Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	11 Nov 2014	7 Mar 2019	CPAI-2014-1940	Microsoft MS14-064	CVE-2014-6332	Microsoft Windows OLE Automation Array Remote Code Execution (MS14-064; CVE-2014-6332)
Medium	19 Feb 2014	11 Feb 2019	CPAI-2014-1157			w00tw00t security scanner
Critical	30 Apr 2014	10 Feb 2019	CPAI-2014-1495	Sophos 120230	CVE-2014-2849	Sophos Web Appliance change_password Admin Password Privilege Escalation (CVE-2014-2849)
High	26 Feb 2014	21 Jan 2019	CPAI-2014-0949			Suspicious Non-Alphanumeric JavaScript Encoding
Critical	20 Jul 2014	16 Jan 2019	CPAI-2014-1722		CVE-2014-3805	AlienVault OSSIM av-centerd Util.pm get_license Arbitrary Command Execution (CVE-2014-3805)
Critical	22 Sep 2014	14 Jan 2019	CPAI-2014-1832		CVE-2014-5210	AlienVault OSSIM av-centerd Util.pm remote_task Arbitrary Command Execution (CVE-2014-5210)
Low	15 Oct 2014	2 Jan 2019	CPAI-2014-1909		CVE-2014-3566	Secure Socket Layer (SSL) Version 3.0 (CVE-2014-3566)
Medium	6 Aug 2014	19 Dec 2018	CPAI-2014-1678			Web Login Form Password Brute Force Attempts
Critical	28 Sep 2014	13 Dec 2018	CPAI-2014-1852		CVE-2014-6037	ManageEngine EventLog Analyzer agentUpload Directory Traversal (CVE-2014-6037)
Critical	28 Dec 2014	12 Dec 2018	CPAI-2014-1930		CVE-2010-3970	Microsoft Graphics Rendering Engine Thumbnail Image Stack Buffer Overflow - Ver2 (CVE-2010-3970)
High	28 Dec 2014	25 Nov 2018	CPAI-2014-2418		CVE-2004-0949	Linux Kernel SMB Filesystem smb_receive Transaction2 - Ver2 (CVE-2004-0949)
Critical	24 Feb 2014	22 Oct 2018	CPAI-2014-0935		CVE-2009-4140	Joomla ofc_upload_image.php Unrestricted File Upload (CVE-2009-4140)
High	1 Oct 2014	21 Oct 2018	CPAI-2014-1850		CVE-2013-5705 CVE-2018-17082	Apache2 PHP Component Chunked Transfer Encoding Policy Bypass (CVE-2013-5705; CVE-2018-17082)
High	20 Mar 2014	16 Oct 2018	CPAI-2014-1166		CVE-2014-2205	McAfee ePolicy Orchestrator XML External Entity (CVE-2014-2205)
High	10 Nov 2014	3 Sep 2018	CPAI-2014-2083		CVE-2008-6923	Joomla Component com_content SQL Injection (CVE-2008-6923)
High	10 Nov 2014	22 Jul 2018	CPAI-2014-2102			Joomla Component com_virtuemart SQL Injection
Critical	9 Nov 2014	5 Jul 2018	CPAI-2014-1984	Adobe APSB14-21	CVE-2017-2992	Adobe Flash Player Use After Free Code Execution (APSB14-21: CVE-2014-0553; CVE-2017-2992)
Critical	7 Jan 2014	23 May 2018	CPAI-2014-0080		CVE-2010-3956	Microsoft OpenType Font Format Driver Index Code Execution (MS10-091) - Ver2 (CVE-2010-3956)
Critical	28 Dec 2014	23 May 2018	CPAI-2014-1929		CVE-2010-1247	Microsoft Excel RealTimeData Record Heap Corruption (MS10-038) - Ver2 (CVE-2010-1247)
High	10 Jun 2014	17 May 2018	CPAI-2014-1625	OpenSSL	CVE-2014-3470	OpenSSL Anonymous ECDH Denial of Service (CVE-2014-3470)
Critical	14 Dec 2014	15 May 2018	CPAI-2014-2298	Adobe APSB14-27	CVE-2014-9163	Adobe Flash Player Stack Buffer Overflow (CVE-2014-9163)
High	17 Dec 2014	14 May 2018	CPAI-2014-2310	Adobe apsb14-26	CVE-2014-8439	Adobe Flash Player Memory Corruption (APSB14-26: CVE-2014-8439)
High	26 Mar 2014	29 Apr 2018	CPAI-2014-1181	Nginx	CVE-2013-4547	Nginx Request URI Verification Security Bypass (CVE-2013-4547)
Critical	11 Nov 2014	29 Apr 2018	CPAI-2014-1948	Microsoft MS14-066	CVE-2014-6321	Microsoft Windows Schannel Remote Code Execution (MS14-066; CVE-2014-6321)
Critical	26 Nov 2014	2 Apr 2018	CPAI-2014-2231	Microsoft MS14-066	CVE-2014-6321	Microsoft Windows SChannel Buffer Overflow (MS14-066; CVE-2014-6321)
