Skip to content
Noroxi

intuit records

16 published records for vendor intuit.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

All records

16 records
  • CVE-2007-6387
    48Plan

    Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics Ans

    CriticalCVSS 9.3Proof of conceptEPSS 38%

    intuit · bookkeepingDec 14, 2007

  • CVE-2007-0322
    39Monitor

    Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute ar

    CriticalCVSS 9.3No exploitEPSS 5%

    intuit · quickbooksSep 5, 2007

  • CVE-2007-4471
    39Monitor

    Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or o

    CriticalCVSS 9.3No exploitEPSS 5%

    intuit · quickbooksSep 5, 2007

  • CVE-2018-11338
    30Monitor

    Intuit Lacerte 2017 for Windows in a client/server environment transfers the entire customer list in cleartext over SMB, which allows attack

    HighCVSS 7.5No exploitEPSS 0%

    intuit · lacerteJul 31, 2018

  • CVE-2012-2418
    28Monitor

    Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll

    MediumCVSS 6.8No exploitEPSS 3%

    intuit · quickbooksApr 25, 2012

  • CVE-2018-3854
    28Monitor

    An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5

    HighCVSS 7.1No exploitEPSS 0%

    intuit · quicken 2018Dec 3, 2018

  • CVE-2010-5198
    27Monitor

    Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse (1) dbicudt

    MediumCVSS 6.9No exploitEPSS 0%

    intuit · quickbooksSep 6, 2012

  • CVE-2018-14833
    23Monitor

    Intuit Lacerte 2017 has Incorrect Access Control.

    MediumCVSS 5.9No exploitEPSS 1%

    intuit · lacerteJul 9, 2019

  • CVE-2001-0465
    18Monitor

    TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow

    MediumCVSS 4.6No exploitEPSS 0%

    intuit · turbo taxJun 18, 2001

  • CVE-2012-2422
    11Monitor

    Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile func

    LowCVSS 2.9No exploitEPSS 1%

    intuit · quickbooksApr 25, 2012

  • CVE-2012-2425
    7Monitor

    The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 thro

    LowCVSS 1.8No exploitEPSS 1%

    intuit · quickbooksApr 25, 2012

  • CVE-2012-2420
    7Monitor

    The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 thro

    LowCVSS 1.8No exploitEPSS 1%

    intuit · quickbooksApr 25, 2012

  • CVE-2012-2424
    7Monitor

    The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 thro

    LowCVSS 1.8No exploitEPSS 1%

    intuit · quickbooksApr 25, 2012

  • CVE-2012-2423
    7Monitor

    The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 thro

    LowCVSS 1.8No exploitEPSS 1%

    intuit · quickbooksApr 25, 2012

  • CVE-2012-2419
    7Monitor

    Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit Quick

    LowCVSS 1.8No exploitEPSS 1%

    intuit · quickbooksApr 25, 2012

  • CVE-2012-2421
    7Monitor

    Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggablePr

    LowCVSS 1.8No exploitEPSS 0%

    intuit · quickbooksApr 25, 2012