Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	9 Sep 2014	14 Jan 2016	CPAI-2014-1793	Microsoft MS14-052	CVE-2014-4095	Microsoft Internet Explorer Memory Corruption (MS14-052: CVE-2014-4095)
High	25 Nov 2014	14 Jan 2016	CPAI-2014-2229			MySQL Load File SQL Injection
High	27 Nov 2014	14 Jan 2016	CPAI-2014-2242	ICS-CERT	CVE-2014-8388	Advantech WebAccess SCADA webeye.ocx ip_address Parameter Buffer Overflow (CVE-2014-8388)
High	10 Nov 2014	12 Jan 2016	CPAI-2014-2015		CVE-2013-5117	DotNetNuke DNNArticle Module SQL Injection (CVE-2013-5117)
Medium	1 Dec 2014	12 Jan 2016	CPAI-2014-2257			Advanced Deface Page Maker Tool
High	28 Dec 2014	12 Jan 2016	CPAI-2014-2127		CVE-2006-4129	Joomla Component com_webring Remote File Inclusion - Ver2 (CVE-2006-4129)
Medium	3 Mar 2014	23 Dec 2015	CPAI-2014-0992		CVE-2004-1049	Microsoft Windows ANI File Parsing Buffer Overflow - Ver2 (CVE-2004-1049)
High	31 Mar 2014	22 Dec 2015	CPAI-2014-1270		CVE-2010-0028	Microsoft Paint JPEG Image Parsing Integer Overflow - Ver2 (CVE-2010-0028)
Critical	11 Mar 2014	17 Dec 2015	CPAI-2014-1133	Microsoft MS14-012	CVE-2014-0314	Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0314)
Critical	11 Mar 2014	17 Dec 2015	CPAI-2014-1087	Microsoft MS14-012	CVE-2014-0298	Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0298)
Critical	11 Nov 2014	17 Dec 2015	CPAI-2014-1939	Microsoft MS14-065	CVE-2014-4143	Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-4143)
High	23 Mar 2014	16 Dec 2015	CPAI-2014-1167	MS07-062 Microsoft	CVE-2005-1519 CVE-2007-3898	Squid Proxy DNS Response Spoofing (CVE-2005-1519; CVE-2007-3898)
Critical	8 Sep 2014	8 Dec 2015	CPAI-2014-1796	Samba Team	CVE-2014-3560	Samba nmbd unstrcpy Buffer Overflow (CVE-2014-3560)
Critical	27 Jul 2014	25 Nov 2015	CPAI-2014-1736	AlienVault 2690	CVE-2014-3804	AlienVault OSSIM av-centerd SOAP Requests Multiple Command Execution - ver 2 (CVE-2014-3804)
High	16 Apr 2014	22 Nov 2015	CPAI-2014-1433		CVE-2007-0927	UTorrent announce Buffer Overflow - Ver2 (CVE-2007-0927)
High	19 Jun 2014	22 Nov 2015	CPAI-2014-1646	Apple	CVE-2014-2856	Apple CUPS Web Interface URL Handling Cross-Site Scripting (CVE-2014-2856)
High	3 Mar 2014	10 Nov 2015	CPAI-2014-1105	CVE-2008-2245	CVE-2008-2245	Microsoft Color Management Memory Allocation Buffer Overflow (MS08-046) - Ver2 (CVE-2008-2245)
Critical	6 Mar 2014	10 Nov 2015	CPAI-2014-1091	HP	CVE-2013-6195	HP Data Protector CRS Multiple Stack Buffer Overflows (CVE-2013-6195)
High	9 Mar 2014	10 Nov 2015	CPAI-2014-1061	HP c04041078	CVE-2013-6189	HP AIO Archive Query Server oasoa.exe Stack Buffer Overflow (CVE-2013-6189)
Critical	12 Mar 2014	10 Nov 2015	CPAI-2014-1084	HP c03822422	CVE-2013-6194	HP Data Protector Opcode 42 Directory Traversal (CVE-2013-6194)
Critical	12 Mar 2014	10 Nov 2015	CPAI-2014-1142	HP	CVE-2013-2347	HP Data Protector EXEC_BAR Command Execution (CVE-2013-2347)
Critical	10 Apr 2014	10 Nov 2015	CPAI-2014-1343	Oracle cpujul2008	CVE-2008-2595	Oracle Internet Directory Pre-Authentication LDAP Denial of Service (CVE-2008-2595)
High	26 May 2014	10 Nov 2015	CPAI-2014-1574	Oracle	CVE-2014-0384	Oracle MySQL Server XPath Denial Of Service (CVE-2014-0384)
High	14 Sep 2014	10 Nov 2015	CPAI-2014-1806	MIT	CVE-2014-4344	MIT Kerberos SPNEGO Acceptor acc_ctx_cont Denial of Service (CVE-2014-4344)
Critical	14 Sep 2014	10 Nov 2015	CPAI-2014-1807	Oracle	CVE-2013-3751	Oracle Database Server Insecure User Input Stack Buffer Overflow (CVE-2013-3751)
