WI
Vendor
Wibu
22
CVEs
0
On KEV
0
New 30D
Products
CO9.8
CodeMeter
Wibu
10 CVEs0 on KEV0 new
WI9.8
Wibukey
Wibu
6 CVEs0 on KEV0 new
CR9.8
Codemeter Runtime
Wibu
4 CVEs0 on KEV0 new
CW–
Codemeter Webadmin
Wibu
1 CVEs0 on KEV0 new
WR7.8
WibuKey Runtime
Wibu
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-37017 | CO CodeMeter Wibu | 7.8 | Jan 29 | CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path |
| CVE-2021-47810 | WR WibuKey Runtime Wibu | 7.8 | Jan 15 | WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path |
| CVE-2024-45182 | WI Wibukey Wibu | 5.5 | Sep 12 | An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to cause an arbitrary… |
| CVE-2024-45181 | WI Wibukey Wibu | 7.8 | Sep 12 | An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 |
| CVE-2023-3935 | CR Codemeter Runtime Wibu | 9.8 | Sep 13 | A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access… |
| CVE-2021-41057 | CR Codemeter Runtime Wibu | 7.1 | Nov 14 | In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissions |
| CVE-2021-20094 | CO Codemeter Wibu | 7.5 | Jun 16 | A denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a |
| CVE-2021-20093 | CO Codemeter Wibu | 9.1 | Jun 16 | A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a |
| CVE-2020-16233 | CO Codemeter Wibu | 7.5 | Sep 16 | An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data from the heap |
| CVE-2020-14519 | CO Codemeter Wibu | 7.5 | Sep 16 | This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including Version 7.0 or newer with the affected… |
| CVE-2020-14517 | CO Codemeter Wibu | 9.8 | Sep 16 | Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if CodeMeter Runtime is running as server)… |
| CVE-2020-14515 | CO Codemeter Wibu | 7.5 | Sep 16 | CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file signature checking mechanism, which allows… |
| CVE-2020-14513 | CO Codemeter Wibu | 7.5 | Sep 16 | CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted license file due to unverified length fields |
| CVE-2020-14509 | CO Codemeter Wibu | 9.8 | Sep 16 | Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields |
| CVE-2018-3989 | WI Wibukey Wibu | 5.5 | Feb 5 | An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400).A specially… |
| CVE-2018-3991 | WI Wibukey Wibu | 9.8 | Feb 5 | An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500 |
| CVE-2018-3990 | WI Wibukey Wibu | 7.8 | Feb 5 | An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400) |
| CVE-2017-13754 | CO Codemeter Wibu | 5.4 | Sep 7 | Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web… |
| CVE-2014-8419 | CR Codemeter Runtime Wibu | – | Nov 26 | Wibu-Systems CodeMeter Runtime before 5.20 uses weak permissions (read and write access for all users) for codemeter.exe, which allows local users to gain privileges via a Trojan… |
| CVE-2011-4057 | CR Codemeter Runtime Wibu | – | Jan 13 | Wibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions before 4.40 allows remote attackers to cause a denial of service (CodeMeter.exe crash) via certain… |
| CVE-2011-3689 | CW Codemeter Webadmin Wibu | – | Sep 27 | Cross-site scripting (XSS) vulnerability in Licenses.html in Wibu-Systems CodeMeter WebAdmin 3.30 and 4.30 allows remote attackers to inject arbitrary web script or HTML via the… |