Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	23 Feb 2014	27 May 2020	CPAI-2014-0933			Multiple Routers HNAP Insecure Implementation Privilege Escalation
Critical	2 Jul 2014	19 Jan 2020	CPAI-2014-1682			Multiple PHP Servers C99shell Backdoor Command Execution
Critical	7 May 2014	25 Dec 2019	CPAI-2014-1527			China Chopper Web Shell Remote Code Execution
High	14 Sep 2014	8 Dec 2019	CPAI-2014-1800			PhpMyAdmin GLOBALS Superglobal Remote Variable Manipulation
Critical	28 Dec 2014	14 Nov 2019	CPAI-2014-1141		CVE-2013-2348	HP Data Protector Opcode 45 and 46 Code Execution (CVE-2013-2348)
High	22 Jan 2014	9 Sep 2019	CPAI-2014-0756		CVE-2013-5487 CVE-2019-1621	Cisco Prime Data Center Network Manager DownloadServlet Information Disclosure (CVE-2013-5487; CVE-2019-1621)
High	28 Dec 2014	7 Jul 2019	CPAI-2014-2364		CVE-2012-0507	Oracle Java AtomicReferenceArray Sandbox Breach Code Execution - Ver2 (CVE-2012-0507)
High	14 Sep 2014	19 Jun 2019	CPAI-2014-1799		CVE-2010-3065	PhpMyAdmin ENV Superglobal Remote Variable Manipulation (CVE-2010-3065)
Critical	25 Apr 2014	4 Jun 2019	CPAI-2014-1480	Apache Struts S2-020	CVE-2014-0094 CVE-2014-0112 CVE-2014-0113 CVE-2014-0114	Apache Struts ParametersInterceptor ClassLoader Security Bypass (CVE-2014-0094; CVE-2014-0112; CVE-2014-0113; CVE-2014-0114)
High	14 Sep 2014	4 Jun 2019	CPAI-2014-1803			PhpMyAdmin SERVER Superglobal Remote Variable Manipulation
High	19 Jan 2014	13 May 2019	CPAI-2014-0750		CVE-2013-5211	NTP Servers Monlist Command Denial of Service (CVE-2013-5211)
High	10 Nov 2014	13 May 2019	CPAI-2014-2153		CVE-2008-2564 CVE-2010-4617	Joomla Component com_jotloader SQL Injection (CVE-2008-2564; CVE-2010-4617)
Critical	20 Jan 2014	23 Apr 2019	CPAI-2014-0753		CVE-2013-3900	Microsoft Windows WinVerifyTrust PE Validation Security Bypass (MS13-098; CVE-2013-3900)
High	29 Jul 2014	7 Apr 2019	CPAI-2014-1691	Microsoft MS14-031	CVE-2014-1811	Microsoft Windows TCP Denial of Service (MS14-031; CVE-2014-1811)
Critical	12 Mar 2014	1 Apr 2019	CPAI-2014-0879	Microsoft MS14-006	CVE-2014-0254	Microsoft Windows IPv6 Router Advertisements Denial of Service (MS14-006; CVE-2014-0254)
Critical	13 Nov 2014	31 Mar 2019	CPAI-2014-2188	Adobe APSB14-21	CVE-2014-0557	Adobe Flash Player Memory Leakage (APSB14-21: CVE-2014-0557)
High	10 Nov 2014	25 Mar 2019	CPAI-2014-2042			Joomla Component com_phocagallery SQL Injection
High	10 Nov 2014	25 Mar 2019	CPAI-2014-2130		CVE-2009-4599	Joomla Component com_jsjobs SQL Injection (CVE-2009-4599)
High	10 Nov 2014	25 Mar 2019	CPAI-2014-2004		CVE-2008-2093	Joomla Community com_comprofiler SQL Injection (CVE-2008-2093)
High	10 Nov 2014	25 Mar 2019	CPAI-2014-2121			Joomla Component com_event Multiple
Critical	11 Nov 2014	7 Mar 2019	CPAI-2014-1940	Microsoft MS14-064	CVE-2014-6332	Microsoft Windows OLE Automation Array Remote Code Execution (MS14-064; CVE-2014-6332)
Medium	19 Feb 2014	11 Feb 2019	CPAI-2014-1157			w00tw00t security scanner
Critical	30 Apr 2014	10 Feb 2019	CPAI-2014-1495	Sophos 120230	CVE-2014-2849	Sophos Web Appliance change_password Admin Password Privilege Escalation (CVE-2014-2849)
High	26 Feb 2014	21 Jan 2019	CPAI-2014-0949			Suspicious Non-Alphanumeric JavaScript Encoding
Critical	20 Jul 2014	16 Jan 2019	CPAI-2014-1722		CVE-2014-3805	AlienVault OSSIM av-centerd Util.pm get_license Arbitrary Command Execution (CVE-2014-3805)
