Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	3 Aug 2014	23 Jul 2014	CPAI-2014-1654	CVE-2014-0238		PHP CDF File Handling Infinite Loop (CVE-2014-0238)
High	3 Aug 2014	23 Jul 2014	CPAI-2014-1351	CVE-2014-2536		McAfee Cloud Single Sign On ExtensionAccessServlet Directory Traversal (CVE-2014-2536)
High	2 Jan 2014	23 Jul 2014	CPAI-2013-3758		CVE-2013-5331	Adobe Flash Player Type Confusion Arbitrary Code Execution (APSB13-28; CVE-2013-5331)
Critical	22 Jul 2014	22 Jul 2014	CPAI-2014-1596	CVE-2014-1775		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1775)
High	3 Aug 2014	22 Jul 2014	CPAI-2014-1717			FritzBox Webcm Unauthenticated Command Injection
High	3 Aug 2014	22 Jul 2014	CPAI-2014-1685			EFS Software Easy File Management Web Server UserID Buffer Overflow
High	3 Aug 2014	22 Jul 2014	CPAI-2014-1681	CVE-2014-3914		Rocket Servergraph Admin Center fileRequestor Directory Traversal (CVE-2014-3914)
Critical	3 Mar 2014	22 Jul 2014	CPAI-2014-1071		CVE-2007-3316	VLC Ogg Vorbis Comment Header Format String Denial of Service - Ver2 (CVE-2007-3316)
High	3 Jul 2014	22 Jul 2014	CPAI-2014-1685	Rapid7		EFS Software Easy File Management Web Server UserID Buffer Overflow
Critical	21 Jul 2014	21 Jul 2014	CPAI-2014-1728			PDF Containing Encrypted Data
N/A	24 Jun 2014	21 Jul 2014	CPAI-2014-1728			PDF Containing Encrypted Data
High	21 Jul 2014	21 Jul 2014	CPAI-2014-1694	Microsoft MS14-026	CVE-2014-1806	Microsoft .NET Framework TypeFilterLevel Code Execution (MS14-026; CVE-2014-1806)
High	16 Mar 2014	20 Jul 2014	CPAI-2014-1154	PostgreSQL Global Development Group	CVE-2014-0063	PostgreSQL Database Datetime Buffer Overflow (CVE-2014-0063)
High	24 Jun 2014	20 Jul 2014	CPAI-2014-1672			Expiro User-Agent
Medium	9 Mar 2014	17 Jul 2014	CPAI-2014-1095	Symantec SYM14-003	CVE-2013-5013	Symantec Web Gateway blacklist.php Cross Site Scripting (CVE-2013-5013)
Critical	30 Mar 2014	17 Jul 2014	CPAI-2014-1193		CVE-2014-2270	PHP Libmagic Portable Executable Out-Of-Bounds Memory Access (CVE-2014-2270)
High	16 Jul 2014	16 Jul 2014	CPAI-2014-1715	CVE-2007-2189		Web Servers mxBB MX Smartor Remote File Inclusion (CVE-2007-2189)
High	16 Jul 2014	16 Jul 2014	CPAI-2014-1714	CVE-2002-1878		Web Servers W-Agora Remote File Inclusion (CVE-2002-1878)
High	16 Jul 2014	16 Jul 2014	CPAI-2014-1713	CVE-2006-1503		Web Servers VWar Remote File Inclusion (CVE-2006-1503)
High	16 Jul 2014	16 Jul 2014	CPAI-2014-1707	CVE-2006-3294		Web Servers CBSMS Mambo Remote File Inclusion (CVE-2006-3294)
High	22 Jun 2014	16 Jul 2014	CPAI-2014-1652	CA	CVE-2014-2210	CA ERwin Web Portal ConfigServiceProvider Remote File Creation (CVE-2014-2210)
Medium	22 Jun 2014	16 Jul 2014	CPAI-2014-1651	Oracle	CVE-2014-0429	Oracle Java awt_setPixels Information Disclosure (CVE-2014-0429)
Critical	24 Jun 2014	16 Jul 2014	CPAI-2014-1690			Multiple PHP Servers WeevelyShell Backdoor Command Execution
Critical	25 Jun 2014	16 Jul 2014	CPAI-2014-1668	ISC AA-01161	CVE-2014-3214	ISC BIND Recursive Nameservers Prefetch Denial of Service (CVE-2014-3214)
Critical	2 Jul 2014	16 Jul 2014	CPAI-2014-1684			Multiple PHP Servers C100shell Backdoor Command Execution
