Browse CVEs

HIGH 7.8 CVE-2020-6021 Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes … Endpoint Security Mitigation only Fix from $1,9502020-12-03 MEDIUM 5.5 CVE-2020-6015 Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent the storage… Endpoint Security Mitigation only Fix from $1,6002020-11-05 MEDIUM 6.5 CVE-2020-6014 Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-exis… Endpoint Security Mitigation only Fix from $1,6002020-11-02 HIGH 7.8 CVE-2020-6023 Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware. Zonealarm 15.8.139.18543+ Fix from $1,9502020-10-27 MEDIUM 5.5 CVE-2020-6022 Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware. Zonealarm 15.8.139.18543+ Fix from $1,6002020-10-27 MEDIUM 6.4 CVE-2020-6020 Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38,… Ica Management Portal Mitigation only Fix from $1,6002020-09-24 HIGH 7.4 CVE-2020-6012 ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can… Zonealarm Anti Ransomware 1.0.713+ Fix from $1,9502020-08-04 HIGH 8.8 CVE-2020-6013 ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at ele… Zonealarm Extreme Security 15.8.109.18436+ Fix from $1,9502020-07-06 HIGH 7.5 CVE-2019-8463 A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10, that could allow service log file t… Endpoint Security Clients Patch available Fix from $1,9502019-12-23 HIGH 7.5 CVE-2019-8462 In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configurati… Security Gateway Mitigation only Fix from $1,9502019-10-02 HIGH 7.8 CVE-2019-8461 Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image witho… Capsule Docs Standalone Client Patch available Fix from $1,9502019-08-29 CRITICAL 9.8 CVE-2019-8459 Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This … Jumbo Hotfix For Endpoint Security Server Mitigation only Fix from $2,3002019-06-20 HIGH 7.0 CVE-2019-8454 A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another… Endpoint Security Mitigation only Fix from $1,9502019-04-29 HIGH 7.8 CVE-2019-8452 A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 t… Endpoint Security after 15.4.062 Fix from $1,9502019-04-22 HIGH 7.1 CVE-2019-8455 A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all u… Zonealarm after 15.4.062 Fix from $1,9502019-04-17 MEDIUM 5.5 CVE-2019-8453 Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a l… Zonealarm after 15.4.062 Fix from $1,6002019-04-17 MEDIUM 5.9 CVE-2019-8456EPSS 20% Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setu… Ipsec Vpn No fix yet Fix from $1,6002019-04-09 HIGH 7.8 CVE-2018-8790 Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as S… Zonealarm after 15.3.064.17729 Fix from $1,9502019-03-01 HIGH 7.1 CVE-2014-8952 Multiple unspecified vulnerabilities in Check Point Security Gateway R75.40VS, R75.45, R75.46, R75.47, R76, R77, and R77.10, when the (1) IPS blade, … Security Gateway Mitigation only Fix from $1,9502014-11-16 HIGH 7.1 CVE-2014-8951 Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the (1) Application Control, (2) U… Security Gateway Mitigation only Fix from $1,9502014-11-16 HIGH 7.1 CVE-2014-8950 Unspecified vulnerability in Check Point Security Gateway R77 and R77.10, when the (1) URL Filtering or (2) Identity Awareness blade is used, allows … Security Gateway Mitigation only Fix from $1,9502014-11-16 HIGH 10.0 CVE-2013-7350 Multiple unspecified vulnerabilities in Check Point Security Gateway 80 R71.x before R71.45 (730159141) and R75.20.x before R75.20.4 and 600 and 1100… Security Gateway Mitigation only Fix from $1,9502014-04-01 MEDIUM 5.0 CVE-2014-1673 Check Point Session Authentication Agent allows remote attackers to obtain sensitive information (user credentials) via unspecified vectors. Session Authentication Agent No fix yet Fix from $1,6002014-01-26 MEDIUM 5.4 CVE-2013-7311 The OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R76 does not consider the possibility of duplicate Link State … Gaia Os Mitigation only Fix from $1,6002014-01-23 MEDIUM 6.2 CVE-2010-5184 Race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous … Zonealarm Extreme Security Mitigation only Fix from $1,6002012-08-25 MEDIUM 6.9 CVE-2012-2753 Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN bl… Endpoint Connect Patch available Fix from $1,6002012-06-19 HIGH 9.3 CVE-2011-1827 Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distributed by S… Connectra Ngx Mitigation only Fix from $1,9502011-10-05 MEDIUM 6.9 CVE-2008-7009 Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary code via… Zonealarm No fix yet Fix from $1,6002009-08-19 HIGH 10.0 CVE-2009-1227EPSS 7% NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI Web Service allows remote att… Firewall 1 Pki Web Service No fix yet Fix from $1,9502009-04-02 MEDIUM 5.0 CVE-2008-5849 Check Point VPN-1 R55, R65, and other versions, when Port Address Translation (PAT) is used, allows remote attackers to discover intranet IP addresse… Vpn 1 No fix yet Fix from $1,6002009-01-06