Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	4 Nov 2014	19 Nov 2024	CPAI-2014-1955		CVE-2014-2640	HP System Management Homepage Cross-Site Scripting (CVE-2014-2640)
High	9 Mar 2014	19 Nov 2024	CPAI-2014-1130	ESF		pfSense Command Injection
Critical	23 Feb 2014	17 Nov 2024	CPAI-2014-0931		CVE-2014-0502	Adobe Flash Player Double Free Remote Code Execution (APSB14-07: CVE-2014-0502)
Critical	7 Feb 2014	17 Nov 2024	CPAI-2014-0897		CVE-2014-0497	Adobe Flash Player Integer Underflow Remote Code Execution (APSB14-04: CVE-2014-0497)
Critical	21 Sep 2014	10 Nov 2024	CPAI-2014-1826	PHP	CVE-2014-3515	PHP unserialize Call SPL ArrayObject and SPLObjectStorage Memory Corruption (CVE-2014-3515)
High	18 Mar 2014	7 Nov 2024	CPAI-2014-1163			Nessus Security Scanner
Critical	25 May 2014	7 Oct 2024	CPAI-2014-1564		CVE-2006-6177 CVE-2006-6577 CVE-2007-2492 CVE-2007-3526 CVE-2007-6656 CVE-2008-2855 CVE-2008-2856 CVE-2008-4463 CVE-2009-2341 CVE-2014-8682 CVE-2021-27581 CVE-2022-0169 CVE-2022-25225	SQL Servers SQL Injection Evasion Techniques (CVE-2006-6177; CVE-2006-6577; CVE-2007-2492; CVE-2007-3526; CVE-2007-6656; CVE-2008-2855; CVE-2008-2856; CVE-2008-4463; CVE-2009-2341; CVE-2014-8682; CVE-2021-27581; CVE-2022-0169; CVE-2022-25225)
High	25 May 2014	22 Sep 2024	CPAI-2014-1563		CVE-2014-3704 CVE-2019-13978 CVE-2019-9053 CVE-2021-41843 CVE-2022-0592 CVE-2022-0781 CVE-2022-0836 CVE-2022-1905 CVE-2022-26887 CVE-2022-28346 CVE-2022-30809 CVE-2022-30810 CVE-2022-30815 CVE-2024-33559	SQL Servers Unauthorized Commands SQL Injection (CVE-2014-3704; CVE-2019-13978; CVE-2019-9053; CVE-2021-41843; CVE-2022-0592; CVE-2022-0781; CVE-2022-0836; CVE-2022-1905; CVE-2022-26887; CVE-2022-28346; CVE-2022-30809; CVE-2022-30810; CVE-2022-30815; CVE-2024-33559)
Critical	14 Dec 2014	12 Aug 2024	CPAI-2014-2299		CVE-2014-8687 CVE-2019-3924 CVE-2019-9055 CVE-2020-24186 CVE-2024-5084	PHP Web Shell Generic Backdoor (CVE-2014-8687; CVE-2019-3924; CVE-2019-9055; CVE-2020-24186; CVE-2024-5084)
Medium	17 Sep 2014	12 Aug 2024	CPAI-2014-1815		CVE-2014-6041	Google Android Browser Policy Bypass (CVE-2014-6041)
Critical	25 Sep 2014	1 Aug 2024	CPAI-2014-1846		CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187	GNU Bash Remote Code Execution (CVE-2014-6271; CVE-2014-6277; CVE-2014-6278; CVE-2014-7169; CVE-2014-7186; CVE-2014-7187)
Low	18 Mar 2014	21 Jul 2024	CPAI-2014-1127		CVE-2016-0703 CVE-2016-0704 CVE-2016-0800	Secure Sockets Layer (SSL) Version 2.0 (CVE-2016-0703; CVE-2016-0704; CVE-2016-0800)
Critical	25 May 2014	1 Jul 2024	CPAI-2014-1565		CVE-2021-27104 CVE-2022-31101 CVE-2024-5276	SQL Servers SQL Injection Evasion Technique (CVE-2021-27104; CVE-2022-31101; CVE-2024-5276)
Critical	30 Jun 2014	29 May 2024	CPAI-2014-1675		CVE-2015-4666	Web Servers Malicious Encoding Directory Traversal (CVE-2015-4666)
