Home / 2013 Advisories Archive

2013 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
Critical	20 Oct 2013	20 Oct 2013	CPAI-2013-2985	CVE-2011-2506	PhpMyAdmin SESSION Superglobal Remote Code Injection (CVE-2011-2506)
High	15 Oct 2013	16 Oct 2013	CPAI-2013-3480	CVE-2013-3178	Microsoft Silverlight Null Pointer Dereference Code Execution (MS13-052; CVE-2013-3178)
Critical	19 Aug 2013	14 Oct 2013	CPAI-2013-2868	CVE-2012-4244 CVE-2013-4854	ISC BIND RDATA Handling Assertion Failure Denial of Service (CVE-2012-4244; CVE-2013-4854)
High	27 Aug 2013	14 Oct 2013	CPAI-2013-2891	CVE-2013-2367	HP SiteScope SOAP Call runOMAgentCommand Command Injection (CVE-2013-2367)
High	7 Oct 2013	13 Oct 2013	CPAI-2013-2977	CVE-2010-4228	Novell Netware FTP Server DELE Command Stack Buffer Overflow (CVE-2010-4228)
Critical	13 Oct 2013	13 Oct 2013	CPAI-2013-2969	CVE-2011-1772	Apache Struts XWork Error Page Multiple Cross-Site Scripting (CVE-2011-1772)
High	8 Oct 2013	10 Oct 2013	CPAI-2013-2983	CVE-2013-3895	Microsoft SharePoint Server Parameter Injection (MS13-084; CVE-2013-3895)
High	8 Oct 2013	8 Oct 2013	CPAI-2013-2978	CVE-2013-3891	Microsoft Word File Parsing Memory Corruption (MS13-086; CVE-2013-3891)
High	8 Oct 2013	8 Oct 2013	CPAI-2013-2911	CVE-2013-3861	Microsoft Internet Explorer Javascript Runtime Denial Of Service (MS13-082; CVE-2013-3861)
Critical	16 Sep 2013	7 Oct 2013	CPAI-2013-2942	CVE-2005-1174	MIT Kerberos V5 KDC TCP Handling Denial of Service (CVE-2005-1174)
High	6 Oct 2013	6 Oct 2013	CPAI-2013-2949	CVE-2013-2121	Foreman Red Hat OpenStack bookmarks Code Injection (CVE-2013-2121)
High	6 Oct 2013	6 Oct 2013	CPAI-2013-2953	CVE-2012-3748	Apple Safari Heap Buffer Overflow (CVE-2012-3748)
Critical	17 Jul 2013	2 Oct 2013	CPAI-2013-2491	CVE-2013-4123	Squid HTTP Host Header Port Handling Denial of Service (CVE-2013-4123)
Critical	13 Aug 2013	1 Oct 2013	CPAI-2013-2753	CVE-2013-3347	Adobe Flash Player PCM Buffer Integer Overflow (APSB13-17; CVE-2013-3347)
High	22 Sep 2013	29 Sep 2013	CPAI-2013-2946		PineApp Mail-SeCure conflivelog.pl Command Injection
Critical	29 Sep 2013	29 Sep 2013	CPAI-2013-2963	CVE-2013-4635	PHP SdnToJewish Function Integer Overflow (CVE-2013-4635)
High	20 May 2013	18 Sep 2013	CPAI-2013-1831	CVE-2013-2550	Adobe Acrobat Reader Use-after-closed Sandbox Security Bypass (APSB13-15; CVE-2013-2550)
Critical	13 Aug 2013	18 Sep 2013	CPAI-2013-2752	CVE-2013-3345	Adobe Flash Player Parameter Memory Corruption (APSB13-17; CVE-2013-3345)
High	10 Sep 2013	18 Sep 2013	CPAI-2013-2926	CVE-2013-3852	Microsoft Word Memory Corruption (MS13-072: CVE-2013-3852)
High	10 Sep 2013	18 Sep 2013	CPAI-2013-2927	CVE-2013-3854	Microsoft Word Memory Corruption (MS13-072: CVE-2013-3854)
High	16 Sep 2013	17 Sep 2013	CPAI-2013-2940		PineApp Mail-SeCure confpremenu.php Install License Command Injection
Critical	19 Sep 2013	17 Sep 2013	CPAI-2013-2943	CVE-2013-3928	Chasys Draw IES BMP Buffer Overflow (CVE-2013-3928)
High	30 Jul 2013	16 Sep 2013	CPAI-2013-2512	CVE-2013-4883	McAfee ePolicy Orchestrator Multiple Cross Site Scripting (CVE-2013-4883)
Critical	15 Sep 2013	15 Sep 2013	CPAI-2013-2936	CVE-2010-4740	Scada Engine BACnet OPC Client SCADA Remote Code Execution (CVE-2010-4740)
N/A	22 Sep 2013	15 Sep 2013	CPAI-2013-2937	CVE-2012-0006	Multiple DNS NO SUCH NAME Error Responses (CVE-2012-0006)
