...

5.7AI score0.03266EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•11 views

ActiveCampaign 1-2-All Broadcast Email sername Parameter SQL Injection - Ver2 (CVE-2005-3679)

An SQL injection vulnerability has been reported in Activecampaign 1-2-all Broadcast Email. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS8.3AI score0.01265EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•6 views

Adobe Acrobat JavaScript getIcon Method Buffer Overflow - Ver2 (CVE-2009-0927)

A buffer overflow vulnerability has been reported in Adobe Acrobat. The vulnerability is due to insufficient input validation in the getIcon method of a Collab object, while processing a crafted PDF file. Successful exploitation of this vulnerability could allow a remote attacker to execute...

8AI score0.96632EPSS
SaveExploits15
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•21 views

Novell Groupwise 8.02 Addressbook Memory Corruption - Ver2 (CVE-2011-4189)

A code execution vulnerability has been reported in Novell GroupWise. The vulnerability is due to a heap buffer overflow while parsing tokens within a specially crafted Novell Address Book .nab file. A remote attacker can exploit this issue by enticing a target user to open a specially crafted .n...

7.5CVSS7.8AI score0.11608EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•42 views

MSSQL 2000MSDE Resolution Buffer Overflow - Ver2 (CVE-2002-0649)

A buffer overflow vulnerability has been reported in Microsoft MSDE and Microsoft SQLServer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

7.5CVSS6.5AI score0.8475EPSS
SaveExploits8
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•16 views

Novell ZENworks Asset Management File Upload Directory Traversal - Ver2 (CVE-2010-4229)

The vulnerability is triggered when the application processes specially crafted POST request. . A directory traversal vulnerability has been reported in Novell ZENworks Configuration Management. This is a directory traversal vulnerability in Novell ZENworks Configuration Management. The...

10CVSS6.2AI score0.25428EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•30 views

GDI WMF File Rendering Code Execution - Ver2 (CVE-2005-2124)

A code execution vulnerability has been reported in Microsoft GDI. An attacker could exploit this vulnerability via a crafted Windows Metafile WMF format image. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.2AI score0.55713EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•14 views

Ultra Crypto Component Insecure Method Directory traversal - Ver2 (CVE-2007-4902)

A directory traversal vulnerability has been reported on Ultra Crypto. An attacker could exploit this vulnerability via full pathnames in the argument to the SaveToFile method. Successful exploitation of this vulnerability would allow a remote attacker to overwrite arbitrary files on the affected...

6.4CVSS6.5AI score0.05615EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•35 views

Microsoft XML Core Services Nested Tag Memory Corruption- Ver2 (CVE-2007-0099)

A memory corruption vulnerability has been reported in Xml Core Services. The vulnerability is due to the way that Microsoft XML Core Services handles nested tags. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.2AI score0.24888EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•35 views

Multiple Antivirus Products RAR Parser MZ Character Sequence Security Bypass - Ver2 (CVE-2012-1443)

A security bypass vulnerability has been reported in multiple antivirus products. An attacker could exploit this vulnerability via a RAR file with an initial MZ character sequence. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on...

4.3CVSS6.3AI score0.99636EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•29 views

Adobe Reader and Acrobat TTF MINDEX Code Execution (APSB12-08) - Ver2 (CVE-2012-0774)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

10CVSS9.5AI score0.15654EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•57 views

Dlink IP Camera Video Stream Authentication Bypass - Ver2 (CVE-2013-1600)

An authentication bypass vulnerability has been reported in several D-Link IP Cameras. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...

5.1AI score0.18501EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•13 views

Microsoft Outlook MIME Email Message Parsing Remote Code Execution - Ver2 (CVE-2013-3870)

A code execution vulnerability has been reported in Microsoft Outlook. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.3AI score0.18642EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•34 views

Microsoft DirectShow Crafted MJPEG Stream Handling Code Execution (MS10-033) - Ver2 (CVE-2010-1879)

Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. Audio Video Interleave AVI is a file type that is used with applications that capture, edit, and play back audio-video sequences. A remo...

9.3CVSS7.5AI score0.20284EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•25 views

Novell ZENworks Asset Management File Upload Directory Traversal - Ver2 (CVE-2010-4229)

A directory traversal vulnerability has been reported in Novell ZENworks. The vulnerability is due to improper handling of path names when uploading files via ZENworks Asset Management. Successful exploitation of this vulnerability would allow a remote attacker to list directories, create arbitra...

7.2AI score0.25428EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•19 views

Internet Explorer EMF File Rendering Denial of Service - Ver2 (CVE-2005-0803)

A denial-of-service vulnerability has been reported in Microsoft Internet Explorer. An attacker could exploit this vulnerability via a crafted Enhanced Metafile EMF file that causes invalid end, emreof, or palent offsets to be used. Successful exploitation of this vulnerability would allow a remo...

5CVSS6AI score0.67689EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•50 views

Microsoft Excel OBJ Record Stack Overflow (MS10-038) - Ver2 (CVE-2010-0822)

Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...

9.3CVSS6.8AI score0.70121EPSS
SaveExploits21
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•48 views

Nullsoft Winamp RIFF INFO Record Heap Buffer Overflow - Ver2 (CVE-2011-3834)

A buffer overflow vulnerability has been reported in Nullsoft Winamp. The vulnerability is due to a heap buffer overflow while handling a malformed AVI file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9.3CVSS7.5AI score0.05084EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•40 views

Microsoft Windows Embedded OpenType Font Engine LZCOMP Integer Overflow - Ver2 (CVE-2010-0018)

An integer overflow vulnerability has been reported in Microsoft Windows Embedded OpenType Font Engine. The vulnerability is due to insufficient validation while processing an EOT font. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...