Critical	26 May 2014	29 May 2024	CPAI-2014-1569		CVE-2019-16692 CVE-2020-15468 CVE-2020-26518 CVE-2020-29284 CVE-2021-21915 CVE-2022-3241 CVE-2022-4681 CVE-2023-23488 CVE-2023-23489 CVE-2023-23490 CVE-2023-4987 CVE-2024-24495 CVE-2024-2879 CVE-2024-35511	SQL Servers Time-based SQL Injection (CVE-2019-16692; CVE-2020-15468; CVE-2020-26518; CVE-2020-29284; CVE-2021-21915; CVE-2022-3241; CVE-2022-4681; CVE-2023-23488; CVE-2023-23489; CVE-2023-23490; CVE-2023-4987; CVE-2024-24495; CVE-2024-2879; CVE-2024-35511)
Critical	16 Nov 2014	27 May 2024	CPAI-2014-2206		CVE-2018-7665 CVE-2019-16113 CVE-2019-9858 CVE-2020-27387 CVE-2021-26918 CVE-2022-0316 CVE-2022-24688 CVE-2022-26645 CVE-2022-38296 CVE-2023-22952	Web Servers Suspicious File Upload (CVE-2018-7665; CVE-2019-16113; CVE-2019-9858; CVE-2020-27387; CVE-2021-26918; CVE-2022-0316; CVE-2022-24688; CVE-2022-26645; CVE-2022-38296; CVE-2023-22952)
Critical	25 May 2014	5 May 2024	CPAI-2014-1567		CVE-2018-10737 CVE-2018-18755 CVE-2018-18798 CVE-2018-6578 CVE-2018-6582 CVE-2018-6604 CVE-2018-6605 CVE-2020-10230 CVE-2022-23882 CVE-2023-48084	SQL Servers MySQL Vendor-specific SQL Injection (CVE-2018-10737; CVE-2018-18755; CVE-2018-18798; CVE-2018-6578; CVE-2018-6582; CVE-2018-6604; CVE-2018-6605; CVE-2020-10230; CVE-2022-23882; CVE-2023-48084)
High	16 Nov 2014	1 May 2024	CPAI-2014-2202	NetBSD	CVE-2014-8517	NetBSD Command Injection (CVE-2014-8517)
Critical	26 May 2014	15 Apr 2024	CPAI-2014-1570		CVE-2022-31061 CVE-2022-32007 CVE-2022-32025 CVE-2022-32026 CVE-2022-32028 CVE-2022-38627 CVE-2022-40049 CVE-2022-44137 CVE-2022-45030 CVE-2022-46124 CVE-2022-47860 CVE-2023-20110 CVE-2023-46748 CVE-2023-51951	SQL Servers UNION Query-based SQL Injection (CVE-2022-31061; CVE-2022-32007; CVE-2022-32025; CVE-2022-32026; CVE-2022-32028; CVE-2022-38627; CVE-2022-40049; CVE-2022-44137; CVE-2022-45030; CVE-2022-46124; CVE-2022-47860; CVE-2023-20110; CVE-2023-46748; CVE-2023-51951)
Critical	6 Apr 2014	27 Mar 2024	CPAI-2014-1326		CVE-2018-7312 CVE-2019-20361 CVE-2020-8637 CVE-2022-27431 CVE-2022-28530 CVE-2022-29383 CVE-2022-31787 CVE-2022-46072 CVE-2022-47859 CVE-2022-47861 CVE-2022-47864 CVE-2022-47865 CVE-2022-47866 CVE-2023-0630	Sqlmap Automated SQL Injection Tool (CVE-2018-7312; CVE-2019-20361; CVE-2020-8637; CVE-2022-27431; CVE-2022-28530; CVE-2022-29383; CVE-2022-31787; CVE-2022-46072; CVE-2022-47859; CVE-2022-47861; CVE-2022-47864; CVE-2022-47865; CVE-2022-47866; CVE-2023-0630)
Critical	23 Feb 2014	5 Feb 2024	CPAI-2014-0936		CVE-2009-1151	PhpMyAdmin Remote Code Execution (CVE-2009-1151)
Critical	26 May 2014	15 Jan 2024	CPAI-2014-1572		CVE-2022-24266	SQL Servers Blind SQL Injection (CVE-2022-24266)
High	14 Oct 2014	8 Nov 2023	CPAI-2014-1848		CVE-2022-29848	Windows System Files Information Disclosure (CVE-2022-29848)
High	25 May 2014	22 Oct 2023	CPAI-2014-1629	Rapid7	CVE-2014-3120	ElasticSearch Remote Code Execution (CVE-2014-3120)
High	31 Mar 2014	30 Aug 2023	CPAI-2014-1178			Nikto Security Scanner
