Home / 2025 Advisories Archive

2025 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
Medium	13 May 2025	13 May 2025	CPAI-2017-1959	CVE-2017-17664	Digium Asterisk Out of Bounds Write (CVE-2017-17664)
Medium	12 May 2025	12 May 2025	CPAI-2024-1645	CVE-2024-39932	Gogs Argument Injection (CVE-2024-39932)
Critical	12 May 2025	12 May 2025	CPAI-2024-1643	CVE-2024-24116	Ruijie RG-NBS2009G-P Authentication Bypass (CVE-2024-24116)
Critical	12 May 2025	12 May 2025	CPAI-2024-1642	CVE-2024-10081	CodeChecker Authentication Bypass (CVE-2024-10081)
Critical	12 May 2025	12 May 2025	CPAI-2023-2052	CVE-2023-41887	OpenRefine Remote Code Execution (CVE-2023-41887)
High	12 May 2025	12 May 2025	CPAI-2024-1639	CVE-2024-47962	Delta Electronics CNCSoft-G2 Remote Code Execution (CVE-2024-47962)
Medium	12 May 2025	12 May 2025	CPAI-2022-2215	CVE-2022-45402	Apache Airflow Open Redirect (CVE-2022-45402)
High	12 May 2025	12 May 2025	CPAI-2025-0252	CVE-2025-43864	React Router Denial of Service (CVE-2025-43864)
Critical	12 May 2025	12 May 2025	CPAI-2020-4305	CVE-2020-26214	Alerta Authentication Bypass (CVE-2020-26214)
High	20 Apr 2025	12 May 2025	CPAI-2024-1604	CVE-2024-45324	Fortinet Multiple Products Format String Injection (CVE-2024-45324)
Critical	15 Apr 2025	12 May 2025	CPAI-2025-0125		Sensitive Configuration File Disclosure
High	16 Mar 2025	12 May 2025	CPAI-2025-0094	CVE-2025-24799	GLPI SQL Injection (CVE-2025-24799)
High	11 May 2025	11 May 2025	CPAI-2025-0273	CVE-2025-32819 CVE-2025-32820 CVE-2025-32821	SonicWall SMA100 Remote Code Execution (CVE-2025-32819; CVE-2025-32820; CVE-2025-32821)
Critical	11 May 2025	11 May 2025	CPAI-2024-1637	CVE-2024-52961	Fortinet FortiSandbox Command Injection (CVE-2024-52961)
Critical	11 May 2025	11 May 2025	CPAI-2025-0263	CVE-2025-28137	TOTOLINK A810R Firmware Command Injection (CVE-2025-28137)
Critical	11 May 2025	11 May 2025	CPAI-2019-3280	CVE-2019-16932	WordPress Themeisle Visualizer Plugin Server-Side Request Forgery (CVE-2019-16932)
Critical	11 May 2025	11 May 2025	CPAI-2020-4307	CVE-2020-24881	OsTicket Server-Side Request Forgery (CVE-2020-24881)
Critical	27 Apr 2025	11 May 2025	CPAI-2025-0224	CVE-2025-34028	Commvault Command Center Remote Code Execution (CVE-2025-34028)
High	11 May 2025	11 May 2025	CPAI-2025-0202	CVE-2025-27423	Vim Command Injection (CVE-2025-27423)
Critical	8 May 2025	8 May 2025	CPAI-2025-0269	CVE-2025-2775 CVE-2025-2776 CVE-2025-2777	SysAid On-Premise XML External Entity Injection (CVE-2025-2775; CVE-2025-2776; CVE-2025-2777)
Critical	8 May 2025	8 May 2025	CPAI-2025-0268	CVE-2025-2778	SysAid On-Premise Command Injection (CVE-2025-2778)
Critical	8 May 2025	8 May 2025	CPAI-2024-1640	CVE-2024-11120 CVE-2024-6047	GeoVision Devices Command Injection (CVE-2024-11120; CVE-2024-6047)
High	4 May 2025	8 May 2025	CPAI-2023-2049	CVE-2023-44221	SonicWall SMA Command Injection (CVE-2023-44221)
High	8 May 2025	8 May 2025	CPAI-2024-1633	CVE-2024-13179	Ivanti Avalanche Directory Traversal (CVE-2024-13179)
Critical	8 May 2025	8 May 2025	CPAI-2019-3277	CVE-2019-17382	Zabbix Authentication Bypass (CVE-2019-17382)
Critical	8 May 2025	8 May 2025	CPAI-2021-2319	CVE-2021-43421	Studio-42 elFinder Arbitrary File Upload (CVE-2021-43421)
