Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	8 Sep 2014	8 Dec 2015	CPAI-2014-1796	Samba Team	CVE-2014-3560	Samba nmbd unstrcpy Buffer Overflow (CVE-2014-3560)
Critical	27 Jul 2014	25 Nov 2015	CPAI-2014-1736	AlienVault 2690	CVE-2014-3804	AlienVault OSSIM av-centerd SOAP Requests Multiple Command Execution - ver 2 (CVE-2014-3804)
High	16 Apr 2014	22 Nov 2015	CPAI-2014-1433		CVE-2007-0927	UTorrent announce Buffer Overflow - Ver2 (CVE-2007-0927)
High	19 Jun 2014	22 Nov 2015	CPAI-2014-1646	Apple	CVE-2014-2856	Apple CUPS Web Interface URL Handling Cross-Site Scripting (CVE-2014-2856)
High	3 Mar 2014	10 Nov 2015	CPAI-2014-1105	CVE-2008-2245	CVE-2008-2245	Microsoft Color Management Memory Allocation Buffer Overflow (MS08-046) - Ver2 (CVE-2008-2245)
Critical	6 Mar 2014	10 Nov 2015	CPAI-2014-1091	HP	CVE-2013-6195	HP Data Protector CRS Multiple Stack Buffer Overflows (CVE-2013-6195)
High	9 Mar 2014	10 Nov 2015	CPAI-2014-1061	HP c04041078	CVE-2013-6189	HP AIO Archive Query Server oasoa.exe Stack Buffer Overflow (CVE-2013-6189)
Critical	12 Mar 2014	10 Nov 2015	CPAI-2014-1084	HP c03822422	CVE-2013-6194	HP Data Protector Opcode 42 Directory Traversal (CVE-2013-6194)
Critical	12 Mar 2014	10 Nov 2015	CPAI-2014-1142	HP	CVE-2013-2347	HP Data Protector EXEC_BAR Command Execution (CVE-2013-2347)
Critical	10 Apr 2014	10 Nov 2015	CPAI-2014-1343	Oracle cpujul2008	CVE-2008-2595	Oracle Internet Directory Pre-Authentication LDAP Denial of Service (CVE-2008-2595)
High	26 May 2014	10 Nov 2015	CPAI-2014-1574	Oracle	CVE-2014-0384	Oracle MySQL Server XPath Denial Of Service (CVE-2014-0384)
High	14 Sep 2014	10 Nov 2015	CPAI-2014-1806	MIT	CVE-2014-4344	MIT Kerberos SPNEGO Acceptor acc_ctx_cont Denial of Service (CVE-2014-4344)
Critical	14 Sep 2014	10 Nov 2015	CPAI-2014-1807	Oracle	CVE-2013-3751	Oracle Database Server Insecure User Input Stack Buffer Overflow (CVE-2013-3751)
High	23 Sep 2014	10 Nov 2015	CPAI-2014-1845	MIT	CVE-2014-4342	MIT Kerberos Invalid RFC 1964 Token Denial of Service (CVE-2014-4342)
Critical	30 Sep 2014	10 Nov 2015	CPAI-2014-1855	HP	CVE-2014-2624	HP Network Node Manager I ovopi.dll Buffer Overflow (CVE-2014-2624)
Critical	6 Oct 2014	10 Nov 2015	CPAI-2014-1888		CVE-2014-5160	HP Data Protector Opcode 1091 Directory Traversal (CVE-2014-5160)
Critical	13 Oct 2014	10 Nov 2015	CPAI-2014-1904		CVE-2014-5160	HP Data Protector Opcode 305 Directory Traversal (CVE-2014-5160)
Critical	27 Nov 2014	10 Nov 2015	CPAI-2014-2245	Microsoft MS11-004	CVE-2010-3972	Microsoft IIS FTP Server Telnet IAC Buffer Overflow (CVE-2010-3972)
Critical	4 Dec 2014	10 Nov 2015	CPAI-2014-2279	HP	CVE-2014-2624	HP Network Node Manager I ovopi.dll Command 685 Memory Corruption (CVE-2014-2624)
Medium	28 Dec 2014	10 Nov 2015	CPAI-2014-2389		CVE-2007-3763	Asterisk chan_iax2 IAX2 Control Frame LAGR Denial of Service - Ver2 (CVE-2007-3763)
Critical	7 Jan 2014	3 Nov 2015	CPAI-2014-0087		CVE-2007-0584	G-neric Generic MembreManager.php include_path Parameter PHP Code Execution - Ver2 (CVE-2007-0584)
Critical	7 Jan 2014	3 Nov 2015	CPAI-2014-0048		CVE-2007-0881	OPENi-CMS Plugin index.php oi_dir Parameter PHP Code Execution - Ver2 (CVE-2007-0881)
Critical	7 Jan 2014	3 Nov 2015	CPAI-2014-0094		CVE-2006-4077	Comet WebFileManager CheckUpload.php Language Parameter PHP Code Execution - Ver2 (CVE-2006-4077)
Critical	7 Jan 2014	3 Nov 2015	CPAI-2014-0026		CVE-2006-4827	Vmist Downstat art Parameter PHP Code Execution - Ver2 (CVE-2006-4827)
