Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	9 Jun 2014	9 Jun 2014	CPAI-2014-1611	CVE-2014-3466		GnuTLS Server Hello Session ID Heap Buffer Overflow (CVE-2014-3466)
High	21 Jan 2014	9 Jun 2014	CPAI-2014-0755		CVE-2013-5893	Oracle Java Private MethodHandle Sandbox Bypass (CVE-2013-5893)
High	8 Jun 2014	9 Jun 2014	CPAI-2014-1617	OpenSSL	CVE-2014-0221	OpenSSL DTLS Hello Message Denial of Service (CVE-2014-0221)
Medium	9 Jun 2014	9 Jun 2014	CPAI-2014-1618		CVE-2013-3629	ISPConfig Authenticated Arbitrary PHP Code Execution (CVE-2013-3629)
High	9 Jun 2014	9 Jun 2014	CPAI-2014-1619	Rapid7	CVE-2013-6129	vBulletin install upgrade.php Privilege Escalation (CVE-2013-6129)
High	8 Jun 2014	8 Jun 2014	CPAI-2014-1520	CVE-2014-1959		GnuTLS X.509 Version 1 Intermediate Certificate Policy Bypass (CVE-2014-1959)
Critical	16 Apr 2014	8 Jun 2014	CPAI-2014-1357		CVE-2008-3021	Microsoft Office PICT Filter Map Structure Memory Corruption (MS08-044) - Ver2 (CVE-2008-3021)
Critical	5 Jun 2014	5 Jun 2014	CPAI-2014-1582	CVE-2014-1649		Symantec Workspace Streaming XML-RPC Arbitrary File Upload (CVE-2014-1649)
High	5 Jun 2014	5 Jun 2014	CPAI-2014-1575	CVE-2013-3632		OpenMediaVault Cron Remote Command Execution (CVE-2013-3632)
High	5 Jun 2014	5 Jun 2014	CPAI-2014-1562	CVE-2013-2751		NETGEAR ReadyNAS np_handler Code Execution (CVE-2013-2751)
High	5 Jun 2014	5 Jun 2014	CPAI-2014-1541	CVE-2013-3522		vBulletin Nodeid Parameter SQL Injection (CVE-2013-3522)
Critical	1 May 2014	5 Jun 2014	CPAI-2014-1510	Sophos 120230	CVE-2014-2850	Sophos Web Appliance SophosConfig Write Command Execution (CVE-2014-2850)
High	25 May 2014	5 Jun 2014	CPAI-2014-1575	Rapid7	CVE-2013-3632	OpenMediaVault Cron Remote Command Execution (CVE-2013-3632)
High	29 May 2014	5 Jun 2014	CPAI-2014-1581		CVE-2013-2143	Katello update_roles Privilege Escalation (CVE-2013-2143)
Critical	2 Jun 2014	2 Jun 2014	CPAI-2014-1585	CVE-2014-2287		Digium Asterisk File Descriptor Invalid Headers Syntax Denial of Service (CVE-2014-2287)
High	2 Jun 2014	2 Jun 2014	CPAI-2014-1583	CVE-2014-2299		Wireshark MPEG File Parser Stack Buffer Overflow (CVE-2014-2299)
High	2 Jun 2014	2 Jun 2014	CPAI-2014-1547	CVE-2014-2210		CA ERwin Web Portal ConfigServiceProvider Information Disclosure (CVE-2014-2210)
Critical	2 Jun 2014	2 Jun 2014	CPAI-2014-1348	CVE-2014-2287		Digium Asterisk File Descriptor Denial of Service (CVE-2014-2287)
Critical	13 Apr 2014	2 Jun 2014	CPAI-2014-1348	Digium AST-2014-002	CVE-2014-2287	Digium Asterisk File Descriptor Denial of Service (CVE-2014-2287)
Critical	29 May 2014	2 Jun 2014	CPAI-2014-1579	Adobe APSB14-15	CVE-2014-0512	Adobe Reader Malformed JavaScript Security Bypass (APSB14-15: CVE-2014-0512)
High	29 May 2014	2 Jun 2014	CPAI-2014-1583	Rapid7	CVE-2014-2299	Wireshark MPEG File Parser Stack Buffer Overflow (CVE-2014-2299)
High	10 Jun 2014	1 Jun 2014	CPAI-2014-1584	CVE-2014-0763		Advantech WebAccess SQL Injection Information Disclosure (CVE-2014-0763)
High	28 May 2014	28 May 2014	CPAI-2014-1577	CVE-2013-3349		Adobe ColdFusion JRun Application Server Denial of Service (APSB13-19; CVE-2013-3349)
Critical	28 May 2014	28 May 2014	CPAI-2014-1545	CVE-2014-0510		Adobe Flash Player Memory Corruption (APSB14-14; CVE-2014-0510)
