Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	17 Jun 2014	23 Feb 2016	CPAI-2014-1641	ICS-CERT ICSA-14-079-03	CVE-2014-0766	Advantech WebAccess SCADA webvact.ocx NodeName2 Buffer Overflow (CVE-2014-0766)
Medium	18 Jun 2014	23 Feb 2016	CPAI-2014-1644	Oracle	CVE-2014-2417	Oracle Data Quality DscXB onloadstatechange Untrusted Pointer Dereference (CVE-2014-2417)
Medium	18 Jun 2014	23 Feb 2016	CPAI-2014-1645	ICS-CERT ICSA-14-079-03	CVE-2014-0767	Advantech WebAccess SCADA webvact.ocx AccessCode Buffer Overflow (CVE-2014-0767)
Medium	22 Jun 2014	23 Feb 2016	CPAI-2014-1648	Oracle	CVE-2014-2416	Oracle Data Quality DateTimeWrapper onchange Remote Code Execution (CVE-2014-2416)
Medium	24 Jun 2014	23 Feb 2016	CPAI-2014-1661	ICS-CERT ICSA-14-079-03	CVE-2014-0768	Advantech WebAccess SCADA webvact.ocx AccessCode2 Buffer Overflow (CVE-2014-0768)
Medium	13 Jul 2014	23 Feb 2016	CPAI-2014-1699	Oracle	CVE-2014-2418	Oracle Data Quality FileChooserDlg onChangeDirectory Untrusted Pointer Dereference (CVE-2014-2418)
Medium	14 Jul 2014	23 Feb 2016	CPAI-2014-1711		CVE-2014-3912	Samsung iPOLiS Device Manager FindConfigChildeKeyList Buffer Overflow (CVE-2014-3912)
Medium	14 Jul 2014	23 Feb 2016	CPAI-2014-1706	Oracle	CVE-2014-2415	Oracle Data Quality PostcardPreviewInt onclose Untrusted Pointer Dereference (CVE-2014-2415)
Medium	22 Sep 2014	23 Feb 2016	CPAI-2014-1841		CVE-2014-0991	Advantech WebAccess SCADA ProjectName Parameter Buffer Overflow (CVE-2014-0991)
Medium	23 Sep 2014	23 Feb 2016	CPAI-2014-1831		CVE-2014-0992	Advantech WebAccess SCADA Password Parameter Buffer Overflow (CVE-2014-0992)
Medium	30 Oct 2014	23 Feb 2016	CPAI-2014-1945	HP HPSBMU03110	CVE-2014-2638	HP Sprinter Tidestone Formula One DefaultFontName Buffer Overflow (CVE-2014-2638)
High	28 Dec 2014	23 Feb 2016	CPAI-2014-2332	PTC	CVE-2014-9267	PTC IsoView ActiveX Control Multiple Methods Buffer Overflow (CVE-2014-9267)
Medium	29 Dec 2014	23 Feb 2016	CPAI-2014-2334	Advantech	CVE-2014-8388	Advantech WebAccess SCADA webeye.ocx ip_address Parameter Buffer Overflow - ver 2 (CVE-2014-8388)
High	11 Feb 2014	18 Feb 2016	CPAI-2014-0884		CVE-2014-0266	Microsoft XML Core Services Information Disclosure (MS14-005; CVE-2014-0266)
Critical	19 May 2014	18 Feb 2016	CPAI-2014-1548	Adobe APSB14-15	CVE-2014-0527	Adobe Acrobat And Reader Use-After-Free (APSB14-15: CVE-2014-0527)
High	12 Jan 2014	14 Feb 2016	CPAI-2014-0376		CVE-2013-7108	Nagios core CGI Process_cgivars Off-By-One (CVE-2013-7108)
High	14 Jan 2014	14 Feb 2016	CPAI-2014-0743		CVE-2013-7260	RealNetworks RealPlayer RMP File Stack Buffer Overflow (CVE-2013-7260)
Medium	23 Jan 2014	14 Feb 2016	CPAI-2014-0762		CVE-2013-5357	Google Picasa CR2 TIFF StripByteCounts Integer Overflow (CVE-2013-5357)
Critical	6 Mar 2014	14 Feb 2016	CPAI-2014-1094	Apache	CVE-2014-0050	Apache Tomcat FileUpload Content-Type Header Infinite Loop (CVE-2014-0050)
Medium	9 Mar 2014	14 Feb 2016	CPAI-2014-1128		CVE-2014-0980	Poster Software PUBLISH-iT PUI File Processing Buffer Overflow (CVE-2014-0980)
High	13 Mar 2014	14 Feb 2016	CPAI-2014-1146	Adobe APSB14-08	CVE-2014-0504	Adobe Flash Player Information Disclosure (APSB14-08: CVE-2014-0504)
High	1 Apr 2014	14 Feb 2016	CPAI-2014-1315	Digium AST-2014-001	CVE-2014-2286	Digium Asterisk Cookie Stack Overflow (CVE-2014-2286)
High	27 Apr 2014	14 Feb 2016	CPAI-2014-1482	LibYAML	CVE-2014-2525	LibYAML Scanner yaml_parser_scan_uri_escapes Heap Buffer Overflow (CVE-2014-2525)
