Vulnerabilities > Intuit > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-07-09 CVE-2018-14833 Improper Access Control vulnerability in Intuit Lacerte
Intuit Lacerte 2017 has Incorrect Access Control.
network
intuit CWE-284
4.3
2012-09-06 CVE-2010-5198 Unspecified vulnerability in Intuit Quickbooks 2010
Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse (1) dbicudtx11.dll, (2) mfc90enu.dll, or (3) mfc90loc.dll file in the current working directory, as demonstrated by a directory that contains a .des, .qbo, or .qpg file.
local
intuit
6.9
2012-04-25 CVE-2012-2418 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Intuit Quickbooks
Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a URI with a % (percent) character as its (1) last or (2) second-to-last character.
high complexity
intuit CWE-119
6.8
2001-06-18 CVE-2001-0465 Information Disclosure vulnerability in Turbo Tax
TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow local users to obtain sensitive information.
local
low complexity
intuit
4.6