High	28 May 2014	28 May 2014	CPAI-2014-1528	CVE-2004-0938		FreeRADIUS Illegal Attributes Denial of Service - ver 2 (CVE-2004-0938)
High	8 May 2014	28 May 2014	CPAI-2014-1528		CVE-2004-0938	FreeRADIUS Illegal Attributes Denial of Service - ver 2 (CVE-2004-0938)
High	25 May 2014	28 May 2014	CPAI-2014-1577		CVE-2013-3349	Adobe ColdFusion JRun Application Server Denial of Service (APSB13-19; CVE-2013-3349)
Critical	27 May 2014	27 May 2014	CPAI-2014-1576			Multiple Vendors Router TCP Backdoor Remote Code Execution
High	27 May 2014	27 May 2014	CPAI-2014-1574	CVE-2014-0384		Oracle MySQL Server XPath Denial Of Service (CVE-2014-0384)
Critical	27 May 2014	27 May 2014	CPAI-2014-1561	CVE-2014-0524		Adobe Acrobat and Reader Memory Corruption (APSB14-15; CVE-2014-0524)
Critical	27 May 2014	27 May 2014	CPAI-2014-1558	CVE-2014-0525		Adobe Acrobat and Reader API Calls Code Execution (APSB14-15; CVE-2014-0525)
Critical	27 May 2014	27 May 2014	CPAI-2014-1557	CVE-2014-0526		Adobe Acrobat and Reader Memory Corruption (APSB14-15; CVE-2014-0526)
High	21 May 2014	27 May 2014	CPAI-2014-1554	Rapid7	CVE-2013-3631	NAS4Free exec.php Arbitrary Remote Code Execution (CVE-2013-3631)
Critical	27 May 2014	27 May 2014	CPAI-2014-1557	Adobe APSB14-15	CVE-2014-0526	Adobe Acrobat and Reader Memory Corruption (APSB14-15: CVE-2014-0526)
Critical	27 May 2014	27 May 2014	CPAI-2014-1558	Adobe APSB14-15	CVE-2014-0525	Adobe Acrobat and Reader API Calls Code Execution (APSB14-15; CVE-2014-0525)
Critical	27 May 2014	27 May 2014	CPAI-2014-1561	Adobe APSB14-15	CVE-2014-0524	Adobe Acrobat and Reader Memory Corruption (APSB14-15: CVE-2014-0524)
Critical	27 May 2014	27 May 2014	CPAI-2014-1576			Multiple Vendors Router TCP Backdoor Remote Code Execution
Critical	25 May 2014	26 May 2014	CPAI-2014-1573			SQL Servers Unauthorized SQL Injection Command Execution
Critical	25 May 2014	26 May 2014	CPAI-2014-1572			SQL Servers Blind SQL Injection
Critical	25 May 2014	26 May 2014	CPAI-2014-1571			SQL Servers Stack Query SQL Injection
Critical	25 May 2014	26 May 2014	CPAI-2014-1570			SQL Servers UNION Query-based SQL Injection
Critical	25 May 2014	26 May 2014	CPAI-2014-1568			SQL Servers Oracle Vendor-specific SQL Injection
Critical	25 May 2014	25 May 2014	CPAI-2014-1567			SQL Servers MySQL Vendor-specific SQL Injection
Critical	25 May 2014	25 May 2014	CPAI-2014-1566			SQL Servers MSSQL Vendor-specific SQL Injection
Critical	25 May 2014	25 May 2014	CPAI-2014-1565			SQL Servers SQL Injection Evasion Techniques - ver 2
Critical	25 May 2014	25 May 2014	CPAI-2014-1564			SQL Servers SQL Injection Evasion Techniques
Critical	25 May 2014	25 May 2014	CPAI-2014-1563			SQL Servers Unauthorized Commands SQL Injection
High	25 May 2014	25 May 2014	CPAI-2014-1559	CVE-2014-0783		Yokogawa CENTUM CS 3000 SCADA Service Buffer Overflow (CVE-2014-0783)
High	25 May 2014	25 May 2014	CPAI-2014-1535	CVE-2014-0114		Apache Struts ActionForm ClassLoader Security Bypass (CVE-2014-0114)
High	25 May 2014	25 May 2014	CPAI-2014-1533	CVE-2014-1648		Symantec Messaging Gateway Management Console Cross Site Scripting (CVE-2014-1648)