Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	19 May 2014	15 Nov 2017	CPAI-2014-1550	OpenSSL	CVE-2014-0198	OpenSSL do_ssl3_write Denial of Service (CVE-2014-0198)
High	23 Feb 2014	23 Aug 2017	CPAI-2014-1741			JavaScript Code Evasion Attempt
Critical	23 Jun 2014	2 Aug 2017	CPAI-2014-1658			RIG Exploit Kit Website Redirection
Critical	25 May 2014	16 Jul 2017	CPAI-2014-1566			SQL Servers MSSQL Vendor-specific SQL Injection
High	16 Nov 2014	16 Jul 2017	CPAI-2014-2199		CVE-2010-2910	Joomla Component com_oziogallery SQL Injection (CVE-2010-2910)
High	10 Dec 2014	19 Jun 2017	CPAI-2014-2294			RomPager Authentication Bypass Attempt - Misfortune Cookie
Medium	8 May 2014	9 May 2017	CPAI-2014-1525	GnuTLS GNUTLS-SA-2014-2	CVE-2014-0092	GnuTLS Certificate Verification Policy Bypass (CVE-2014-0092)
Critical	29 May 2014	3 May 2017	CPAI-2014-1582	Symantec 20140512_00	CVE-2014-1649	Symantec Workspace Streaming XML-RPC Arbitrary File Upload (CVE-2014-1649)
High	2 Jun 2014	9 Apr 2017	CPAI-2014-1587	IPS Research Team Rapid7		WinRAR Filename Spoofing
High	27 Mar 2014	4 Apr 2017	CPAI-2014-1187			Anonymous DoSer Denial of Service Tool
High	1 May 2014	28 Mar 2017	CPAI-2014-1508			SSH Over DNS Tunneling
High	30 Oct 2014	28 Mar 2017	CPAI-2014-1943	Microsoft MS14-052	CVE-2013-7331	Microsoft Internet Explorer Resource Information Disclosure (MS14-052; CVE-2013-7331)
Critical	16 Apr 2014	13 Feb 2017	CPAI-2014-1425	Metasploit	CVE-2009-4265	PointDev IDEAL Migration and Administration Buffer Overflow - Ver2 (CVE-2009-4265)
Critical	17 Dec 2014	7 Feb 2017	CPAI-2014-2305		CVE-2014-9734 CVE-2015-1579	WordPress Slider Revolution Plugin Local File Inclusion (CVE-2014-9734; CVE-2015-1579)
Critical	16 Apr 2014	11 Jan 2017	CPAI-2014-1401		CVE-2012-0151	Microsoft Windows Signature Validation Remote Code Execution (MS12-024) - Ver2 (CVE-2012-0151)
Medium	18 Dec 2014	2 Jan 2017	CPAI-2014-2312	Microsoft MS14-085	CVE-2014-6355	Microsoft Graphics Component Information Disclosure (MS14-085) - ver 2 (CVE-2014-6355)
High	31 Mar 2014	28 Dec 2016	CPAI-2014-1263		CVE-2010-2862	Adobe Reader cooltype.dll Remote Code Execution (APSB10-17) - Ver2 (CVE-2010-2862)
Critical	10 Jun 2014	27 Dec 2016	CPAI-2014-1630	Mozilla mfsa2014-29	CVE-2014-1510 CVE-2014-1511	Mozilla Multiple Products WebIDL Remote Code Execution (CVE-2014-1510; CVE-2014-1511)
Medium	8 May 2014	26 Dec 2016	CPAI-2014-1529		CVE-2013-4449	OpenLDAP rwm Overlay Denial of Service - ver 2 (CVE-2013-4449)
Critical	3 Sep 2014	25 Dec 2016	CPAI-2014-1789	Attachmate 2546	CVE-2014-0603	Attachmate Reflection FTP Client ActiveX GetGlobalSettings Memory Corruption (CVE-2014-0603)
Critical	11 Sep 2014	21 Dec 2016	CPAI-2014-1804	Mozilla Foundation 2014-56	CVE-2014-1548	Mozilla Firefox SharedWorker MessagePort Use After Free (CVE-2014-1548)
High	5 Feb 2014	14 Dec 2016	CPAI-2014-0890		CVE-2013-3214 CVE-2013-3215	vTiger CRM SOAP AddEmailAttachment Arbitrary File Upload (CVE-2013-3214; CVE-2013-3215)
High	17 Dec 2014	12 Dec 2016	CPAI-2014-2306	Adobe APSB09-15	CVE-2009-3459	Adobe Acrobat and Adobe Reader Deflate Parameter Integer Overflow (CVE-2009-3459)
Critical	23 Oct 2014	28 Nov 2016	CPAI-2014-1925	Mitre.org CVE-2011-5165	CVE-2011-5165	Free MP3 CD Ripper WAV File Stack Buffer Overflow (CVE-2011-5165)
