Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	17 Mar 2014	19 Apr 2015	CPAI-2014-1159		CVE-2002-2006 CVE-2002-2007 CVE-2002-2008	Apache Tomcat Server Malicious Request Information Disclosure (CVE-2002-2006; CVE-2002-2007; CVE-2002-2008)
High	17 Mar 2014	19 Apr 2015	CPAI-2014-1161		CVE-2006-3918	Apache HTTP Server Header Injection Cross-Site Scripting (CVE-2006-3918)
Medium	18 Mar 2014	19 Apr 2015	CPAI-2014-1162		CVE-2006-4966	PHP GLOBALS Remote File Inclusion (CVE-2006-4966)
Critical	24 Jun 2014	19 Apr 2015	CPAI-2014-1693			ZmEu Security Scanner
High	27 Aug 2014	19 Apr 2015	CPAI-2014-1779			Web Servers Joomla Remote File Inclusion
High	17 Nov 2014	19 Apr 2015	CPAI-2014-2210		CVE-2008-6178 CVE-2009-2265	Adobe ColdFusion FCKeditor Input Validation Flaw Arbitrary File Upload (CVE-2008-6178; CVE-2009-2265)
Critical	31 Dec 2014	19 Apr 2015	CPAI-2014-2339			Wordpress Ajax Store Locator Arbitrary File Download
High	31 Dec 2014	19 Apr 2015	CPAI-2014-2469		CVE-2014-10021	WordPress Symposium Plugin Unauthenticated Shell Upload (CVE-2014-10021)
Medium	28 Dec 2014	14 Apr 2015	CPAI-2014-2411		CVE-2002-0072	Microsoft IIS URL Access Violation DoS - Ver2 (CVE-2002-0072)
High	28 Sep 2014	1 Apr 2015	CPAI-2015-0414	OpenSSL	CVE-2014-3506	OpenSSL DTLS Handshake Memory Exhaustion - ver 2 (CVE-2014-3506)
High	23 Jan 2014	30 Mar 2015	CPAI-2014-0761		CVE-2013-4517	Apache Santuario XML Security for Java DTD Denial of Service (CVE-2013-4517)
Critical	10 Jun 2014	30 Mar 2015	CPAI-2014-1500	Microsoft MS14-035	CVE-2014-1797	Microsoft Internet Explorer Memory Corruption (MS14-035: CVE-2014-1797)
Critical	2 Dec 2014	5 Mar 2015	CPAI-2014-2266		CVE-2014-9223	RomPager Authorization Buffer Overflow Denial of Service (CVE-2014-9223)
Critical	16 Nov 2014	24 Feb 2015	CPAI-2015-0187			Web Clients Suspicious Image File Download
High	19 Jan 2014	15 Feb 2015	CPAI-2014-0751		CVE-2005-1009	BakBone NetVault Messages Buffer Overflow - ver 2 (CVE-2005-1009)
Critical	9 Dec 2014	12 Feb 2015	CPAI-2014-2264	Microsoft MS14-080	CVE-2014-6368	Microsoft Internet Explorer Memory Corruption (MS14-080: CVE-2014-6368)
High	31 Mar 2014	22 Jan 2015	CPAI-2014-1241		CVE-1999-0660	Microsoft Windows Trojan Client Remote Code Execution - Ver2 (CVE-1999-0660)
High	5 Oct 2014	19 Jan 2015	CPAI-2015-0049		CVE-2013-6114	Apple Motion OZDocument::parseElement Integer Overflow (CVE-2013-6114)
Critical	5 Jan 2014	18 Jan 2015	CPAI-2015-0028	Adobe APSB14-28	CVE-2014-8445	Adobe Acrobat and Reader Memory Corruption (APSB14-28: CVE-2014-8445)
High	29 Dec 2014	18 Jan 2015	CPAI-2014-2333		CVE-2014-8386	Advantech ADAMView Display Properties Parameter Remote Code Execution (CVE-2014-8386)
Critical	25 Dec 2014	15 Jan 2015	CPAI-2015-0015		CVE-2014-4878 CVE-2014-4879	Hikvision DVR Request Header and Request Body Buffer Overflow (CVE-2014-4878; CVE-2014-4879)
High	31 Dec 2014	12 Jan 2015	CPAI-2014-2341		CVE-2014-5445	ManageEngine NetFlow Analyzer And IT360 Multiple servlets Arbitrary File Download (CVE-2014-5445)
High	29 Dec 2014	8 Jan 2015	CPAI-2014-2338			ActualScripts ActualAnalyzer Cookie Command Execution
High	20 Nov 2014	30 Dec 2014	CPAI-2014-2216	Symantec	CVE-2014-3438	Symantec Endpoint Protection Manager Cross-Site Scripting (CVE-2014-3438)
High	17 Dec 2014	30 Dec 2014	CPAI-2014-2307		CVE-2014-6039	ManageEngine EventLog Analyzer Hostdetails Information Disclosure (CVE-2014-6039)