Critical	7 Jan 2014	3 Nov 2015	CPAI-2014-0008		CVE-2006-4622	AnnoncesV annonce.php page Parameter PHP Code Execution - Ver2 (CVE-2006-4622)
Critical	7 Jan 2014	3 Nov 2015	CPAI-2014-0037		CVE-2006-4034	Modernbill config.php DIR Parameter PHP Code Execution - Ver2 (CVE-2006-4034)
Critical	7 Jan 2014	3 Nov 2015	CPAI-2014-0015		CVE-2006-3984	PHPAuction view.inc.php phpAds_path Parameter PHP Code Execution - Ver2 (CVE-2006-3984)
Critical	8 Jan 2014	3 Nov 2015	CPAI-2014-0047		CVE-2006-4123	Boite de News index.php url_index Parameter PHP Code Execution - Ver2 (CVE-2006-4123)
Critical	10 Feb 2014	3 Nov 2015	CPAI-2014-0901		CVE-2012-0394	Apache Struts Debugging Interceptor Remote Code Execution (CVE-2012-0394)
High	13 Mar 2014	3 Nov 2015	CPAI-2014-1149	Rapid7 Advisory	CVE-2013-4468	VICIdial Manager Send OS Command Injection (CVE-2013-4468)
Critical	27 Mar 2014	3 Nov 2015	CPAI-2013-3748	Cisco	CVE-2013-5486	Cisco Prime Data Center Network Manager processImageSave.jsp Arbitrary File Upload (CVE-2013-5486)
Medium	31 Mar 2014	3 Nov 2015	CPAI-2014-1252		CVE-2006-1610	Squery libpath Parameter PHP Code Execution - Ver2 (CVE-2006-1610)
High	31 Mar 2014	3 Nov 2015	CPAI-2014-1201		CVE-2006-4645	Akarru main_content.php bm_content Parameter PHP Code Execution - Ver2 (CVE-2006-4645)
High	16 Apr 2014	3 Nov 2015	CPAI-2014-1370		CVE-2003-0349	Microsoft IIS nsiilog.dll ISAPI Overflow Buffer Overflow - Ver2 (CVE-2003-0349)
High	16 Apr 2014	3 Nov 2015	CPAI-2014-1477		CVE-2014-1903	FreePBX config php Code Execution (CVE-2014-1903)
High	27 Apr 2014	3 Nov 2015	CPAI-2014-1484		CVE-2014-1691	Horde Framework Unserialize PHP Code Execution (CVE-2014-1691)
High	7 May 2014	3 Nov 2015	CPAI-2014-1541	Rapid7 Advisory	CVE-2013-3522	vBulletin Nodeid Parameter SQL Injection (CVE-2013-3522)
High	7 May 2014	3 Nov 2015	CPAI-2014-1523	Rapid7	CVE-2013-6955	Synology DiskStation Manager SLICEUPLOAD Code Execution (CVE-2013-6955)
High	1 Jun 2014	3 Nov 2015	CPAI-2014-1560	Microsoft MS14-023	CVE-2014-1756	Microsoft Office Chinese Grammar Checker Insecure Library Loading (MS14-023; CVE-2014-1756)
High	16 Jun 2014	3 Nov 2015	CPAI-2014-1638	Rapid7		Simple E-Document upload Remote Code Execution
High	2 Jul 2014	3 Nov 2015	CPAI-2014-1681		CVE-2014-3914	Rocket Servergraph Admin Center fileRequestor Directory Traversal (CVE-2014-3914)
High	6 Jul 2014	3 Nov 2015	CPAI-2014-1688	Rapid7		UpTime Monitoring Server Insecure File Upload Remote Code Execution
High	13 Jul 2014	3 Nov 2015	CPAI-2014-1709		CVE-2007-2969	Web Servers WAnewsletter Remote File Inclusion (CVE-2007-2969)
High	13 Jul 2014	3 Nov 2015	CPAI-2014-1700		CVE-2006-4644	Web Servers PHPFullAnnu Remote File Inclusion (CVE-2006-4644)
High	13 Jul 2014	3 Nov 2015	CPAI-2014-1704		CVE-2006-4044	Web Servers PHPCodeCabinet Remote File Inclusion (CVE-2006-4044)
High	13 Jul 2014	3 Nov 2015	CPAI-2014-1703		CVE-2007-2936	Web Servers Frequency Clock Remote File Inclusion (CVE-2007-2936)
High	13 Jul 2014	3 Nov 2015	CPAI-2014-1702		CVE-2007-2317	Web Servers Tosmo Mambo Remote File Inclusion (CVE-2007-2317)
High	13 Jul 2014	3 Nov 2015	CPAI-2014-1701		CVE-2007-2364	Web Servers BurnCMS Remote File Inclusion (CVE-2007-2364)
High	15 Jul 2014	3 Nov 2015	CPAI-2014-1717	Rapid7		FritzBox Webcm Unauthenticated Command Injection
High	15 Jul 2014	3 Nov 2015	CPAI-2014-1713		CVE-2006-1503	Web Servers VWar Remote File Inclusion (CVE-2006-1503)