Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	16 Nov 2014	7 Dec 2014	CPAI-2014-2198		CVE-2010-2128	Joomla Component com_jequoteform Local File Inclusion (CVE-2010-2128)
High	30 Nov 2014	7 Dec 2014	CPAI-2014-2249		CVE-2007-1165	DBGuestBook dbs_base_path Parameter Multiple Vulnerabilities (CVE-2007-1165)
Medium	2 Sep 2014	4 Dec 2014	CPAI-2014-1784		CVE-2012-4914	CoolPDF Reader Image Stream Processing Buffer Overflow - ver 2 (CVE-2012-4914)
High	2 Dec 2014	3 Dec 2014	CPAI-2014-2270			Malicious iFrame Conditional Cookie Injection
Critical	6 Aug 2014	2 Dec 2014	CPAI-2014-1756	Apache Software Foundation	CVE-2014-0226	Apache HTTP Server mod_status Heap Buffer Overflow (CVE-2014-0226)
High	30 Oct 2014	2 Dec 2014	CPAI-2014-1944			Spike DDoS Toolkit GET Flood Denial of Service
High	12 Nov 2014	1 Dec 2014	CPAI-2014-2186	Apache Foundation	CVE-2011-3348	Apache HTTPD mod_proxy_ajp Denial Of Service (CVE-2011-3348)
High	17 Nov 2014	1 Dec 2014	CPAI-2014-2209			Visual Mining NetCharts Server File Upload Directory Traversal
High	27 Nov 2014	1 Dec 2014	CPAI-2014-2258		CVE-2006-6576	Golden FTP PASS Buffer Overflow (CVE-2006-6576)
Critical	13 May 2014	30 Nov 2014	CPAI-2014-1490			Executable File With Non-Executable File Extension Arbitrary File Execution
Critical	28 Jul 2014	26 Nov 2014	CPAI-2014-1737	D-Link Systems SAP10029	CVE-2014-3936	D-Link HNAP Request Stack Buffer Overflow (CVE-2014-3936)
High	23 Nov 2014	26 Nov 2014	CPAI-2014-2221		CVE-2011-5049	MySQL Database Null Pointer Denial of Service (CVE-2011-5049)
Critical	25 Nov 2014	26 Nov 2014	CPAI-2014-2228	PHP	CVE-2014-3669	PHP Core unserialize Function Integer Overflow (CVE-2014-3669)
High	25 Nov 2014	26 Nov 2014	CPAI-2014-2230		CVE-2014-8997	Digi Online Examination Unrestricted File Upload (CVE-2014-8997)
Critical	17 Nov 2014	25 Nov 2014	CPAI-2014-2208	LibreOffice	CVE-2014-3693	LibreOffice Impress Remote Control Use After Free (CVE-2014-3693)
High	26 Oct 2014	24 Nov 2014	CPAI-2014-1938		CVE-2011-2763	LifeSize Room Security Bypass and Command Injection Vulnerabilities (CVE-2011-2763)
Medium	17 Nov 2014	23 Nov 2014	CPAI-2014-2211	Mitre	CVE-2005-2373	SlimFTPd LIST Command Buffer Overflow (CVE-2005-2373)
High	23 Oct 2014	20 Nov 2014	CPAI-2014-1922	PowerDNS.COM BV	CVE-2014-3614	PowerDNS Recursor Denial of Service (CVE-2014-3614)
High	20 Nov 2014	20 Nov 2014	CPAI-2014-2215		CVE-2014-6038	ManageEngine EventLog Analyzer agentHandler Information Disclosure (CVE-2014-6038)
High	26 Oct 2014	19 Nov 2014	CPAI-2014-1932	PHP	CVE-2014-3587	PHP Fileinfo cdf_read_property_info Denial of Service (CVE-2014-3587)
High	12 Nov 2014	19 Nov 2014	CPAI-2014-2187	PHP	CVE-2014-3587	PHP Fileinfo cdf_read_property_info Denial of Service - ver 2 (CVE-2014-3587)
Critical	17 Nov 2014	19 Nov 2014	CPAI-2014-2213			Web Servers File Download Manipulation
High	9 Nov 2014	18 Nov 2014	CPAI-2014-1987		CVE-2009-0837	Foxit Reader PDF Files Processing Buffer Overflow (CVE-2009-0837)
High	12 Nov 2014	18 Nov 2014	CPAI-2014-2178			Mayhem Shellshock Infection Attempt
Medium	16 Nov 2014	17 Nov 2014	CPAI-2014-2192	Microsoft ms14-059	CVE-2014-4075	Microsoft ASP.NET MVC Cross-Site Scripting (MS14-059; CVE-2014-4075)
Medium	6 Feb 2014	16 Nov 2014	CPAI-2014-0895		CVE-2012-3152 CVE-2012-3153	Oracle Fusion Middleware Remote File Inclusion (CVE-2012-3152; CVE-2012-3153)
