Home / 2015 Advisories Archive

2015 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	1 Jun 2015	14 Jul 2017	CPAI-2015-0446		CVE-2015-1159 CVE-2015-6099 CVE-2015-6972 CVE-2017-0068	Web Clients HTTP URL JavaScript Function Cross-Site Scripting (CVE-2015-1159; CVE-2015-6099; CVE-2015-6972; CVE-2017-0068)
Critical	1 Jun 2015	14 Jul 2017	CPAI-2015-0448			Web Clients HTTP URL Redirect Cross-Site Scripting
High	21 Jun 2015	14 Jul 2017	CPAI-2015-0401		CVE-2014-5360	LANDesk Management Suite AMTVersion Cross-Site Scripting (CVE-2014-5360)
High	21 Dec 2015	29 May 2017	CPAI-2015-1418			Base64 Decode Method inside HTTP Header
High	10 Mar 2015	21 May 2017	CPAI-2015-0237	Microsoft MS15-030	CVE-2015-0079	Microsoft Windows Remote Desktop Protocol Denial of Service (MS15-030; CVE-2015-0079)
Critical	9 Mar 2015	17 May 2017	CPAI-2015-0246		CVE-2011-5170	CCMPlayer Stack based Buffer Overflow (CVE-2011-5170)
Medium	14 Jul 2015	17 May 2017	CPAI-2015-0833	Microsoft MS15-069	CVE-2015-2369	Microsoft DLL Planting Remote Code Execution (MS15-069: CVE-2015-2369)
Critical	29 Sep 2015	16 May 2017	CPAI-2015-1118	IBM 1883245	CVE-2015-1902	IBM Lotus Domino BMP Parsing Integer Overflow (CVE-2015-1902)
Medium	13 Oct 2015	10 May 2017	CPAI-2015-1184	Microsoft MS15-106	CVE-2015-6052	Microsoft VBScript and JScript ASLR Bypass (MS15-106: CVE-2015-6052)
Critical	11 Mar 2015	30 Apr 2017	CPAI-2015-0438			JavaScript String Inflation Evasion
Critical	15 Dec 2015	23 Apr 2017	CPAI-2015-1401		CVE-2015-8562	Joomla Object Injection Remote Command Execution (CVE-2015-8562)
Critical	21 Apr 2015	13 Apr 2017	CPAI-2015-0500		CVE-2015-1701	Microsoft Windows System CallBack Privilege Escalation (CVE-2015-1701)
High	23 Jul 2015	29 Mar 2017	CPAI-2015-0877	PHP	CVE-2015-3329 CVE-2016-10159	PHP Multiple Function Stack Buffer Overflow (CVE-2015-3329; CVE-2016-10159)
High	21 Dec 2015	20 Feb 2017	CPAI-2015-1419	Jenkins	CVE-2015-8103	Jenkins CI Server Commons-Collections Library Insecure Deserialization (CVE-2015-8103)
Critical	8 Sep 2015	13 Feb 2017	CPAI-2015-1091	Microsoft MS15-100	CVE-2015-2509	Microsoft Windows Media Center Remote Code Execution (MS15-100: CVE-2015-2509)
High	18 Jun 2015	6 Feb 2017	CPAI-2015-0675			Shodan Scanner SIP Request
Critical	3 Sep 2015	5 Feb 2017	CPAI-2015-1072			Nmap Scripting Engine Scanner Over HTTP Request
Critical	21 Dec 2015	1 Feb 2017	CPAI-2015-1424		CVE-2015-7755	Juniper Networks ScreenOS Authentication Bypass (CVE-2015-7755)
High	19 Nov 2015	31 Jan 2017	CPAI-2015-1321		CVE-2015-4852	WebLogic Apache Commons Java Collections Library Remote Code Execution (CVE-2015-4852)
Critical	11 Mar 2015	23 Jan 2017	CPAI-2015-0274			JavaScript String Dissection Evasion
Critical	10 Sep 2015	23 Jan 2017	CPAI-2015-1102	Microsoft MS15-099	CVE-2015-2545	Microsoft Office Malformed EPS File Remote Code Execution (MS15-099; CVE-2015-2545)
Critical	18 Mar 2015	17 Jan 2017	CPAI-2015-0273		CVE-2015-0834	Mozilla Firefox WebRTC Man-in-the-Middle Attack (CVE-2015-0834)
Medium	30 Mar 2015	26 Dec 2016	CPAI-2015-0403		CVE-2015-0446	Oracle Data Quality LoaderWizard DataPreview Type Confusion (CVE-2015-0446)
Critical	11 Aug 2015	15 Dec 2016	CPAI-2015-0894	Microsoft MS15-079	CVE-2015-2446	Microsoft Internet Explorer Memory Corruption (MS15-079: CVE-2015-2446)
