Home / 2024 Advisories Archive

2024 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	20 Mar 2024	20 Mar 2024	CPAI-2021-2140		CVE-2021-40859	Auerswald COMpact 5500R Authentication Bypass (CVE-2021-40859)
Critical	20 Mar 2024	20 Mar 2024	CPAI-2014-2570		CVE-2014-9618	Netsweeper Client Filter Authentication Bypass (CVE-2014-9618)
Critical	20 Mar 2024	20 Mar 2024	CPAI-2014-2569		CVE-2014-9614	Netsweeper Hardcoded Credentials (CVE-2014-9614)
Medium	20 Mar 2024	20 Mar 2024	CPAI-2024-0125		CVE-2024-2123	WordPress Ultimate Member Plugin Cross-Site Scripting (CVE-2024-2123)
Medium	20 Mar 2024	20 Mar 2024	CPAI-2020-4153		CVE-2020-6308	SAP BusinessObjects Business Intelligence Platform Server-Side Request Forgery (CVE-2020-6308)
Critical	20 Mar 2024	20 Mar 2024	CPAI-2018-2718		CVE-2018-15534	Geutebrueck re_porter 16 Information Disclosure (CVE-2018-15534)
High	20 Mar 2024	20 Mar 2024	CPAI-2023-1587		CVE-2023-51587	Voltronic Power ViewPower Information Disclosure (CVE-2023-51587)
Critical	20 Mar 2024	20 Mar 2024	CPAI-2023-1585		CVE-2023-48085	Nagios XI Remote Code Execution (CVE-2023-48085)
Critical	20 Mar 2024	20 Mar 2024	CPAI-2024-0111		CVE-2024-21650	XWiki Remote Code Execution (CVE-2024-21650)
Critical	20 Mar 2024	20 Mar 2024	CPAI-2016-1292		CVE-2016-2345	DameWare Mini Remote Control Buffer Overflow (CVE-2016-2345)
Medium	20 Mar 2024	20 Mar 2024	CPAI-2022-1582		CVE-2022-30547	WWBN AVideo unzipDirectory ZIP Directory Traversal (CVE-2022-30547)
Medium	19 Mar 2024	19 Mar 2024	CPAI-2011-0745		CVE-2011-0959	Cisco Unified Operations Manager Cross-Site Scripting (CVE-2011-0959)
High	19 Mar 2024	19 Mar 2024	CPAI-2010-0734		CVE-2010-4367	Awstats Command Injection (CVE-2010-4367)
Critical	19 Mar 2024	19 Mar 2024	CPAI-2023-1583		CVE-2023-26612 CVE-2023-26616	D-Link DIR-823G Buffer Overflow (CVE-2023-26612; CVE-2023-26616)
Medium	19 Mar 2024	19 Mar 2024	CPAI-2023-1572		CVE-2023-22361	Seiko Skybridge MB-A110 Firmware Directory Traversal (CVE-2023-22361)
Medium	18 Mar 2024	18 Mar 2024	CPAI-2023-1596		CVE-2023-41474	Ivanti Avalanche Directory Traversal (CVE-2023-41474)
Medium	18 Mar 2024	18 Mar 2024	CPAI-2010-0739		CVE-2010-4172	Apache Tomcat Cross-Site Scripting (CVE-2010-4172)
Critical	12 Mar 2024	18 Mar 2024	CPAI-2023-1575		CVE-2023-46456	GL.iNET GL-AR300M Command Injection (CVE-2023-46456)
Critical	18 Mar 2024	18 Mar 2024	CPAI-2020-4147		CVE-2020-13638	rConfig Authentication Bypass (CVE-2020-13638)
Critical	18 Mar 2024	18 Mar 2024	CPAI-2024-0080		CVE-2024-22319	IBM Operational Decision Manager Remote Code Execution (CVE-2024-22319)
High	18 Mar 2024	18 Mar 2024	CPAI-2024-0078		CVE-2024-22320	IBM Operational Decision Manager Insecure Deserialization (CVE-2024-22320)
High	26 Feb 2024	18 Mar 2024	CPAI-2024-0074		CVE-2024-1708	ConnectWise ScreenConnect Remote Code Execution (CVE-2024-1708)
Medium	17 Mar 2024	17 Mar 2024	CPAI-2022-2039		CVE-2022-46300	VISAM VBASE Automation Base XML External Entity Injection (CVE-2022-46300)
High	17 Mar 2024	17 Mar 2024	CPAI-2023-1582		CVE-2023-50071	Sourcecodester Customer Support System SQL Injection (CVE-2023-50071)
High	14 Mar 2024	14 Mar 2024	CPAI-2018-2710		CVE-2018-1000600	Jenkins GitHub Plugin Server-Side Request Forgery (CVE-2018-1000600)
