Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	11 Dec 2014	11 Dec 2014	CPAI-2014-2297			Joomla and Wordpress Mass Defacer Tool
High	9 Apr 2014	10 Dec 2014	CPAI-2014-1339	RealNetworks 07252008_player	CVE-2007-5400	RealNetworks RealPlayer SWF Frame Handling Buffer Overflow - ver 2 (CVE-2007-5400)
Critical	3 Dec 2014	10 Dec 2014	CPAI-2014-2276		CVE-2014-9057	MovableType Unsanitized Input SQL Injection (CVE-2014-9057)
Medium	10 Dec 2014	10 Dec 2014	CPAI-2014-2291			Horny Monkey Deface Maker Tool
High	14 Oct 2014	9 Dec 2014	CPAI-2014-1884	Microsoft MS14-061	CVE-2014-4117	Microsoft Word Memory Corruption (MS14-061: CVE-2014-4117)
Medium	2 Dec 2014	9 Dec 2014	CPAI-2014-2267			xMid Deface Page Creator Tool
Critical	3 Dec 2014	9 Dec 2014	CPAI-2014-2274		CVE-2014-7237	Twiki/Fosswiki Unauthenticated Arbitrary File Upload (CVE-2014-7237)
Medium	7 Dec 2014	9 Dec 2014	CPAI-2014-2280			xcv Deface Maker Tool
Critical	8 Dec 2014	9 Dec 2014	CPAI-2014-2284			Multiple Web Servers ASPXshell Backdoor Command Execution
High	9 Dec 2014	9 Dec 2014	CPAI-2014-1959	Microsoft MS14-075	CVE-2014-6336	Microsoft Exchange Server Outlook Web Access URL Redirection (MS14-075; CVE-2014-6336)
High	9 Dec 2014	9 Dec 2014	CPAI-2014-1982	Microsoft MS14-075	CVE-2014-6326	Microsoft Exchange Server Outlook Web Access Cross-Site Scripting (MS14-075; CVE-2014-6326)
Critical	9 Dec 2014	9 Dec 2014	CPAI-2014-2246	Microsoft MS14-080	CVE-2014-6363	Microsoft Internet Explorer VBScript Memory Corruption (MS14-080; CVE-2014-6363)
High	9 Dec 2014	9 Dec 2014	CPAI-2014-2238	Microsoft MS14-083	CVE-2014-6361	Microsoft Excel Invalid Pointer Remote Code Execution (MS14-083; CVE-2014-6361)
High	9 Dec 2014	9 Dec 2014	CPAI-2014-2239	Microsoft MS14-083	CVE-2014-6360	Microsoft Excel Global Free Remote Code Execution (MS14-083; CVE-2014-6360)
Critical	9 Dec 2014	9 Dec 2014	CPAI-2014-2271	Microsoft MS14-081	CVE-2014-6356	Microsoft Office Index Remote Code Execution (MS14-081; CVE-2014-6356)
Critical	9 Dec 2014	9 Dec 2014	CPAI-2014-2259	Microsoft MS14-081	CVE-2014-6357	Microsoft Word Use After Free Remote Code Execution (MS14-081; CVE-2014-6357)
High	9 Dec 2014	9 Dec 2014	CPAI-2014-2234	Microsoft MS14-085	CVE-2014-6355	Microsoft Graphics Component Information Disclosure (MS14-085; CVE-2014-6355)
High	9 Dec 2014	9 Dec 2014	CPAI-2014-2273	Microsoft ms14-082	CVE-2014-6364	Microsoft Office Component Use After Free Remote Code Execution (MS14-082; CVE-2014-6364)
High	1 Dec 2014	8 Dec 2014	CPAI-2014-2263		CVE-2008-5666	WinFTP Server NLST Command Denial of Service (CVE-2008-5666)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2041		CVE-2006-4282	Joomla Component com_mambowiki Remote File Inclusion (CVE-2006-4282)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2151		CVE-2007-1808	XOOPS Module Camportail Remote SQL Injection (CVE-2007-1808)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2012		CVE-2009-4104	Joomla Component com_lyftenbloggie Remote SQL Injection (CVE-2009-4104)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2093		CVE-2008-1702	E107 My_Gallery Plugin Absolute Path Traversal (CVE-2008-1702)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2076		CVE-2010-0610	Joomla Component com_photoblog SQL Injection (CVE-2010-0610)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2014		CVE-2007-1034	PHP Nuke Module Emporium modules php SQL Injection (CVE-2007-1034)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2170		CVE-2008-2627	Joomla Component com_idoBlog Remote SQL Injection (CVE-2008-2627)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2060		CVE-2008-6068	Joomla Component com_joomlaDate SQL Injection (CVE-2008-6068)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2077		CVE-2008-2692	Joomla Component com_yvcomment SQL Injection (CVE-2008-2692)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2120		CVE-2010-1045	Joomla Component com_productbook SQL Injection (CVE-2010-1045)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2016		CVE-2011-4808	Joomla Component com_hmcommunity SQL Injection (CVE-2011-4808)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2098		CVE-2010-1056	Joomla Component com_rokdownloads Local File Inclusion (CVE-2010-1056)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2051		CVE-2010-4719	Joomla Component com_jradio Local File Inclusion (CVE-2010-4719)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2079			Joomla Component com_team SQL Injection
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2064			Joomla Component com_joomnik SQL Injection
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2087			Joomla Component com_rsappt_pro2 Local File Inclusion
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2030		CVE-2008-2568	Joomla Component com_simpleshop SQL Injection (CVE-2008-2568)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2089		CVE-2010-3422	Joomla Component com_jgen SQL Injection (CVE-2010-3422)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2068		CVE-2008-5200	Joomla Component com_xewebtv SQL Injection (CVE-2008-5200)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2154		CVE-2007-1805	XOOPS Module debaser SQL Injection (CVE-2007-1805)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2155		CVE-2007-1806	XOOPS Module RM and Soft Gallery SQL Injection (CVE-2007-1806)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2086			EXoopport 31 eCal displayphp SQL Injection
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2157		CVE-2009-4582	XOOPS Module dictionary SQL Injection (CVE-2009-4582)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2114			Joomla component com_ponygallery SQL Injection
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2052			Joomla Component com_linkr Local File Inclusion
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2026		CVE-2008-4653	XOOPS Module makale Remote SQL Injection (CVE-2008-4653)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2169			Joomla Component com_s5clanroster SQL Injection
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2134		CVE-2008-3498	Joomla Component com_netinvoice SQL Injection (CVE-2008-3498)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2096		CVE-2008-2455	E107 BLOG Engine Plugin SQL Injection (CVE-2008-2455)
High	10 Nov 2014	7 Dec 2014	CPAI-2014-2021			Joomla Component com_category SQL Injection
High	10 Nov 2014	7 Dec 2014	CPAI-2014-1996		CVE-2007-3311	XOOPS module Articles SQL Injection (CVE-2007-3311)