Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	2 Jan 2014	9 Jan 2014	CPAI-2013-3757	CVE-2013-3352	Adobe Acrobat and Reader Memory Corruption (APSB13-22: CVE-2013-3352)
High	7 Jan 2014	9 Jan 2014	CPAI-2013-3762		Suspicious JavaScript Encoding
Critical	7 Jan 2014	8 Jan 2014	CPAI-2014-0107	CVE-2008-0639	Novell Client nwspool.dll EnumPrinters Function Stack Buffer Overflow - Ver2 (CVE-2008-0639)
Critical	7 Jan 2014	8 Jan 2014	CPAI-2014-0109	CVE-2005-3390	PHP POST File Upload PHP GLOBALS Variable Overwrite Security Bypass - Ver2 (CVE-2005-3390)
N/A	7 Jan 2014	8 Jan 2014	CPAI-2014-0237		JavaScript Payload Encoding
Critical	7 Jan 2014	8 Jan 2014	CPAI-2013-2988	CVE-2008-0639	Novell Client nwspool.dll EnumPrinters Function Stack Buffer Overflow - Ver2 (CVE-2008-0639)
Critical	7 Jan 2014	8 Jan 2014	CPAI-2014-0064	CVE-2006-0067	VEGO Web Forum login.php username Parameter SQL Injection - Ver2 (CVE-2006-0067)
Critical	7 Jan 2014	8 Jan 2014	CPAI-2014-0035	CVE-2006-4237	IRSR pageheaderdefault.inc.php sysSessionPath Parameter PHP Code Execution - Ver2 (CVE-2006-4237)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0069	CVE-2008-0075	Microsoft IIS ASP Handling Code Execution (MS08-006) - Ver2 (CVE-2008-0075)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0057	CVE-2009-1350	Novell Client NetIdentity Agent Remote Pointer Dereference Code Execution - Ver2 (CVE-2009-1350)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0046	CVE-2011-0653	Microsoft SharePoint Calendar Cross-Site Scripting (MS11-074) - Ver2 (CVE-2011-0653)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0085	CVE-2010-3747	RealNetworks RealPlayer CDDA URI Uninitialized Pointer Code Execution - Ver2 (CVE-2010-3747)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0020	CVE-2007-1785	CA BrightStor ARCserve Backup Media Server SUN-RPC Procedure Code Execution - Ver2 (CVE-2007-1785)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0112	CVE-2001-1468	PhpSecurePages secure.php cfgProgDir Parameter PHP Code Execution - Ver2 (CVE-2001-1468)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0075	CVE-2007-2139	CA BrightStor Arcserve Media Server Stack Buffer Overflow - Ver2 (CVE-2007-2139)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0028	CVE-2007-1078	FlashGameScript index.php func Parameter PHP Code Execution - Ver2 (CVE-2007-1078)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0014	CVE-2006-0135	TheWebForum login.php username Parameter SQL Injection - Ver2 (CVE-2006-0135)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0097	CVE-2006-3928	WMNews index.php base_datapath Parameter PHP Code Execution - Ver2 (CVE-2006-3928)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0088	CVE-2006-4444	Cybozu Garoon tid Parameter SQL Injection - Ver2 (CVE-2006-4444)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0056	CVE-2007-1372	Postguestbook CONF_CONFIG_PATH Parameter PHP Code Execution - Ver2 (CVE-2007-1372)
High	7 Jan 2014	7 Jan 2014	CPAI-2014-0027	CVE-2006-2900	Internet Explorer Keystroke Hijack Information Disclosure - Ver2 (CVE-2006-2900)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0045	CVE-2002-0965	Oracle 9i TNS Listener SERVICE_NAME Remote Buffer Overflow - Ver2 (CVE-2002-0965)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0114	CVE-2006-4051	PHPLiveHelper global.php abs_path Parameter PHP Code Execution - Ver2 (CVE-2006-4051)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0023	CVE-2013-0422	Oracle Java MBeanInstantiator.findClass Remote Code Execution - Ver2 (CVE-2013-0422)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0043	CVE-2006-0294	Mozilla Firefox Style Engine Position Change Memory Corruption - Ver2 (CVE-2006-0294)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2009-349	CVE-2009-1350	