Skip to content
Noroxi

qbik records

14 published records for vendor qbik.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 7.1%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

14 records
  • CVE-2006-2926
    51Plan

    Stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote attackers to cause a denial of service and poss

    HighCVSS 7.5WeaponizedEPSS 70%

    qbik · wingateJun 9, 2006

  • CVE-1999-0291
    31Monitor

    The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication.

    HighCVSS 7.5No exploitEPSS 2%

    qbik · wingateFeb 1, 1999

  • CVE-2020-13866
    31Monitor

    WinGate v9.4.1.5998 has insecure permissions for the installation directory, which allows local users to gain privileges by replacing an exe

    HighCVSS 7.8Proof of conceptEPSS 1%

    qbik · wingateJun 8, 2020

  • CVE-2008-3606
    27Monitor

    Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of

    MediumCVSS 6.5Proof of conceptEPSS 4%

    qbik · wingateAug 12, 2008

  • CVE-1999-0441
    22Monitor

    Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service.

    MediumCVSS 5.0Proof of conceptEPSS 5%

    qbik · wingateFeb 22, 1999

  • CVE-2009-0802
    22Monitor

    Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote

    MediumCVSS 5.4No exploitEPSS 2%

    qbik · wingateMar 4, 2009

  • CVE-2006-2917
    22Monitor

    Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions before 6.1.4 Build 10

    MediumCVSS 5.5No exploitEPSS 1%

    qbik · wingateJul 10, 2006

  • CVE-2004-0789
    21Monitor

    Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before

    MediumCVSS 5.0Proof of conceptEPSS 2%

    posadis · posadisDec 31, 2004

  • CVE-2007-4335
    21Monitor

    Format string vulnerability in the SMTP server component in Qbik WinGate 5.x and 6.x before 6.2.2 allows remote attackers to cause a denial

    MediumCVSS 5.0No exploitEPSS 2%

    qbik · wingateAug 14, 2007

  • CVE-1999-0290
    21Monitor

    The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost.

    MediumCVSS 5.0No exploitEPSS 1%

    qbik · wingateFeb 21, 1998

  • CVE-2006-4518
    21Monitor

    Qbik WinGate 6.1.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a DNS request with a self-referenc

    MediumCVSS 5.0No exploitEPSS 1%

    qbik · wingateNov 28, 2006

  • CVE-2000-1048
    20Monitor

    Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files v

    MediumCVSS 5.0No exploitEPSS 1%

    qbik · wingateDec 11, 2000

  • CVE-2004-0578
    20Monitor

    WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files via lead

    MediumCVSS 5.0No exploitEPSS 1%

    qbik · wingateDec 6, 2004

  • CVE-2004-0577
    20Monitor

    WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files from the

    MediumCVSS 5.0No exploitEPSS 1%

    qbik · wingateDec 6, 2004