Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	28 Jul 2014	7 Sep 2014	CPAI-2014-1738	Arkeia	CVE-2014-2846	Western Digital Arkeia Remote Code Execution (CVE-2014-2846)
High	31 Aug 2014	7 Sep 2014	CPAI-2014-1783			WordPress Gmedia Gallery Shell Upload
Medium	16 Sep 2014	4 Sep 2014	CPAI-2014-1789	Attachmate 2546	CVE-2014-0603	Attachmate Reflection FTP Client ActiveX GetGlobalSettings Memory Corruption (CVE-2014-0603)
High	16 Sep 2014	4 Sep 2014	CPAI-2014-1764	Microsoft Security Bulletin MS07-055	CVE-2007-2217	Microsoft Windows Kodak Image Viewer Code Execution (MS07-055; CVE-2007-2217) - ver 2
High	19 Aug 2014	4 Sep 2014	CPAI-2014-1764	Microsoft MS07-055	CVE-2007-2217	Microsoft Windows Kodak Image Viewer Code Execution (MS07-055) - ver 2 (CVE-2007-2217)
Medium	25 Aug 2014	3 Sep 2014	CPAI-2014-1771		CVE-2013-1612	Symantec Endpoint Protection Manager secars.dll Buffer Overflow (CVE-2013-1612)
Critical	9 Sep 2014	1 Sep 2014	CPAI-2014-1781	CVE-2014-0533		Adobe Flash Player Cross-Site-Scripting (APSB14-16; CVE-2014-0533)
Critical	9 Sep 2014	1 Sep 2014	CPAI-2014-1776	CVE-2014-0543		Adobe Flash Player Memory Leakage (APSB14-18; CVE-2014-0543)
Critical	9 Aug 2014	26 Aug 2014	CPAI-2014-1775	CVE-2014-0542		Adobe Flash Player Memory Leakage (APSB14-18; CVE-2014-0542)
High	19 Feb 2014	24 Aug 2014	CPAI-2014-0929		CVE-2014-0422	Oracle Java JNDI Sandbox Bypass (CVE-2014-0422)
Critical	31 Aug 2014	20 Aug 2014	CPAI-2014-1767			Adobe Flash Player Memory Leakage (APSB14-18: CVE-2014-0540)
High	9 Aug 2014	19 Aug 2014	CPAI-2014-1769			Oracle Java SE GSUB FeatureCount Buffer Overflow
High	31 Aug 2014	19 Aug 2014	CPAI-2014-1760			Jenkins Groovy Script Console Remote Code Execution
High	11 Aug 2014	19 Aug 2014	CPAI-2014-1760	Rapid7		Jenkins Groovy Script Console Remote Code Execution
High	24 Aug 2014	18 Aug 2014	CPAI-2014-1762	CVE-2010-2884		Adobe Multiple Products Flash Content Parsing Code Execution (APSA10-03: CVE-2010-2884) (CVE-2010-2884)
Critical	24 Aug 2014	18 Aug 2014	CPAI-2014-1734	CVE-2014-0787		WellinTech KingSCADA kxNetDispose.dll Stack Buffer Overflow (CVE-2014-0787)
Critical	27 Jul 2014	18 Aug 2014	CPAI-2014-1734	WellinTech ICSA-14-098-02	CVE-2014-0787	WellinTech KingSCADA kxNetDispose.dll Stack Buffer Overflow (CVE-2014-0787)
High	24 Aug 2014	14 Aug 2014	CPAI-2014-1757	CVE-2010-4741		MOXA Device Manager Tool SCADA Buffer Overflow (CVE-2010-4741)
High	24 Aug 2014	14 Aug 2014	CPAI-2014-1747	CVE-2014-2618		HP Intelligent Management Center BIMS UploadServlet Information Disclosure (CVE-2014-2618)
High	31 Jul 2014	14 Aug 2014	CPAI-2014-1747	HP	CVE-2014-2618	HP Intelligent Management Center BIMS UploadServlet Information Disclosure (CVE-2014-2618)
High	10 Aug 2014	14 Aug 2014	CPAI-2014-1757		CVE-2010-4741	MOXA Device Manager Tool SCADA Buffer Overflow (CVE-2010-4741)
Medium	27 Apr 2014	12 Aug 2014	CPAI-2014-1485	Schneider Electric 2014-024-01	CVE-2014-0779	Schneider Electric ClearSCADA OPF File Parsing Out of Bounds Array Indexing (CVE-2014-0779)
High	24 Aug 2014	11 Aug 2014	CPAI-2014-1688			UpTime Monitoring Server Insecure File Upload Remote Code Execution
High	24 Aug 2014	11 Aug 2014	CPAI-2014-1660			WordPress OptimizePress Theme File Upload Remote Code Execution
High	16 Sep 2014	11 Aug 2014	CPAI-2014-1697	Oracle	CVE-2014-0456	Oracle Java System.arraycopy Race Condition (CVE-2014-0456)
High	23 Jun 2014	11 Aug 2014	CPAI-2014-1660	Rapid7		WordPress OptimizePress Theme File Upload Remote Code Execution
