Home / 2025 Advisories Archive

2025 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	15 Apr 2025	24 Apr 2025	CPAI-2025-0193	CVE-2025-3102	WordPress OttoKit Plugin Authentication Bypass (CVE-2025-3102)
High	24 Apr 2025	24 Apr 2025	CPAI-2024-1614	CVE-2024-9054	Microchip TimeProvider 4100 Command Injection (CVE-2024-9054)
Medium	24 Apr 2025	24 Apr 2025	CPAI-2024-1613	CVE-2024-43686	Microchip TimeProvider 4100 Cross-Site Scripting (CVE-2024-43686)
High	24 Apr 2025	24 Apr 2025	CPAI-2024-1612	CVE-2024-6119	OpenSSL Denial of Service (CVE-2024-6119)
Medium	24 Apr 2025	24 Apr 2025	CPAI-2020-4303	CVE-2020-8143	Revive Adserver Open Redirect (CVE-2020-8143)
High	24 Apr 2025	24 Apr 2025	CPAI-2017-1957	CVE-2017-7696	SAP AS JAVA SSO Authentication Library Denial of Service (CVE-2017-7696)
Critical	24 Apr 2025	24 Apr 2025	CPAI-2021-2314	CVE-2021-20045	SonicWall Sma 200 Firmware Buffer Overflow (CVE-2021-20045)
High	24 Apr 2025	24 Apr 2025	CPAI-2023-2036	CVE-2023-22047	Oracle PeopleSoft Enterprise Remote Code Execution (CVE-2023-22047)
High	24 Apr 2025	24 Apr 2025	CPAI-2021-2311	CVE-2021-20044	SonicWall Sma 200 Firmware Command Injection (CVE-2021-20044)
Critical	24 Apr 2025	24 Apr 2025	CPAI-2021-2307	CVE-2021-22175 CVE-2021-22214 CVE-2021-39935	GitLab Server-Side Request Forgery (CVE-2021-22175; CVE-2021-22214; CVE-2021-39935)
Medium	24 Apr 2025	24 Apr 2025	CPAI-2022-2206	CVE-2022-1058	Gitea Open Redirect (CVE-2022-1058)
Critical	24 Apr 2025	24 Apr 2025	CPAI-2024-1583	CVE-2024-38289	R-HUB TurboMeeting SQL Injection (CVE-2024-38289)
Critical	7 Apr 2025	24 Apr 2025	CPAI-2025-0168	CVE-2025-22457	Ivanti Buffer Overflow (CVE-2025-22457)
High	17 Jan 2025	24 Apr 2025	CPAI-2024-1224	CVE-2024-49113	Microsoft Windows LDAP Denial of Service (CVE-2024-49113)
High	23 Apr 2025	23 Apr 2025	CPAI-2017-1956	CVE-2017-2827 CVE-2017-2828 CVE-2017-2832 CVE-2017-2833 CVE-2017-2841 CVE-2017-2842 CVE-2017-2843 CVE-2017-2844 CVE-2017-2845 CVE-2017-2846 CVE-2017-2847 CVE-2017-2848	Foscam C1 Command Injection (CVE-2017-2827; CVE-2017-2828; CVE-2017-2832; CVE-2017-2833; CVE-2017-2841; CVE-2017-2842; CVE-2017-2843; CVE-2017-2844; CVE-2017-2845; CVE-2017-2846; CVE-2017-2847; CVE-2017-2848)
Critical	23 Apr 2025	23 Apr 2025	CPAI-2023-2035	CVE-2023-7095	TOTOLINK A7100RU Buffer Overflow (CVE-2023-7095)
High	23 Apr 2025	23 Apr 2025	CPAI-2023-2034	CVE-2023-50780	Apache ActiveMQ Artemis Remote Code Execution (CVE-2023-50780)
Critical	23 Apr 2025	23 Apr 2025	CPAI-2023-2033	CVE-2023-36177	Badaix Snapcast Remote Code Execution (CVE-2023-36177)
High	23 Apr 2025	23 Apr 2025	CPAI-2025-0198	CVE-2025-30066	Tj-Actions Changed-Files Information Disclosure (CVE-2025-30066)
Critical	16 Mar 2025	23 Apr 2025	CPAI-2025-0090	CVE-2025-1316	Edimax Multiple Products Command Injection (CVE-2025-1316)
High	22 Apr 2025	22 Apr 2025	CPAI-2024-1606	CVE-2024-44871	MoziloCMS Arbitrary File Upload (CVE-2024-44871)
Critical	22 Apr 2025	22 Apr 2025	CPAI-2024-1600	CVE-2024-12084	Rsync Buffer Overflow (CVE-2024-12084)
Medium	22 Apr 2025	22 Apr 2025	CPAI-2024-1597	CVE-2024-44176	Apple Multiple Products Denial of Service (CVE-2024-44176)
Medium	22 Apr 2025	22 Apr 2025	CPAI-2020-4302	CVE-2020-8264	Ruby on Rails Cross-Site Scripting (CVE-2020-8264)
Medium	22 Apr 2025	22 Apr 2025	CPAI-2021-2306	CVE-2021-29490	Jellyfin Server-Side Request Forgery (CVE-2021-29490)