Critical	22 Sep 2014	14 Jan 2019	CPAI-2014-1832		CVE-2014-5210	AlienVault OSSIM av-centerd Util.pm remote_task Arbitrary Command Execution (CVE-2014-5210)
Low	15 Oct 2014	2 Jan 2019	CPAI-2014-1909		CVE-2014-3566	Secure Socket Layer (SSL) Version 3.0 (CVE-2014-3566)
Medium	6 Aug 2014	19 Dec 2018	CPAI-2014-1678			Web Login Form Password Brute Force Attempts
Critical	28 Sep 2014	13 Dec 2018	CPAI-2014-1852		CVE-2014-6037	ManageEngine EventLog Analyzer agentUpload Directory Traversal (CVE-2014-6037)
Critical	28 Dec 2014	12 Dec 2018	CPAI-2014-1930		CVE-2010-3970	Microsoft Graphics Rendering Engine Thumbnail Image Stack Buffer Overflow - Ver2 (CVE-2010-3970)
High	28 Dec 2014	25 Nov 2018	CPAI-2014-2418		CVE-2004-0949	Linux Kernel SMB Filesystem smb_receive Transaction2 - Ver2 (CVE-2004-0949)
Critical	24 Feb 2014	22 Oct 2018	CPAI-2014-0935		CVE-2009-4140	Joomla ofc_upload_image.php Unrestricted File Upload (CVE-2009-4140)
High	1 Oct 2014	21 Oct 2018	CPAI-2014-1850		CVE-2013-5705 CVE-2018-17082	Apache2 PHP Component Chunked Transfer Encoding Policy Bypass (CVE-2013-5705; CVE-2018-17082)
High	20 Mar 2014	16 Oct 2018	CPAI-2014-1166		CVE-2014-2205	McAfee ePolicy Orchestrator XML External Entity (CVE-2014-2205)
High	10 Nov 2014	3 Sep 2018	CPAI-2014-2083		CVE-2008-6923	Joomla Component com_content SQL Injection (CVE-2008-6923)
High	10 Nov 2014	22 Jul 2018	CPAI-2014-2102			Joomla Component com_virtuemart SQL Injection
Critical	9 Nov 2014	5 Jul 2018	CPAI-2014-1984	Adobe APSB14-21	CVE-2017-2992	Adobe Flash Player Use After Free Code Execution (APSB14-21: CVE-2014-0553; CVE-2017-2992)
Critical	7 Jan 2014	23 May 2018	CPAI-2014-0080		CVE-2010-3956	Microsoft OpenType Font Format Driver Index Code Execution (MS10-091) - Ver2 (CVE-2010-3956)
Critical	28 Dec 2014	23 May 2018	CPAI-2014-1929		CVE-2010-1247	Microsoft Excel RealTimeData Record Heap Corruption (MS10-038) - Ver2 (CVE-2010-1247)
High	10 Jun 2014	17 May 2018	CPAI-2014-1625	OpenSSL	CVE-2014-3470	OpenSSL Anonymous ECDH Denial of Service (CVE-2014-3470)
Critical	14 Dec 2014	15 May 2018	CPAI-2014-2298	Adobe APSB14-27	CVE-2014-9163	Adobe Flash Player Stack Buffer Overflow (CVE-2014-9163)
High	17 Dec 2014	14 May 2018	CPAI-2014-2310	Adobe apsb14-26	CVE-2014-8439	Adobe Flash Player Memory Corruption (APSB14-26: CVE-2014-8439)
High	26 Mar 2014	29 Apr 2018	CPAI-2014-1181	Nginx	CVE-2013-4547	Nginx Request URI Verification Security Bypass (CVE-2013-4547)
Critical	11 Nov 2014	29 Apr 2018	CPAI-2014-1948	Microsoft MS14-066	CVE-2014-6321	Microsoft Windows Schannel Remote Code Execution (MS14-066; CVE-2014-6321)
Critical	26 Nov 2014	2 Apr 2018	CPAI-2014-2231	Microsoft MS14-066	CVE-2014-6321	Microsoft Windows SChannel Buffer Overflow (MS14-066; CVE-2014-6321)
Critical	11 Feb 2014	18 Mar 2018	CPAI-2014-0885		CVE-2014-0263	Microsoft Graphics Component Memory Corruption (MS14-007; CVE-2014-0263)
High	10 Nov 2014	8 Mar 2018	CPAI-2014-2097		CVE-2010-1721	Joomla component com_iproperty SQL Injection (CVE-2010-1721)
High	16 Mar 2014	21 Feb 2018	CPAI-2014-1153			Fraudulent SSL Certificates Man-In-The-Middle
High	20 Aug 2014	31 Jan 2018	CPAI-2014-1766		CVE-2014-0244	Samba nmbd sys_recvfrom Infinite Loop Denial of Service (CVE-2014-0244)
Medium	28 Dec 2014	14 Jan 2018	CPAI-2014-2420		CVE-2004-0120	Microsoft Windows Secure Sockets Layer Version 3.0 - Ver2 (CVE-2004-0120)