Skip to content
Noroxi

Wibu records

20 published records for vendor wibu.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 20
  4. 21
  5. 23
  6. 24
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

20 records
  • CVE-2018-3991
    49Plan

    An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500.

    CriticalCVSS 9.8No exploitEPSS 34%

    wibu · wibukeyFeb 5, 2019

  • CVE-2021-20093
    46Plan

    A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a.

    CriticalCVSS 9.1No exploitEPSS 33%

    wibu · codemeterJun 16, 2021

  • CVE-2020-14509
    40Plan

    Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify

    CriticalCVSS 9.8No exploitEPSS 2%

    wibu · codemeterSep 16, 2020

  • CVE-2023-3935
    40Plan

    Wibu: Buffer Overflow in CodeMeter Runtime

    CriticalCVSS 9.8No exploitEPSS 1%

    wibu · codemeter runtimeSep 13, 2023

  • CVE-2020-14517
    39Monitor

    Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if Cod

    CriticalCVSS 9.8No exploitEPSS 0%

    wibu · codemeterSep 16, 2020

  • CVE-2021-47810
    34Monitor

    WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path

    HighCVSS 8.5No exploitEPSS 0%

    wibu · wibukeyJan 15, 2026

  • CVE-2021-20094
    31Monitor

    A denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a.

    HighCVSS 7.5No exploitEPSS 4%

    wibu · codemeterJun 16, 2021

  • CVE-2020-16233
    31Monitor

    An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data f

    HighCVSS 7.5No exploitEPSS 1%

    wibu · codemeterSep 16, 2020

  • CVE-2018-3990
    31Monitor

    An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (

    HighCVSS 7.8No exploitEPSS 0%

    wibu · wibukeyFeb 5, 2019

  • CVE-2024-45181
    31Monitor

    An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70.

    HighCVSS 7.8No exploitEPSS 0%

    wibu · wibukeySep 12, 2024

  • CVE-2020-14513
    30Monitor

    CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted license file due to unver

    HighCVSS 7.5No exploitEPSS 1%

    wibu · codemeterSep 16, 2020

  • CVE-2020-14515
    30Monitor

    CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file sig

    HighCVSS 7.5No exploitEPSS 0%

    wibu · codemeterSep 16, 2020

  • CVE-2020-14519
    30Monitor

    This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including V

    HighCVSS 7.5No exploitEPSS 0%

    wibu · codemeterSep 16, 2020

  • CVE-2014-8419
    28Monitor

    Wibu-Systems CodeMeter Runtime before 5.20 uses weak permissions (read and write access for all users) for codemeter.exe, which allows local

    HighCVSS 7.2No exploitEPSS 0%

    wibu · codemeter runtimeNov 26, 2014

  • CVE-2021-41057
    28Monitor

    In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissio

    HighCVSS 7.1No exploitEPSS 0%

    wibu · codemeter runtimeNov 14, 2021

  • CVE-2017-13754
    22Monitor

    Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows remot

    MediumCVSS 5.4Proof of conceptEPSS 3%

    wibu · codemeterSep 7, 2017

  • CVE-2018-3989
    22Monitor

    An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Versi

    MediumCVSS 5.5No exploitEPSS 0%

    wibu · wibukeyFeb 5, 2019

  • CVE-2024-45182
    22Monitor

    An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially

    MediumCVSS 5.5No exploitEPSS 0%

    wibu · wibukeySep 12, 2024

  • CVE-2011-4057
    21Monitor

    Wibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions before 4.40 allows remote attackers to cause a denial of service

    MediumCVSS 5.0No exploitEPSS 4%

    wibu · codemeter runtimeJan 13, 2012

  • CVE-2011-3689
    17Monitor

    Cross-site scripting (XSS) vulnerability in Licenses.html in Wibu-Systems CodeMeter WebAdmin 3.30 and 4.30 allows remote attackers to inject

    MediumCVSS 4.3No exploitEPSS 1%

    wibu · codemeter webadminSep 27, 2011