High	22 Apr 2025	22 Apr 2025	CPAI-2021-2305	CVE-2021-21311	Adminer Server-Side Request Forgery (CVE-2021-21311)
High	22 Apr 2025	22 Apr 2025	CPAI-2025-0194	CVE-2025-3539 CVE-2025-3540 CVE-2025-3541 CVE-2025-3542 CVE-2025-3543 CVE-2025-3544 CVE-2025-3545 CVE-2025-3546	H3C Magic Series Command Injection (CVE-2025-3539; CVE-2025-3540; CVE-2025-3541; CVE-2025-3542; CVE-2025-3543; CVE-2025-3544; CVE-2025-3545; CVE-2025-3546)
Critical	20 Feb 2025	22 Apr 2025	CPAI-2024-1410	CVE-2024-10811 CVE-2024-13159 CVE-2024-13160 CVE-2024-13161	Ivanti Endpoint Manager Path Traversal (CVE-2024-10811; CVE-2024-13159; CVE-2024-13160; CVE-2024-13161)
High	21 Apr 2025	21 Apr 2025	CPAI-2024-1601	CVE-2024-12849	WordPress Error Log Viewer Plugin Arbitrary File Read (CVE-2024-12849)
Critical	21 Apr 2025	21 Apr 2025	CPAI-2024-1589	CVE-2024-37843	Craft CMS SQL Injection (CVE-2024-37843)
High	31 Mar 2025	21 Apr 2025	CPAI-2025-0135	CVE-2025-24054	Microsoft Windows NTLM Relay (CVE-2025-24054)
Medium	20 Apr 2025	20 Apr 2025	CPAI-2024-1605	CVE-2024-45598	Cacti Remote Code Execution (CVE-2024-45598)
Critical	20 Apr 2025	20 Apr 2025	CPAI-2024-1604	CVE-2024-45324	Fortinet FortiOS Format String (CVE-2024-45324)
High	20 Apr 2025	20 Apr 2025	CPAI-2021-2310	CVE-2021-20041	SonicWall Sma 200 Firmware Authentication Bypass (CVE-2021-20041)
Critical	20 Apr 2025	20 Apr 2025	CPAI-2021-2309	CVE-2021-20042	SonicWall Sma 200 Firmware Authentication Bypass (CVE-2021-20042)
High	20 Apr 2025	20 Apr 2025	CPAI-2024-1602	CVE-2024-33342	D-Link DIR-822 Command Injection (CVE-2024-33342)
Medium	20 Apr 2025	20 Apr 2025	CPAI-2022-2207	CVE-2022-1045	Trudesk Arbitrary File Upload (CVE-2022-1045)
High	20 Apr 2025	20 Apr 2025	CPAI-2025-0196	CVE-2025-25291	SAML-Toolkits ruby-saml Authentication Bypass (CVE-2025-25291)
Critical	20 Apr 2025	20 Apr 2025	CPAI-2022-2204	CVE-2022-24310	Schneider Electric Interactive Graphical SCADA System Integer Overflow (CVE-2022-24310)
High	20 Apr 2025	20 Apr 2025	CPAI-2024-1579	CVE-2024-31449	Redis Buffer Overflow (CVE-2024-31449)
Medium	20 Apr 2025	20 Apr 2025	CPAI-2024-1530	CVE-2024-40777	Apple Multiple Products Out-Of-Bounds Access (CVE-2024-40777)
Critical	20 Apr 2025	20 Apr 2025	CPAI-2024-1452	CVE-2024-47009	Ivanti Avalanche Authentication Bypass (CVE-2024-47009)
Medium	17 Apr 2025	17 Apr 2025	CPAI-2025-0195	CVE-2025-1758	Kemp LoadMaster Buffer Overflow (CVE-2025-1758)
High	17 Apr 2025	17 Apr 2025	CPAI-2023-2030	CVE-2023-36969	CMS Made Simple Arbitrary File Upload (CVE-2023-36969)
Critical	12 Mar 2025	17 Apr 2025	CPAI-2025-0077		Argument Injection Over HTTP
Critical	2 Feb 2025	17 Apr 2025	CPAI-2024-1351	CVE-2024-53704	SonicWall SonicOS Authentication Bypass (CVE-2024-53704)
Medium	16 Apr 2025	16 Apr 2025	CPAI-2019-3273	CVE-2019-13068	Grafana Cross-Site Scripting (CVE-2019-13068)
Critical	16 Apr 2025	16 Apr 2025	CPAI-2024-1590	CVE-2024-48307	JeecgBoot SQL Injection (CVE-2024-48307)
Critical	16 Apr 2025	16 Apr 2025	CPAI-2024-1587	CVE-2024-24767	IceWhale CasaOS Brute Force Login Attempt (CVE-2024-24767)
Critical	6 Feb 2025	16 Apr 2025	CPAI-2024-1321	CVE-2018-3760 CVE-2021-25864 CVE-2024-48914 CVE-2025-2264	Static Files Folders Directory Traversal (CVE-2018-3760; CVE-2021-25864; CVE-2024-48914; CVE-2025-2264)