7.2AI score0.26523EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•10 views

Microsoft Windows TrueType Font Parsing Remote Code Execution (MS12-078) - Ver2 (CVE-2012-4786)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way Windows handles specially crafted TTF files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted web page or an email attachment...

10CVSS7.5AI score0.24213EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•3 views

Mozilla Firefox XUL Tree Element Code Execution - Ver2 (CVE-2009-1044)

Mozilla Firefox is a very popular web browser developed by the Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs ...

9.3CVSS9.5AI score0.0649EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•6 views

Java Applet JAX-WS Remote Code Execution - Ver2 (CVE-2012-5076)

A security bypass vulnerability has been reported in Java Runtime Environment JRE. The vulnerability is due to insufficient access restriction in the default Java security properties configuration. A remote attacker can exploit this vulnerability by enticing a target user to open an untrusted,...

10CVSS8.7AI score0.91013EPSS
SaveExploits19
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•14 views

Mozilla Firefox XUL Tree Element Code Execution - Ver2 (CVE-2009-1044)

Mozilla Firefox is a very popular web browser developed by the Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs ...

9.3CVSS9.5AI score0.0649EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•10 views

Firefox Plugin Finder Javascript Injection - Ver2 (CVE-2005-0752)

A code execution vulnerability has been reported in Mozilla Firefox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS7.5AI score0.04106EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•30 views

Bharat Mediratta Gallery captionator.php GALLERY_BASEDIR Parameter PHP Code Execution - Ver2 (CVE-2002-1412)

A code execution vulnerability has been reported in Gallery Project Gallery. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5AI score0.39498EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•40 views

Zavio IP Camera Firmware 1.6.03 Authentication Bypass - Ver2 (CVE-2013-2567)

An authentication bypass vulnerability has been reported in the Zavio IP Camera firmware. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...

8.7AI score0.14572EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•6 views

Adobe Flash Player ActionScript Code Heap Buffer Overflow (APSB13-04) - Ver2 (CVE-2013-0634)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is caused due to an improper buffer allocation by the flash player PCRE engine. A remote attacker can exploit this issue by enticing a target user to open a web-page that contains a specially crafted...

9.3CVSS7.2AI score0.77597EPSS
SaveExploits10
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•63 views

Microsoft DirectShow AVI Parser Heap Overflow - Ver2 (CVE-2010-0250)

A buffer overflow vulnerability has been reported in Microsoft DirectShow. The vulnerability is due to the way Microsoft DirectShow component handles specially crafted AVI files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...

7.4AI score0.31862EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•26 views

Wim Fleischhauer Docpile INIT_PATH Parameter PHP Code Execution - Ver2 (CVE-2006-4076)

A code execution vulnerability has been reported in Wim Fleischhauer Docpile. An attacker could exploit this vulnerability via a URL in the INITPATH parameter to lib/access.inc.php, lib/folders.inc.php, lib/init.inc.php or lib/templates.inc.php. Successful exploitation of this vulnerability could...

7.6AI score0.01868EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•20 views

Lotus Notes RIM connector for Blackberry Desktop Manager ActiveX Denial of Service - Ver2 (CVE-2009-3038)

A denial-of-service vulnerability has been reported in Ibm Lotus Notes Connector. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

6.3AI score0.03461EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•21 views

Microsoft Office PNG File Parsing Buffer Overflow - - Ver2 (CVE-2013-1331)

A buffer overflow vulnerability has been reported in Microsoft Office. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.4AI score0.81877EPSS
SaveExploits4
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•43 views

Microsoft Windows Theme File Remote Code Execution - Ver2 (CVE-2013-0810)

A code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to improper handling of specially crafted Windows Theme file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.8AI score0.59885EPSS
SaveExploits10
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•43 views

Microsoft Internet Authentication Service MS-CHAP Security Bypass (MS09-071) - Ver2 (CVE-2009-3677)

An elevation of privilege vulnerability has been reported in the Internet Authentication Service. Internet Authentication Service IAS is the Microsoft implementation of a Remote Authentication Dial-in User Service RADIUS server and proxy. As a RADIUS server, IAS performs centralized connection...

10CVSS7AI score0.2182EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•8 views

Microsoft Windows MSDTC Denial of Service - Ver2 (CVE-2006-1184)

A denial-of-service vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

6.1AI score0.30561EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•5 views

Wim Fleischhauer Docpile URL in INIT_PATH Parameter PHP Code Execution - Ver2 (CVE-2006-4075)

A code execution vulnerability has been reported in Wim Fleischhauer Docpile. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5.1CVSS7.6AI score0.16891EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•6 views

Oracle Java and JavaFX JPEGImageReader Memory Corruption - Ver2 (CVE-2013-2430)

A memory corruption vulnerability has been reported in Oracle Java and JavaFX. The vulnerability is due to improper safeguards against object manipulation. A remote attacker can exploit this vulnerability by enticing the target user to visit a specially crafted web page. Successful exploitation o...

7.6CVSS9.2AI score0.05724EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•39 views

Microsoft Excel HFPicture Record Stack Overflow (MS10-038) - Ver2 (CVE-2010-1248)

Microsoft Excel is a popular spreadsheet application. A stack overflow vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw by...

9.3CVSS6.9AI score0.27184EPSS
SaveExploits8
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:0 a.m.•27 views

GDI PNG Heap Overflow - Ver2 (CVE-2009-2501)

A buffer overflow vulnerability has been reported in GDI+. An attacker could exploit this vulnerability via a crafted PNG image file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5.2AI score0.26824EPSS
SaveExploits1
Total number of security vulnerabilities13538