Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	29 Dec 2014	23 Feb 2016	CPAI-2014-2334	Advantech	CVE-2014-8388	Advantech WebAccess SCADA webeye.ocx ip_address Parameter Buffer Overflow - ver 2 (CVE-2014-8388)
High	11 Feb 2014	18 Feb 2016	CPAI-2014-0884		CVE-2014-0266	Microsoft XML Core Services Information Disclosure (MS14-005; CVE-2014-0266)
Critical	19 May 2014	18 Feb 2016	CPAI-2014-1548	Adobe APSB14-15	CVE-2014-0527	Adobe Acrobat And Reader Use-After-Free (APSB14-15: CVE-2014-0527)
High	12 Jan 2014	14 Feb 2016	CPAI-2014-0376		CVE-2013-7108	Nagios core CGI Process_cgivars Off-By-One (CVE-2013-7108)
High	14 Jan 2014	14 Feb 2016	CPAI-2014-0743		CVE-2013-7260	RealNetworks RealPlayer RMP File Stack Buffer Overflow (CVE-2013-7260)
Medium	23 Jan 2014	14 Feb 2016	CPAI-2014-0762		CVE-2013-5357	Google Picasa CR2 TIFF StripByteCounts Integer Overflow (CVE-2013-5357)
Critical	6 Mar 2014	14 Feb 2016	CPAI-2014-1094	Apache	CVE-2014-0050	Apache Tomcat FileUpload Content-Type Header Infinite Loop (CVE-2014-0050)
Medium	9 Mar 2014	14 Feb 2016	CPAI-2014-1128		CVE-2014-0980	Poster Software PUBLISH-iT PUI File Processing Buffer Overflow (CVE-2014-0980)
High	13 Mar 2014	14 Feb 2016	CPAI-2014-1146	Adobe APSB14-08	CVE-2014-0504	Adobe Flash Player Information Disclosure (APSB14-08: CVE-2014-0504)
High	1 Apr 2014	14 Feb 2016	CPAI-2014-1315	Digium AST-2014-001	CVE-2014-2286	Digium Asterisk Cookie Stack Overflow (CVE-2014-2286)
High	27 Apr 2014	14 Feb 2016	CPAI-2014-1482	LibYAML	CVE-2014-2525	LibYAML Scanner yaml_parser_scan_uri_escapes Heap Buffer Overflow (CVE-2014-2525)
High	8 May 2014	14 Feb 2016	CPAI-2014-1148	Oracle	CVE-2013-5907	Oracle Java SE GSUB ReqFeatureIndex Buffer Overflow - ver 2 (CVE-2013-5907)
Critical	5 Jun 2014	14 Feb 2016	CPAI-2014-1592	OpenSSL	CVE-2014-0195	OpenSSL DTLS Invalid Fragment Remote Code Execution (CVE-2014-0195)
High	22 Jun 2014	14 Feb 2016	CPAI-2014-1654	PHP	CVE-2014-0238	PHP CDF File Handling Infinite Loop (CVE-2014-0238)
High	19 Aug 2014	14 Feb 2016	CPAI-2014-1769	Oracle		Oracle Java SE GSUB FeatureCount Buffer Overflow
High	21 Aug 2014	14 Feb 2016	CPAI-2014-1768			Siemens Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution
Medium	23 Sep 2014	14 Feb 2016	CPAI-2014-1843			BlazeVideo BlazeDVD Pro PLF File Processing Buffer Overflow
High	23 Nov 2014	14 Feb 2016	CPAI-2014-2223		CVE-2005-1272	CA Brighstor ARCserve Backup Agent Buffer Overflow (CVE-2005-1272)
High	2 Dec 2014	14 Feb 2016	CPAI-2014-2268	QEMU e6908bfe8e07f2b4	CVE-2014-7815	QEMU vnc set_pixel_format bits_per_pixel Null Pointer Dereference (CVE-2014-7815)
Critical	2 Dec 2014	14 Feb 2016	CPAI-2014-2265	PHP	CVE-2014-3670	PHP exif Extension exif_ifd_make_value Thumbnail Heap Buffer Overflow (CVE-2014-3670)
Critical	21 Dec 2014	14 Feb 2016	CPAI-2014-2313	ISC AA-01216	CVE-2014-8500	ISC BIND Recursive Resolver Resource Consumption Denial of Service (CVE-2014-8500)
Medium	4 May 2014	9 Feb 2016	CPAI-2014-1511			RealNetworks RealGames StubbyUtil.ShellCtl.1 ActiveX Command Execution
Medium	23 Feb 2014	7 Feb 2016	CPAI-2014-0859		CVE-2013-3707	Novell Open Enterprise Server HTTPSTK Denial of Service (CVE-2013-3707)
High	27 Jan 2014	14 Jan 2016	CPAI-2014-0767		CVE-2013-7246	DaumGame ActiveX Buffer Overflow (CVE-2013-7246)
High	19 May 2014	14 Jan 2016	CPAI-2014-1553		CVE-2010-4597	Ecava IntegraXor Buffer Overflow (CVE-2010-4597)