High	30 Sep 2014	16 Nov 2014	CPAI-2014-1854		CVE-2014-6270	Squid snmpHandleUdp Off-by-one Buffer Overflow (CVE-2014-6270)
High	29 May 2014	12 Nov 2014	CPAI-2014-1580	Clam AntiVirus Project	CVE-2007-4560	ClamAV Mail Filter Extension Crafted Recipient Command Execution - ver 2 (CVE-2007-4560)
High	6 Nov 2014	11 Nov 2014	CPAI-2014-1989	Trend Micro Blog		Operation Huyao Phishing Attempt
High	11 Nov 2014	11 Nov 2014	CPAI-2014-1946	Microsoft MS14-069	CVE-2014-6335	Microsoft Office Invalid Pointer Remote Code Execution (MS14-069; CVE-2014-6335)
High	11 Nov 2014	11 Nov 2014	CPAI-2014-1937	Microsoft MS14-069	CVE-2014-6333	Microsoft Office Double Delete Remote Code Execution (MS14-069; CVE-2014-6333)
High	11 Nov 2014	11 Nov 2014	CPAI-2014-1974	Microsoft MS14-071	CVE-2014-6322	Microsoft Windows Audio Service Elevation of Privilege (MS14-071; CVE-2014-6322)
High	11 Nov 2014	11 Nov 2014	CPAI-2014-1885	Microsoft MS14-067	CVE-2014-4118	Microsoft Windows MSXML XSLT Remote Code Execution (MS14-067; CVE-2014-4118)
High	11 Nov 2014	11 Nov 2014	CPAI-2014-1890	Microsoft MS14-073	CVE-2014-4116	Microsoft SharePoint Active Scripting Elevation of Privilege (MS14-073; CVE-2014-4116)
Critical	2 Jul 2014	10 Nov 2014	CPAI-2014-1992			Multiple PHP Servers SyrianShell Backdoor Command Execution
Critical	23 Oct 2014	5 Nov 2014	CPAI-2014-1926		CVE-2011-4542	Hastymail2 call_user_func_array() Command Injection (CVE-2011-4542)
Critical	15 Sep 2014	4 Nov 2014	CPAI-2014-1809	Apache	CVE-2014-0117	Apache HTTP Server error handling malformed HTTP headers Denial of Service (CVE-2014-0117)
Critical	22 Oct 2014	4 Nov 2014	CPAI-2014-1919	Adobe APSB14-22	CVE-2014-0558	Adobe Flash Player Memory Corruption (APSB14-22: CVE-2014-0558)
Medium	29 Oct 2014	29 Oct 2014	CPAI-2014-1891	Digium AST-2014-007	CVE-2014-4047	Digium Asterisk HTTP Connections Denial of Service (CVE-2014-4047)
High	29 Oct 2014	29 Oct 2014	CPAI-2014-1901	Redhat RHSA-2014-1298	CVE-2014-3490	Red Hat JBoss RESTEasy PARAMETER ENTITY XXE Information Disclosure (CVE-2014-3490)
High	29 Oct 2014	29 Oct 2014	CPAI-2014-1903	LibVNCServer 05a9bd41a	CVE-2014-6054	LibVNCServer rfbProcessClientNormalMessage msg.ssc.scale Divide by Zero Denial of Service (CVE-2014-6054)
High	29 Oct 2014	29 Oct 2014	CPAI-2014-1849	OpenSSL	CVE-2014-3506	OpenSSL DTLS Handshake Memory Exhaustion (CVE-2014-3506)
High	29 Oct 2014	29 Oct 2014	CPAI-2014-1857	OpenSSL	CVE-2014-3505	OpenSSL DTLS Handshake Double Free (CVE-2014-3505)
High	6 Oct 2014	28 Oct 2014	CPAI-2014-1935		CVE-2011-5003	Avid Media Composer AvidPhoneticIndexer.exe Stack Buffer Overflow (CVE-2011-5003)
Critical	13 Oct 2014	28 Oct 2014	CPAI-2014-1905	ManageEngine	CVE-2014-6035	ManageEngine Multiple Products FileCollector Directory Traversal (CVE-2014-6035)
High	14 Jul 2014	27 Oct 2014	CPAI-2014-1712		CVE-2014-3915	Rocket Servergraph Admin Center userRequest and tsmRequest Command Execution (CVE-2014-3915)
Critical	19 Oct 2014	27 Oct 2014	CPAI-2014-1914	AlienVault	CVE-2014-5158	AlienVault OSSIM Framework Backup Command Execution (CVE-2014-5158)
N/A	31 Mar 2014	26 Oct 2014	CPAI-2014-1305			Microsoft Internet Explorer 7
Medium	23 Oct 2014	23 Oct 2014	SBP-2009-17			JavaScript Percent-Encoding Obfuscation
High	22 Oct 2014	22 Oct 2014	CPAI-2014-1873	Novell	CVE-2014-0600	Novell GroupWise Admin Service FileUploadServlet Directory Traversal (CVE-2014-0600)