Critical	14 Mar 2024	14 Mar 2024	CPAI-2017-1836		CVE-2017-7925	Dahua Security Multiple Products Information Disclosure (CVE-2017-7925)
Critical	14 Mar 2024	14 Mar 2024	CPAI-2023-1578		CVE-2023-22480	FIT2CLOUD KubePi Information Disclosure (CVE-2023-22480)
Critical	14 Mar 2024	14 Mar 2024	CPAI-2021-2138		CVE-2021-20157 CVE-2021-20158	TRENDnet TEW-827DRU Authentication Bypass (CVE-2021-20157; CVE-2021-20158)
Critical	14 Mar 2024	14 Mar 2024	CPAI-2017-1835		CVE-2017-8229	Amcrest IPM-721S Authentication Bypass (CVE-2017-8229)
Critical	14 Mar 2024	14 Mar 2024	CPAI-2018-2707		CVE-2018-9161	Prisma Industriale Checkweigher PrismaWEB Information Disclosure (CVE-2018-9161)
Medium	13 Mar 2024	13 Mar 2024	CPAI-2024-0103		CVE-2024-22530	Allegra Directory Traversal (CVE-2024-22530)
Critical	13 Mar 2024	13 Mar 2024	CPAI-2023-1574		CVE-2023-46454	GL.iNET GL-AR300M Command Injection (CVE-2023-46454)
High	12 Mar 2024	13 Mar 2024	CPAI-2023-1576		CVE-2023-47464	GL.iNET GL-AX1800 Directory Traversal (CVE-2023-47464)
Medium	13 Mar 2024	13 Mar 2024	CPAI-2022-2032		CVE-2022-31898	GL iNet MTN300n Command Injection (CVE-2022-31898)
Critical	13 Mar 2024	13 Mar 2024	CPAI-2022-2031		CVE-2022-3184	Dataprobe iBoot-PDU Directory Traversal (CVE-2022-3184)
Critical	13 Mar 2024	13 Mar 2024	CPAI-2013-3912		CVE-2013-7471	D-Link DIR-300 Firmware Command Injection (CVE-2013-7471)
High	13 Mar 2024	13 Mar 2024	CPAI-2022-2030		CVE-2022-26259	Xiongmai DVR Devices Denial of Service (CVE-2022-26259)
High	13 Mar 2024	13 Mar 2024	CPAI-2021-2133		CVE-2021-41314	NETGEAR Multiple Products Authentication Bypass (CVE-2021-41314)
Critical	13 Mar 2024	13 Mar 2024	CPAI-2017-1810		CVE-2017-7577	XiongMai uc-httpd Directory Traversal (CVE-2017-7577)
High	13 Mar 2024	13 Mar 2024	CPAI-2021-2131		CVE-2021-20040	SonicWall SMA Directory Traversal (CVE-2021-20040)
High	13 Mar 2024	13 Mar 2024	CPAI-2021-2130		CVE-2021-26828	OpenPLC ScadaBR Arbitrary File Upload (CVE-2021-26828)
Critical	13 Mar 2024	13 Mar 2024	CPAI-2024-0082		CVE-2024-20931	Oracle WebLogic Server Information Disclosure (CVE-2024-20931)
High	13 Mar 2024	13 Mar 2024	CPAI-2018-2686		CVE-2018-13023	Xiaomi Mi Router Command Injection (CVE-2018-13023)
High	13 Mar 2024	13 Mar 2024	CPAI-2018-2685		CVE-2018-16130	Xiaomi Miwifi Command Injection (CVE-2018-16130)
Medium	13 Mar 2024	13 Mar 2024	CPAI-2021-2118		CVE-2021-31643	CHIYU Multiple Products Cross-Site Scripting (CVE-2021-31643)
Medium	13 Mar 2024	13 Mar 2024	CPAI-2021-2117		CVE-2021-31250	CHIYU Multiple Products Cross-Site Scripting (CVE-2021-31250)
High	12 Mar 2024	12 Mar 2024	CPAI-2024-0115	Microsoft CVE-2024-21433	CVE-2024-21433	Microsoft Windows Print Spooler Elevation of Privilege (CVE-2024-21433)
High	12 Mar 2024	12 Mar 2024	CPAI-2024-0094	Microsoft CVE-2024-26185	CVE-2024-26185	Microsoft Windows Compressed Folder Tampering (CVE-2024-26185)
High	12 Mar 2024	12 Mar 2024	CPAI-2024-0093	Microsoft CVE-2024-26182	CVE-2024-26182	Microsoft Windows Kernel Elevation of Privilege (CVE-2024-26182)
High	12 Mar 2024	12 Mar 2024	CPAI-2024-0092	Microsoft CVE-2024-26170	CVE-2024-26170	Microsoft Windows Composite Image File System (CimFS) Elevation of Privilege (CVE-2024-26170)