Critical	24 Jun 2014	14 Jan 2016	CPAI-2014-1740			PUF UDP Flooder
Critical	9 Sep 2014	14 Jan 2016	CPAI-2014-1793	Microsoft MS14-052	CVE-2014-4095	Microsoft Internet Explorer Memory Corruption (MS14-052: CVE-2014-4095)
High	25 Nov 2014	14 Jan 2016	CPAI-2014-2229			MySQL Load File SQL Injection
High	27 Nov 2014	14 Jan 2016	CPAI-2014-2242	ICS-CERT	CVE-2014-8388	Advantech WebAccess SCADA webeye.ocx ip_address Parameter Buffer Overflow (CVE-2014-8388)
High	10 Nov 2014	12 Jan 2016	CPAI-2014-2015		CVE-2013-5117	DotNetNuke DNNArticle Module SQL Injection (CVE-2013-5117)
Medium	1 Dec 2014	12 Jan 2016	CPAI-2014-2257			Advanced Deface Page Maker Tool
High	28 Dec 2014	12 Jan 2016	CPAI-2014-2127		CVE-2006-4129	Joomla Component com_webring Remote File Inclusion - Ver2 (CVE-2006-4129)
Medium	3 Mar 2014	23 Dec 2015	CPAI-2014-0992		CVE-2004-1049	Microsoft Windows ANI File Parsing Buffer Overflow - Ver2 (CVE-2004-1049)
High	31 Mar 2014	22 Dec 2015	CPAI-2014-1270		CVE-2010-0028	Microsoft Paint JPEG Image Parsing Integer Overflow - Ver2 (CVE-2010-0028)
Critical	11 Mar 2014	17 Dec 2015	CPAI-2014-1133	Microsoft MS14-012	CVE-2014-0314	Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0314)
Critical	11 Mar 2014	17 Dec 2015	CPAI-2014-1087	Microsoft MS14-012	CVE-2014-0298	Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0298)
Critical	11 Nov 2014	17 Dec 2015	CPAI-2014-1939	Microsoft MS14-065	CVE-2014-4143	Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-4143)
High	23 Mar 2014	16 Dec 2015	CPAI-2014-1167	MS07-062 Microsoft	CVE-2005-1519 CVE-2007-3898	Squid Proxy DNS Response Spoofing (CVE-2005-1519; CVE-2007-3898)
Critical	8 Sep 2014	8 Dec 2015	CPAI-2014-1796	Samba Team	CVE-2014-3560	Samba nmbd unstrcpy Buffer Overflow (CVE-2014-3560)
Critical	27 Jul 2014	25 Nov 2015	CPAI-2014-1736	AlienVault 2690	CVE-2014-3804	AlienVault OSSIM av-centerd SOAP Requests Multiple Command Execution - ver 2 (CVE-2014-3804)
High	16 Apr 2014	22 Nov 2015	CPAI-2014-1433		CVE-2007-0927	UTorrent announce Buffer Overflow - Ver2 (CVE-2007-0927)
High	19 Jun 2014	22 Nov 2015	CPAI-2014-1646	Apple	CVE-2014-2856	Apple CUPS Web Interface URL Handling Cross-Site Scripting (CVE-2014-2856)
High	3 Mar 2014	10 Nov 2015	CPAI-2014-1105	CVE-2008-2245	CVE-2008-2245	Microsoft Color Management Memory Allocation Buffer Overflow (MS08-046) - Ver2 (CVE-2008-2245)
Critical	6 Mar 2014	10 Nov 2015	CPAI-2014-1091	HP	CVE-2013-6195	HP Data Protector CRS Multiple Stack Buffer Overflows (CVE-2013-6195)
High	9 Mar 2014	10 Nov 2015	CPAI-2014-1061	HP c04041078	CVE-2013-6189	HP AIO Archive Query Server oasoa.exe Stack Buffer Overflow (CVE-2013-6189)
Critical	12 Mar 2014	10 Nov 2015	CPAI-2014-1084	HP c03822422	CVE-2013-6194	HP Data Protector Opcode 42 Directory Traversal (CVE-2013-6194)
Critical	12 Mar 2014	10 Nov 2015	CPAI-2014-1142	HP	CVE-2013-2347	HP Data Protector EXEC_BAR Command Execution (CVE-2013-2347)
Critical	10 Apr 2014	10 Nov 2015	CPAI-2014-1343	Oracle cpujul2008	CVE-2008-2595	Oracle Internet Directory Pre-Authentication LDAP Denial of Service (CVE-2008-2595)
High	26 May 2014	10 Nov 2015	CPAI-2014-1574	Oracle	CVE-2014-0384	Oracle MySQL Server XPath Denial Of Service (CVE-2014-0384)
High	14 Sep 2014	10 Nov 2015	CPAI-2014-1806	MIT	CVE-2014-4344	MIT Kerberos SPNEGO Acceptor acc_ctx_cont Denial of Service (CVE-2014-4344)