Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	8 Jul 2014	6 Jul 2014	CPAI-2014-1687	CVE-2013-2465		LightsOut/Hello Exploit Kit (CVE-2013-2465)
Critical	16 Jul 2014	3 Jul 2014	CPAI-2014-1686			Multiple PHP Servers DQ99shell Backdoor Command Execution
Critical	16 Jul 2014	3 Jul 2014	CPAI-2014-1684			Multiple PHP Servers C100shell Backdoor Command Execution
Critical	16 Jul 2014	3 Jul 2014	CPAI-2014-1682			Multiple PHP Servers C99shell Backdoor Command Execution
High	16 Jul 2014	2 Jul 2014	CPAI-2014-1670			JPEG Files Containing Suspicious Comments
Critical	16 Jul 2014	1 Jul 2014	CPAI-2014-1658			RIG Exploit Kit Website Redirection
N/A	28 Jan 2014	30 Jun 2014	CPAI-2014-0857			GNU Wget Arbitrary File Download
High	16 Jul 2014	29 Jun 2014	CPAI-2014-1673	CVE-2014-1761		Microsoft Word RTF listoverridecount Memory Corruption (MS14-017; CVE-2014-1761)
Medium	16 Jul 2014	29 Jun 2014	CPAI-2014-1651	CVE-2014-0429		Oracle Java awt_setPixels Information Disclosure (CVE-2014-0429)
Critical	16 Jul 2014	26 Jun 2014	CPAI-2014-1668	CVE-2014-3214		ISC BIND Recursive Nameservers Prefetch Denial of Service (CVE-2014-3214)
Critical	16 Jul 2014	24 Jun 2014	CPAI-2014-1659	CVE-2014-0535		Adobe Flash Player and AIR Security Bypass (APSB14-16; CVE-2014-0535)
High	10 Jun 2014	24 Jun 2014	CPAI-2014-1588	Microsoft MS14-032	CVE-2014-1823	Microsoft Lync Server Information Disclosure (MS14-032; CVE-2014-1823)
Critical	16 Jul 2014	23 Jun 2014	CPAI-2014-1656	CVE-2014-0536		Adobe Flash Player Memory Corruption (APSB14-16; CVE-2014-0536)
High	16 Jul 2014	23 Jun 2014	CPAI-2014-1649	CVE-2014-3457		SAP Sybase Event Stream Processor esp_parse Remote Code Execution (CVE-2014-3457)
Medium	16 Jul 2014	23 Jun 2014	CPAI-2014-1635	CVE-2014-0765		Advantech WebAccess SCADA webvact.ocx GotoCmd Buffer Overflow (CVE-2014-0765)
Critical	25 Jun 2014	22 Jun 2014	CPAI-2014-1655	CVE-2013-0140 CVE-2013-0141		McAfee ePolicy Orchestrator Remote Code Execution (CVE-2013-0140; CVE-2013-0141)
Medium	25 Jun 2014	22 Jun 2014	CPAI-2014-1650	CVE-2014-3789		Cogent DataHub Web Server GetPermissions.asp Command Injection (CVE-2014-3789)
Medium	25 Jun 2014	22 Jun 2014	CPAI-2014-1648	CVE-2014-2416		Oracle Data Quality DateTimeWrapper onchange Remote Code Execution (CVE-2014-2416)
Critical	22 Jun 2014	22 Jun 2014	CPAI-2014-1655		CVE-2013-0140 CVE-2013-0141	McAfee ePolicy Orchestrator Remote Code Execution (CVE-2013-0140; CVE-2013-0141)
High	25 Jun 2014	16 Jun 2014	CPAI-2014-1639			eScan Web Management Console Command Injection
High	25 Jun 2014	16 Jun 2014	CPAI-2014-1638			Simple E-Document upload Remote Code Execution
High	25 Jun 2014	16 Jun 2014	CPAI-2014-1637	CVE-2013-4152 CVE-2013-6429 CVE-2014-0002		Multiple Products XML System External Entity Information Disclosure (CVE-2013-4152; CVE-2013-6429; CVE-2014-0002)
High	25 Jun 2014	16 Jun 2014	CPAI-2014-1634	CVE-2008-5191		SePortal staticpages SQL Injection (CVE-2008-5191)
Critical	25 Jun 2014	16 Jun 2014	CPAI-2014-1600	CVE-2014-0520		Adobe Flash Player Sandbox Security Bypass (APSB14-14; CVE-2014-0520)
High	20 Mar 2014	16 Jun 2014	CPAI-2014-1164	Apache	CVE-2014-0002	Apache Camel XSLT Component XML External Entity (CVE-2014-0002)
