Browse CVEs

HIGH 7.1 CVE-2014-8950 Unspecified vulnerability in Check Point Security Gateway R77 and R77.10, when the (1) URL Filtering or (2) Identity Awareness blade is used, allows … Security Gateway Mitigation only Fix from $1,9502014-11-16 HIGH 10.0 CVE-2013-7350 Multiple unspecified vulnerabilities in Check Point Security Gateway 80 R71.x before R71.45 (730159141) and R75.20.x before R75.20.4 and 600 and 1100… Security Gateway Mitigation only Fix from $1,9502014-04-01 MEDIUM 5.0 CVE-2014-1673 Check Point Session Authentication Agent allows remote attackers to obtain sensitive information (user credentials) via unspecified vectors. Session Authentication Agent No fix yet Fix from $1,6002014-01-26 MEDIUM 5.4 CVE-2013-7311 The OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R76 does not consider the possibility of duplicate Link State … Gaia Os Mitigation only Fix from $1,6002014-01-23 MEDIUM 6.2 CVE-2010-5184 Race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous … Zonealarm Extreme Security Mitigation only Fix from $1,6002012-08-25 HIGH 9.3 CVE-2011-1827 Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distributed by S… Connectra Ngx Mitigation only Fix from $1,9502011-10-05 MEDIUM 6.9 CVE-2008-7009 Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary code via… Zonealarm No fix yet Fix from $1,6002009-08-19 HIGH 10.0 CVE-2009-1227EPSS 7% NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI Web Service allows remote att… Firewall 1 Pki Web Service No fix yet Fix from $1,9502009-04-02 MEDIUM 5.0 CVE-2008-5849 Check Point VPN-1 R55, R65, and other versions, when Port Address Translation (PAT) is used, allows remote attackers to discover intranet IP addresse… Vpn 1 No fix yet Fix from $1,6002009-01-06 HIGH 7.8 CVE-2008-0662 The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRem… Vpn 1 Secureclient Mitigation only Fix from $1,9502008-02-08 HIGH 7.8 CVE-2007-2689 Check Point Web Intelligence does not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attacke… Web Intelligence Mitigation only Fix from $1,9502007-05-16 HIGH 7.5 CVE-2007-0471 sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and po… Connectra Ngx No fix yet Fix from $1,9502007-01-24 HIGH 7.2 CVE-2006-0255 Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges via a malicious "program.exe"… Vpn 1 Mitigation only Fix from $1,9502006-01-18 MEDIUM 6.5 CVE-2005-4093 Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modi… Secureclient Ng Mitigation only Fix from $1,6002005-12-08 HIGH 7.8 CVE-2005-3673 The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain c… Check Point Mitigation only Fix from $1,9502005-11-18 HIGH 7.5 CVE-2005-2889 Check Point NGX R60 does not properly verify packets against the predefined service group "CIFS" rule, which allows remote attackers to bypass intend… Connectra Ngx Mitigation only Fix from $1,9502005-09-14 HIGH 7.8 CVE-2004-2679 Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (I… Firewall 1 Mitigation only Fix from $1,9502004-12-31 MEDIUM 5.0 CVE-2003-0757 Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote reques… Firewall 1 Mitigation only Fix from $1,6002003-10-20 MEDIUM 5.0 CVE-2002-1623EPSS 49% The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or re… Vpn 1 Firewall 1 No fix yet Fix from $1,6002002-12-31 MEDIUM 5.0 CVE-2001-1499 Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authe… Vpn 1 Mitigation only Fix from $1,6002001-12-31 MEDIUM 5.0 CVE-2001-1431 Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or… Firewall 1 Mitigation only Fix from $1,6002001-10-08 MEDIUM 5.0 CVE-2000-1201 Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264. Firewall 1 Mitigation only Fix from $1,6002001-08-31 MEDIUM 5.5 CVE-2001-0682 ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which pre… Zonealarm Pro Mitigation only Fix from $1,6002001-08-29 MEDIUM 5.0 CVE-2001-1303EPSS 9% The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for the prot… Firewall 1 Mitigation only Fix from $1,6002001-07-18 HIGH 7.5 CVE-2001-0082 Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets. Firewall 1 No fix yet Fix from $1,9502001-02-12 HIGH 7.5 CVE-2000-1037 Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows… Firewall 1 No fix yet Fix from $1,9502000-12-11 HIGH 7.5 CVE-2000-0804 Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reo… Firewall 1 Mitigation only Fix from $1,9502000-11-14 HIGH 7.5 CVE-2000-0805 Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "… Firewall 1 Mitigation only Fix from $1,9502000-11-14 HIGH 7.5 CVE-2000-0807 The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections… Firewall 1 Mitigation only Fix from $1,9502000-11-14 HIGH 7.5 CVE-2000-0808 The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attack… Firewall 1 Mitigation only Fix from $1,9502000-11-14