High	10 Nov 2014	8 Mar 2018	CPAI-2014-2097		CVE-2010-1721	Joomla component com_iproperty SQL Injection (CVE-2010-1721)
High	16 Mar 2014	21 Feb 2018	CPAI-2014-1153			Fraudulent SSL Certificates Man-In-The-Middle
High	20 Aug 2014	31 Jan 2018	CPAI-2014-1766		CVE-2014-0244	Samba nmbd sys_recvfrom Infinite Loop Denial of Service (CVE-2014-0244)
Medium	28 Dec 2014	14 Jan 2018	CPAI-2014-2420		CVE-2004-0120	Microsoft Windows Secure Sockets Layer Version 3.0 - Ver2 (CVE-2004-0120)
High	9 Jun 2014	11 Jan 2018	CPAI-2014-1616		CVE-2014-0224	OpenSSL TLS Man-In-The-Middle Security Bypass (CVE-2014-0224)
Low	26 Mar 2014	10 Jan 2018	CPAI-2014-1173	OpenSSL	CVE-2013-4353	OpenSSL TLS Record Tampering Denial of Service (CVE-2013-4353)
High	31 Mar 2014	3 Jan 2018	CPAI-2014-1234		CVE-2009-2501	Microsoft Windows GDIplus PNG Chunk Processing Integer Overflow (MS09-062) - Ver2 (CVE-2009-2501)
High	28 Dec 2014	31 Dec 2017	CPAI-2014-2402		CVE-2002-0656	OpenSSL Large Client Master Key Exploit Buffer Overflow - Ver2 (CVE-2002-0656)
High	28 Dec 2014	31 Dec 2017	CPAI-2014-2415		CVE-2014-0160	OpenSSL TLS Heartbeat information disclosure - Ver2 (CVE-2014-0160)
High	3 Nov 2014	19 Dec 2017	CPAI-2014-1952	OpenSSL Project0141015 secadv_20141015	CVE-2014-3567	OpenSSL Invalid Session Ticket Denial of Service (CVE-2014-3567)
Medium	8 Jun 2014	18 Dec 2017	CPAI-2014-1611	GnuTLS GNUTLS-SA-2014-3	CVE-2014-3466	GnuTLS Server Hello Session ID Heap Buffer Overflow (CVE-2014-3466)
Low	10 Apr 2014	17 Dec 2017	CPAI-2014-1342		CVE-2014-2588	McAfee Asset Manager downloadReport Information Disclosure (CVE-2014-2588)
Medium	11 May 2014	3 Dec 2017	CPAI-2014-1534			TLS Servers Cipher Suites Scanning Tools
Medium	10 Nov 2014	3 Dec 2017	CPAI-2014-1991	Secunia	CVE-2014-3511	OpenSSL TLS Protocol Downgrade Attack (CVE-2014-3511)
Critical	25 Nov 2014	3 Dec 2017	CPAI-2014-2220	Microsoft MS14-066	CVE-2014-6321	Microsoft Windows SChannel Denial Of Service (MS14-066; CVE-2014-6321)
High	25 Dec 2014	3 Dec 2017	CPAI-2014-2326	OpenSSL Project0140806 secadv_20140806	CVE-2014-3512	OpenSSL Multiple Invalid SRP Parameters Buffer Overflow (CVE-2014-3512)
Critical	31 Mar 2014	26 Nov 2017	CPAI-2014-1275		CVE-2008-4837	Microsoft Word Crafted Sprm Structure Stack Memory Corruption (MS08-072) - Ver2 (CVE-2008-4837)
High	28 Dec 2014	26 Nov 2017	CPAI-2014-2443		CVE-2010-3229	Microsoft SChannel TLSv1 Denial of Service (MS10-085) - Ver2 (CVE-2010-3229)
Medium	28 Dec 2014	26 Nov 2017	CPAI-2014-2441		CVE-2010-0740	OpenSSL TLS Connection Record Handling Denial of Service - Ver2 (CVE-2010-0740)
Medium	28 Dec 2014	22 Nov 2017	CPAI-2014-2401		CVE-2004-0748	Apache 2 mod_ssl Connection Abort Denial of Service possible attack - Ver2 (CVE-2004-0748)
High	3 Dec 2014	21 Nov 2017	CPAI-2014-2232			Malformed PDF Version Header
High	23 Mar 2014	20 Nov 2017	CPAI-2014-1170	OpenSSL Project	CVE-2013-6449	OpenSSL ssl_get_algorithm2 TLS Denial of Service - ver 2 (CVE-2013-6449)
High	4 May 2014	20 Nov 2017	CPAI-2014-1520	GnuTLS GNUTLS-SA-2014-1	CVE-2014-1959	GnuTLS X.509 Version 1 Intermediate Certificate Policy Bypass (CVE-2014-1959)
High	19 Oct 2014	19 Nov 2017	CPAI-2014-1912	Mozilla mfsa2014-73	CVE-2014-1568	Mozilla Network Security Services RSA Signature Forgery (CVE-2014-1568)
High	28 Dec 2014	19 Nov 2017	CPAI-2014-2403		CVE-2009-2511	Microsoft CryptoAPI Object Identifiers Integer Overflow (MS09-056) - Ver2 (CVE-2009-2511)