Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1505	CVE-2014-1804		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1804)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1501	CVE-2014-1762		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1762)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1500	CVE-2014-1797		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1797)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1499	CVE-2014-1789		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1789)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1498	CVE-2014-1785		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1785)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1497	CVE-2014-1791		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1791)
Critical	10 Jun 2014	10 Jun 2014	CPAI-2014-1496	CVE-2014-1772		Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-1772)
High	10 Jun 2014	10 Jun 2014	CPAI-2014-1624	Microsoft 927051	CVE-2007-0936	Microsoft Visio Packed Object Parsing Memory Corruption - ver 2 (CVE-2007-0936)
High	9 Jun 2014	9 Jun 2014	CPAI-2014-1616	CVE-2014-0224		OpenSSL TLS Man-In-The-Middle Security Bypass (CVE-2014-0224)
Critical	9 Jun 2014	9 Jun 2014	CPAI-2014-1611	CVE-2014-3466		GnuTLS Server Hello Session ID Heap Buffer Overflow (CVE-2014-3466)
High	21 Jan 2014	9 Jun 2014	CPAI-2014-0755		CVE-2013-5893	Oracle Java Private MethodHandle Sandbox Bypass (CVE-2013-5893)
High	8 Jun 2014	9 Jun 2014	CPAI-2014-1617	OpenSSL	CVE-2014-0221	OpenSSL DTLS Hello Message Denial of Service (CVE-2014-0221)
Medium	9 Jun 2014	9 Jun 2014	CPAI-2014-1618		CVE-2013-3629	ISPConfig Authenticated Arbitrary PHP Code Execution (CVE-2013-3629)
High	9 Jun 2014	9 Jun 2014	CPAI-2014-1619	Rapid7	CVE-2013-6129	vBulletin install upgrade.php Privilege Escalation (CVE-2013-6129)
High	8 Jun 2014	8 Jun 2014	CPAI-2014-1520	CVE-2014-1959		GnuTLS X.509 Version 1 Intermediate Certificate Policy Bypass (CVE-2014-1959)
Critical	16 Apr 2014	8 Jun 2014	CPAI-2014-1357		CVE-2008-3021	Microsoft Office PICT Filter Map Structure Memory Corruption (MS08-044) - Ver2 (CVE-2008-3021)
Critical	5 Jun 2014	5 Jun 2014	CPAI-2014-1582	CVE-2014-1649		Symantec Workspace Streaming XML-RPC Arbitrary File Upload (CVE-2014-1649)
High	5 Jun 2014	5 Jun 2014	CPAI-2014-1575	CVE-2013-3632		OpenMediaVault Cron Remote Command Execution (CVE-2013-3632)
High	5 Jun 2014	5 Jun 2014	CPAI-2014-1562	CVE-2013-2751		NETGEAR ReadyNAS np_handler Code Execution (CVE-2013-2751)
High	5 Jun 2014	5 Jun 2014	CPAI-2014-1541	CVE-2013-3522		vBulletin Nodeid Parameter SQL Injection (CVE-2013-3522)
Critical	1 May 2014	5 Jun 2014	CPAI-2014-1510	Sophos 120230	CVE-2014-2850	Sophos Web Appliance SophosConfig Write Command Execution (CVE-2014-2850)
High	25 May 2014	5 Jun 2014	CPAI-2014-1575	Rapid7	CVE-2013-3632	OpenMediaVault Cron Remote Command Execution (CVE-2013-3632)
High	29 May 2014	5 Jun 2014	CPAI-2014-1581		CVE-2013-2143	Katello update_roles Privilege Escalation (CVE-2013-2143)
Critical	2 Jun 2014	2 Jun 2014	CPAI-2014-1585	CVE-2014-2287		Digium Asterisk File Descriptor Invalid Headers Syntax Denial of Service (CVE-2014-2287)
High	2 Jun 2014	2 Jun 2014	CPAI-2014-1583	CVE-2014-2299		Wireshark MPEG File Parser Stack Buffer Overflow (CVE-2014-2299)