Critical	30 Apr 2014	24 Nov 2016	CPAI-2014-1334		CVE-2012-3993 CVE-2013-1710	Mozilla Firefox generateCRMFRequest Remote Code Execution (CVE-2012-3993; CVE-2013-1710)
Critical	9 Apr 2014	22 Nov 2016	CPAI-2014-1336	OpenSSL	CVE-2014-0160 CVE-2014-0346	OpenSSL TLS DTLS Heartbeat Information Disclosure (CVE-2014-0160; CVE-2014-0346)
Critical	12 Apr 2014	22 Nov 2016	CPAI-2014-1346	OpenSSL	CVE-2014-0160 CVE-2014-0346	OpenSSL TLS DTLS Overly-long Heartbeat Response Information Disclosure (CVE-2014-0160; CVE-2014-0346)
Critical	3 Nov 2014	22 Nov 2016	CPAI-2014-1951			Nuclear Exploit Kit Landing Page
High	13 Jan 2014	17 Nov 2016	CPAI-2014-0388		CVE-2013-6877	RealNetworks RealPlayer RMP File Heap Buffer Overflow (CVE-2013-6877)
Medium	9 Mar 2014	17 Nov 2016	CPAI-2014-1131		CVE-2014-1683	SkyBlueCanvas CMS Remote Command Execution (CVE-2014-1683)
Medium	28 Dec 2014	20 Oct 2016	CPAI-2014-2345		CVE-2012-2414	Digium Asterisk Manager User Shell Command Execution - Ver2 (CVE-2012-2414)
High	31 Mar 2014	20 Sep 2016	CPAI-2014-1273		CVE-2011-5171	Cyberlink Power2Go p2g Project Buffer Overflow - Ver2 (CVE-2011-5171)
Critical	31 Mar 2014	20 Sep 2016	CPAI-2014-1204		CVE-2012-2915	Lattice Semiconductor PAC-Designer Symbol Value Buffer Overflow - Ver2 (CVE-2012-2915)
High	30 Nov 2014	11 Sep 2016	CPAI-2014-2255		CVE-2016-7168	Web Server Content-Disposition Cross-Site Scripting (CVE-2016-7168)
High	27 Mar 2014	15 Aug 2016	CPAI-2014-1191			Web Servers Slow HTTP Denial of Service
N/A	31 Aug 2014	15 Aug 2016	CPAI-2014-1782			Multipath TCP
Medium	23 Oct 2014	15 Aug 2016	CPAI-2014-1891	Digium AST-2014-007	CVE-2014-4047	Digium Asterisk HTTP Connections Denial of Service (CVE-2014-4047)
High	8 Dec 2014	15 Aug 2016	CPAI-2014-1979		CVE-2014-0101	Linux Kernel SCTP Handshake Denial of Service (CVE-2014-0101)
Medium	31 Mar 2014	27 Jun 2016	CPAI-2014-1179			w3af Security Scanner
Critical	16 Apr 2014	9 Jun 2016	CPAI-2014-1450		CVE-2010-0249	Microsoft Internet Explorer HTML Object Memory Corruption Use After Free - Ver2 (CVE-2010-0249)
Critical	2 Jul 2014	9 Jun 2016	CPAI-2014-1683			Wordpress Timthumb WebShot Code Execution
Medium	5 Oct 2014	9 Jun 2016	CPAI-2014-1882		CVE-2011-2386	VisiWave VWR File Parsing (CVE-2011-2386)
High	5 Nov 2014	9 Jun 2016	CPAI-2014-1968		CVE-2012-6554	activeCollab Chat Module Arbitrary PHP Code Execution (CVE-2012-6554)
High	16 Nov 2014	9 Jun 2016	CPAI-2014-2197			Joomla Component com_jeemasms Multiple
High	28 Dec 2014	9 Jun 2016	CPAI-2014-2438		CVE-2007-0777	Mozilla Browsers JavaScript Argument Passing Code Execution - Ver2 (CVE-2007-0777)
Medium	24 Nov 2014	16 May 2016	CPAI-2014-2225		CVE-2005-0116 CVE-2005-0362	AWStats configdir Parameter Remote Command Execution (CVE-2005-0116; CVE-2005-0362)
High	3 Aug 2014	19 Apr 2016	CPAI-2014-1921		CVE-2014-0239	Samba DNS Reply Flag Denial of Service (CVE-2014-0239)
Critical	30 Apr 2014	12 Apr 2016	CPAI-2014-1493			TLS Invalid Cipher Suites Denial of Service
Medium	22 Sep 2014	30 Mar 2016	CPAI-2014-1839	Drupa SA-CORE-2014-004	CVE-2014-5266	Drupal Core XML-RPC Endpoint xmlrpc.php Tags Denial of Service (CVE-2014-5266)
Medium	3 Mar 2014	29 Mar 2016	CPAI-2014-1003		CVE-2000-0709	Microsoft FrontPage URL Device Denial of Service (CVE-2000-0709)