2024 Advisories Archive

Severity Date Published Date Updated Check Point Reference Source Industry Reference Description
High 12 Mar 2024 12 Mar 2024 CPAI-2024-0091 Microsoft CVE-2024-21437 CVE-2024-21437
Microsoft Windows Graphics Component Elevation of Privilege (CVE-2024-21437)
High 12 Mar 2024 12 Mar 2024 CPAI-2024-0090 Microsoft CVE-2024-26160 CVE-2024-26160
Microsoft Windows Cloud Files Mini Filter Driver Information Disclosure (CVE-2024-26160)
High 12 Mar 2024 12 Mar 2024 CPAI-2023-1580 CVE-2023-36498
CVE-2023-42664
CVE-2023-43482
CVE-2023-46683
CVE-2023-47167
CVE-2023-47209
CVE-2023-47617
CVE-2023-47618
TP-Link ER7206 Command Injection (CVE-2023-36498; CVE-2023-42664; CVE-2023-43482; CVE-2023-46683; CVE-2023-47167; CVE-2023-47209; CVE-2023-47617; CVE-2023-47618)
Critical 12 Mar 2024 12 Mar 2024 CPAI-2018-2708 CVE-2018-16167
JPCERT LogonTracer Command Injection (CVE-2018-16167)
Medium 12 Mar 2024 12 Mar 2024 CPAI-2024-0097 CVE-2024-22506
Allegra Insecure Deserialization (CVE-2024-22506)
Medium 12 Mar 2024 12 Mar 2024 CPAI-2024-0096 CVE-2024-22241
VMware Aria Operations for Networks Cross-Site Scripting (CVE-2024-22241)
High 12 Mar 2024 12 Mar 2024 CPAI-2023-1554 CVE-2023-6187
WordPress Stranger Studios Paid Memberships Pro Arbitrary File Upload (CVE-2023-6187)
Critical 12 Mar 2024 12 Mar 2024 CPAI-2021-2121 CVE-2021-38454
Moxa MXview Directory Traversal (CVE-2021-38454)
Critical 12 Mar 2024 12 Mar 2024 CPAI-2018-2681 CVE-2018-3811
WordPress Oturia Smart Google Code Inserter Plugin SQL Injection (CVE-2018-3811)
High 12 Mar 2024 12 Mar 2024 CPAI-2023-1536 CVE-2023-7002
WordPress BackupBliss Backup Migration Plugin Command Injection (CVE-2023-7002)
Critical 11 Mar 2024 11 Mar 2024 CPAI-2023-1579 CVE-2023-22463
FIT2CLOUD KubePi Authentication Bypass (CVE-2023-22463)
Critical 11 Mar 2024 11 Mar 2024 CPAI-2024-0109 Stored Cross-Site Scripting in SVG Upload
High 11 Mar 2024 11 Mar 2024 CPAI-2022-2033 CVE-2022-35870
Inductive Automation Ignition Insecure Deserialization (CVE-2022-35870)
High 11 Mar 2024 11 Mar 2024 CPAI-2024-0079 watchTowr Security Scanner
Critical 10 Mar 2024 10 Mar 2024 CPAI-2021-2135 CVE-2021-38540
Apache Airflow Authentication Bypass (CVE-2021-38540)
Critical 29 Feb 2024 10 Mar 2024 CPAI-2023-1564 CVE-2023-46453
CVE-2023-50919
GL.iNet Devices SQL Injection (CVE-2023-46453; CVE-2023-50919)
Critical 10 Mar 2024 10 Mar 2024 CPAI-2018-2684 CVE-2018-1207
Dell EMC Remote Code Execution (CVE-2018-1207)
Critical 7 Mar 2024 7 Mar 2024 CPAI-2022-2034 CVE-2022-45933
KubeView Information Disclosure (CVE-2022-45933)
High 7 Mar 2024 7 Mar 2024 CPAI-2023-1568 CVE-2023-40000
WordPress LiteSpeed Cache Plugin Authentication Bypass (CVE-2023-40000)
Critical 7 Mar 2024 7 Mar 2024 CPAI-2023-1567 CVE-2023-30261
OpenWB Command Injection (CVE-2023-30261)
Critical 7 Mar 2024 7 Mar 2024 CPAI-2023-1565 CVE-2023-25279
D-Link DIR-820L Command Injection (CVE-2023-25279)
Critical 11 Jan 2024 7 Mar 2024 CPAI-2024-0013 UTA0178 Webshell Activity
High 6 Mar 2024 6 Mar 2024 CPAI-2024-0106 CVE-2024-27199
JetBrains TeamCity Path Traversal (CVE-2024-27199)
Critical 18 Jan 2024 6 Mar 2024 CPAI-2021-2078 CVE-2019-13101
CVE-2021-42627
D-Link Routers Authentication Bypass (CVE-2019-13101; CVE-2021-42627)
High 26 Feb 2024 6 Mar 2024 CPAI-2020-4091 CVE-2020-9490
Apache HTTP Server Request Smuggling (CVE-2020-9490)
Medium 6 Mar 2024 6 Mar 2024 CPAI-2011-0743 CVE-2011-1610