High	8 May 2025	8 May 2025	CPAI-2020-4306	CVE-2020-19364	OpenEMR Arbitrary File Upload (CVE-2020-19364)
High	29 Apr 2025	8 May 2025	CPAI-2025-0229	CVE-2025-3538	D-Link DI-8100 Buffer Overflow (CVE-2025-3538)
Critical	8 May 2025	8 May 2025	CPAI-2025-0213	CVE-2025-29659 CVE-2025-29660	Yi XY-3820 Remote Code Execution (CVE-2025-29659; CVE-2025-29660)
Critical	7 Apr 2025	8 May 2025	CPAI-2025-0168	CVE-2025-22457	Ivanti Buffer Overflow (CVE-2025-22457)
Critical	17 Mar 2025	7 May 2025	CPAI-2024-1459	CVE-2024-22660 CVE-2024-22662 CVE-2024-37631 CVE-2024-37632 CVE-2024-37633 CVE-2024-37634 CVE-2024-37635 CVE-2024-37637 CVE-2024-37639 CVE-2024-37640	TOTOLINK A3700R Stack Overflow (CVE-2024-22660; CVE-2024-22662; CVE-2024-37631; CVE-2024-37632; CVE-2024-37633; CVE-2024-37634; CVE-2024-37635; CVE-2024-37637; CVE-2024-37639; CVE-2024-37640)
High	7 May 2025	7 May 2025	CPAI-2024-1638	CVE-2024-7399	Samsung MagicINFO Remote Code Execution (CVE-2024-7399)
Medium	7 May 2025	7 May 2025	CPAI-2022-2214	CVE-2022-32206	Haxx Curl Denial of Service (CVE-2022-32206)
Critical	7 May 2025	7 May 2025	CPAI-2021-2321	CVE-2021-41649	Online Shopping System Advanced SQL Injection (CVE-2021-41649)
High	7 May 2025	7 May 2025	CPAI-2021-2320	CVE-2021-21251	OneDev Arbitrary File Write (CVE-2021-21251)
Critical	7 May 2025	7 May 2025	CPAI-2025-0192	CVE-2025-1661	WordPress HUSKY Plugin Path Traversal (CVE-2025-1661)
Critical	3 Feb 2025	7 May 2025	CPAI-2024-1293	CVE-2024-55591	Fortinet Multiple Products Authentication Bypass (CVE-2024-55591)
Medium	6 May 2025	6 May 2025	CPAI-2025-0258	CVE-2025-1103	D-Link DIR-823X Denial of Service (CVE-2025-1103)
Critical	6 May 2025	6 May 2025	CPAI-2023-2048	CVE-2023-42818 CVE-2023-43650 CVE-2023-46123	FIT2CLOUD JumpServer Brute Force Login Attempt (CVE-2023-42818; CVE-2023-43650; CVE-2023-46123)
Critical	6 May 2025	6 May 2025	CPAI-2023-2044	CVE-2023-5830	ColumbiaSoft Document Locator Server-Side Request Forgery (CVE-2023-5830)
Critical	14 Apr 2025	6 May 2025	CPAI-2025-0191	CVE-2025-3248	Langflow Remote Code Execution (CVE-2025-3248)
Critical	5 May 2025	5 May 2025	CPAI-2021-2318	CVE-2021-27670	Appspace Server-Side Request Forgery (CVE-2021-27670)
Critical	5 May 2025	5 May 2025	CPAI-2018-2914	CVE-2018-10931	Cobbler Improper Access Control (CVE-2018-10931)
Critical	5 May 2025	5 May 2025	CPAI-2021-2317	CVE-2021-37538	SmartDataSoft SmartBlog for PrestaShop SQL Injection (CVE-2021-37538)
Medium	5 May 2025	5 May 2025	CPAI-2024-1630	CVE-2024-44236	Apple MacOS Out of Bounds Write (CVE-2024-44236)
Critical	27 Apr 2025	5 May 2025	CPAI-2025-0245	CVE-2024-58136 CVE-2025-32432	Craft CMS Remote Code Execution (CVE-2024-58136; CVE-2025-32432)
Critical	5 May 2025	5 May 2025	CPAI-2024-1617	CVE-2024-56511	DataEase Directory Traversal (CVE-2024-56511)
Critical	20 Apr 2025	5 May 2025	CPAI-2024-1602	CVE-2023-51984 CVE-2024-33342	D-Link DIR-822 Command Injection (CVE-2023-51984; CVE-2024-33342)
Critical	8 Apr 2025	5 May 2025	CPAI-2023-2015	CVE-2023-51092 CVE-2023-51095	Tenda M3 Stack Overflow (CVE-2023-51092; CVE-2023-51095)
Critical	25 Mar 2025	5 May 2025	CPAI-2021-2302	CVE-2019-10955 CVE-2021-23385 CVE-2021-23393 CVE-2021-32618	Open Redirect Attempt (CVE-2019-10955; CVE-2021-23385; CVE-2021-23393; CVE-2021-32618)