Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	10 Nov 2014	3 Nov 2015	CPAI-2014-2161		CVE-2006-3949	Joomla Component com_artlinks Remote File Inclusion (CVE-2006-3949)
High	10 Nov 2014	3 Nov 2015	CPAI-2014-2156		CVE-2006-4348	Joomla Component com_kochsuite Remote File Inclusion (CVE-2006-4348)
High	10 Nov 2014	3 Nov 2015	CPAI-2014-2088		CVE-2008-6841	Joomla Component com_dbquery Remote File Inclusion (CVE-2008-6841)
High	10 Nov 2014	3 Nov 2015	CPAI-2014-2172		CVE-2006-3530	Joomla Component com_pccookbook Remote File Inclusion (CVE-2006-3530)
Critical	17 Nov 2014	3 Nov 2015	CPAI-2014-2191		CVE-2014-8516	Visual Mining NetCharts Server Admin Console Arbitrary File Upload (CVE-2014-8516)
Critical	3 Dec 2014	3 Nov 2015	CPAI-2014-2275		CVE-2014-7236	Twiki Unauthenticated Remote Code Execution (CVE-2014-7236)
High	7 Apr 2014	27 Oct 2015	CPAI-2014-1182			PHP JavaScript Website Redirection
High	4 Mar 2014	22 Oct 2015	CPAI-2014-1013		CVE-2004-1315	phpBB viewtopic.php URL Decoding Code Execution - ver 2 (CVE-2004-1315)
High	10 Nov 2014	20 Oct 2015	CPAI-2014-2103			E107 userjournals_menu Plugin SQL Injection
High	28 Dec 2014	20 Oct 2015	CPAI-2014-2375		CVE-2003-0109	Microsoft IIS WebDAV Remote Buffer Overflow (MS03-007) - Ver2 (CVE-2003-0109)
Critical	28 Dec 2014	20 Oct 2015	CPAI-2014-2377		CVE-2001-0500	Microsoft IIS idq.dll IDAIDQ ISAPI Overflow Buffer Overflow - Ver2 (CVE-2001-0500)
High	6 Mar 2014	15 Oct 2015	CPAI-2014-1083	OpenSSL Project	CVE-2013-6450	OpenSSL DTLS Retransmission Denial of Service (CVE-2013-6450)
High	31 Mar 2014	13 Oct 2015	CPAI-2014-1222		CVE-2013-1600	Dlink IP Camera Video Stream Authentication Bypass - Ver2 (CVE-2013-1600)
Critical	9 Jun 2014	30 Aug 2015	CPAI-2014-1623			PHP print Remote Shell Command Execution
Critical	23 Jul 2014	19 Aug 2015	CPAI-2014-1730	Adobe APSB14-15	CVE-2014-0523	Adobe Acrobat and Reader Memory Corruption (APSB14-15: CVE-2014-0523)
High	11 Sep 2014	23 Jul 2015	CPAI-2014-1805	Google	CVE-2014-1713	Google Chrome locationAttributeSetter Use After Free (CVE-2014-1713)
High	10 Mar 2014	22 Jul 2015	CPAI-2014-0878	Microsoft MS14-009	CVE-2014-0253	Microsoft ASP.NET POST Request Denial of Service (MS14-009; CVE-2014-0253)
Critical	7 Jan 2014	19 Jul 2015	CPAI-2014-0070		CVE-2007-0577	ACGVclick function.inc.php path Parameter PHP Code Execution - Ver2 (CVE-2007-0577)
High	11 Nov 2014	8 Jul 2015	CPAI-2014-1941	Microsoft MS14-069	CVE-2014-6334	Microsoft Office Bad Index Remote Code Execution (MS14-069; CVE-2014-6334)
High	26 Jan 2014	10 Jun 2015	CPAI-2014-0764		CVE-2014-1610	MediaWiki Input Validation Remote Code Execution (CVE-2014-1610)
Critical	11 Feb 2014	20 May 2015	CPAI-2014-0887		CVE-2014-0270	Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0270)
High	28 Dec 2014	17 May 2015	CPAI-2014-2429		CVE-2013-1896	Apache HTTP Server mod_dav MERGE Request Denial of Service - Ver2 (CVE-2013-1896)
High	28 Dec 2014	17 May 2015	CPAI-2013-2746		CVE-2013-1896	Apache HTTP Server mod_dav MERGE Request Denial of Service - Ver2 (CVE-2013-1896)
Critical	15 Oct 2014	12 May 2015	CPAI-2014-1908	Microsoft MS14-058	CVE-2014-4148 CVE-2015-1671	Microsoft Windows TrueType Font Parsing Remote Code Execution (MS14-058; CVE-2014-4148; CVE-2015-1671)
Critical	3 Mar 2014	11 May 2015	CPAI-2014-1072		CVE-2009-0658	Adobe Products JBIG2 Stream Buffer Overflow - Ver2 (CVE-2009-0658)