Critical	10 Nov 2015	22 Nov 2016	CPAI-2015-1279	Microsoft MS15-112	CVE-2015-6071	Microsoft Internet Explorer Memory Corruption (MS15-112: CVE-2015-6071)
High	10 Feb 2015	20 Nov 2016	CPAI-2015-0004	Microsoft MS15-014	CVE-2015-0009	Microsoft Windows SMB Security Feature Bypass (MS15-014; CVE-2015-0009)
Critical	6 Jan 2015	13 Oct 2016	CPAI-2015-0007		CVE-2014-1905	WordPress VideoWhisper Live Streaming Integration Plugin Unrestricted File Upload (CVE-2014-1905)
Critical	8 Mar 2015	9 Oct 2016	CPAI-2015-0235	Radia	CVE-2015-1497	Persistent Systems Radia Client Automation Command Execution (CVE-2015-1497)
Critical	14 Apr 2015	31 Aug 2016	CPAI-2015-0444	Microsoft MS15-033	CVE-2015-1641	Microsoft Office Memory Corruption (MS15-033: CVE-2015-1641)
Critical	16 Sep 2015	24 Aug 2016	CPAI-2015-1106			Cisco Router SYNful Knock Implant TCP Activator
Critical	8 Apr 2015	15 Aug 2016	CPAI-2015-0468		CVE-2014-3673	Linux Kernel SCTP Chunk Parameter Padding Denial of Service (CVE-2014-3673)
Critical	13 Jan 2015	19 Jul 2016	CPAI-2014-2467	Microsoft MS15-004	CVE-2015-0016	Microsoft Windows Directory Traversal Elevation of Privilege (MS15-004; CVE-2015-0016)
High	10 Feb 2015	26 Jun 2016	CPAI-2015-0125	Microsoft MS15-009	CVE-2015-0069	Internet Explorer ASLR Bypass (MS15-009: CVE-2015-0069)
Critical	17 Sep 2015	22 Jun 2016	CPAI-2015-1109			reestr Root Directory Creation Mail Phishing Attempts
Critical	24 Sep 2015	22 Jun 2016	CPAI-2015-1330			Suspicious HTML Mail Phishing Attempt
Critical	17 Nov 2015	22 Jun 2016	CPAI-2015-1434			Byte Order Mark Redirection Mail Phishing Attempt
High	18 Nov 2015	22 Jun 2016	CPAI-2015-1331			Apple ID Mail Phishing Attempts
High	16 Mar 2015	9 Jun 2016	CPAI-2015-0255		CVE-2003-0243	HappyMall E-Commerce Software Member_HTML.CGI Command Execution (CVE-2003-0243)
Critical	18 May 2015	9 Jun 2016	CPAI-2004-214		CVE-2004-0362	ISS ICQ Parsing - Ver2 (CVE-2004-0362)
High	18 May 2015	9 Jun 2016	CPAI-2015-0719		CVE-2012-3569	VMware OVF Tool Format String - Ver2 (CVE-2012-3569)
High	12 Aug 2015	9 Jun 2016	CPAI-2015-0978		CVE-2011-5140	DIY-CMS blog mod SQL Injection (CVE-2011-5140)
High	1 Sep 2015	9 Jun 2016	CPAI-2015-1063			Muieblackcat PHP Scanner
Critical	3 Sep 2015	9 Jun 2016	CPAI-2015-1074		CVE-2009-2262	AjaxPortal di.php File Inclusion (CVE-2009-2262)
High	7 Oct 2015	9 Jun 2016	CPAI-2015-1178	APSB15-23 Adobe	CVE-2015-5576	Adobe Flash Player Information Disclosure (APSB15-23: CVE-2015-5576)
Low	14 Oct 2015	9 Jun 2016	CPAI-2015-1208		CVE-2007-4280	Asterisk Skinny Channel Driver Remote Denial of Service (CVE-2007-4280)
Critical	8 Dec 2015	9 Jun 2016	CPAI-2015-1370	Microsoft MS15-130	CVE-2015-6130	Microsoft Windows Uniscribe Integer Underflow (MS15-130: CVE-2015-6130)
High	21 May 2015	25 May 2016	CPAI-2015-0589	Asterisk Squid Project AST-2015-003 Squid Project	CVE-2015-3008 CVE-2015-3455	Multiple Vendors TLS Certificate Common Name NULL Byte Input Validation Error (CVE-2015-3008; CVE-2015-3455)
Medium	31 Dec 2015	24 May 2016	CPAI-2015-1453			Reprise License Manager diagnostics_doit Directory Traversal
High	7 Jun 2015	19 May 2016	CPAI-2015-0642	Adobe APSB15-11	CVE-2015-3096	Adobe Flash Player JSONP Cross-Site Request Forgery (APSB15-11: CVE-2015-3096)
Critical	1 Jan 2015	4 May 2016	CPAI-2015-0899			Angler Exploit Kit Landing Page URL