High	9 Nov 2014	24 Aug 2023	CPAI-2014-1985	HP HPSBMU03110	CVE-2014-2635 CVE-2014-2636 CVE-2014-2637	HP Sprinter Memory Corruption (CVE-2014-2635; CVE-2014-2636; CVE-2014-2637)
High	14 Sep 2014	12 Jul 2023	CPAI-2014-1801			PhpMyAdmin REQUEST Superglobal Remote Variable Manipulation
Critical	16 Jun 2014	29 Jun 2023	CPAI-2014-1671		CVE-2000-0208 CVE-2018-10823 CVE-2018-1144 CVE-2018-3948 CVE-2019-9926	Linux System Files Information Disclosure (CVE-2000-0208; CVE-2018-10823; CVE-2018-1144; CVE-2018-3948; CVE-2019-9926)
Critical	26 May 2014	2 May 2023	CPAI-2014-1573			SQL Servers Unauthorized SQL Injection Command Execution
High	6 Mar 2014	24 Apr 2023	CPAI-2014-0971			Greenbone OpenVAS Security Scanner
Critical	9 Nov 2014	27 Feb 2023	CPAI-2014-1983	Adobe APSB14-21	CVE-2014-0549	Adobe Flash Player Memory Corruption (APSB14-21: CVE-2014-0549)
Critical	24 Nov 2014	16 Feb 2023	CPAI-2014-2224		CVE-2022-46966	MySQL Into OutFile SQL Injection (CVE-2022-46966)
High	3 Mar 2014	19 Jan 2023	CPAI-2014-1009			Command Injection - Ver2
Critical	4 May 2014	27 Oct 2022	CPAI-2014-1513			JavaScript Functions Obfuscation Techniques
High	24 Jun 2014	29 Aug 2022	CPAI-2014-1670			JPEG Files Containing Suspicious Comments
Critical	6 Apr 2014	21 Jun 2022	CPAI-2014-1175			Havij Automated SQL Injection tool
Critical	26 May 2014	24 Feb 2022	CPAI-2014-1568			SQL Servers Oracle Vendor-specific SQL Injection
High	19 Feb 2014	29 Sep 2021	CPAI-2014-0930			Google Chrome XSSAuditor Filter Security Policy Bypass
High	23 Nov 2014	4 Jul 2021	CPAI-2014-2219	Microsoft		Microsoft Internet Explorer CTitleElement Use After Free
Critical	11 Nov 2014	4 Jul 2021	CPAI-2014-1971	Microsoft MS14-065	CVE-2014-6347	Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6347)
Critical	10 Jun 2014	24 Jun 2021	CPAI-2014-1505	Microsoft MS14-035	CVE-2014-1804	Microsoft Internet Explorer Memory Corruption (MS14-035: CVE-2014-1804)
High	17 Mar 2014	27 May 2021	CPAI-2014-1160			Apache HTTP Server Format String Remote Code Execution
Critical	26 May 2014	17 Aug 2020	CPAI-2014-1571			SQL Servers Stack Query SQL Injection
Medium	22 Jan 2014	22 Jun 2020	CPAI-2014-0757		CVE-2013-6933	VLC Media Player RTSP Plugin Stack Buffer Overflow (CVE-2013-6933)
Critical	12 Nov 2014	16 Jun 2020	CPAI-2014-2185			SunRPC Data Connection Evasion Technique
High	13 Apr 2014	10 Jun 2020	CPAI-2014-1351	McAfee	CVE-2014-2536	McAfee Cloud Single Sign On ExtensionAccessServlet Directory Traversal (CVE-2014-2536)
Medium	16 Apr 2014	10 Jun 2020	CPAI-2014-1363		CVE-2012-2442	Nokia PC Suite Video Manager Buffer Overflow - Ver2 (CVE-2012-2442)
High	14 May 2014	10 Jun 2020	CPAI-2014-1536	Linux Kernel	CVE-2014-2309	Linux Kernel IPv6 Router Advertisement Packets Processing Denial of Service (CVE-2014-2309)
High	25 May 2014	10 Jun 2020	CPAI-2014-1562	Rapid7	CVE-2013-2751	NETGEAR ReadyNAS np_handler Code Execution (CVE-2013-2751)
Medium	12 Jun 2014	10 Jun 2020	CPAI-2014-1628		CVE-2013-0232	ZoneMinder Video Server packageControl Command Execution (CVE-2013-0232)