Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	25 Nov 2014	26 Nov 2014	CPAI-2014-2228	PHP	CVE-2014-3669	PHP Core unserialize Function Integer Overflow (CVE-2014-3669)
High	25 Nov 2014	26 Nov 2014	CPAI-2014-2230		CVE-2014-8997	Digi Online Examination Unrestricted File Upload (CVE-2014-8997)
Critical	17 Nov 2014	25 Nov 2014	CPAI-2014-2208	LibreOffice	CVE-2014-3693	LibreOffice Impress Remote Control Use After Free (CVE-2014-3693)
High	26 Oct 2014	24 Nov 2014	CPAI-2014-1938		CVE-2011-2763	LifeSize Room Security Bypass and Command Injection Vulnerabilities (CVE-2011-2763)
Medium	17 Nov 2014	23 Nov 2014	CPAI-2014-2211	Mitre	CVE-2005-2373	SlimFTPd LIST Command Buffer Overflow (CVE-2005-2373)
High	23 Oct 2014	20 Nov 2014	CPAI-2014-1922	PowerDNS.COM BV	CVE-2014-3614	PowerDNS Recursor Denial of Service (CVE-2014-3614)
High	20 Nov 2014	20 Nov 2014	CPAI-2014-2215		CVE-2014-6038	ManageEngine EventLog Analyzer agentHandler Information Disclosure (CVE-2014-6038)
High	26 Oct 2014	19 Nov 2014	CPAI-2014-1932	PHP	CVE-2014-3587	PHP Fileinfo cdf_read_property_info Denial of Service (CVE-2014-3587)
High	12 Nov 2014	19 Nov 2014	CPAI-2014-2187	PHP	CVE-2014-3587	PHP Fileinfo cdf_read_property_info Denial of Service - ver 2 (CVE-2014-3587)
Critical	17 Nov 2014	19 Nov 2014	CPAI-2014-2213			Web Servers File Download Manipulation
High	9 Nov 2014	18 Nov 2014	CPAI-2014-1987		CVE-2009-0837	Foxit Reader PDF Files Processing Buffer Overflow (CVE-2009-0837)
High	12 Nov 2014	18 Nov 2014	CPAI-2014-2178			Mayhem Shellshock Infection Attempt
Medium	16 Nov 2014	17 Nov 2014	CPAI-2014-2192	Microsoft ms14-059	CVE-2014-4075	Microsoft ASP.NET MVC Cross-Site Scripting (MS14-059; CVE-2014-4075)
Medium	6 Feb 2014	16 Nov 2014	CPAI-2014-0895		CVE-2012-3152 CVE-2012-3153	Oracle Fusion Middleware Remote File Inclusion (CVE-2012-3152; CVE-2012-3153)
High	30 Sep 2014	16 Nov 2014	CPAI-2014-1854		CVE-2014-6270	Squid snmpHandleUdp Off-by-one Buffer Overflow (CVE-2014-6270)
High	29 May 2014	12 Nov 2014	CPAI-2014-1580	Clam AntiVirus Project	CVE-2007-4560	ClamAV Mail Filter Extension Crafted Recipient Command Execution - ver 2 (CVE-2007-4560)
High	12 Nov 2014	12 Nov 2014	CPAI-2014-2180		CVE-2014-1635	Belkin N750 Router Unauthenticated Remote Command Execution (CVE-2014-1635)
High	6 Nov 2014	11 Nov 2014	CPAI-2014-1989	Trend Micro Blog		Operation Huyao Phishing Attempt
High	11 Nov 2014	11 Nov 2014	CPAI-2014-1946	Microsoft MS14-069	CVE-2014-6335	Microsoft Office Invalid Pointer Remote Code Execution (MS14-069; CVE-2014-6335)
High	11 Nov 2014	11 Nov 2014	CPAI-2014-1937	Microsoft MS14-069	CVE-2014-6333	Microsoft Office Double Delete Remote Code Execution (MS14-069; CVE-2014-6333)
High	11 Nov 2014	11 Nov 2014	CPAI-2014-1974	Microsoft MS14-071	CVE-2014-6322	Microsoft Windows Audio Service Elevation of Privilege (MS14-071; CVE-2014-6322)
High	11 Nov 2014	11 Nov 2014	CPAI-2014-1936	Microsoft MS14-070	CVE-2014-4076	Microsoft Windows TCP/IP IOCTL Processing Elevation of Privilege (MS14-070; CVE-2014-4076)
High	11 Nov 2014	11 Nov 2014	CPAI-2014-1885	Microsoft MS14-067	CVE-2014-4118	Microsoft Windows MSXML XSLT Remote Code Execution (MS14-067; CVE-2014-4118)
High	11 Nov 2014	11 Nov 2014	CPAI-2014-1890	Microsoft MS14-073	CVE-2014-4116	Microsoft SharePoint Active Scripting Elevation of Privilege (MS14-073; CVE-2014-4116)
Critical	2 Jul 2014	10 Nov 2014	CPAI-2014-1992			Multiple PHP Servers SyrianShell Backdoor Command Execution
