Home / 2015 Advisories Archive

2015 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	8 Oct 2015	22 Oct 2015	CPAI-2015-1191	Typo3 TYPO3-CORE-SA-2015-009	CVE-2015-5956	Typo3 CMS SanitizeLocalUrl Cross-Site Scripting (CVE-2015-5956)
Critical	7 Jan 2015	21 Oct 2015	CPAI-2015-0013		CVE-2004-0826	Netscape NSS Library Record Parsing Buffer Overflow (CVE-2004-0826)
Critical	14 Apr 2015	21 Oct 2015	CPAI-2015-0410	Microsoft MS15-034	CVE-2015-1635	Microsoft Windows HTTP.sys Remote Code Execution (MS15-034: CVE-2015-1635)
Critical	8 Mar 2015	20 Oct 2015	CPAI-2015-0234	PHP	CVE-2015-0273	PHP Date Time Object Unserialize Memory Corruption (CVE-2015-0273)
Critical	14 Jul 2015	20 Oct 2015	CPAI-2015-0835	Microsoft MS15-067	CVE-2015-2373	Microsoft Windows Remote Desktop Protocol Code Execution (MS15-067: CVE-2015-2373)
High	7 Oct 2015	19 Oct 2015	CPAI-2015-1159	Advantech	CVE-2014-9208	Advantech WebAccess Webdobj ActiveX UpdateProject Stack Buffer Overflow (CVE-2014-9208)
High	13 Oct 2015	19 Oct 2015	CPAI-2015-1152			Reprise License Manager HTTP Parameter Parsing Stack Buffer Overflow
High	15 Oct 2015	19 Oct 2015	CPAI-2015-1214		CVE-2008-2922	Stack-based Buffer Overflow in Artegic Dana IRC Client (CVE-2008-2922)
High	26 Mar 2015	18 Oct 2015	CPAI-2015-0313		CVE-2013-1599	Dlink IP Camera Authenticated Arbitrary Command Execution - Ver2 (CVE-2013-1599)
Critical	18 May 2015	18 Oct 2015	CPAI-2015-0705		CVE-2011-1848	HP Intelligent Management Center img Buffer Overflow - Ver2 (CVE-2011-1848)
Medium	18 May 2015	18 Oct 2015	CPAI-2015-0726		CVE-2013-3724	Monkey HTTPD Server Denial of Service - Ver2 (CVE-2013-3724)
Critical	11 Oct 2015	18 Oct 2015	CPAI-2015-1193		CVE-2015-6973	Ignite Realtime Openfire user-create.jsp Cross-Site Request Forgery (CVE-2015-6973)
Critical	13 Oct 2015	18 Oct 2015	CPAI-2015-1163	Microsoft MS15-109	CVE-2015-2548	Microsoft Internet Explorer Use After Free Remote Code Execution (MS15-109: CVE-2015-2548)
Critical	11 Aug 2015	15 Oct 2015	CPAI-2015-0914	Microsoft MS15-081	CVE-2015-2477	Microsoft Office Memory Corruption (MS15-081: CVE-2015-2477)
Medium	6 Sep 2015	15 Oct 2015	CPAI-2015-1082		CVE-2009-1776 CVE-2009-1777	Matt Wright FormMail Multiple cross-site scripting (XSS) vulnerabilities (CVE-2009-1776; CVE-2009-1777)
Critical	14 Oct 2015	15 Oct 2015	CPAI-2015-1210	IBM	CVE-2015-1925	IBM Tivoli Storage Manager FastBack Server Opcode 1332 Buffer Overflow (CVE-2015-1925)
Critical	15 Oct 2015	15 Oct 2015	CPAI-2015-1213			Magento E-Commerce Platform Magmi Plugin Information Disclosure
Critical	8 Jul 2015	14 Oct 2015	CPAI-2015-0806		CVE-2015-5119	Adobe Flash ActionScript 3 ByteArray Use After Free (APSA15-03: CVE-2015-5119)
High	1 Oct 2015	14 Oct 2015	CPAI-2015-1123	Dell	CVE-2015-5696	Dell NetVault Backup Denial of Service (CVE-2015-5696)
High	14 Oct 2015	14 Oct 2015	CPAI-2015-1206		CVE-2010-3600	Oracle Database Client System Analyzer Arbitrary File Upload Code Execution (CVE-2010-3600)
Critical	13 Oct 2015	13 Oct 2015	CPAI-2015-1161	Microsoft Security Bulletin MS15-106	CVE-2015-6045	Microsoft Internet Explorer Memory Corruption (MS15-106: CVE-2015-6045; CVE-2015-6045)
High	7 Jul 2015	13 Oct 2015	CPAI-2015-0803			WordPress MailChimp Subscribe Forms PHP Code Execution
High	16 Sep 2015	13 Oct 2015	CPAI-2015-1108		CVE-2004-0503	Microsoft Outlook RTF Embedded Object Security Bypass (CVE-2004-0503)
High	6 Oct 2015	13 Oct 2015	CPAI-2015-1205	Oracle	CVE-2015-2602	Oracle Endeca IDI ETL Server UploadFileConent Directory Traversal (CVE-2015-2602)
