Vulnerability index

Browse CVEs

112 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Check Point Vpn 1 Pro MEDIUM 6.5
CVE-2008-1397

Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service (site-to…

Patch available
Fix from $1,600 2008-03-20
Vpn 1 Secureclient HIGH 7.8
CVE-2008-0662

The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRem…

Mitigation only
Fix from $1,950 2008-02-08
Zonealarm HIGH 7.2
CVE-2007-4216

vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a crafted Interrupt Request Packet…

Fix: after 7.0.337.0
Fix from $1,950 2007-08-21
Vpn 1 Utm Edge HIGH 9.3
CVE-2007-3489

Cross-site request forgery (CSRF) vulnerability in pop/WizU.html in the management interface in Check Point VPN-1 Edge X Embedded NGX 7.0.33x on the …

Patch available
Fix from $1,950 2007-06-29
Zonealarm HIGH 7.2
CVE-2007-2730

Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of process identifiers for certain Microsoft Windows API function…

Fix: after 6.1.744.001
Fix from $1,950 2007-05-16
Web Intelligence HIGH 7.8
CVE-2007-2689

Check Point Web Intelligence does not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attacke…

Mitigation only
Fix from $1,950 2007-05-16
Zonealarm HIGH 7.2
CVE-2007-2174

The IOCTL handling in srescan.sys in the ZoneAlarm Spyware Removal Engine (SRE) in Check Point ZoneAlarm before 5.0.156.0 allows local users to execu…

Fix: after 5.0.63.0
Fix from $1,950 2007-04-24
Connectra Ngx HIGH 7.5
CVE-2007-0471

sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and po…

No fix yet
Fix from $1,950 2007-01-24
Firewall 1 MEDIUM 5.0
CVE-2006-3885

Directory traversal vulnerability in Check Point Firewall-1 R55W before HFA03 allows remote attackers to read arbitrary files via an encoded .. (dot …

Patch available
Fix from $1,600 2006-07-27
Vpn 1 HIGH 7.2
CVE-2006-0255

Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges via a malicious "program.exe"…

Mitigation only
Fix from $1,950 2006-01-18
Zonealarm HIGH 7.2
CVE-2005-2932

Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default pe…

Fix: after 7.0.337.0
Fix from $1,950 2005-12-31
Secureclient Ng MEDIUM 6.5
CVE-2005-4093

Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modi…

Mitigation only
Fix from $1,600 2005-12-08
Check Point HIGH 7.8
CVE-2005-3673

The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain c…

Mitigation only
Fix from $1,950 2005-11-18
Connectra Ngx HIGH 7.5
CVE-2005-2889

Check Point NGX R60 does not properly verify packets against the predefined service group "CIFS" rule, which allows remote attackers to bypass intend…

Mitigation only
Fix from $1,950 2005-09-14
Firewall 1 HIGH 7.8
CVE-2004-2679

Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (I…

Mitigation only
Fix from $1,950 2004-12-31
Firewall 1 HIGH 7.5
CVE-2004-0699EPSS 6%

Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers …

Patch available
Fix from $1,950 2004-09-28
Firewall 1 HIGH 10.0
CVE-2004-0469

Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG …

Patch available
Fix from $1,950 2004-07-07
Firewall 1 HIGH 10.0
CVE-2004-0039EPSS 9%

Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point F…

Patch available
Fix from $1,950 2004-03-03
Firewall 1 HIGH 10.0
CVE-2004-0040EPSS 8%

Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows…

Patch available
Fix from $1,950 2004-03-03
Firewall 1 MEDIUM 5.0
CVE-2003-0757

Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote reques…

Mitigation only
Fix from $1,600 2003-10-20
Vpn 1 Firewall 1 MEDIUM 5.0
CVE-2002-1623EPSS 49%

The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or re…

No fix yet
Fix from $1,600 2002-12-31
Check Point Vpn HIGH 7.5
CVE-2002-0428

Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire v…

Patch available
Fix from $1,950 2002-08-12
Firewall 1 HIGH 7.2
CVE-2001-1171

Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which coul…

Patch available
Fix from $1,950 2002-04-01
Vpn 1 MEDIUM 5.0
CVE-2001-1499

Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authe…

Mitigation only
Fix from $1,600 2001-12-31
Firewall 1 MEDIUM 5.0
CVE-2001-1431

Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or…

Mitigation only
Fix from $1,600 2001-10-08
Firewall 1 HIGH 7.5
CVE-2001-0940

Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbit…

Patch available
Fix from $1,950 2001-09-21
Firewall 1 MEDIUM 6.4
CVE-2001-1101

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when savi…

Patch available
Fix from $1,600 2001-09-08
Firewall 1 MEDIUM 6.2
CVE-2001-1102

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files th…

Patch available
Fix from $1,600 2001-09-08
Firewall 1 MEDIUM 5.0
CVE-2000-1201

Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264.

Mitigation only
Fix from $1,600 2001-08-31
Zonealarm Pro MEDIUM 5.5
CVE-2001-0682

ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which pre…

Mitigation only
Fix from $1,600 2001-08-29