Critical	19 Feb 2014	6 May 2015	CPAI-2014-0919		CVE-2014-0493	Adobe Acrobat and Reader Memory Corruption (APSB14-01: CVE-2014-0493)
Medium	28 Apr 2014	4 May 2015	CPAI-2014-1487		CVE-2014-2587	McAfee Asset Manager ReportsAudit.jsp Input Validation Error (CVE-2014-2587)
Critical	4 May 2014	29 Apr 2015	CPAI-2014-1512			Conficker Shellcode Remote Code Execution
Critical	3 Mar 2014	28 Apr 2015	CPAI-2014-1117		CVE-2008-3477	Microsoft Excel VisualBasic Object Validation Code Execution (MS08-057) - Ver2 (CVE-2008-3477)
Critical	3 Dec 2014	27 Apr 2015	CPAI-2014-2272		CVE-2014-9222	RomPager Authentication Security Bypass - Misfortune Cookie (CVE-2014-9222)
Critical	7 Jan 2014	19 Apr 2015	CPAI-2014-0061		CVE-2000-0236	Netscape Server WP Tag Directory Traversal - Ver2 (CVE-2000-0236)
Critical	7 Jan 2014	19 Apr 2015	CPAI-2014-0039		CVE-2002-0562	Oracle 9i HTTP Server Globals.JSA Access Information Disclosure - Ver2 (CVE-2002-0562)
Critical	7 Jan 2014	19 Apr 2015	CPAI-2014-0036		CVE-2002-0568	Oracle 9i HTTP Server soapConfig.xml Access Information Disclosure - Ver2 (CVE-2002-0568)
Medium	6 Feb 2014	19 Apr 2015	CPAI-2014-0893		CVE-2012-3152 CVE-2012-3153	Oracle Fusion Middleware Showmap Servlet Information Disclosure (CVE-2012-3152; CVE-2012-3153)
Medium	6 Feb 2014	19 Apr 2015	CPAI-2014-0894		CVE-2012-3152 CVE-2012-3153	Oracle Fusion Middleware Showenv Servlet Information Disclosure (CVE-2012-3152; CVE-2012-3153)
Medium	13 Feb 2014	19 Apr 2015	CPAI-2014-0915			PHP Easter Egg Information Disclosure
High	2 Mar 2014	19 Apr 2015	CPAI-2014-1063			Web Servers HTTP Response Splitter Cache Poisoning
Critical	3 Mar 2014	19 Apr 2015	CPAI-2014-1113		CVE-2001-0537	Cisco IOS HTTP Authentication Bypass - Ver2 (CVE-2001-0537)
Critical	11 Mar 2014	19 Apr 2015	CPAI-2014-1144	Symantec	CVE-2013-5014	Symantec Endpoint Protection Manager XML External Entity Denial Of Service (CVE-2013-5014)
Medium	17 Mar 2014	19 Apr 2015	CPAI-2014-1159		CVE-2002-2006 CVE-2002-2007 CVE-2002-2008	Apache Tomcat Server Malicious Request Information Disclosure (CVE-2002-2006; CVE-2002-2007; CVE-2002-2008)
High	17 Mar 2014	19 Apr 2015	CPAI-2014-1161		CVE-2006-3918	Apache HTTP Server Header Injection Cross-Site Scripting (CVE-2006-3918)
Medium	18 Mar 2014	19 Apr 2015	CPAI-2014-1162		CVE-2006-4966	PHP GLOBALS Remote File Inclusion (CVE-2006-4966)
Critical	24 Jun 2014	19 Apr 2015	CPAI-2014-1693			ZmEu Security Scanner
High	27 Aug 2014	19 Apr 2015	CPAI-2014-1779			Web Servers Joomla Remote File Inclusion
High	17 Nov 2014	19 Apr 2015	CPAI-2014-2210		CVE-2008-6178 CVE-2009-2265	Adobe ColdFusion FCKeditor Input Validation Flaw Arbitrary File Upload (CVE-2008-6178; CVE-2009-2265)
Critical	31 Dec 2014	19 Apr 2015	CPAI-2014-2339			Wordpress Ajax Store Locator Arbitrary File Download
High	31 Dec 2014	19 Apr 2015	CPAI-2014-2469		CVE-2014-10021	WordPress Symposium Plugin Unauthenticated Shell Upload (CVE-2014-10021)
Medium	28 Dec 2014	14 Apr 2015	CPAI-2014-2411		CVE-2002-0072	Microsoft IIS URL Access Violation DoS - Ver2 (CVE-2002-0072)
High	28 Sep 2014	1 Apr 2015	CPAI-2015-0414	OpenSSL	CVE-2014-3506	OpenSSL DTLS Handshake Memory Exhaustion - ver 2 (CVE-2014-3506)
High	23 Jan 2014	30 Mar 2015	CPAI-2014-0761		CVE-2013-4517	Apache Santuario XML Security for Java DTD Denial of Service (CVE-2013-4517)