Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	30 Mar 2014	30 Mar 2014	CPAI-2014-1187			Anonymous DoSer Denial of Service Tool
High	8 Apr 2014	30 Mar 2014	CPAI-2014-1186	CVE-2014-1452		FreeBSD bsnmpd GETBULK PDU Stack Buffer Overflow - ver 2 (CVE-2014-1452)
High	8 Apr 2014	30 Mar 2014	CPAI-2014-1181	CVE-2013-4547		Nginx Request URI Verification Security Bypass (CVE-2013-4547)
High	8 Apr 2014	30 Mar 2014	CPAI-2014-1172	CVE-2014-0301		Microsoft Windows DirectShow JPEG Double Free (MS14-013; CVE-2014-0301) - ver 2
High	8 Apr 2014	30 Mar 2014	CPAI-2014-1150	CVE-2014-0423		Oracle Java Beans DocumentHandler XML External Entity (CVE-2014-0423)
High	16 Mar 2014	30 Mar 2014	CPAI-2014-1150	Oracle	CVE-2014-0423	Oracle Java Beans DocumentHandler XML External Entity (CVE-2014-0423)
High	25 Mar 2014	30 Mar 2014	CPAI-2014-1172	Microsoft MS14-013	CVE-2014-0301	Microsoft Windows DirectShow JPEG Double Free (MS14-013) - ver 2 (CVE-2014-0301)
High	27 Mar 2014	30 Mar 2014	CPAI-2014-1189			GoldenEye Denial of Service Tool
High	27 Mar 2014	30 Mar 2014	CPAI-2014-1186	FreeBSD FreeBSD-SA-14:01	CVE-2014-1452	FreeBSD bsnmpd GETBULK PDU Stack Buffer Overflow - ver 2 (CVE-2014-1452)
High	30 Mar 2014	30 Mar 2014	CPAI-2014-1188			HULK Denial of Service Tool
High	8 Apr 2014	27 Mar 2014	CPAI-2014-1171	CVE-2014-1705		Google Chrome V8 JavaScript Engine Memory Corruption (CVE-2014-1705)
Critical	8 Apr 2014	27 Mar 2014	CPAI-2013-3763	CVE-2013-5791		Oracle Outside In Microsoft Access 1.x Parser Buffer Overflow (CVE-2013-5791)
High	23 Mar 2014	27 Mar 2014	CPAI-2014-1171	Google	CVE-2014-1705	Google Chrome V8 JavaScript Engine Memory Corruption (CVE-2014-1705)
High	26 Mar 2014	26 Mar 2014	CPAI-2014-1151	CVE-2014-1266		Apple Products SSLVerifySignedServerKeyExchange Security Feature Bypass (CVE-2014-1266)
Medium	26 Mar 2014	26 Mar 2014	CPAI-2014-1128	CVE-2014-0980		Poster Software PUBLISH-iT PUI File Processing Buffer Overflow (CVE-2014-0980)
High	24 Mar 2014	24 Mar 2014	CPAI-2013-3556	CVE-2013-5745		GNOME Vino VNC Server Denial of Service (CVE-2013-5745)
High	20 Mar 2014	24 Mar 2014	CPAI-2014-1165			WordPress Pingback Distributed Denial of Service
High	23 Mar 2014	23 Mar 2014	CPAI-2014-1170	CVE-2013-6449		OpenSSL ssl_get_algorithm2 TLS Denial of Service - ver 2 (CVE-2013-6449)
Critical	23 Mar 2014	23 Mar 2014	CPAI-2014-1168	CVE-2014-0307		Microsoft Internet Explorer Memory Corruption (MS14-012; CVE-2014-0307)
High	23 Mar 2014	23 Mar 2014	CPAI-2014-1166	CVE-2014-2205		McAfee ePolicy Orchestrator XML External Entity (CVE-2014-2205)
High	23 Mar 2014	23 Mar 2014	CPAI-2014-1131	CVE-2014-1683		SkyBlueCanvas CMS Remote Command Execution (CVE-2014-1683)
Medium	18 Mar 2014	18 Mar 2014	CPAI-2014-1157			Web servers PHPMyAdmin Misconfiguration Code Injection
High	18 Mar 2014	18 Mar 2014	CPAI-2014-1153			Fraudulent SSL Certificates Man-In-The-Middle
Critical	18 Mar 2014	18 Mar 2014	CPAI-2014-1065	CVE-2014-0492		Adobe Flash Player Address Leak Buffer Overflow (APSB14-02; CVE-2014-0492)
Critical	18 Mar 2014	18 Mar 2014	CPAI-2014-0954	CVE-2014-0491		Adobe Flash Player Cross-Site Scripting (APSB14-02; CVE-2014-0491)
Critical	13 Mar 2014	18 Mar 2014	CPAI-2014-0954	Adobe APSB14-02	CVE-2014-0491	Adobe Flash Player Cross-Site Scripting (APSB14-02: CVE-2014-0491)
