Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	25 May 2014	25 May 2014	CPAI-2014-1563			SQL Servers Unauthorized Commands SQL Injection
High	25 May 2014	25 May 2014	CPAI-2014-1559	CVE-2014-0783		Yokogawa CENTUM CS 3000 SCADA Service Buffer Overflow (CVE-2014-0783)
High	25 May 2014	25 May 2014	CPAI-2014-1535	CVE-2014-0114		Apache Struts ActionForm ClassLoader Security Bypass (CVE-2014-0114)
High	25 May 2014	25 May 2014	CPAI-2014-1533	CVE-2014-1648		Symantec Messaging Gateway Management Console Cross Site Scripting (CVE-2014-1648)
High	11 May 2014	25 May 2014	CPAI-2014-1533	Symantec SYM14-006	CVE-2014-1648	Symantec Messaging Gateway Management Console Cross Site Scripting (CVE-2014-1648)
High	18 May 2014	25 May 2014	CPAI-2014-1535		CVE-2014-0114	Apache Struts ActionForm ClassLoader Security Bypass (CVE-2014-0114)
High	22 May 2014	25 May 2014	CPAI-2014-1559		CVE-2014-0783	Yokogawa CENTUM CS 3000 SCADA Service Buffer Overflow (CVE-2014-0783)
Critical	21 May 2014	21 May 2014	CPAI-2014-1544	CVE-2014-0511		Adobe Acrobat and Reader Buffer Overflow (APSB14-15; CVE-2014-0511)
Critical	20 May 2014	21 May 2014	CPAI-2014-1544	Adobe APSB14-15	CVE-2014-0511	Adobe Acrobat and Reader Buffer Overflow (APSB14-15: CVE-2014-0511)
Medium	20 May 2014	20 May 2014	CPAI-2014-1534			TLS Servers Cipher Suites Vulnerability Scanning Tools
Critical	19 May 2014	19 May 2014	CPAI-2014-1548	CVE-2014-0527		Adobe Acrobat And Reader Use-After-Free (APSB14-15; CVE-2014-0527)
High	14 May 2014	19 May 2014	CPAI-2014-1539	Rapid7	CVE-2013-2050	Red Hat CloudForms Management Engine SQL Injection (CVE-2013-2050)
Critical	14 May 2014	19 May 2014	CPAI-2014-1538	Rapid7	CVE-2013-2068	Red Hat CloudForms AgentController Directory Traversal (CVE-2013-2068)
High	19 May 2014	19 May 2014	CPAI-2014-1549	Microsoft MS14-028	CVE-2014-0255	Microsoft Windows iSCSI Target Denial of Service (MS14-028; CVE-2014-0255)
High	18 May 2014	18 May 2014	CPAI-2014-1546			Vtiger CRM Install Script Remote Command Execution
High	18 May 2014	18 May 2014	CPAI-2014-1542	CVE-2014-0782		Yokogawa CENTUM CS 3000 SCADA Remote Code Execution (CVE-2014-0782)
Medium	18 May 2014	18 May 2014	CPAI-2014-1511			RealNetworks RealGames StubbyUtil.ShellCtl.1 ActiveX Command Execution
Critical	18 May 2014	18 May 2014	CPAI-2014-1193	CVE-2014-2270		PHP Libmagic Portable Executable Out-Of-Bounds Memory Access (CVE-2014-2270)
High	8 May 2014	18 May 2014	CPAI-2014-1546			Vtiger CRM Install Script Remote Command Execution
High	14 May 2014	18 May 2014	CPAI-2014-1540		CVE-2014-0784	Yokogawa CENTUM CS 3000 SCADA Buffer Overflow (CVE-2014-0784)
Medium	14 May 2014	18 May 2014	CPAI-2014-1537	InduSoft	CVE-2014-0780	InduSoft Web Studio Directory Traversal (CVE-2014-0780)
High	15 May 2014	18 May 2014	CPAI-2014-1542		CVE-2014-0782	Yokogawa CENTUM CS 3000 SCADA Remote Code Execution (CVE-2014-0782)
High	15 May 2014	15 May 2014	CPAI-2014-1530	CVE-2014-0514		Adobe Reader Mobile JavaScript Interface Java Code Execution (CVE-2014-0514)
High	14 May 2014	14 May 2014	CPAI-2014-1536	CVE-2014-2309		Linux Kernel IPv6 Router Advertisement Packets Processing Denial of Service (CVE-2014-2309)
