Skip to content
Noroxi

Valve Software records

11 published records for vendor valve software.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
6
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    11 records
    • CVE-2000-0968
      41Plan

      Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon comman

      CriticalCVSS 10.0No exploitEPSS 3%

      valve software · half-life dedicated serverDec 19, 2000

    • CVE-2000-0969
      41Plan

      Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by in

      CriticalCVSS 10.0No exploitEPSS 3%

      valve software · half-life dedicated serverDec 19, 2000

    • CVE-2001-0358
      31Monitor

      Buffer overflows in Sierra Half-Life build 1573 and earlier allow remote attackers to execute arbitrary code via (1) a long map command, (2)

      HighCVSS 7.5No exploitEPSS 3%

      sierra · half-lifeJun 27, 2001

    • CVE-2007-5713
      31Monitor

      Off-by-one error in the GeoIP module in the AMX Mod X 1.76d plugin for Half-Life Server might allow attackers to execute arbitrary code or c

      HighCVSS 7.5No exploitEPSS 2%

      amxmodx · amx mod xOct 30, 2007

    • CVE-2001-0359
      31Monitor

      Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map comman

      HighCVSS 7.5No exploitEPSS 2%

      sierra · half-lifeJun 27, 2001

    • CVE-2001-0964
      31Monitor

      Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console com

      HighCVSS 7.5No exploitEPSS 2%

      valve software · half-lifeSep 20, 2001

    • CVE-2002-0964
      21Monitor

      Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via multiple responses to th

      MediumCVSS 5.0Proof of conceptEPSS 3%

      valve software · half-lifeOct 4, 2002

    • CVE-2003-1325
      21Monitor

      The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated

      MediumCVSS 5.2Proof of conceptEPSS 2%

      valve software · half-life cstrike dedicated serverDec 31, 2003

    • CVE-2004-0724
      20Monitor

      The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service (server or client crash) via an empty fragmente

      MediumCVSS 5.0No exploitEPSS 1%

      valve software · half-lifeJul 27, 2004

    • CVE-2006-0734
      17Monitor

      The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.6 and earlier allows remote authenticated user

      MediumCVSS 4.0Proof of conceptEPSS 2%

      valve software · half-life cstrike dedicated serverFeb 16, 2006

    • CVE-2007-5477
      17Monitor

      Cross-site scripting (XSS) vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to inj

      MediumCVSS 4.3No exploitEPSS 1%

      valve software · half-life dedicated serverOct 16, 2007