Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	8 Jul 2014	8 Jul 2014	CPAI-2014-1679	CVE-2014-1765		Microsoft Internet Explorer Memory Corruption (MS14-037; CVE-2014-1765)
Critical	8 Jul 2014	8 Jul 2014	CPAI-2014-1667	CVE-2014-2795		Microsoft Internet Explorer Memory Corruption (MS14-037; CVE-2014-2795)
Critical	8 Jul 2014	8 Jul 2014	CPAI-2014-1666	CVE-2014-2797		Microsoft Internet Explorer Memory Corruption (MS14-037; CVE-2014-2797)
Critical	8 Jul 2014	8 Jul 2014	CPAI-2014-0868	CVE-2014-0282		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-0282)
Critical	16 Jul 2014	8 Jul 2014	CPAI-2014-1690			Multiple PHP Servers WeevelyShell Backdoor Command Execution
Critical	16 Jul 2014	7 Jul 2014	CPAI-2014-1683			Wordpress Timthumb WebShot Vulnerability Code Execution
High	16 Jul 2014	7 Jul 2014	CPAI-2014-1652	CVE-2014-2210		CA ERwin Web Portal ConfigServiceProvider Remote File Creation (CVE-2014-2210)
High	10 Mar 2014	7 Jul 2014	CPAI-2014-1143	PostgreSQL Global Development Group	CVE-2014-0060	PostgreSQL Database SET ROLE Security Bypass (CVE-2014-0060)
High	4 May 2014	7 Jul 2014	CPAI-2014-1519	CA	CVE-2014-2210	CA ERwin Web Portal Multiple Directory Traversal Vulnerabilities (CVE-2014-2210)
Critical	8 Jul 2014	6 Jul 2014	CPAI-2014-1687	CVE-2013-2465		LightsOut/Hello Exploit Kit (CVE-2013-2465)
Critical	16 Jul 2014	3 Jul 2014	CPAI-2014-1686			Multiple PHP Servers DQ99shell Backdoor Command Execution
Critical	16 Jul 2014	3 Jul 2014	CPAI-2014-1684			Multiple PHP Servers C100shell Backdoor Command Execution
Critical	16 Jul 2014	3 Jul 2014	CPAI-2014-1682			Multiple PHP Servers C99shell Backdoor Command Execution
High	16 Jul 2014	2 Jul 2014	CPAI-2014-1670			JPEG Files Containing Suspicious Comments
Critical	16 Jul 2014	1 Jul 2014	CPAI-2014-1658			RIG Exploit Kit Website Redirection
N/A	28 Jan 2014	30 Jun 2014	CPAI-2014-0857			GNU Wget Arbitrary File Download
High	16 Jul 2014	29 Jun 2014	CPAI-2014-1673	CVE-2014-1761		Microsoft Word RTF listoverridecount Memory Corruption (MS14-017; CVE-2014-1761)
Medium	16 Jul 2014	29 Jun 2014	CPAI-2014-1651	CVE-2014-0429		Oracle Java awt_setPixels Information Disclosure (CVE-2014-0429)
Critical	16 Jul 2014	26 Jun 2014	CPAI-2014-1668	CVE-2014-3214		ISC BIND Recursive Nameservers Prefetch Denial of Service (CVE-2014-3214)
Critical	16 Jul 2014	24 Jun 2014	CPAI-2014-1659	CVE-2014-0535		Adobe Flash Player and AIR Security Bypass (APSB14-16; CVE-2014-0535)
High	10 Jun 2014	24 Jun 2014	CPAI-2014-1588	Microsoft MS14-032	CVE-2014-1823	Microsoft Lync Server Information Disclosure (MS14-032; CVE-2014-1823)
Critical	16 Jul 2014	23 Jun 2014	CPAI-2014-1656	CVE-2014-0536		Adobe Flash Player Memory Corruption (APSB14-16; CVE-2014-0536)
High	16 Jul 2014	23 Jun 2014	CPAI-2014-1649	CVE-2014-3457		SAP Sybase Event Stream Processor esp_parse Remote Code Execution (CVE-2014-3457)
Medium	16 Jul 2014	23 Jun 2014	CPAI-2014-1635	CVE-2014-0765		Advantech WebAccess SCADA webvact.ocx GotoCmd Buffer Overflow (CVE-2014-0765)
Critical	25 Jun 2014	22 Jun 2014	CPAI-2014-1655	CVE-2013-0140 CVE-2013-0141		McAfee ePolicy Orchestrator Remote Code Execution (CVE-2013-0140; CVE-2013-0141)