High	23 Sep 2014	10 Nov 2015	CPAI-2014-1845	MIT	CVE-2014-4342	MIT Kerberos Invalid RFC 1964 Token Denial of Service (CVE-2014-4342)
Critical	30 Sep 2014	10 Nov 2015	CPAI-2014-1855	HP	CVE-2014-2624	HP Network Node Manager I ovopi.dll Buffer Overflow (CVE-2014-2624)
Critical	6 Oct 2014	10 Nov 2015	CPAI-2014-1888		CVE-2014-5160	HP Data Protector Opcode 1091 Directory Traversal (CVE-2014-5160)
Critical	13 Oct 2014	10 Nov 2015	CPAI-2014-1904		CVE-2014-5160	HP Data Protector Opcode 305 Directory Traversal (CVE-2014-5160)
Critical	27 Nov 2014	10 Nov 2015	CPAI-2014-2245	Microsoft MS11-004	CVE-2010-3972	Microsoft IIS FTP Server Telnet IAC Buffer Overflow (CVE-2010-3972)
Critical	4 Dec 2014	10 Nov 2015	CPAI-2014-2279	HP	CVE-2014-2624	HP Network Node Manager I ovopi.dll Command 685 Memory Corruption (CVE-2014-2624)
Medium	28 Dec 2014	10 Nov 2015	CPAI-2014-2389		CVE-2007-3763	Asterisk chan_iax2 IAX2 Control Frame LAGR Denial of Service - Ver2 (CVE-2007-3763)
Critical	7 Jan 2014	3 Nov 2015	CPAI-2014-0087		CVE-2007-0584	G-neric Generic MembreManager.php include_path Parameter PHP Code Execution - Ver2 (CVE-2007-0584)
Critical	7 Jan 2014	3 Nov 2015	CPAI-2014-0048		CVE-2007-0881	OPENi-CMS Plugin index.php oi_dir Parameter PHP Code Execution - Ver2 (CVE-2007-0881)
Critical	7 Jan 2014	3 Nov 2015	CPAI-2014-0094		CVE-2006-4077	Comet WebFileManager CheckUpload.php Language Parameter PHP Code Execution - Ver2 (CVE-2006-4077)
Critical	7 Jan 2014	3 Nov 2015	CPAI-2014-0026		CVE-2006-4827	Vmist Downstat art Parameter PHP Code Execution - Ver2 (CVE-2006-4827)
Critical	7 Jan 2014	3 Nov 2015	CPAI-2014-0008		CVE-2006-4622	AnnoncesV annonce.php page Parameter PHP Code Execution - Ver2 (CVE-2006-4622)
Critical	7 Jan 2014	3 Nov 2015	CPAI-2014-0037		CVE-2006-4034	Modernbill config.php DIR Parameter PHP Code Execution - Ver2 (CVE-2006-4034)
Critical	7 Jan 2014	3 Nov 2015	CPAI-2014-0015		CVE-2006-3984	PHPAuction view.inc.php phpAds_path Parameter PHP Code Execution - Ver2 (CVE-2006-3984)
Critical	8 Jan 2014	3 Nov 2015	CPAI-2014-0047		CVE-2006-4123	Boite de News index.php url_index Parameter PHP Code Execution - Ver2 (CVE-2006-4123)
Critical	10 Feb 2014	3 Nov 2015	CPAI-2014-0901		CVE-2012-0394	Apache Struts Debugging Interceptor Remote Code Execution (CVE-2012-0394)
High	13 Mar 2014	3 Nov 2015	CPAI-2014-1149	Rapid7 Advisory	CVE-2013-4468	VICIdial Manager Send OS Command Injection (CVE-2013-4468)
Critical	27 Mar 2014	3 Nov 2015	CPAI-2013-3748	Cisco	CVE-2013-5486	Cisco Prime Data Center Network Manager processImageSave.jsp Arbitrary File Upload (CVE-2013-5486)
Medium	31 Mar 2014	3 Nov 2015	CPAI-2014-1252		CVE-2006-1610	Squery libpath Parameter PHP Code Execution - Ver2 (CVE-2006-1610)
High	31 Mar 2014	3 Nov 2015	CPAI-2014-1201		CVE-2006-4645	Akarru main_content.php bm_content Parameter PHP Code Execution - Ver2 (CVE-2006-4645)
High	16 Apr 2014	3 Nov 2015	CPAI-2014-1370		CVE-2003-0349	Microsoft IIS nsiilog.dll ISAPI Overflow Buffer Overflow - Ver2 (CVE-2003-0349)
High	16 Apr 2014	3 Nov 2015	CPAI-2014-1477		CVE-2014-1903	FreePBX config php Code Execution (CVE-2014-1903)
High	27 Apr 2014	3 Nov 2015	CPAI-2014-1484		CVE-2014-1691	Horde Framework Unserialize PHP Code Execution (CVE-2014-1691)
High	7 May 2014	3 Nov 2015	CPAI-2014-1541	Rapid7 Advisory	CVE-2013-3522	vBulletin Nodeid Parameter SQL Injection (CVE-2013-3522)
High	7 May 2014	3 Nov 2015	CPAI-2014-1523	Rapid7	CVE-2013-6955	Synology DiskStation Manager SLICEUPLOAD Code Execution (CVE-2013-6955)