Home / 2024 Advisories Archive

2024 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
Critical	26 Mar 2024	26 Mar 2024	CPAI-2018-2729	CVE-2018-12634	CirCarLife Scada Information Disclosure (CVE-2018-12634)
Medium	26 Mar 2024	26 Mar 2024	CPAI-2018-2714	CVE-2018-8738	AirTies 5444 Firmware Cross-Site Scripting (CVE-2018-8738)
Medium	26 Mar 2024	26 Mar 2024	CPAI-2019-3165	CVE-2019-13505	WordPress DWBooster Appointment Hour Booking Plugin Cross-Site Scripting (CVE-2019-13505)
High	26 Mar 2024	26 Mar 2024	CPAI-2015-1599	CVE-2015-7297	Joomla! SQL Injection (CVE-2015-7297)
Medium	26 Mar 2024	26 Mar 2024	CPAI-2017-1825	CVE-2017-8514	Microsoft SharePoint Cross-Site Scripting (CVE-2017-8514)
High	25 Mar 2024	25 Mar 2024	CPAI-2024-0135	CVE-2024-27612	Numbas Editor Remote Code Execution (CVE-2024-27612)
High	25 Mar 2024	25 Mar 2024	CPAI-2023-1613	CVE-2023-31472	GL.iNET Devices Command Injection (CVE-2023-31472)
Critical	25 Mar 2024	25 Mar 2024	CPAI-2024-0129	CVE-2024-2044	pgAdmin Directory Traversal (CVE-2024-2044)
Critical	25 Mar 2024	25 Mar 2024	CPAI-2023-1609	CVE-2023-20048	Cisco Firepower Management Center Command Injection (CVE-2023-20048)
High	25 Mar 2024	25 Mar 2024	CPAI-2024-0126	CVE-2024-0692	SolarWinds Security Event Manager Insecure Deserialization (CVE-2024-0692)
Critical	25 Mar 2024	25 Mar 2024	CPAI-2023-1601	CVE-2023-23333	Contec Solarview Compact Firmware Command Injection (CVE-2023-23333)
Medium	25 Mar 2024	25 Mar 2024	CPAI-2023-1591	CVE-2023-50290	Apache Solr Information Disclosure (CVE-2023-50290)
Critical	24 Mar 2024	24 Mar 2024	CPAI-2024-0134		Generic Webshell Activity
High	24 Mar 2024	24 Mar 2024	CPAI-2015-1604	CVE-2015-0554	ADB P.DGA4001N Authentication Bypass (CVE-2015-0554)
High	24 Mar 2024	24 Mar 2024	CPAI-2024-0123		Neo-reGeorg Webshell
Critical	24 Mar 2024	24 Mar 2024	CPAI-2023-1595	CVE-2023-29665 CVE-2023-43235 CVE-2023-43241	D-Link DIR-823G Stack Overflow (CVE-2023-29665; CVE-2023-43235; CVE-2023-43241)
Critical	24 Mar 2024	24 Mar 2024	CPAI-2023-1594	CVE-2023-40041 CVE-2023-40042	TOTOLINK T10 Stack Overflow (CVE-2023-40041; CVE-2023-40042)
Critical	24 Mar 2024	24 Mar 2024	CPAI-2023-1588	CVE-2023-33735	D-Link DIR-846 Command Injection (CVE-2023-33735)
High	21 Mar 2024	21 Mar 2024	CPAI-2024-0131	CVE-2024-25153	Fortra FileCatalyst Workflow Directory Traversal (CVE-2024-25153)
Critical	21 Mar 2024	21 Mar 2024	CPAI-2023-1608	CVE-2023-4542	D-Link DAR-8000-10 SQL Injection (CVE-2023-4542)
Critical	21 Mar 2024	21 Mar 2024	CPAI-2021-2139	CVE-2021-33221	CommScope Ruckus IoT Improper Access Control (CVE-2021-33221)
High	20 Mar 2024	20 Mar 2024	CPAI-2023-1607	CVE-2023-7137	Client Details System SQL Injection (CVE-2023-7137)
Critical	20 Mar 2024	20 Mar 2024	CPAI-2021-2140	CVE-2021-40859	Auerswald COMpact 5500R Authentication Bypass (CVE-2021-40859)
Critical	20 Mar 2024	20 Mar 2024	CPAI-2014-2570	CVE-2014-9618	Netsweeper Client Filter Authentication Bypass (CVE-2014-9618)
Critical	20 Mar 2024	20 Mar 2024	CPAI-2014-2569	CVE-2014-9614	Netsweeper Hardcoded Credentials (CVE-2014-9614)
