Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	31 Mar 2014	30 Aug 2023	CPAI-2014-1178			Nikto Security Scanner
High	9 Nov 2014	24 Aug 2023	CPAI-2014-1985	HP HPSBMU03110	CVE-2014-2635 CVE-2014-2636 CVE-2014-2637	HP Sprinter Memory Corruption (CVE-2014-2635; CVE-2014-2636; CVE-2014-2637)
Critical	26 May 2014	16 Aug 2023	CPAI-2014-1570		CVE-2022-30814 CVE-2022-30816 CVE-2022-31061 CVE-2022-32007 CVE-2022-32025 CVE-2022-32026 CVE-2022-32028 CVE-2022-38627 CVE-2022-40049 CVE-2022-44137 CVE-2022-45030 CVE-2022-46124 CVE-2022-47860 CVE-2023-20110	SQL Servers UNION Query-based SQL Injection (CVE-2022-30814; CVE-2022-30816; CVE-2022-31061; CVE-2022-32007; CVE-2022-32025; CVE-2022-32026; CVE-2022-32028; CVE-2022-38627; CVE-2022-40049; CVE-2022-44137; CVE-2022-45030; CVE-2022-46124; CVE-2022-47860; CVE-2023-20110)
High	14 Sep 2014	12 Jul 2023	CPAI-2014-1801			PhpMyAdmin REQUEST Superglobal Remote Variable Manipulation
Critical	16 Jun 2014	29 Jun 2023	CPAI-2014-1671		CVE-2000-0208 CVE-2018-10823 CVE-2018-1144 CVE-2018-3948 CVE-2019-9926	Linux System Files Information Disclosure (CVE-2000-0208; CVE-2018-10823; CVE-2018-1144; CVE-2018-3948; CVE-2019-9926)
Critical	14 Dec 2014	22 Jun 2023	CPAI-2014-2299		CVE-2019-3924 CVE-2020-24186	PHP Web Shell Generic Backdoor (CVE-2019-3924; CVE-2020-24186)
Critical	25 May 2014	29 May 2023	CPAI-2014-1567		CVE-2018-18755 CVE-2018-18798 CVE-2018-6578 CVE-2018-6582 CVE-2018-6604 CVE-2018-6605 CVE-2020-10230 CVE-2022-23882	SQL Servers MySQL Vendor-specific SQL Injection (CVE-2018-18755; CVE-2018-18798; CVE-2018-6578; CVE-2018-6582; CVE-2018-6604; CVE-2018-6605; CVE-2020-10230; CVE-2022-23882)
Critical	6 Apr 2014	4 May 2023	CPAI-2014-1326		CVE-2018-6581 CVE-2018-7312 CVE-2019-20361 CVE-2020-8637 CVE-2022-27431 CVE-2022-28530 CVE-2022-29383 CVE-2022-31787 CVE-2022-46072 CVE-2022-47859 CVE-2022-47861 CVE-2022-47864 CVE-2022-47865 CVE-2022-47866	Sqlmap Automated SQL Injection Tool (CVE-2018-6581; CVE-2018-7312; CVE-2019-20361; CVE-2020-8637; CVE-2022-27431; CVE-2022-28530; CVE-2022-29383; CVE-2022-31787; CVE-2022-46072; CVE-2022-47859; CVE-2022-47861; CVE-2022-47864; CVE-2022-47865; CVE-2022-47866)
Critical	26 May 2014	2 May 2023	CPAI-2014-1573			SQL Servers Unauthorized SQL Injection Command Execution
Critical	26 May 2014	1 May 2023	CPAI-2014-1569		CVE-2011-4710 CVE-2019-13978 CVE-2019-16065 CVE-2019-16119 CVE-2019-16383 CVE-2019-16692 CVE-2020-15468 CVE-2020-26518 CVE-2020-29284 CVE-2021-21915 CVE-2022-3241 CVE-2023-23488 CVE-2023-23489 CVE-2023-23490	SQL Servers Time-based SQL Injection (CVE-2011-4710; CVE-2019-13978; CVE-2019-16065; CVE-2019-16119; CVE-2019-16383; CVE-2019-16692; CVE-2020-15468; CVE-2020-26518; CVE-2020-29284; CVE-2021-21915; CVE-2022-3241; CVE-2023-23488; CVE-2023-23489; CVE-2023-23490)
High	6 Mar 2014	24 Apr 2023	CPAI-2014-0971			Greenbone OpenVAS Security Scanner