Critical	23 Oct 2014	5 Nov 2014	CPAI-2014-1926		CVE-2011-4542	Hastymail2 call_user_func_array() Command Injection (CVE-2011-4542)
Critical	15 Sep 2014	4 Nov 2014	CPAI-2014-1809	Apache	CVE-2014-0117	Apache HTTP Server error handling malformed HTTP headers Denial of Service (CVE-2014-0117)
Critical	22 Oct 2014	4 Nov 2014	CPAI-2014-1919	Adobe APSB14-22	CVE-2014-0558	Adobe Flash Player Memory Corruption (APSB14-22: CVE-2014-0558)
Medium	29 Oct 2014	29 Oct 2014	CPAI-2014-1891	Digium AST-2014-007	CVE-2014-4047	Digium Asterisk HTTP Connections Denial of Service (CVE-2014-4047)
High	29 Oct 2014	29 Oct 2014	CPAI-2014-1901	Redhat RHSA-2014-1298	CVE-2014-3490	Red Hat JBoss RESTEasy PARAMETER ENTITY XXE Information Disclosure (CVE-2014-3490)
High	29 Oct 2014	29 Oct 2014	CPAI-2014-1903	LibVNCServer 05a9bd41a	CVE-2014-6054	LibVNCServer rfbProcessClientNormalMessage msg.ssc.scale Divide by Zero Denial of Service (CVE-2014-6054)
High	29 Oct 2014	29 Oct 2014	CPAI-2014-1849	OpenSSL	CVE-2014-3506	OpenSSL DTLS Handshake Memory Exhaustion (CVE-2014-3506)
High	29 Oct 2014	29 Oct 2014	CPAI-2014-1857	OpenSSL	CVE-2014-3505	OpenSSL DTLS Handshake Double Free (CVE-2014-3505)
High	6 Oct 2014	28 Oct 2014	CPAI-2014-1935		CVE-2011-5003	Avid Media Composer AvidPhoneticIndexer.exe Stack Buffer Overflow (CVE-2011-5003)
Critical	13 Oct 2014	28 Oct 2014	CPAI-2014-1905	ManageEngine	CVE-2014-6035	ManageEngine Multiple Products FileCollector Directory Traversal (CVE-2014-6035)
High	14 Jul 2014	27 Oct 2014	CPAI-2014-1712		CVE-2014-3915	Rocket Servergraph Admin Center userRequest and tsmRequest Command Execution (CVE-2014-3915)
Critical	19 Oct 2014	27 Oct 2014	CPAI-2014-1914	AlienVault	CVE-2014-5158	AlienVault OSSIM Framework Backup Command Execution (CVE-2014-5158)
N/A	31 Mar 2014	26 Oct 2014	CPAI-2014-1305			Microsoft Internet Explorer 7
High	17 Aug 2014	26 Oct 2014	CPAI-2014-1155	Apache	CVE-2014-0003	Apache Camel XSLT Component Java Code Execution (CVE-2014-0003)
Medium	23 Oct 2014	23 Oct 2014	SBP-2009-17			JavaScript Percent-Encoding Obfuscation
High	22 Oct 2014	22 Oct 2014	CPAI-2014-1873	Novell	CVE-2014-0600	Novell GroupWise Admin Service FileUploadServlet Directory Traversal (CVE-2014-0600)
High	22 Oct 2014	22 Oct 2014	CPAI-2014-1883	CVE-2014-4511	CVE-2014-4511	GitList URL Remote Code Execution (CVE-2014-4511)
Critical	22 Oct 2014	22 Oct 2014	CPAI-2014-1807	Oracle	CVE-2013-3751	Oracle Database Server Insecure User Input Stack Buffer Overflow (CVE-2013-3751)
High	22 Oct 2014	22 Oct 2014	CPAI-2014-1155	Apache	CVE-2014-0003	Apache Camel XSLT Component Java Code Execution (CVE-2014-0003)
High	22 Oct 2014	22 Oct 2014	CPAI-2014-1819	Apache	CVE-2013-4352	Apache HTTP Server mod_cache Denial of Service (CVE-2013-4352)
Critical	22 Oct 2014	22 Oct 2014	CPAI-2014-1828	HP	CVE-2014-2626	HP Network Virtualization toServerObject Directory Traversal (CVE-2014-2626)
Critical	22 Oct 2014	22 Oct 2014	CPAI-2014-1832	AlienVault	CVE-2014-5210	AlienVault OSSIM av-centerd Util.pm remote_task Arbitrary Command Execution (CVE-2014-5210)
High	22 Oct 2014	22 Oct 2014	CPAI-2014-1834			Microsoft Internet Explorer onreadystatechange Use After Free
High	22 Oct 2014	22 Oct 2014	CPAI-2014-1848	IPS Research Team		Windows System Files Information Disclosure
High	22 Oct 2014	22 Oct 2014	CPAI-2014-1850		CVE-2013-5705	Trustwave Holdings ModSecurity Chunked Transfer Encoding Policy Bypass (CVE-2013-5705)