High	2 Jun 2014	2 Jun 2014	CPAI-2014-1547	CVE-2014-2210		CA ERwin Web Portal ConfigServiceProvider Information Disclosure (CVE-2014-2210)
Critical	2 Jun 2014	2 Jun 2014	CPAI-2014-1348	CVE-2014-2287		Digium Asterisk File Descriptor Denial of Service (CVE-2014-2287)
Critical	13 Apr 2014	2 Jun 2014	CPAI-2014-1348	Digium AST-2014-002	CVE-2014-2287	Digium Asterisk File Descriptor Denial of Service (CVE-2014-2287)
Critical	29 May 2014	2 Jun 2014	CPAI-2014-1579	Adobe APSB14-15	CVE-2014-0512	Adobe Reader Malformed JavaScript Security Bypass (APSB14-15: CVE-2014-0512)
High	29 May 2014	2 Jun 2014	CPAI-2014-1583	Rapid7	CVE-2014-2299	Wireshark MPEG File Parser Stack Buffer Overflow (CVE-2014-2299)
High	10 Jun 2014	1 Jun 2014	CPAI-2014-1584	CVE-2014-0763		Advantech WebAccess SQL Injection Information Disclosure (CVE-2014-0763)
High	28 May 2014	28 May 2014	CPAI-2014-1577	CVE-2013-3349		Adobe ColdFusion JRun Application Server Denial of Service (APSB13-19; CVE-2013-3349)
Critical	28 May 2014	28 May 2014	CPAI-2014-1545	CVE-2014-0510		Adobe Flash Player Memory Corruption (APSB14-14; CVE-2014-0510)
High	28 May 2014	28 May 2014	CPAI-2014-1528	CVE-2004-0938		FreeRADIUS Illegal Attributes Denial of Service - ver 2 (CVE-2004-0938)
High	8 May 2014	28 May 2014	CPAI-2014-1528		CVE-2004-0938	FreeRADIUS Illegal Attributes Denial of Service - ver 2 (CVE-2004-0938)
High	25 May 2014	28 May 2014	CPAI-2014-1577		CVE-2013-3349	Adobe ColdFusion JRun Application Server Denial of Service (APSB13-19; CVE-2013-3349)
Critical	27 May 2014	27 May 2014	CPAI-2014-1576			Multiple Vendors Router TCP Backdoor Remote Code Execution
High	27 May 2014	27 May 2014	CPAI-2014-1574	CVE-2014-0384		Oracle MySQL Server XPath Denial Of Service (CVE-2014-0384)
Critical	27 May 2014	27 May 2014	CPAI-2014-1561	CVE-2014-0524		Adobe Acrobat and Reader Memory Corruption (APSB14-15; CVE-2014-0524)
Critical	27 May 2014	27 May 2014	CPAI-2014-1558	CVE-2014-0525		Adobe Acrobat and Reader API Calls Code Execution (APSB14-15; CVE-2014-0525)
Critical	27 May 2014	27 May 2014	CPAI-2014-1557	CVE-2014-0526		Adobe Acrobat and Reader Memory Corruption (APSB14-15; CVE-2014-0526)
High	21 May 2014	27 May 2014	CPAI-2014-1554	Rapid7	CVE-2013-3631	NAS4Free exec.php Arbitrary Remote Code Execution (CVE-2013-3631)
Critical	27 May 2014	27 May 2014	CPAI-2014-1557	Adobe APSB14-15	CVE-2014-0526	Adobe Acrobat and Reader Memory Corruption (APSB14-15: CVE-2014-0526)
Critical	27 May 2014	27 May 2014	CPAI-2014-1558	Adobe APSB14-15	CVE-2014-0525	Adobe Acrobat and Reader API Calls Code Execution (APSB14-15; CVE-2014-0525)
Critical	27 May 2014	27 May 2014	CPAI-2014-1561	Adobe APSB14-15	CVE-2014-0524	Adobe Acrobat and Reader Memory Corruption (APSB14-15: CVE-2014-0524)
Critical	27 May 2014	27 May 2014	CPAI-2014-1576			Multiple Vendors Router TCP Backdoor Remote Code Execution
Critical	25 May 2014	26 May 2014	CPAI-2014-1573			SQL Servers Unauthorized SQL Injection Command Execution
Critical	25 May 2014	26 May 2014	CPAI-2014-1572			SQL Servers Blind SQL Injection
Critical	25 May 2014	26 May 2014	CPAI-2014-1571			SQL Servers Stack Query SQL Injection
Critical	25 May 2014	26 May 2014	CPAI-2014-1570			SQL Servers UNION Query-based SQL Injection