Critical	30 Jun 2014	18 Apr 2023	CPAI-2014-1675		CVE-2015-4666	Web Servers Malicious Encoding Directory Traversal (CVE-2015-4666)
Critical	26 May 2014	6 Mar 2023	CPAI-2014-1572			SQL Servers Blind SQL Injection
Critical	25 May 2014	6 Mar 2023	CPAI-2014-1564		CVE-2006-6177 CVE-2006-6577 CVE-2007-2492 CVE-2007-3526 CVE-2007-6656 CVE-2008-2855 CVE-2008-2856 CVE-2008-4463 CVE-2009-2341 CVE-2014-8682 CVE-2021-27581 CVE-2022-0169 CVE-2022-25225	SQL Servers SQL Injection Evasion Techniques (CVE-2006-6177; CVE-2006-6577; CVE-2007-2492; CVE-2007-3526; CVE-2007-6656; CVE-2008-2855; CVE-2008-2856; CVE-2008-4463; CVE-2009-2341; CVE-2014-8682; CVE-2021-27581; CVE-2022-0169; CVE-2022-25225)
High	25 May 2014	6 Mar 2023	CPAI-2014-1563		CVE-2008-4466 CVE-2014-3704 CVE-2019-13978 CVE-2019-9053 CVE-2021-41843 CVE-2022-0592 CVE-2022-0781 CVE-2022-0836 CVE-2022-1905 CVE-2022-26887 CVE-2022-28346 CVE-2022-30809 CVE-2022-30810 CVE-2022-30815	SQL Servers Unauthorized Commands SQL Injection (CVE-2008-4466; CVE-2014-3704; CVE-2019-13978; CVE-2019-9053; CVE-2021-41843; CVE-2022-0592; CVE-2022-0781; CVE-2022-0836; CVE-2022-1905; CVE-2022-26887; CVE-2022-28346; CVE-2022-30809; CVE-2022-30810; CVE-2022-30815)
Critical	9 Nov 2014	27 Feb 2023	CPAI-2014-1983	Adobe APSB14-21	CVE-2014-0549	Adobe Flash Player Memory Corruption (APSB14-21: CVE-2014-0549)
Critical	16 Nov 2014	19 Feb 2023	CPAI-2014-2206		CVE-2019-16113 CVE-2021-26918 CVE-2022-0316 CVE-2022-24688 CVE-2022-26645 CVE-2022-38296 CVE-2023-22952	Web Servers Suspicious File Upload (CVE-2019-16113; CVE-2021-26918; CVE-2022-0316; CVE-2022-24688; CVE-2022-26645; CVE-2022-38296; CVE-2023-22952)
Critical	24 Nov 2014	16 Feb 2023	CPAI-2014-2224		CVE-2022-46966	MySQL Into OutFile SQL Injection (CVE-2022-46966)
High	3 Mar 2014	19 Jan 2023	CPAI-2014-1009			Command Injection - Ver2
Critical	4 May 2014	27 Oct 2022	CPAI-2014-1513			JavaScript Functions Obfuscation Techniques
High	24 Jun 2014	29 Aug 2022	CPAI-2014-1670			JPEG Files Containing Suspicious Comments
Critical	25 May 2014	25 Aug 2022	CPAI-2014-1565		CVE-2021-27104 CVE-2022-31101	SQL Servers SQL Injection Evasion Technique (CVE-2021-27104; CVE-2022-31101)
Critical	25 Sep 2014	7 Aug 2022	CPAI-2014-1846		CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187	GNU Bash Remote Code Execution (CVE-2014-6271; CVE-2014-6277; CVE-2014-6278; CVE-2014-7169; CVE-2014-7186; CVE-2014-7187)
Critical	6 Apr 2014	21 Jun 2022	CPAI-2014-1175			Havij Automated SQL Injection tool
Critical	26 May 2014	24 Feb 2022	CPAI-2014-1568			SQL Servers Oracle Vendor-specific SQL Injection
High	18 Mar 2014	20 Jan 2022	CPAI-2014-1163			Nessus Security Scanner
High	19 Feb 2014	29 Sep 2021	CPAI-2014-0930			Google Chrome XSSAuditor Filter Security Policy Bypass
High	23 Nov 2014	4 Jul 2021	CPAI-2014-2219	Microsoft		Microsoft Internet Explorer CTitleElement Use After Free