Medium	20 Mar 2024	20 Mar 2024	CPAI-2024-0125	CVE-2024-2123	WordPress Ultimate Member Plugin Cross-Site Scripting (CVE-2024-2123)
Medium	20 Mar 2024	20 Mar 2024	CPAI-2020-4153	CVE-2020-6308	SAP BusinessObjects Business Intelligence Platform Server-Side Request Forgery (CVE-2020-6308)
Critical	20 Mar 2024	20 Mar 2024	CPAI-2018-2718	CVE-2018-15534	Geutebrueck re_porter 16 Information Disclosure (CVE-2018-15534)
High	20 Mar 2024	20 Mar 2024	CPAI-2023-1587	CVE-2023-51587	Voltronic Power ViewPower Information Disclosure (CVE-2023-51587)
Critical	20 Mar 2024	20 Mar 2024	CPAI-2023-1585	CVE-2023-48085	Nagios XI Remote Code Execution (CVE-2023-48085)
Critical	20 Mar 2024	20 Mar 2024	CPAI-2024-0111	CVE-2024-21650	XWiki Remote Code Execution (CVE-2024-21650)
Critical	20 Mar 2024	20 Mar 2024	CPAI-2016-1292	CVE-2016-2345	DameWare Mini Remote Control Buffer Overflow (CVE-2016-2345)
Medium	20 Mar 2024	20 Mar 2024	CPAI-2022-1582	CVE-2022-30547	WWBN AVideo unzipDirectory ZIP Directory Traversal (CVE-2022-30547)
Medium	19 Mar 2024	19 Mar 2024	CPAI-2011-0745	CVE-2011-0959	Cisco Unified Operations Manager Cross-Site Scripting (CVE-2011-0959)
High	19 Mar 2024	19 Mar 2024	CPAI-2010-0734	CVE-2010-4367	Awstats Command Injection (CVE-2010-4367)
Critical	19 Mar 2024	19 Mar 2024	CPAI-2023-1583	CVE-2023-26612 CVE-2023-26616	D-Link DIR-823G Buffer Overflow (CVE-2023-26612; CVE-2023-26616)
Medium	19 Mar 2024	19 Mar 2024	CPAI-2023-1572	CVE-2023-22361	Seiko Skybridge MB-A110 Firmware Directory Traversal (CVE-2023-22361)
Medium	18 Mar 2024	18 Mar 2024	CPAI-2023-1596	CVE-2023-41474	Ivanti Avalanche Directory Traversal (CVE-2023-41474)
Medium	18 Mar 2024	18 Mar 2024	CPAI-2010-0739	CVE-2010-4172	Apache Tomcat Cross-Site Scripting (CVE-2010-4172)
Critical	12 Mar 2024	18 Mar 2024	CPAI-2023-1575	CVE-2023-46456	GL.iNET GL-AR300M Command Injection (CVE-2023-46456)
Critical	18 Mar 2024	18 Mar 2024	CPAI-2020-4147	CVE-2020-13638	rConfig Authentication Bypass (CVE-2020-13638)
Critical	18 Mar 2024	18 Mar 2024	CPAI-2024-0080	CVE-2024-22319	IBM Operational Decision Manager Remote Code Execution (CVE-2024-22319)
High	18 Mar 2024	18 Mar 2024	CPAI-2024-0078	CVE-2024-22320	IBM Operational Decision Manager Insecure Deserialization (CVE-2024-22320)
High	26 Feb 2024	18 Mar 2024	CPAI-2024-0074	CVE-2024-1708	ConnectWise ScreenConnect Remote Code Execution (CVE-2024-1708)
Medium	17 Mar 2024	17 Mar 2024	CPAI-2022-2039	CVE-2022-46300	VISAM VBASE Automation Base XML External Entity Injection (CVE-2022-46300)
High	17 Mar 2024	17 Mar 2024	CPAI-2023-1582	CVE-2023-50071	Sourcecodester Customer Support System SQL Injection (CVE-2023-50071)
High	14 Mar 2024	14 Mar 2024	CPAI-2018-2710	CVE-2018-1000600	Jenkins GitHub Plugin Server-Side Request Forgery (CVE-2018-1000600)
Critical	14 Mar 2024	14 Mar 2024	CPAI-2017-1836	CVE-2017-7925	Dahua Security Multiple Products Information Disclosure (CVE-2017-7925)
Critical	14 Mar 2024	14 Mar 2024	CPAI-2023-1578	CVE-2023-22480	FIT2CLOUD KubePi Information Disclosure (CVE-2023-22480)
Critical	14 Mar 2024	14 Mar 2024	CPAI-2021-2138	CVE-2021-20157 CVE-2021-20158	TRENDnet TEW-827DRU Authentication Bypass (CVE-2021-20157; CVE-2021-20158)