Critical	3 Jul 2014	16 Jul 2014	CPAI-2014-1686			Multiple PHP Servers DQ99shell Backdoor Command Execution
High	15 Jul 2014	16 Jul 2014	CPAI-2014-1714		CVE-2002-1878	Web Servers W-Agora Remote File Inclusion (CVE-2002-1878)
High	15 Jul 2014	16 Jul 2014	CPAI-2014-1707		CVE-2006-3294	Web Servers CBSMS Mambo Remote File Inclusion (CVE-2006-3294)
Critical	14 Jul 2014	14 Jul 2014	CPAI-2014-1698	CVE-2014-0528		Adobe Acrobat and Reader Memory Corruption (APSB14-15; CVE-2014-0528)
Critical	10 Jul 2014	14 Jul 2014	CPAI-2014-1698	Adobe APSB14-15	CVE-2014-0528	Adobe Acrobat and Reader Memory Corruption (APSB14-15: CVE-2014-0528)
High	16 Jul 2014	13 Jul 2014	CPAI-2014-1704	CVE-2006-4044		Web Servers PHPCodeCabinet Remote File Inclusion (CVE-2006-4044)
High	16 Jul 2014	13 Jul 2014	CPAI-2014-1703	CVE-2007-2936		Web Servers Frequency Clock Remote File Inclusion (CVE-2007-2936)
High	16 Jul 2014	13 Jul 2014	CPAI-2014-1702	CVE-2007-2317		Web Servers Tosmo Mambo Remote File Inclusion (CVE-2007-2317)
High	16 Jul 2014	13 Jul 2014	CPAI-2014-1701	CVE-2007-2364		Web Servers BurnCMS Remote File Inclusion (CVE-2007-2364)
Medium	13 Jul 2014	13 Jul 2014	CPAI-2014-1699	CVE-2014-2418		Oracle Data Quality FileChooserDlg onChangeDirectory Untrusted Pointer Dereference (CVE-2014-2418)
High	13 Jul 2014	13 Jul 2014	CPAI-2014-1689			HP Release Control Authenticated Privilege Escalation
High	16 Jul 2014	13 Jul 2014	CPAI-2014-1700	CVE-2006-4644		Web Servers PHPFullAnnu Remote File Inclusion (CVE-2006-4644)
High	6 Jul 2014	13 Jul 2014	CPAI-2014-1689			HP Release Control Authenticated Privilege Escalation
High	18 May 2014	10 Jul 2014	CPAI-2014-1547	CA	CVE-2014-2210	CA ERwin Web Portal ConfigServiceProvider Information Disclosure (CVE-2014-2210)
High	31 Mar 2014	9 Jul 2014	CPAI-2014-1246		CVE-2012-6315 CVE-2013-0209	Movable Type 4.2x 4.3x Upgrade Script RCE Script Injection - Ver2 (CVE-2012-6315; CVE-2013-0209)
Critical	8 Jul 2014	8 Jul 2014	CPAI-2014-1680	CVE-2014-2787		Microsoft Internet Explorer Memory Corruption (MS14-037; CVE-2014-2787)
Critical	8 Jul 2014	8 Jul 2014	CPAI-2014-1679	CVE-2014-1765		Microsoft Internet Explorer Memory Corruption (MS14-037; CVE-2014-1765)
Critical	8 Jul 2014	8 Jul 2014	CPAI-2014-1667	CVE-2014-2795		Microsoft Internet Explorer Memory Corruption (MS14-037; CVE-2014-2795)
Critical	8 Jul 2014	8 Jul 2014	CPAI-2014-1666	CVE-2014-2797		Microsoft Internet Explorer Memory Corruption (MS14-037; CVE-2014-2797)
Critical	8 Jul 2014	8 Jul 2014	CPAI-2014-0868	CVE-2014-0282		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-0282)
Critical	16 Jul 2014	8 Jul 2014	CPAI-2014-1690			Multiple PHP Servers WeevelyShell Backdoor Command Execution
Critical	16 Jul 2014	7 Jul 2014	CPAI-2014-1683			Wordpress Timthumb WebShot Vulnerability Code Execution
High	16 Jul 2014	7 Jul 2014	CPAI-2014-1652	CVE-2014-2210		CA ERwin Web Portal ConfigServiceProvider Remote File Creation (CVE-2014-2210)
High	10 Mar 2014	7 Jul 2014	CPAI-2014-1143	PostgreSQL Global Development Group	CVE-2014-0060	PostgreSQL Database SET ROLE Security Bypass (CVE-2014-0060)
High	4 May 2014	7 Jul 2014	CPAI-2014-1519	CA	CVE-2014-2210	CA ERwin Web Portal Multiple Directory Traversal Vulnerabilities (CVE-2014-2210)