Medium	14 May 2014	14 May 2014	CPAI-2014-1531	CVE-2014-0773		Advantech WebAccess SCADA bwocxrun.ocx Command Execution (CVE-2014-0773)
Critical	13 May 2014	13 May 2014	CPAI-2014-1503	CVE-2014-0310		Microsoft Internet Explorer Memory Corruption (MS14-029; CVE-2014-0310)
High	13 May 2014	13 May 2014	CPAI-2014-1502	CVE-2014-1754		Microsoft SharePoint Cross-site Scripting (MS14-022; CVE-2014-1754)
Critical	13 May 2014	13 May 2014	CPAI-2014-1490			Executable File With Non-Executable File Extension Arbitrary File Execution
Critical	13 May 2014	13 May 2014	CPAI-2014-1354		CVE-2013-3350	Adobe ColdFusion Server invoke() Method Code Execution (CVE-2013-3350)
High	13 May 2014	13 May 2014	CPAI-2014-1502	Microsoft MS14-022	CVE-2014-1754	Microsoft SharePoint Cross-site Scripting (MS14-022; CVE-2014-1754)
High	11 May 2014	11 May 2014	CPAI-2014-1514	CVE-2014-0457		Oracle Java ServiceLoader Exception Handling Sandbox Bypass (CVE-2014-0457)
High	13 May 2014	11 May 2014	CPAI-2014-0925	CVE-2014-1452		FreeBSD bsnmpd GETBULK PDU Stack Buffer Overflow (CVE-2014-1452)
High	18 May 2014	11 May 2014	CPAI-2014-1529	CVE-2013-4449		OpenLDAP rwm Overlay Denial of Service - ver 2 (CVE-2013-4449)
High	18 May 2014	11 May 2014	CPAI-2014-1517			Nagios Remote Plugin Executor Command Injection
High	18 May 2014	11 May 2014	CPAI-2014-1516			Xerox DocuShare ResultBackgroundJobMultiple SQL Injection
High	16 Feb 2014	11 May 2014	CPAI-2014-0925		CVE-2014-1452	FreeBSD bsnmpd GETBULK PDU Stack Buffer Overflow (CVE-2014-1452)
High	4 May 2014	11 May 2014	CPAI-2014-1517			Nagios Remote Plugin Executor Command Injection
High	4 May 2014	11 May 2014	CPAI-2014-1516	Xerox XRX14-003		Xerox DocuShare ResultBackgroundJobMultiple SQL Injection
High	4 May 2014	11 May 2014	CPAI-2014-1514	Oracle	CVE-2014-0457	Oracle Java ServiceLoader Exception Handling Sandbox Bypass (CVE-2014-0457)
High	13 May 2014	8 May 2014	CPAI-2014-1532			Tftpd32 DNS Server Buffer Overflow - ver 2
Critical	13 May 2014	8 May 2014	CPAI-2014-1527			China Chopper Web Shell Remote Code Execution
High	18 May 2014	8 May 2014	CPAI-2014-1521	CVE-2013-4988		IcoFX Stack Buffer Overflow (CVE-2013-4988)
Critical	18 May 2014	8 May 2014	CPAI-2014-1495	CVE-2014-2849		Sophos Web Appliance change_password Admin Password Privilege Escalation (CVE-2014-2849)
Medium	18 May 2014	8 May 2014	CPAI-2014-1485	CVE-2014-0779		Schneider Electric ClearSCADA OPF File Parsing Out of Bounds Array Indexing (CVE-2014-0779)
High	18 May 2014	8 May 2014	CPAI-2014-1484	CVE-2014-1691		Horde Framework Unserialize PHP Code Execution (CVE-2014-1691)
High	4 May 2014	8 May 2014	CPAI-2014-1521		CVE-2013-4988	IcoFX Stack Buffer Overflow (CVE-2013-4988)
High	8 May 2014	8 May 2014	CPAI-2014-1532			Tftpd32 DNS Server Buffer Overflow - ver 2
High	13 May 2014	7 May 2014	CPAI-2014-1518	CVE-2014-1246		Apple QuickTime ftab Atom Stack Buffer Overflow (CVE-2014-1246)
Medium	13 May 2014	7 May 2014	CPAI-2014-1515	CVE-2014-0764		Advantech WebAccess SCADA webvact.ocx NodeName Buffer Overflow (CVE-2014-0764)
High	13 May 2014	7 May 2014	CPAI-2014-1488	CVE-2014-2118		Cisco Prime Security Manager Cross-Site Scripting (CVE-2014-2118)