High	9 Jun 2014	16 Jun 2014	CPAI-2014-1620	Rapid7 Advisory		Eppler Software WebTester install2.php Script Command Execution
High	15 Jun 2014	16 Jun 2014	CPAI-2014-1634	Rapid7	CVE-2008-5191	SePortal staticpages SQL Injection (CVE-2008-5191)
High	16 Jun 2014	16 Jun 2014	CPAI-2014-1639	Rapid7		eScan Web Management Console Command Injection
Medium	25 Jun 2014	15 Jun 2014	CPAI-2014-1628	CVE-2013-0232		ZoneMinder Video Server packageControl Command Execution (CVE-2013-0232)
High	25 Jun 2014	15 Jun 2014	CPAI-2014-1482	CVE-2014-2525		LibYAML Scanner yaml_parser_scan_uri_escapes Heap Buffer Overflow (CVE-2014-2525)
High	22 May 2014	15 Jun 2014	CPAI-2014-1556	LibYAML	CVE-2014-2525	LibYAML Scanner yaml_parser_scan_uri_escapes Heap Buffer Overflow - ver 2 (CVE-2014-2525)
High	1 Jun 2014	15 Jun 2014	CPAI-2014-1584		CVE-2014-0763	Advantech WebAccess SQL Injection Information Disclosure (CVE-2014-0763)
Critical	9 Jun 2014	15 Jun 2014	CPAI-2014-1621		CVE-2002-0649	Microsoft SQL 2000 Slammer Worm Denial of Service (CVE-2002-0649)
Critical	12 Jun 2014	12 Jun 2014	CPAI-2014-1632	CVE-2011-3026		libpng png_decompress_chunk Integer Overflow - ver 2 (CVE-2011-3026)
High	12 Jun 2014	12 Jun 2014	CPAI-2014-1630	CVE-2014-1510 CVE-2014-1511		Mozilla Multiple Products WebIDL Remote Code Execution (CVE-2014-1510; CVE-2014-1511)
High	12 Jun 2014	12 Jun 2014	CPAI-2014-1629	CVE-2014-3120		ElasticSearch search Remote Code Execution (CVE-2014-3120)
Critical	12 Jun 2014	12 Jun 2014	CPAI-2014-1623			PHP print Remote Shell Command Execution
High	11 Jun 2014	11 Jun 2014	CPAI-2014-1625	CVE-2014-3470		OpenSSL Anonymous ECDH Denial of Service (CVE-2014-3470)
High	10 Jun 2014	10 Jun 2014	CPAI-2014-1624	CVE-2007-0936		Microsoft Visio Packed Object Parsing Memory Corruption - ver 2 (CVE-2007-0936)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1610	CVE-2014-1805		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1805)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1507	CVE-2014-1795		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1795)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1505	CVE-2014-1804		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1804)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1501	CVE-2014-1762		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1762)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1500	CVE-2014-1797		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1797)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1499	CVE-2014-1789		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1789)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1498	CVE-2014-1785		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1785)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1497	CVE-2014-1791		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1791)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1496	CVE-2014-1772		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1772)
High	10 Jun 2014	10 Jun 2014	CPAI-2014-1624	Microsoft 927051	CVE-2007-0936	Microsoft Visio Packed Object Parsing Memory Corruption - ver 2 (CVE-2007-0936)
High	9 Jun 2014	9 Jun 2014	CPAI-2014-1616	CVE-2014-0224		OpenSSL TLS Man-In-The-Middle Security Bypass (CVE-2014-0224)