Novell Client NetIdentity Agent Remote Pointer Dereference Code Execution - Ver2 (CVE-2009-1350)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0117	CVE-2009-3130	Microsoft Excel Document Malformed BIFF Record Heap Overflow (MS09-067) - Ver2 (CVE-2009-3130)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0100	CVE-2006-2835	Saphplesson id Parameter SQL Injection - Ver2 (CVE-2006-2835)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0009	CVE-2006-0252	Benders Calendar index.php this_day Parameter SQL Injection - Ver2 (CVE-2006-0252)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0113	CVE-2006-0102	TinyPHPForum action.php txt Parameter Cross-Site Scripting - Ver2 (CVE-2006-0102)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0032	CVE-2006-3993	TSEP colorswitch.php tsep_configabsPath Parameter PHP Code Execution - Ver2 (CVE-2006-3993)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0062	CVE-2007-1297	AJ Dating view_profile.php user_id Parameter SQL Injection - Ver2 (CVE-2007-1297)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0401	CVE-2007-0984	PollMentor pollmentorres.asp id Parameter SQL Injection - Ver2 (CVE-2007-0984)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0420	CVE-2006-1739	Mozilla Firefox CSS Border Width Memory Corruption - Ver2 (CVE-2006-1739)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0118	CVE-2006-0206	Light Weight Calendar index.php date Parameter PHP Code Execution - Ver2 (CVE-2006-0206)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0092	CVE-2006-3803	Mozilla Firefox New Function Garbage Collection Code Execution - Ver2 (CVE-2006-3803)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0119	CVE-2010-2561	MSXML Response Handling Memory Corruption - Ver2 (CVE-2010-2561)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0111	CVE-2006-4354	Empire CMS checklevel.php check_path Parameter PHP Code Execution - Ver2 (CVE-2006-4354)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0074	CVE-2007-3737	Mozilla Firefox Event Handler Privilege Escalation - Ver2 (CVE-2007-3737)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0086	CVE-2007-2221	Internet Explorer mdsauth.dll Arbitrary File Overwrite - Ver2 (CVE-2007-2221)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2012-160	CVE-2011-0653	Microsoft SharePoint Calendar Cross-Site Scripting (MS11-074) - Ver2 (CVE-2011-0653)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0011	CVE-2007-0945	Microsoft Internet Explorer mergeAttribues Property Handling Memory Corruption - Ver2 (CVE-2007-0945)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0084	CVE-2002-1123	MS-SQL Server Protocol - General Settings - Ver2 (CVE-2002-1123)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0040	CVE-2007-1571	Activist Mobilization Platform base.php base_path Parameter PHP Code Execution - Ver2 (CVE-2007-1571)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0060	CVE-2006-6296	Microsoft Windows spoolss GetPrinterData Denial of Service - Ver2 (CVE-2006-6296)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0038	CVE-2002-0561	Oracle 9i HTTP Server Web Administration Access Privilege Escalation - Ver2 (CVE-2002-0561)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0120	CVE-2006-0900	FreeBSD Remote NFS RPC Request Denial of Service - Ver2 (CVE-2006-0900)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0101	CVE-2001-0478	phpMYAdmin goto Parameter PHP Code Execution - Ver2 (CVE-2001-0478)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0016	CVE-2006-0205	Wordcircle index.php password Parameter SQL Injection - Ver2 (CVE-2006-0205)
Critical	7 Jan 2014	7 Jan 2014	CPAI-2014-0005	CVE-2006-1737	Mozilla Firefox Javascript Large Regular Expression Parsing Memory Corruption - Ver2 (CVE-2006-1737)