High	10 Sep 2013	10 Sep 2013	CPAI-2013-2928	CVE-2013-3850	Microsoft Word Memory Corruption (MS13-072: CVE-2013-3850)
High	10 Sep 2013	10 Sep 2013	CPAI-2013-2925	CVE-2013-3856	Microsoft Word Memory Corruption (MS13-072: CVE-2013-3856)
High	10 Sep 2013	10 Sep 2013	CPAI-2013-2895	CVE-2013-0810	Microsoft Windows Theme File Remote Code Execution (MS13-071; CVE-2013-0810)
High	10 Sep 2013	10 Sep 2013	CPAI-2013-2914	CVE-2013-3158	Microsoft Excel Read Access Violation Remote Code Execution (MS13-073; CVE-2013-3158)
Critical	10 Sep 2013	10 Sep 2013	CPAI-2013-2909	CVE-2013-3204	Microsoft Internet Explorer Memory Corruption (MS13-069: CVE-2013-3204)
High	10 Sep 2013	10 Sep 2013	CPAI-2013-2907	CVE-2013-3180	Microsoft SharePoint POST Cross-site Scripting (MS13-067; CVE-2013-3180)
Critical	25 Aug 2013	9 Sep 2013	CPAI-2013-2889		PineApp Mail-SeCure ldapsyncnow.php Remote Command Execution
Critical	28 Aug 2013	9 Sep 2013	CPAI-2013-2894	CVE-2013-4248	PHP SSL Certificate Validation Security Bypass (CVE-2013-4248)
High	25 Jul 2013	8 Sep 2013	CPAI-2013-1880	CVE-2013-2020	ClamAV UPX File PE parsing Memory Access Error (CVE-2013-2020)
Critical	29 Aug 2013	3 Sep 2013	CPAI-2013-2906	CVE-2013-2110	PHP php_quot_print_encode Heap Buffer Overflow - Improved Performance (CVE-2013-2110)
Medium	21 Aug 2013	25 Aug 2013	CPAI-2013-2886	CVE-2013-2370	HP LoadRunner lrFileIOService ActiveX Control Input Validation Error (CVE-2013-2370)
Critical	22 Aug 2013	22 Aug 2013	CPAI-2013-2888	CVE-2011-3495 CVE-2011-3496 CVE-2011-3497	Measuresoft ScadaPro Multiple Command Directory Traversal Code Execution (CVE-2011-3495; CVE-2011-3496; CVE-2011-3497)
High	20 Aug 2013	21 Aug 2013	CPAI-2013-1815	CVE-2013-1305	Microsoft Windows HTTP.sys Denial of Service (MS13-039) - Improved Performance (CVE-2013-1305)
Critical	13 Aug 2013	19 Aug 2013	CPAI-2013-2521	CVE-2013-3183	Microsoft Windows ICMPv6 Router Advertisement Denial of Service (MS13-065; CVE-2013-3183)
Critical	12 Aug 2013	18 Aug 2013	CPAI-2013-2747	CVE-2013-4882	McAfee ePolicy Orchestrator UID Multiple SQL Injection (CVE-2013-4882)
Critical	11 Aug 2013	15 Aug 2013	CPAI-2013-2544		PineApp Mail-SeCure test_li_connection.php Command Injection
N/A	25 Aug 2013	15 Aug 2013	CPAI-2013-2757		Java JAR Files Download
Critical	13 Aug 2013	13 Aug 2013	CPAI-2013-2530	CVE-2013-3131 CVE-2013-3134	Microsoft .NET Framework Array Access Violation (MS13-052; CVE-2013-3131; CVE-2013-3134)
High	30 Jun 2013	12 Aug 2013	CPAI-2013-1916	CVE-2012-1533	Sun Java Web Start Double Quote Injection (CVE-2012-1533)
High	11 Aug 2013	12 Aug 2013	CPAI-2013-2543	CVE-2013-2463	Oracle Java sun.awt.image.ImagingLib.lookupByteBI Buffer Overflow (CVE-2013-2463)
High	6 Aug 2013	11 Aug 2013	CPAI-2013-2533	CVE-2012-6081	MoinMoin twikidraw Action Directory Traversal (CVE-2012-6081)
High	6 Aug 2013	11 Aug 2013	CPAI-2013-2534	CVE-2013-3482	ERS Viewer 2013 ERS File Handling Buffer Overflow (CVE-2013-3482)
High	6 Aug 2013	6 Aug 2013	CPAI-2013-2529		SugarCRM unserialize() PHP Code Execution
High	6 Jun 2013	5 Aug 2013	CPAI-2013-2523	CVE-2013-4615	Canon Wireless Printer Denial Of Service (CVE-2013-4615)
High	4 Mar 2013	30 Jul 2013	CPAI-2013-1334	CVE-2012-0419	Novell GroupWise HTTP Interfaces Arbitrary File Retrieval (CVE-2012-0419)