Medium	25 Jun 2014	22 Jun 2014	CPAI-2014-1650	CVE-2014-3789		Cogent DataHub Web Server GetPermissions.asp Command Injection (CVE-2014-3789)
Medium	25 Jun 2014	22 Jun 2014	CPAI-2014-1648	CVE-2014-2416		Oracle Data Quality DateTimeWrapper onchange Remote Code Execution (CVE-2014-2416)
Critical	22 Jun 2014	22 Jun 2014	CPAI-2014-1655		CVE-2013-0140 CVE-2013-0141	McAfee ePolicy Orchestrator Remote Code Execution (CVE-2013-0140; CVE-2013-0141)
High	25 Jun 2014	16 Jun 2014	CPAI-2014-1639			eScan Web Management Console Command Injection
High	25 Jun 2014	16 Jun 2014	CPAI-2014-1638			Simple E-Document upload Remote Code Execution
High	25 Jun 2014	16 Jun 2014	CPAI-2014-1637	CVE-2013-4152 CVE-2013-6429 CVE-2014-0002		Multiple Products XML System External Entity Information Disclosure (CVE-2013-4152; CVE-2013-6429; CVE-2014-0002)
High	25 Jun 2014	16 Jun 2014	CPAI-2014-1634	CVE-2008-5191		SePortal staticpages SQL Injection (CVE-2008-5191)
Critical	25 Jun 2014	16 Jun 2014	CPAI-2014-1600	CVE-2014-0520		Adobe Flash Player Sandbox Security Bypass (APSB14-14; CVE-2014-0520)
High	20 Mar 2014	16 Jun 2014	CPAI-2014-1164	Apache	CVE-2014-0002	Apache Camel XSLT Component XML External Entity (CVE-2014-0002)
High	9 Jun 2014	16 Jun 2014	CPAI-2014-1620	Rapid7 Advisory		Eppler Software WebTester install2.php Script Command Execution
High	15 Jun 2014	16 Jun 2014	CPAI-2014-1634	Rapid7	CVE-2008-5191	SePortal staticpages SQL Injection (CVE-2008-5191)
High	16 Jun 2014	16 Jun 2014	CPAI-2014-1639	Rapid7		eScan Web Management Console Command Injection
Medium	25 Jun 2014	15 Jun 2014	CPAI-2014-1628	CVE-2013-0232		ZoneMinder Video Server packageControl Command Execution (CVE-2013-0232)
High	25 Jun 2014	15 Jun 2014	CPAI-2014-1482	CVE-2014-2525		LibYAML Scanner yaml_parser_scan_uri_escapes Heap Buffer Overflow (CVE-2014-2525)
High	22 May 2014	15 Jun 2014	CPAI-2014-1556	LibYAML	CVE-2014-2525	LibYAML Scanner yaml_parser_scan_uri_escapes Heap Buffer Overflow - ver 2 (CVE-2014-2525)
High	1 Jun 2014	15 Jun 2014	CPAI-2014-1584		CVE-2014-0763	Advantech WebAccess SQL Injection Information Disclosure (CVE-2014-0763)
Critical	9 Jun 2014	15 Jun 2014	CPAI-2014-1621		CVE-2002-0649	Microsoft SQL 2000 Slammer Worm Denial of Service (CVE-2002-0649)
Critical	12 Jun 2014	12 Jun 2014	CPAI-2014-1632	CVE-2011-3026		libpng png_decompress_chunk Integer Overflow - ver 2 (CVE-2011-3026)
High	12 Jun 2014	12 Jun 2014	CPAI-2014-1630	CVE-2014-1510 CVE-2014-1511		Mozilla Multiple Products WebIDL Remote Code Execution (CVE-2014-1510; CVE-2014-1511)
High	12 Jun 2014	12 Jun 2014	CPAI-2014-1629	CVE-2014-3120		ElasticSearch search Remote Code Execution (CVE-2014-3120)
Critical	12 Jun 2014	12 Jun 2014	CPAI-2014-1623			PHP print Remote Shell Command Execution
High	11 Jun 2014	11 Jun 2014	CPAI-2014-1625	CVE-2014-3470		OpenSSL Anonymous ECDH Denial of Service (CVE-2014-3470)
High	10 Jun 2014	10 Jun 2014	CPAI-2014-1624	CVE-2007-0936		Microsoft Visio Packed Object Parsing Memory Corruption - ver 2 (CVE-2007-0936)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1610	CVE-2014-1805		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1805)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1507	CVE-2014-1795		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1795)