Medium	25 Dec 2014	29 Dec 2014	CPAI-2014-2327	RealNetworks	CVE-2011-4259	RealNetworks RealPlayer MPG Width Integer Underflow Memory Corruption - ver 2 (CVE-2011-4259)
Critical	25 Dec 2014	29 Dec 2014	CPAI-2014-2325		CVE-2014-4880	Hikvision DVR Basic Authentication Buffer Overflow (CVE-2014-4880)
Critical	29 Dec 2014	29 Dec 2014	CPAI-2014-2336	Adobe APSB13-02	CVE-2013-0610	Adobe Acrobat and Reader Stack Buffer Overflow (APSB13-02: CVE-2013-0610)
High	28 Dec 2014	28 Dec 2014	CPAI-2014-2451		CVE-2004-0045	InterNetNews Control Message Handling Buffer Overflow - Ver2 (CVE-2004-0045)
Medium	28 Dec 2014	28 Dec 2014	CPAI-2014-2456		CVE-2008-4399	CA ARCserve Backup DB Engine Denial of Service - Ver2 (CVE-2008-4399)
Medium	28 Dec 2014	28 Dec 2014	CPAI-2014-2349		CVE-2004-0417	CVS Max-dotdot Protocol Command Integer Overflow - Ver2 (CVE-2004-0417)
High	28 Dec 2014	28 Dec 2014	CPAI-2014-2419		CVE-2014-3914	Rocket Servergraph Admin Center fileRequestor Directory Traversal - Ver2 (CVE-2014-3914)
High	28 Dec 2014	28 Dec 2014	CPAI-2014-2433		CVE-2004-0396	CVS Entry Line Flag Remote Heap Overflow - Ver2 (CVE-2004-0396)
Critical	28 Dec 2014	28 Dec 2014	CPAI-2014-2354		CVE-2004-1050	Internet Explorer Malformed IFRAME Buffer Overflow (MS04-040) - Ver2 (CVE-2004-1050)
Critical	28 Dec 2014	28 Dec 2014	CPAI-2014-2436		CVE-2011-3322	Procyon Core Server HMI Memory Corruption SCADA Remote Code Execution - Ver2 (CVE-2011-3322)
High	28 Dec 2014	28 Dec 2014	CPAI-2014-2426		CVE-2006-4129	Joomla Component com_webring Remote File Inclusion - Ver2 (CVE-2006-4129)
High	28 Dec 2014	28 Dec 2014	CPAI-2014-2459		CVE-2012-0664	Apple QuickTime Text Track Descriptors Heap Buffer Overflow - Ver2 (CVE-2012-0664)
Medium	28 Dec 2014	28 Dec 2014	CPAI-2014-2397		CVE-2004-0331	Dell OpenManage Web Server Buffer Overflow - Ver2 (CVE-2004-0331)
High	28 Dec 2014	28 Dec 2014	CPAI-2014-2398		CVE-2008-4398	CA ARCserve Backup Tape Engine Denial of Service - Ver2 (CVE-2008-4398)
High	28 Dec 2014	28 Dec 2014	CPAI-2014-2449		CVE-2006-1652	UltraVNC VNCLog Buffer Overflow - Ver2 (CVE-2006-1652)
Critical	28 Dec 2014	28 Dec 2014	CPAI-2014-2382		CVE-2013-2348	HP Data Protector Opcode 45 and 46 Code Execution - Ver2 (CVE-2013-2348)
High	7 Oct 2014	28 Dec 2014	CPAI-2014-1892	OpenSSL	CVE-2014-3507	OpenSSL dtls1_process_out_of_seq_message Denial of Service (CVE-2014-3507)
High	28 Dec 2014	28 Dec 2014	CPAI-2014-2437		CVE-2007-3656	Firefox wyciwyg Cache Manipulation Flaw Information Disclosure - Ver2 (CVE-2007-3656)
Medium	28 Dec 2014	28 Dec 2014	CPAI-2014-2358		CVE-2011-4051	InduSoft Web Studio Unauthenticated Insecure Remote Operations Code Execution - Ver2 (CVE-2011-4051)
High	28 Dec 2014	28 Dec 2014	CPAI-2014-2455		CVE-2006-0075	PhpBook mail Parameter PHP Code Execution - Ver2 (CVE-2006-0075)
High	28 Dec 2014	28 Dec 2014	CPAI-2014-2421		CVE-2005-1806	Peercast URL Format String Exploit Code Execution - Ver2 (CVE-2005-1806)
High	28 Dec 2014	28 Dec 2014	CPAI-2014-2368		CVE-2007-3734	Mozilla Firefox Design Mode Deleted Style Reference Memory Corruption - Ver2 (CVE-2007-3734)
High	28 Dec 2014	28 Dec 2014	CPAI-2014-2424		CVE-2013-0003	Microsoft .NET Framework S.DS.P Namespace Method Buffer Overflow - Ver2 (CVE-2013-0003)
High	28 Dec 2014	28 Dec 2014	CPAI-2014-2396		CVE-2008-1802	RDesktop process_redirect_pdu BSS Overflow Buffer Overflow - Ver2 (CVE-2008-1802)
High	28 Dec 2014	28 Dec 2014	CPAI-2014-2347		CVE-2013-4233	VLC Media Player ABC File Parsing Buffer Overflow - Ver2 (CVE-2013-4233)