Intuit

CVE-2018-3854 Dec 03, 22:29 HIGH POC This Week

An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5.2.2. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

CVE-2018-11338 Jul 31, 14:29 HIGH This Week

Intuit Lacerte 2017 for Windows in a client/server environment transfers the entire customer list in cleartext over SMB, which allows attackers to (1) obtain sensitive information by sniffing the. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2012-2425 Apr 25, 20:55 LOW POC Monitor

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote. Rated low severity (CVSS 1.8). Public exploit code available and no vendor patch available.

CVE-2012-2424 Apr 25, 20:55 LOW POC Monitor

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote. Rated low severity (CVSS 1.8). Public exploit code available and no vendor patch available.

CVE-2012-2423 Apr 25, 20:55 LOW POC Monitor

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, provide different. Rated low severity (CVSS 1.8). Public exploit code available and no vendor patch available.

CVE-2012-2422 Apr 25, 20:55 LOW POC Monitor

Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality. Rated low severity (CVSS 2.9). Public exploit code available and no vendor patch available.

CVE-2012-2421 Apr 25, 20:55 LOW Monitor

Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when. Rated low severity (CVSS 1.8). No vendor patch available.

CVE-2012-2420 Apr 25, 20:55 LOW POC Monitor

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow. Rated low severity (CVSS 1.8). Public exploit code available and no vendor patch available.

CVE-2012-2419 Apr 25, 20:55 LOW POC Monitor

Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used,. Rated low severity (CVSS 1.8). Public exploit code available and no vendor patch available.

CVE-2012-2418 Apr 25, 20:55 MEDIUM POC This Month

Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet. Rated medium severity (CVSS 6.8). Public exploit code available and no vendor patch available.