Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	7 Jan 2014	23 May 2018	CPAI-2014-0080		CVE-2010-3956	Microsoft OpenType Font Format Driver Index Code Execution (MS10-091) - Ver2 (CVE-2010-3956)
Critical	28 Dec 2014	23 May 2018	CPAI-2014-1929		CVE-2010-1247	Microsoft Excel RealTimeData Record Heap Corruption (MS10-038) - Ver2 (CVE-2010-1247)
High	10 Jun 2014	17 May 2018	CPAI-2014-1625	OpenSSL	CVE-2014-3470	OpenSSL Anonymous ECDH Denial of Service (CVE-2014-3470)
Critical	14 Dec 2014	15 May 2018	CPAI-2014-2298	Adobe APSB14-27	CVE-2014-9163	Adobe Flash Player Stack Buffer Overflow (CVE-2014-9163)
High	17 Dec 2014	14 May 2018	CPAI-2014-2310	Adobe apsb14-26	CVE-2014-8439	Adobe Flash Player Memory Corruption (APSB14-26: CVE-2014-8439)
High	26 Mar 2014	29 Apr 2018	CPAI-2014-1181	Nginx	CVE-2013-4547	Nginx Request URI Verification Security Bypass (CVE-2013-4547)
Critical	11 Nov 2014	29 Apr 2018	CPAI-2014-1948	Microsoft MS14-066	CVE-2014-6321	Microsoft Windows Schannel Remote Code Execution (MS14-066; CVE-2014-6321)
Critical	26 Nov 2014	2 Apr 2018	CPAI-2014-2231	Microsoft MS14-066	CVE-2014-6321	Microsoft Windows SChannel Buffer Overflow (MS14-066; CVE-2014-6321)
Critical	11 Feb 2014	18 Mar 2018	CPAI-2014-0885		CVE-2014-0263	Microsoft Graphics Component Memory Corruption (MS14-007; CVE-2014-0263)
High	10 Nov 2014	8 Mar 2018	CPAI-2014-2097		CVE-2010-1721	Joomla component com_iproperty SQL Injection (CVE-2010-1721)
High	16 Mar 2014	21 Feb 2018	CPAI-2014-1153			Fraudulent SSL Certificates Man-In-The-Middle
High	20 Aug 2014	31 Jan 2018	CPAI-2014-1766		CVE-2014-0244	Samba nmbd sys_recvfrom Infinite Loop Denial of Service (CVE-2014-0244)
Medium	28 Dec 2014	14 Jan 2018	CPAI-2014-2420		CVE-2004-0120	Microsoft Windows Secure Sockets Layer Version 3.0 - Ver2 (CVE-2004-0120)
High	9 Jun 2014	11 Jan 2018	CPAI-2014-1616		CVE-2014-0224	OpenSSL TLS Man-In-The-Middle Security Bypass (CVE-2014-0224)
Low	26 Mar 2014	10 Jan 2018	CPAI-2014-1173	OpenSSL	CVE-2013-4353	OpenSSL TLS Record Tampering Denial of Service (CVE-2013-4353)
High	31 Mar 2014	3 Jan 2018	CPAI-2014-1234		CVE-2009-2501	Microsoft Windows GDIplus PNG Chunk Processing Integer Overflow (MS09-062) - Ver2 (CVE-2009-2501)
High	28 Dec 2014	31 Dec 2017	CPAI-2014-2402		CVE-2002-0656	OpenSSL Large Client Master Key Exploit Buffer Overflow - Ver2 (CVE-2002-0656)
High	28 Dec 2014	31 Dec 2017	CPAI-2014-2415		CVE-2014-0160	OpenSSL TLS Heartbeat information disclosure - Ver2 (CVE-2014-0160)
High	3 Nov 2014	19 Dec 2017	CPAI-2014-1952	OpenSSL Project0141015 secadv_20141015	CVE-2014-3567	OpenSSL Invalid Session Ticket Denial of Service (CVE-2014-3567)
Medium	8 Jun 2014	18 Dec 2017	CPAI-2014-1611	GnuTLS GNUTLS-SA-2014-3	CVE-2014-3466	GnuTLS Server Hello Session ID Heap Buffer Overflow (CVE-2014-3466)
Low	10 Apr 2014	17 Dec 2017	CPAI-2014-1342		CVE-2014-2588	McAfee Asset Manager downloadReport Information Disclosure (CVE-2014-2588)
Medium	11 May 2014	3 Dec 2017	CPAI-2014-1534			TLS Servers Cipher Suites Scanning Tools
Medium	10 Nov 2014	3 Dec 2017	CPAI-2014-1991	Secunia	CVE-2014-3511	OpenSSL TLS Protocol Downgrade Attack (CVE-2014-3511)
Critical	25 Nov 2014	3 Dec 2017	CPAI-2014-2220	Microsoft MS14-066	CVE-2014-6321	Microsoft Windows SChannel Denial Of Service (MS14-066; CVE-2014-6321)