High	17 Mar 2014	17 Mar 2014	CPAI-2014-1161	CVE-2006-3918		Apache HTTP Server Header Injection Cross-Site Scripting (CVE-2006-3918)
High	17 Mar 2014	17 Mar 2014	CPAI-2014-1160			Apache HTTP Server Format String Remote Code Execution
Medium	17 Mar 2014	17 Mar 2014	CPAI-2014-1159	CVE-2002-2006 CVE-2002-2007 CVE-2002-2008		Apache Tomcat Server Malicious Request Information Disclosure (CVE-2002-2006; CVE-2002-2007; CVE-2002-2008)
Medium	17 Mar 2014	17 Mar 2014	CPAI-2014-1158	CVE-2000-0884		Microsoft IIS Input Validation Directory Traversal (CVE-2000-0884)
High	17 Mar 2014	17 Mar 2014	CPAI-2014-1143	CVE-2014-0060		PostgreSQL Database SET ROLE Security Bypass (CVE-2014-0060)
High	16 Mar 2014	16 Mar 2014	CPAI-2014-1136	CVE-2014-0001		Oracle MySQL Client Heap Buffer Overflow (CVE-2014-0001)
Medium	16 Mar 2014	16 Mar 2014	CPAI-2014-1095	CVE-2013-5013		Symantec Web Gateway blacklist.php Cross Site Scripting (CVE-2013-5013)
Critical	16 Mar 2014	16 Mar 2014	CPAI-2014-1094	CVE-2014-0050		Apache Tomcat FileUpload Content-Type Header Infinite Loop (CVE-2014-0050)
Critical	16 Mar 2014	16 Mar 2014	CPAI-2014-1091	CVE-2013-6195		HP Data Protector CRS Multiple Stack Buffer Overflows (CVE-2013-6195)
High	16 Mar 2014	16 Mar 2014	CPAI-2014-1066	CVE-2013-6449		OpenSSL ssl_get_algorithm2 TLS Denial of Service (CVE-2013-6449)
High	16 Mar 2014	16 Mar 2014	CPAI-2014-0743	CVE-2013-6877		RealNetworks RealPlayer RMP File Stack Buffer Overflow (CVE-2013-6877)
High	16 Mar 2014	16 Mar 2014	CPAI-2014-0376	CVE-2013-7108		Nagios core CGI Process_cgivars Off-By-One (CVE-2013-7108)
High	6 Mar 2014	16 Mar 2014	CPAI-2014-1066	OpenSSL Project	CVE-2013-6449	OpenSSL ssl_get_algorithm2 TLS Denial of Service (CVE-2013-6449)
High	9 Mar 2014	16 Mar 2014	CPAI-2014-1136		CVE-2014-0001	Oracle MySQL Client Heap Buffer Overflow (CVE-2014-0001)
High	13 Mar 2014	16 Mar 2014	CPAI-2014-1147	Adobe APSB14-08	CVE-2014-0503	Adobe Flash Player Same Origin Security Bypass (APSB14-08; CVE-2014-0503)
High	13 Mar 2014	13 Mar 2014	CPAI-2014-1140	CVE-2013-2827		WellinTech Multiple Products kxClientDownload ActiveX Remote Code Execution (CVE-2013-2827)
Critical	13 Mar 2014	13 Mar 2014	CPAI-2014-1134			Joomla! JomSocial Input Validation Remote Code Execution
Critical	13 Mar 2014	13 Mar 2014	CPAI-2014-0879	CVE-2014-0254		Microsoft Windows IPv6 Router Advertisements Denial of Service (MS14-006; CVE-2014-0254)
High	13 Mar 2014	13 Mar 2014	CPAI-2014-0761	CVE-2013-4517		Apache Santuario XML Security for Java DTD Denial of Service (CVE-2013-4517)
High	13 Mar 2014	13 Mar 2014	CPAI-2014-0758	CVE-2013-6712		PHP DateInterval Heap Buffer Overread Denial of Service (CVE-2013-6712)
Medium	13 Mar 2014	13 Mar 2014	CPAI-2014-0757	CVE-2013-6933		VLC Media Player RTSP Plugin Stack Buffer Overflow (CVE-2013-6933)
High	13 Mar 2014	13 Mar 2014	CPAI-2014-0756	CVE-2013-5487		Cisco Prime Data Center Network Manager DownloadServlet Information Disclosure (CVE-2013-5487)
High	5 Mar 2014	13 Mar 2014	CPAI-2014-1059	Apache	CVE-2013-4322	Apache Tomcat Large Chunked Transfer Denial of Service (CVE-2013-4322)
Critical	9 Mar 2014	13 Mar 2014	CPAI-2014-1134			Joomla! JomSocial Input Validation Remote Code Execution