stonesoft records
7 published records for vendor stonesoft.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 42.9%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Records by year
Bar: total · dark part: CISA KEV.
All records
7 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
33Monitor | CVE-2004-0079No exploit | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (openssl · openssl · CWE-476 | High7.5 | 9.5%Nov 23, 2004 |
28Monitor | CVE-2009-2631No exploit | Clientless SSL VPN products break web browser domain-based security modelscisco · adaptive security appliance · CWE-284 | Medium6.8 | 4.8%Dec 4, 2009 |
28Monitor | CVE-2007-5793No exploit | Stonesoft StoneGate IPS before 4.0 does not properly decode Fullwidth/Halfwidth Unicode encoded data, which makes it easier for remote attacstonesoft · stonegate ips | High7.1 | 1.5%Nov 1, 2007 |
23Monitor | CVE-2004-0112No exploit | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of openssl · openssl · CWE-125 | Medium5.0 | 10.4%Nov 23, 2004 |
22Monitor | CVE-2004-0081No exploit | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infiopenssl · openssl | Medium5.0 | 7.2%Nov 23, 2004 |
21Monitor | CVE-2005-3672No exploit | The Internet Key Exchange version 1 (IKEv1) implementation in Stonesoft StoneGate Firewall before 2.6.1 allows remote attackers to cause a dstonesoft · stonegate firewall | Medium5.0 | 2.3%Nov 18, 2005 |
20Monitor | CVE-2004-0498No exploit | The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service (crash) via crastonesoft · firewall engine | Medium5.0 | 1.2%Dec 31, 2004 |
- CVE-2004-007933Monitor
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (
HighCVSS 7.5No exploitEPSS 9%openssl · opensslNov 23, 2004
- CVE-2009-263128Monitor
Clientless SSL VPN products break web browser domain-based security models
MediumCVSS 6.8No exploitEPSS 4%cisco · adaptive security applianceDec 4, 2009
- CVE-2007-579328Monitor
Stonesoft StoneGate IPS before 4.0 does not properly decode Fullwidth/Halfwidth Unicode encoded data, which makes it easier for remote attac
HighCVSS 7.1No exploitEPSS 1%stonesoft · stonegate ipsNov 1, 2007
- CVE-2004-011223Monitor
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of
MediumCVSS 5.0No exploitEPSS 10%openssl · opensslNov 23, 2004
- CVE-2004-008122Monitor
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infi
MediumCVSS 5.0No exploitEPSS 7%openssl · opensslNov 23, 2004
- CVE-2005-367221Monitor
The Internet Key Exchange version 1 (IKEv1) implementation in Stonesoft StoneGate Firewall before 2.6.1 allows remote attackers to cause a d
MediumCVSS 5.0No exploitEPSS 2%stonesoft · stonegate firewallNov 18, 2005
- CVE-2004-049820Monitor
The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service (crash) via cra
MediumCVSS 5.0No exploitEPSS 1%stonesoft · firewall engineDec 31, 2004