High	10 Jul 2014	11 Aug 2014	CPAI-2014-1697	Oracle	CVE-2014-0456	Oracle Java System.arraycopy Race Condition (CVE-2014-0456)
Critical	10 Aug 2014	10 Aug 2014	CPAI-2014-1750		CVE-2014-3888	Yokogawa CS3000 SCADA BKFSim_vhfd.exe Remote Code Execution (CVE-2014-3888)
Critical	12 Aug 2014	6 Aug 2014	CPAI-2014-1748	CVE-2014-0537		Adobe Flash Player and AIR Security Bypass (APSB14-17; CVE-2014-0537)
Critical	16 Apr 2014	6 Aug 2014	CPAI-2014-1394		CVE-2011-2003	Microsoft Windows Font Library File Buffer Overflow - Ver2 (CVE-2011-2003)
Medium	21 Jul 2014	6 Aug 2014	CPAI-2014-1727	Symantec	CVE-2014-1652	Symantec Web Gateway Multiple PHP Pages Cross Site Scripting (CVE-2014-1652)
Critical	12 Aug 2014	5 Aug 2014	CPAI-2014-1749	CVE-2014-0522		Adobe Acrobat and Reader Memory Corruption (APSB14-15; CVE-2014-0522)
Critical	3 Aug 2014	5 Aug 2014	CPAI-2014-1749	Adobe APSB14-15	CVE-2014-0522	Adobe Acrobat and Reader Memory Corruption (APSB14-15: CVE-2014-0522)
High	24 Aug 2014	3 Aug 2014	CPAI-2014-1746	CVE-2014-2424		Oracle Event Processing FileUploadServlet Directory Traversal (CVE-2014-2424)
High	4 Aug 2014	31 Jul 2014	CPAI-2014-1741			JavaScript Code Evasion Attempt
Medium	12 Aug 2014	31 Jul 2014	CPAI-2014-1678			Login Password Brute Force Attempt
Critical	3 Aug 2014	30 Jul 2014	CPAI-2014-1740			PUF UDP Flooder
High	3 Aug 2014	29 Jul 2014	CPAI-2014-1742	CVE-2009-4180		HP OpenView Network Node Manager snmpviewer.exe Host Header Buffer Overflow (CVE-2009-4180)
High	3 Aug 2014	29 Jul 2014	CPAI-2014-1739	CVE-2014-2840 CVE-2014-4956 CVE-2014-4916		TR-069 Auto Configuration Servers Multiple Vulnerabilities (CVE-2014-2840; CVE-2014-4956; CVE-2014-4916)
Critical	3 Aug 2014	29 Jul 2014	CPAI-2014-1735	CVE-2014-4671		Adobe Flash Player JSONP Cross-Site Request Forgery (APSB14-17; CVE-2014-4671)
Critical	3 Aug 2014	29 Jul 2014	CPAI-2014-1722	CVE-2014-3805		AlienVault OSSIM av-centerd Util.pm get_license Arbitrary Command Execution (CVE-2014-3805)
High	3 Aug 2014	29 Jul 2014	CPAI-2014-1691	CVE-2014-1811		Microsoft Windows TCP Denial of Service (MS14-031; CVE-2014-1811)
Medium	27 Jul 2014	29 Jul 2014	CPAI-2014-1721		CVE-2014-4609	libav LZO Integer Overflow (CVE-2014-4609)
High	28 Jul 2014	29 Jul 2014	CPAI-2014-1739		CVE-2014-2840 CVE-2014-4916 CVE-2014-4917 CVE-2014-4918 CVE-2014-4956 CVE-2014-4957	TR-069 Auto Configuration Servers Multiple Vulnerabilities (CVE-2014-2840; CVE-2014-4916; CVE-2014-4917; CVE-2014-4918; CVE-2014-4956; CVE-2014-4957)
Critical	29 Jul 2014	29 Jul 2014	CPAI-2014-1735	Adobe APSB14-17	CVE-2014-4671	Adobe Flash Player JSONP Cross-Site Request Forgery (APSB14-17: CVE-2014-4671)
High	29 Jul 2014	29 Jul 2014	CPAI-2014-1742	HP c01950877	CVE-2009-4180	HP OpenView Network Node Manager snmpviewer.exe Host Header Buffer Overflow (CVE-2009-4180)
Critical	3 Aug 2014	28 Jul 2014	CPAI-2014-1736	CVE-2014-3804		AlienVault OSSIM av-centerd SOAP Requests Multiple Command Execution - ver 2 (CVE-2014-3804)
High	15 Jul 2014	28 Jul 2014	CPAI-2014-1716		CVE-2008-2551	Telecom Italia DownloaderActiveX.ocx ActiveX Control Code Execution (CVE-2008-2551)
High	16 Jul 2014	28 Jul 2014	CPAI-2014-1718	PHP Group	CVE-2014-4049	PHP php_parserr DNS_TXT Heap Buffer Overflow (CVE-2014-4049)
Critical	25 Feb 2014	27 Jul 2014	CPAI-2014-0941	ISC AA-01078	CVE-2014-0591	ISC BIND NSEC3-Signed Zones Queries Processing Denial of Service (CVE-2014-0591)