High	25 Dec 2014	3 Dec 2017	CPAI-2014-2326	OpenSSL Project0140806 secadv_20140806	CVE-2014-3512	OpenSSL Multiple Invalid SRP Parameters Buffer Overflow (CVE-2014-3512)
Critical	31 Mar 2014	26 Nov 2017	CPAI-2014-1275		CVE-2008-4837	Microsoft Word Crafted Sprm Structure Stack Memory Corruption (MS08-072) - Ver2 (CVE-2008-4837)
High	28 Dec 2014	26 Nov 2017	CPAI-2014-2443		CVE-2010-3229	Microsoft SChannel TLSv1 Denial of Service (MS10-085) - Ver2 (CVE-2010-3229)
Medium	28 Dec 2014	26 Nov 2017	CPAI-2014-2441		CVE-2010-0740	OpenSSL TLS Connection Record Handling Denial of Service - Ver2 (CVE-2010-0740)
Medium	28 Dec 2014	22 Nov 2017	CPAI-2014-2401		CVE-2004-0748	Apache 2 mod_ssl Connection Abort Denial of Service possible attack - Ver2 (CVE-2004-0748)
High	3 Dec 2014	21 Nov 2017	CPAI-2014-2232			Malformed PDF Version Header
High	23 Mar 2014	20 Nov 2017	CPAI-2014-1170	OpenSSL Project	CVE-2013-6449	OpenSSL ssl_get_algorithm2 TLS Denial of Service - ver 2 (CVE-2013-6449)
High	4 May 2014	20 Nov 2017	CPAI-2014-1520	GnuTLS GNUTLS-SA-2014-1	CVE-2014-1959	GnuTLS X.509 Version 1 Intermediate Certificate Policy Bypass (CVE-2014-1959)
High	19 Oct 2014	19 Nov 2017	CPAI-2014-1912	Mozilla mfsa2014-73	CVE-2014-1568	Mozilla Network Security Services RSA Signature Forgery (CVE-2014-1568)
High	28 Dec 2014	19 Nov 2017	CPAI-2014-2403		CVE-2009-2511	Microsoft CryptoAPI Object Identifiers Integer Overflow (MS09-056) - Ver2 (CVE-2009-2511)
High	19 May 2014	15 Nov 2017	CPAI-2014-1550	OpenSSL	CVE-2014-0198	OpenSSL do_ssl3_write Denial of Service (CVE-2014-0198)
High	23 Feb 2014	23 Aug 2017	CPAI-2014-1741			JavaScript Code Evasion Attempt
Critical	23 Jun 2014	2 Aug 2017	CPAI-2014-1658			RIG Exploit Kit Website Redirection
Critical	25 May 2014	16 Jul 2017	CPAI-2014-1566			SQL Servers MSSQL Vendor-specific SQL Injection
High	16 Nov 2014	16 Jul 2017	CPAI-2014-2199		CVE-2010-2910	Joomla Component com_oziogallery SQL Injection (CVE-2010-2910)
High	10 Dec 2014	19 Jun 2017	CPAI-2014-2294			RomPager Authentication Bypass Attempt - Misfortune Cookie
Medium	8 May 2014	9 May 2017	CPAI-2014-1525	GnuTLS GNUTLS-SA-2014-2	CVE-2014-0092	GnuTLS Certificate Verification Policy Bypass (CVE-2014-0092)
Critical	29 May 2014	3 May 2017	CPAI-2014-1582	Symantec 20140512_00	CVE-2014-1649	Symantec Workspace Streaming XML-RPC Arbitrary File Upload (CVE-2014-1649)
High	2 Jun 2014	9 Apr 2017	CPAI-2014-1587	IPS Research Team Rapid7		WinRAR Filename Spoofing
High	27 Mar 2014	4 Apr 2017	CPAI-2014-1187			Anonymous DoSer Denial of Service Tool
High	1 May 2014	28 Mar 2017	CPAI-2014-1508			SSH Over DNS Tunneling
High	30 Oct 2014	28 Mar 2017	CPAI-2014-1943	Microsoft MS14-052	CVE-2013-7331	Microsoft Internet Explorer Resource Information Disclosure (MS14-052; CVE-2013-7331)
Critical	16 Apr 2014	13 Feb 2017	CPAI-2014-1425	Metasploit	CVE-2009-4265	PointDev IDEAL Migration and Administration Buffer Overflow - Ver2 (CVE-2009-4265)
Critical	17 Dec 2014	7 Feb 2017	CPAI-2014-2305		CVE-2014-9734 CVE-2015-1579	WordPress Slider Revolution Plugin Local File Inclusion (CVE-2014-9734; CVE-2015-1579)
Critical	16 Apr 2014	11 Jan 2017	CPAI-2014-1401		CVE-2012-0151	Microsoft Windows Signature Validation Remote Code Execution (MS12-024) - Ver2 (CVE-2012-0151)
Medium	18 Dec 2014	2 Jan 2017	CPAI-2014-2312	Microsoft MS14-085	CVE-2014-6355	Microsoft Graphics Component Information Disclosure (MS14-085) - ver 2 (CVE-2014-6355)