Vulnerability index

Browse CVEs

112 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Endpoint Security HIGH 7.8
CVE-2020-6021

Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes …

Mitigation only
Fix from $1,950 2020-12-03
Endpoint Security MEDIUM 5.5
CVE-2020-6015

Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent the storage…

Mitigation only
Fix from $1,600 2020-11-05
Endpoint Security MEDIUM 6.5
CVE-2020-6014

Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-exis…

Mitigation only
Fix from $1,600 2020-11-02
Zonealarm HIGH 7.8
CVE-2020-6023

Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware.

Fix: 15.8.139.18543+
Fix from $1,950 2020-10-27
Zonealarm MEDIUM 5.5
CVE-2020-6022

Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware.

Fix: 15.8.139.18543+
Fix from $1,600 2020-10-27
Ica Management Portal MEDIUM 6.4
CVE-2020-6020

Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38,…

Mitigation only
Fix from $1,600 2020-09-24
Zonealarm Anti Ransomware HIGH 7.4
CVE-2020-6012

ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can…

Fix: 1.0.713+
Fix from $1,950 2020-08-04
Zonealarm Extreme Security HIGH 8.8
CVE-2020-6013

ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at ele…

Fix: 15.8.109.18436+
Fix from $1,950 2020-07-06
Endpoint Security Clients HIGH 7.5
CVE-2019-8463

A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10, that could allow service log file t…

Patch available
Fix from $1,950 2019-12-23
Security Gateway HIGH 7.5
CVE-2019-8462

In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configurati…

Mitigation only
Fix from $1,950 2019-10-02
Capsule Docs Standalone Client HIGH 7.8
CVE-2019-8461

Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image witho…

Patch available
Fix from $1,950 2019-08-29
Jumbo Hotfix For Endpoint Security Server CRITICAL 9.8
CVE-2019-8459

Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This …

Mitigation only
Fix from $2,300 2019-06-20
Endpoint Security HIGH 7.0
CVE-2019-8454

A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another…

Mitigation only
Fix from $1,950 2019-04-29
Endpoint Security HIGH 7.8
CVE-2019-8452

A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 t…

Fix: after 15.4.062
Fix from $1,950 2019-04-22
Zonealarm HIGH 7.1
CVE-2019-8455

A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all u…

Fix: after 15.4.062
Fix from $1,950 2019-04-17
Zonealarm MEDIUM 5.5
CVE-2019-8453

Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a l…

Fix: after 15.4.062
Fix from $1,600 2019-04-17
Ipsec Vpn MEDIUM 5.9
CVE-2019-8456EPSS 20%

Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setu…

No fix yet
Fix from $1,600 2019-04-09
Zonealarm HIGH 7.8
CVE-2018-8790

Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as S…

Fix: after 15.3.064.17729
Fix from $1,950 2019-03-01
Security Gateway HIGH 7.1
CVE-2014-8952

Multiple unspecified vulnerabilities in Check Point Security Gateway R75.40VS, R75.45, R75.46, R75.47, R76, R77, and R77.10, when the (1) IPS blade, …

Mitigation only
Fix from $1,950 2014-11-16
Security Gateway HIGH 7.1
CVE-2014-8951

Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the (1) Application Control, (2) U…

Mitigation only
Fix from $1,950 2014-11-16
Security Gateway HIGH 7.1
CVE-2014-8950

Unspecified vulnerability in Check Point Security Gateway R77 and R77.10, when the (1) URL Filtering or (2) Identity Awareness blade is used, allows …

Mitigation only
Fix from $1,950 2014-11-16
Security Gateway HIGH 10.0
CVE-2013-7350

Multiple unspecified vulnerabilities in Check Point Security Gateway 80 R71.x before R71.45 (730159141) and R75.20.x before R75.20.4 and 600 and 1100…

Mitigation only
Fix from $1,950 2014-04-01
Session Authentication Agent MEDIUM 5.0
CVE-2014-1673

Check Point Session Authentication Agent allows remote attackers to obtain sensitive information (user credentials) via unspecified vectors.

No fix yet
Fix from $1,600 2014-01-26
Gaia Os MEDIUM 5.4
CVE-2013-7311

The OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R76 does not consider the possibility of duplicate Link State …

Mitigation only
Fix from $1,600 2014-01-23
Zonealarm Extreme Security MEDIUM 6.2
CVE-2010-5184

Race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous …

Mitigation only
Fix from $1,600 2012-08-25
Endpoint Connect MEDIUM 6.9
CVE-2012-2753

Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN bl…

Patch available
Fix from $1,600 2012-06-19
Connectra Ngx HIGH 9.3
CVE-2011-1827

Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distributed by S…

Mitigation only
Fix from $1,950 2011-10-05
Zonealarm MEDIUM 6.9
CVE-2008-7009

Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary code via…

No fix yet
Fix from $1,600 2009-08-19
Firewall 1 Pki Web Service HIGH 10.0
CVE-2009-1227EPSS 7%

NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI Web Service allows remote att…

No fix yet
Fix from $1,950 2009-04-02
Vpn 1 MEDIUM 5.0
CVE-2008-5849

Check Point VPN-1 R55, R65, and other versions, when Port Address Translation (PAT) is used, allows remote attackers to discover intranet IP addresse…

No fix yet
Fix from $1,600 2009-01-06