Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters.
Product
tiny software tiny personal firewall vulnerabilities
3 published CVES affecting tiny software tiny personal firewall, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Latest tiny software tiny personal firewall CVEs
Newest publication first
-
LowCVSS 2.1 EPSS 0.76% Public exploit
-
MediumCVSS 5.0 EPSS 1.6%
Tiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to cause a denial of service (crash) by via SYN, UDP, ICMP and TCP portscans when the administrator selects the Log tab of the Personal Firewall Agent module.
-
MediumCVSS 4.6 EPSS 0.40%
Tiny Personal Firewall (TPF) 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which could allow an attacker with physical access to the machine to hide activities or bypass access restrictions.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.