verisign records
5 published records for vendor verisign.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
Bug bounty scope
The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2007-1083No exploit | Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Meverisign · mpki · CWE-119 | Critical9.3 | — | 8.2% | Feb 22, 2007 |
38Monitor | CVE-2006-2273No exploit | The InstallProduct routine in the Verisign VUpdater.Install (aka i-Nav) ActiveX control does not verify Microsoft Cabinet (.CAB) files, whicverisign · i-nav | Critical9.3 | — | 3.2% | May 11, 2006 |
20Monitor | CVE-2004-1209No exploit | Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which alloverisign · payflow link | Medium5.0 | — | 1.0% | Jan 10, 2005 |
18Monitor | CVE-2006-1344Proof of concept | Cross-site scripting (XSS) vulnerability in VeriSign haydn.exe, as used in Managed PKI (MPKI) 6.0, allows remote attackers to inject arbitraverisign · mpki | Medium4.3 | — | 1.9% | Mar 21, 2006 |
18Monitor | CVE-2008-4393Proof of concept | Cross-site scripting (XSS) vulnerability in VeriSign Kontiki Delivery Management System (DMS) 5.0 and earlier allows remote attackers to injverisign · kontiki delivery management system · CWE-79 | Medium4.3 | — | 1.7% | Oct 7, 2008 |
- CVE-2007-108339Monitor
Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Me
CriticalCVSS 9.3No exploitEPSS 8%verisign · mpkiFeb 22, 2007
- CVE-2006-227338Monitor
The InstallProduct routine in the Verisign VUpdater.Install (aka i-Nav) ActiveX control does not verify Microsoft Cabinet (.CAB) files, whic
CriticalCVSS 9.3No exploitEPSS 3%verisign · i-navMay 11, 2006
- CVE-2004-120920Monitor
Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allo
MediumCVSS 5.0No exploitEPSS 1%verisign · payflow linkJan 10, 2005
- CVE-2006-134418Monitor
Cross-site scripting (XSS) vulnerability in VeriSign haydn.exe, as used in Managed PKI (MPKI) 6.0, allows remote attackers to inject arbitra
MediumCVSS 4.3Proof of conceptEPSS 1%verisign · mpkiMar 21, 2006
- CVE-2008-439318Monitor
Cross-site scripting (XSS) vulnerability in VeriSign Kontiki Delivery Management System (DMS) 5.0 and earlier allows remote attackers to inj
MediumCVSS 4.3Proof of conceptEPSS 1%verisign · kontiki delivery management systemOct 7, 2008