High	8 May 2014	14 Feb 2016	CPAI-2014-1148	Oracle	CVE-2013-5907	Oracle Java SE GSUB ReqFeatureIndex Buffer Overflow - ver 2 (CVE-2013-5907)
Critical	5 Jun 2014	14 Feb 2016	CPAI-2014-1592	OpenSSL	CVE-2014-0195	OpenSSL DTLS Invalid Fragment Remote Code Execution (CVE-2014-0195)
High	22 Jun 2014	14 Feb 2016	CPAI-2014-1654	PHP	CVE-2014-0238	PHP CDF File Handling Infinite Loop (CVE-2014-0238)
High	19 Aug 2014	14 Feb 2016	CPAI-2014-1769	Oracle		Oracle Java SE GSUB FeatureCount Buffer Overflow
High	21 Aug 2014	14 Feb 2016	CPAI-2014-1768			Siemens Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution
Medium	23 Sep 2014	14 Feb 2016	CPAI-2014-1843			BlazeVideo BlazeDVD Pro PLF File Processing Buffer Overflow
High	23 Nov 2014	14 Feb 2016	CPAI-2014-2223		CVE-2005-1272	CA Brighstor ARCserve Backup Agent Buffer Overflow (CVE-2005-1272)
High	2 Dec 2014	14 Feb 2016	CPAI-2014-2268	QEMU e6908bfe8e07f2b4	CVE-2014-7815	QEMU vnc set_pixel_format bits_per_pixel Null Pointer Dereference (CVE-2014-7815)
Critical	2 Dec 2014	14 Feb 2016	CPAI-2014-2265	PHP	CVE-2014-3670	PHP exif Extension exif_ifd_make_value Thumbnail Heap Buffer Overflow (CVE-2014-3670)
Critical	21 Dec 2014	14 Feb 2016	CPAI-2014-2313	ISC AA-01216	CVE-2014-8500	ISC BIND Recursive Resolver Resource Consumption Denial of Service (CVE-2014-8500)
Medium	4 May 2014	9 Feb 2016	CPAI-2014-1511			RealNetworks RealGames StubbyUtil.ShellCtl.1 ActiveX Command Execution
Medium	23 Feb 2014	7 Feb 2016	CPAI-2014-0859		CVE-2013-3707	Novell Open Enterprise Server HTTPSTK Denial of Service (CVE-2013-3707)
High	27 Jan 2014	14 Jan 2016	CPAI-2014-0767		CVE-2013-7246	DaumGame ActiveX Buffer Overflow (CVE-2013-7246)
High	19 May 2014	14 Jan 2016	CPAI-2014-1553		CVE-2010-4597	Ecava IntegraXor Buffer Overflow (CVE-2010-4597)
Critical	24 Jun 2014	14 Jan 2016	CPAI-2014-1740			PUF UDP Flooder
Critical	9 Sep 2014	14 Jan 2016	CPAI-2014-1793	Microsoft MS14-052	CVE-2014-4095	Microsoft Internet Explorer Memory Corruption (MS14-052: CVE-2014-4095)
High	25 Nov 2014	14 Jan 2016	CPAI-2014-2229			MySQL Load File SQL Injection
High	27 Nov 2014	14 Jan 2016	CPAI-2014-2242	ICS-CERT	CVE-2014-8388	Advantech WebAccess SCADA webeye.ocx ip_address Parameter Buffer Overflow (CVE-2014-8388)
High	10 Nov 2014	12 Jan 2016	CPAI-2014-2015		CVE-2013-5117	DotNetNuke DNNArticle Module SQL Injection (CVE-2013-5117)
Medium	1 Dec 2014	12 Jan 2016	CPAI-2014-2257			Advanced Deface Page Maker Tool
High	28 Dec 2014	12 Jan 2016	CPAI-2014-2127		CVE-2006-4129	Joomla Component com_webring Remote File Inclusion - Ver2 (CVE-2006-4129)
Medium	3 Mar 2014	23 Dec 2015	CPAI-2014-0992		CVE-2004-1049	Microsoft Windows ANI File Parsing Buffer Overflow - Ver2 (CVE-2004-1049)
High	31 Mar 2014	22 Dec 2015	CPAI-2014-1270		CVE-2010-0028	Microsoft Paint JPEG Image Parsing Integer Overflow - Ver2 (CVE-2010-0028)
Critical	11 Mar 2014	17 Dec 2015	CPAI-2014-1133	Microsoft MS14-012	CVE-2014-0314	Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0314)
Critical	11 Mar 2014	17 Dec 2015	CPAI-2014-1087	Microsoft MS14-012	CVE-2014-0298	Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0298)
Critical	11 Nov 2014	17 Dec 2015	CPAI-2014-1939	Microsoft MS14-065	CVE-2014-4143	Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-4143)
High	23 Mar 2014	16 Dec 2015	CPAI-2014-1167	MS07-062 Microsoft	CVE-2005-1519 CVE-2007-3898	Squid Proxy DNS Response Spoofing (CVE-2005-1519; CVE-2007-3898)