High	7 Oct 2015	13 Oct 2015	CPAI-2015-1204	General Electric	CVE-2015-6459	General Electric MDS PulseNET FileDownloadServlet Directory Traversal (CVE-2015-6459)
Medium	8 Oct 2015	13 Oct 2015	CPAI-2015-1202	Oracle	CVE-2015-4745	Oracle Endeca IDI ETL Server DownloadFileContent Directory Traversal (CVE-2015-4745)
Critical	13 Oct 2015	13 Oct 2015	CPAI-2015-1125	Microsoft MS15-106	CVE-2015-6048	Microsoft Internet Explorer Memory Corruption (MS15-106: CVE-2015-6048)
High	13 Oct 2015	13 Oct 2015	CPAI-2015-1189	Microsoft MS15-106	CVE-2015-6047	Microsoft Internet Explorer Elevation of Privilege (MS15-106: CVE-2015-6047)
High	13 Oct 2015	13 Oct 2015	CPAI-2015-1167	Microsoft MS15-106	CVE-2015-6046	Microsoft Internet Explorer Information Disclosure (MS15-106: CVE-2015-6046)
High	13 Oct 2015	13 Oct 2015	CPAI-2015-1182	Microsoft MS15-110	CVE-2015-2557	Microsoft Office Memory Corruption (MS15-110: CVE-2015-2557)
High	13 Oct 2015	13 Oct 2015	CPAI-2015-1181	Microsoft MS15-110	CVE-2015-2555	Microsoft Office Memory Corruption (MS15-110: CVE-2015-2555)
High	13 Oct 2015	13 Oct 2015	CPAI-2015-1197	Microsoft MS15-106	CVE-2015-6059	Microsoft Internet Explorer Information Disclosure (MS15-106: CVE-2015-6059)
Critical	13 Oct 2015	13 Oct 2015	CPAI-2015-1169	Microsoft MS15-106	CVE-2015-6050	Microsoft Internet Explorer Memory Corruption (MS15-106: CVE-2015-6050)
Critical	13 Oct 2015	13 Oct 2015	CPAI-2015-1124	Microsoft MS15-106	CVE-2015-6055	Microsoft Internet Explorer Scripting Engine Memory Corruption (MS15-106: CVE-2015-6055)
High	10 Aug 2015	12 Oct 2015	CPAI-2015-0958		CVE-2015-4495	Mozilla Firefox Same Origin Violation And Local File Access (2015-78; CVE-2015-4495)
High	6 Sep 2015	12 Oct 2015	CPAI-2015-1077		CVE-2005-0678	Form Mail Script Formmail.inc.php File Inclusion (CVE-2005-0678)
Medium	6 Oct 2015	12 Oct 2015	CPAI-2015-1129	Foxit		Foxit Multiple Products PNG To PDF Conversion Heap Buffer Overflow
Medium	6 Oct 2015	12 Oct 2015	CPAI-2015-1135	ManageEngine		ManageEngine ServiceDesk File Upload Directory Traversal
High	7 Oct 2015	12 Oct 2015	CPAI-2015-1179		CVE-2015-4029	pfSense WebGUI Zone Parameter Cross-Site Scripting (CVE-2015-4029)
Critical	8 Oct 2015	11 Oct 2015	CPAI-2015-1186	Adobe APSB15-23	CVE-2015-5584	Adobe Flash Player Use After Free Code Execution (APSB15-23: CVE-2015-5584)
Critical	24 Feb 2015	8 Oct 2015	CPAI-2015-0188	Adobe APSB15-04	CVE-2015-0327	Adobe Flash Player Heap Buffer Overflow (APSB15-04: CVE-2015-0327)
Medium	6 Oct 2015	8 Oct 2015	CPAI-2015-1133	Oracle	CVE-2015-4759	Oracle Data Quality Trillium Based SetBasicPreviewData Type Confusion (CVE-2015-4759)
Medium	6 Oct 2015	8 Oct 2015	CPAI-2015-1128			phpFileManager cmd Parameter Command Execution
High	6 Oct 2015	8 Oct 2015	CPAI-2015-1130			Reprise License Manager actserver and akey HTTP Parameters Parsing Stack Buffer Overflow
High	7 Oct 2015	8 Oct 2015	CPAI-2015-1165	ManageEngine		ManageEngine OpManager APMAlertOperationsServlet source SQL Injection
High	7 Oct 2015	8 Oct 2015	CPAI-2015-1175			Novell ZENworks Mobile Management Cross-Site Scripting
High	7 Oct 2015	8 Oct 2015	CPAI-2015-1170	GE	CVE-2015-6456	GE MDS PulseNET Hidden Support Account Remote Code Execution (CVE-2015-6456)
Critical	30 Sep 2015	7 Oct 2015	CPAI-2015-1122			Avira Management Console Server HTTP Header Processing Heap Buffer Overflow
Critical	6 Oct 2015	7 Oct 2015	CPAI-2015-1154	ISC AA-01267	CVE-2015-4620	ISC BIND DNSSEC Validation Denial of Service (CVE-2015-4620)
Medium	6 Oct 2015	7 Oct 2015	CPAI-2015-1136	Oracle	CVE-2015-2604	Oracle Endeca Information Discovery Integrator ETL Server CopyFile Directory Traversal (CVE-2015-2604)