Cisco Unified Communications Manager SQL Injection (CVE-2011-1610)
Critical 6 Mar 2024 6 Mar 2024 CPAI-2020-4142 CVE-2020-35951
WordPress Quiz and Survey Master Plugin Arbitrary File Deletion (CVE-2020-35951)
Critical 6 Mar 2024 6 Mar 2024 CPAI-2022-2026 CVE-2022-26148
Grafana Information Disclosure (CVE-2022-26148)
High 13 Feb 2024 6 Mar 2024 CPAI-2024-0029 Microsoft CVE-2024-21338 CVE-2024-21338
Microsoft Windows Kernel Elevation of Privilege (CVE-2024-21338)
Critical 5 Mar 2024 5 Mar 2024 CPAI-2020-4145 CVE-2020-8771
WordPress Time Capsule Plugin Authentication Bypass (CVE-2020-8771)
Critical 5 Mar 2024 5 Mar 2024 CPAI-2020-4144 CVE-2020-7136
HPE Smart Update Manager Remote Unauthorized Access (CVE-2020-7136)
High 4 Mar 2024 4 Mar 2024 CPAI-2017-1834 CVE-2017-3599
Oracle MySQL Integer Overflow (CVE-2017-3599)
High 4 Mar 2024 4 Mar 2024 CPAI-2023-1548 CVE-2023-5482
Google Chrome Out of Bounds Write (CVE-2023-5482)
High 29 Feb 2024 29 Feb 2024 CPAI-2023-1563 CVE-2023-50445
GL.iNet Devices Command Injection (CVE-2023-50445)
Critical 29 Feb 2024 29 Feb 2024 CPAI-2023-1555 CVE-2023-24138
CVE-2023-24139
CVE-2023-24140
CVE-2023-24141
CVE-2023-24142
CVE-2023-24143
CVE-2023-24144
CVE-2023-24145
CVE-2023-24146
CVE-2023-24148
CVE-2023-24160
CVE-2023-24161
TOTOLINK CA300-PoE Command Injection (CVE-2023-24138; CVE-2023-24139; CVE-2023-24140; CVE-2023-24141; CVE-2023-24142; CVE-2023-24143; CVE-2023-24144; CVE-2023-24145; CVE-2023-24146; CVE-2023-24148; CVE-2023-24160; CVE-2023-24161)
High 29 Feb 2024 29 Feb 2024 CPAI-2024-0069 TOTOLINK LR1200GB Authentication Bypass
Critical 29 Feb 2024 29 Feb 2024 CPAI-2021-2110 CVE-2021-22707
Schneider Electric Multiple Products Hardcoded Credentials (CVE-2021-22707)
Medium 28 Feb 2024 28 Feb 2024 CPAI-2023-1553 CVE-2023-0050
GitLab Cross-Site Scripting (CVE-2023-0050)
Critical 28 Feb 2024 28 Feb 2024 CPAI-2023-1549 CVE-2023-32564
Ivanti Avalanche Unrestricted File Upload (CVE-2023-32564)
High 28 Feb 2024 28 Feb 2024 CPAI-2024-0071 CVE-2024-24824
Graylog Remote Code Execution (CVE-2024-24824)
Critical 28 Feb 2024 28 Feb 2024 CPAI-2022-2025 CVE-2022-0349
WordPress WPDeveloper NotificationX Plugin SQL Injection (CVE-2022-0349)
Critical 28 Feb 2024 28 Feb 2024 CPAI-2021-2126 CVE-2021-42887
TOTOLINK EX1200T Authentication Bypass (CVE-2021-42887)
Critical 28 Feb 2024 28 Feb 2024 CPAI-2020-4140 CVE-2020-24391
Mongo-Express Remote Code Execution (CVE-2020-24391)
Critical 28 Feb 2024 28 Feb 2024 CPAI-2021-2124 CVE-2021-35064
KramerAV VIAWare Privilege Escalation (CVE-2021-35064)
Medium 28 Feb 2024 28 Feb 2024 CPAI-2022-2023 CVE-2022-27665
Progress Server Cross-Site Scripting (CVE-2022-27665)
Critical 28 Feb 2024 28 Feb 2024 CPAI-2022-2022 CVE-2022-48323
Sunlogin Sunflower Directory Traversal (CVE-2022-48323)
Medium 28 Feb 2024 28 Feb 2024 CPAI-2020-4139 CVE-2020-3984
VMware SD-WAN Orchestrator SQL Injection (CVE-2020-3984)
Critical 28 Feb 2024 28 Feb 2024 CPAI-2023-1544 CVE-2023-39143
PaperCut Directory Traversal (CVE-2023-39143)
High 28 Feb 2024 28 Feb 2024 CPAI-2020-4138 CVE-2020-4000
VMware SD-WAN Orchestrator Directory Traversal (CVE-2020-4000)
High 28 Feb 2024 28 Feb 2024 CPAI-2019-3162 CVE-2019-16997
Metinfo SQL Injection (CVE-2019-16997)
×
  Feedback
This website uses cookies for its functionality and for analytics and marketing purposes. By continuing to use this website, you agree to the use of cookies. For more information, please read our Cookies Notice.
OK