Critical	11 Nov 2014	4 Jul 2021	CPAI-2014-1971	Microsoft MS14-065	CVE-2014-6347	Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6347)
Critical	10 Jun 2014	24 Jun 2021	CPAI-2014-1505	Microsoft MS14-035	CVE-2014-1804	Microsoft Internet Explorer Memory Corruption (MS14-035: CVE-2014-1804)
High	17 Mar 2014	27 May 2021	CPAI-2014-1160			Apache HTTP Server Format String Remote Code Execution
Critical	26 May 2014	17 Aug 2020	CPAI-2014-1571			SQL Servers Stack Query SQL Injection
Medium	22 Jan 2014	22 Jun 2020	CPAI-2014-0757		CVE-2013-6933	VLC Media Player RTSP Plugin Stack Buffer Overflow (CVE-2013-6933)
Critical	12 Nov 2014	16 Jun 2020	CPAI-2014-2185			SunRPC Data Connection Evasion Technique
High	25 May 2014	10 Jun 2020	CPAI-2014-1562	Rapid7	CVE-2013-2751	NETGEAR ReadyNAS np_handler Code Execution (CVE-2013-2751)
Medium	12 Jun 2014	10 Jun 2020	CPAI-2014-1628		CVE-2013-0232	ZoneMinder Video Server packageControl Command Execution (CVE-2013-0232)
High	13 Apr 2014	10 Jun 2020	CPAI-2014-1351	McAfee	CVE-2014-2536	McAfee Cloud Single Sign On ExtensionAccessServlet Directory Traversal (CVE-2014-2536)
Medium	16 Apr 2014	10 Jun 2020	CPAI-2014-1363		CVE-2012-2442	Nokia PC Suite Video Manager Buffer Overflow - Ver2 (CVE-2012-2442)
High	14 May 2014	10 Jun 2020	CPAI-2014-1536	Linux Kernel	CVE-2014-2309	Linux Kernel IPv6 Router Advertisement Packets Processing Denial of Service (CVE-2014-2309)
Critical	23 Feb 2014	27 May 2020	CPAI-2014-0933			Multiple Routers HNAP Insecure Implementation Privilege Escalation
Critical	2 Jul 2014	19 Jan 2020	CPAI-2014-1682			Multiple PHP Servers C99shell Backdoor Command Execution
Critical	7 May 2014	25 Dec 2019	CPAI-2014-1527			China Chopper Web Shell Remote Code Execution
High	14 Sep 2014	8 Dec 2019	CPAI-2014-1800			PhpMyAdmin GLOBALS Superglobal Remote Variable Manipulation
Critical	28 Dec 2014	14 Nov 2019	CPAI-2014-1141		CVE-2013-2348	HP Data Protector Opcode 45 and 46 Code Execution (CVE-2013-2348)
High	22 Jan 2014	9 Sep 2019	CPAI-2014-0756		CVE-2013-5487 CVE-2019-1621	Cisco Prime Data Center Network Manager DownloadServlet Information Disclosure (CVE-2013-5487; CVE-2019-1621)
Critical	29 Apr 2014	10 Jul 2019	CPAI-2014-1492	Adobe APSB14-13	CVE-2014-0515	Adobe Flash Player Buffer Overflow Arbitrary Code Execution (CVE-2014-0515)
High	28 Dec 2014	7 Jul 2019	CPAI-2014-2364		CVE-2012-0507	Oracle Java AtomicReferenceArray Sandbox Breach Code Execution - Ver2 (CVE-2012-0507)
High	14 Sep 2014	19 Jun 2019	CPAI-2014-1799		CVE-2010-3065	PhpMyAdmin ENV Superglobal Remote Variable Manipulation (CVE-2010-3065)
Critical	25 Apr 2014	4 Jun 2019	CPAI-2014-1480	Apache Struts S2-020	CVE-2014-0094 CVE-2014-0112 CVE-2014-0113 CVE-2014-0114	Apache Struts ParametersInterceptor ClassLoader Security Bypass (CVE-2014-0094; CVE-2014-0112; CVE-2014-0113; CVE-2014-0114)
High	14 Sep 2014	4 Jun 2019	CPAI-2014-1803			PhpMyAdmin SERVER Superglobal Remote Variable Manipulation