Check Point

Records150All Threatist records

Exploited (KEV)7In CISA KEV

CVSS critical19CVSS 9.0–10.0

CVSS high70CVSS 7.0–8.9

Exploited now

Check Point records in CISA KEV

TI-2026-58455 Check Point Multiple Products Improper Certificate Validation Vulnerability CRITICAL 100KEV 2026-09-22 TI-2026-63071 Check Point Multiple Products Path Traversal Vulnerability CRITICAL 100KEV 2026-09-22 TI-2026-13573 Check Point SmartConsole Improper Authentication Vulnerability CRITICAL 99KEV 2026-07-22 TI-2026-37414 Check Point Security Gateway Improper Authentication Vulnerability CRITICAL 99KEV 2026-06-08 TI-2024-16426 Check Point Quantum Security Gateways Information Disclosure Vulnerability CRITICAL 94KEV 2024-05-30 TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28

Components

Products in the NVD configurations · select one to filter the records

Firewall-1 43 records MEDIUM Endpoint Security 14 records MEDIUM Vpn-1 14 records MEDIUM Zonealarm 14 records MEDIUM Security Gateway 8 records CRITICAL Gaia Os 6 records CRITICAL Connectra Ngx 4 records MEDIUM Provider-1 4 records MEDIUM

Records

4 records in Provider-1 · all components

TI-2004-00066 CVE-2004-0079 · GHSA-xcj5-xcx2-vvvv

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c…

MEDIUM 51

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.09537 Published 2004-03-18 Fixed CWE-476

TI-2001-01129 CVE-2001-1176 · GHSA-9qqc-r43h-9vjq

Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote…

LOW 38

Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02756 Published 2002-06-25 No fix listed

TI-2004-00095 CVE-2004-0112 · GHSA-ph6p-3j2f-xq2g

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos…

LOW 35

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a de…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.10424 Published 2004-03-18 Fixed CWE-125

TI-2004-00068 CVE-2004-0081 · GHSA-pcwf-qwvv-qjg3

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows…

LOW 33

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07229 Published 2004-03-18 Fixed

Open these records in search →

Critical	19
High	70
Medium	55
Low	6
No CVSS	0