Home / 2015 Advisories Archive

2015 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	11 Mar 2015	30 Apr 2017	CPAI-2015-0438			JavaScript String Inflation Evasion
Critical	15 Dec 2015	23 Apr 2017	CPAI-2015-1401		CVE-2015-8562	Joomla Object Injection Remote Command Execution (CVE-2015-8562)
Critical	21 Apr 2015	13 Apr 2017	CPAI-2015-0500		CVE-2015-1701	Microsoft Windows System CallBack Privilege Escalation (CVE-2015-1701)
High	23 Jul 2015	29 Mar 2017	CPAI-2015-0877	PHP	CVE-2015-3329 CVE-2016-10159	PHP Multiple Function Stack Buffer Overflow (CVE-2015-3329; CVE-2016-10159)
High	21 Dec 2015	20 Feb 2017	CPAI-2015-1419	Jenkins	CVE-2015-8103	Jenkins CI Server Commons-Collections Library Insecure Deserialization (CVE-2015-8103)
High	18 Jun 2015	6 Feb 2017	CPAI-2015-0675			Shodan Scanner SIP Request
Critical	3 Sep 2015	5 Feb 2017	CPAI-2015-1072			Nmap Scripting Engine Scanner Over HTTP Request
Critical	21 Dec 2015	1 Feb 2017	CPAI-2015-1424		CVE-2015-7755	Juniper Networks ScreenOS Authentication Bypass (CVE-2015-7755)
High	19 Nov 2015	31 Jan 2017	CPAI-2015-1321		CVE-2015-4852	WebLogic Apache Commons Java Collections Library Remote Code Execution (CVE-2015-4852)
Critical	11 Mar 2015	23 Jan 2017	CPAI-2015-0274			JavaScript String Dissection Evasion
Critical	10 Sep 2015	23 Jan 2017	CPAI-2015-1102	Microsoft MS15-099	CVE-2015-2545	Microsoft Office Malformed EPS File Remote Code Execution (MS15-099; CVE-2015-2545)
Critical	18 Mar 2015	17 Jan 2017	CPAI-2015-0273		CVE-2015-0834	Mozilla Firefox WebRTC Man-in-the-Middle Attack (CVE-2015-0834)
Medium	30 Mar 2015	26 Dec 2016	CPAI-2015-0403		CVE-2015-0446	Oracle Data Quality LoaderWizard DataPreview Type Confusion (CVE-2015-0446)
Critical	11 Aug 2015	15 Dec 2016	CPAI-2015-0894	Microsoft MS15-079	CVE-2015-2446	Microsoft Internet Explorer Memory Corruption (MS15-079: CVE-2015-2446)
Critical	10 Nov 2015	22 Nov 2016	CPAI-2015-1279	Microsoft MS15-112	CVE-2015-6071	Microsoft Internet Explorer Memory Corruption (MS15-112: CVE-2015-6071)
High	10 Feb 2015	20 Nov 2016	CPAI-2015-0004	Microsoft MS15-014	CVE-2015-0009	Microsoft Windows SMB Security Feature Bypass (MS15-014; CVE-2015-0009)
Critical	6 Jan 2015	13 Oct 2016	CPAI-2015-0007		CVE-2014-1905	WordPress VideoWhisper Live Streaming Integration Plugin Unrestricted File Upload (CVE-2014-1905)
Critical	8 Mar 2015	9 Oct 2016	CPAI-2015-0235	Radia	CVE-2015-1497	Persistent Systems Radia Client Automation Command Execution (CVE-2015-1497)
Critical	16 Sep 2015	24 Aug 2016	CPAI-2015-1106			Cisco Router SYNful Knock Implant TCP Activator
Critical	8 Apr 2015	15 Aug 2016	CPAI-2015-0468		CVE-2014-3673	Linux Kernel SCTP Chunk Parameter Padding Denial of Service (CVE-2014-3673)
Critical	13 Jan 2015	19 Jul 2016	CPAI-2014-2467	Microsoft MS15-004	CVE-2015-0016	Microsoft Windows Directory Traversal Elevation of Privilege (MS15-004; CVE-2015-0016)
High	10 Feb 2015	26 Jun 2016	CPAI-2015-0125	Microsoft MS15-009	CVE-2015-0069	Internet Explorer ASLR Bypass (MS15-009: CVE-2015-0069)
Critical	17 Sep 2015	22 Jun 2016	CPAI-2015-1109			reestr Root Directory Creation Mail Phishing Attempts
Critical	24 Sep 2015	22 Jun 2016	CPAI-2015-1330			Suspicious HTML Mail Phishing Attempt
Critical	17 Nov 2015	22 Jun 2016	CPAI-2015-1434			Byte Order Mark Redirection Mail Phishing Attempt
High	18 Nov 2015	22 Jun 2016	CPAI-2015-1331			Apple ID Mail Phishing Attempts
High	16 Mar 2015	9 Jun 2016	CPAI-2015-0255		CVE-2003-0243	HappyMall E-Commerce Software Member_HTML.CGI Command Execution (CVE-2003-0243)
Critical	18 May 2015	9 Jun 2016	CPAI-2004-214		CVE-2004-0362	ISS ICQ Parsing - Ver2 (CVE-2004-0362)
High	18 May 2015	9 Jun 2016	CPAI-2015-0719		CVE-2012-3569	VMware OVF Tool Format String - Ver2 (CVE-2012-3569)
High	12 Aug 2015	9 Jun 2016	CPAI-2015-0978		CVE-2011-5140	DIY-CMS blog mod SQL Injection (CVE-2011-5140)
High	1 Sep 2015	9 Jun 2016	CPAI-2015-1063			Muieblackcat PHP Scanner
Critical	3 Sep 2015	9 Jun 2016	CPAI-2015-1074		CVE-2009-2262	AjaxPortal di.php File Inclusion (CVE-2009-2262)
High	7 Oct 2015	9 Jun 2016	CPAI-2015-1178	APSB15-23 Adobe	CVE-2015-5576	Adobe Flash Player Information Disclosure (APSB15-23: CVE-2015-5576)
Low	14 Oct 2015	9 Jun 2016	CPAI-2015-1208		CVE-2007-4280	Asterisk Skinny Channel Driver Remote Denial of Service (CVE-2007-4280)
Critical	8 Dec 2015	9 Jun 2016	CPAI-2015-1370	Microsoft MS15-130	CVE-2015-6130	Microsoft Windows Uniscribe Integer Underflow (MS15-130: CVE-2015-6130)
High	21 May 2015	25 May 2016	CPAI-2015-0589	Asterisk Squid Project AST-2015-003 Squid Project	CVE-2015-3008 CVE-2015-3455	Multiple Vendors TLS Certificate Common Name NULL Byte Input Validation Error (CVE-2015-3008; CVE-2015-3455)
Medium	31 Dec 2015	24 May 2016	CPAI-2015-1453			Reprise License Manager diagnostics_doit Directory Traversal
High	7 Jun 2015	19 May 2016	CPAI-2015-0642	Adobe APSB15-11	CVE-2015-3096	Adobe Flash Player JSONP Cross-Site Request Forgery (APSB15-11: CVE-2015-3096)
Critical	1 Jan 2015	4 May 2016	CPAI-2015-0899			Angler Exploit Kit Landing Page URL
Critical	10 Nov 2015	3 May 2016	CPAI-2015-1273	Microsoft MS15-115	CVE-2015-6103	Microsoft Graphics Component Remote Code Execution (MS15-115: CVE-2015-6103)
High	10 Feb 2015	1 May 2016	CPAI-2014-2251	Microsoft MS15-013	CVE-2014-6362	Microsoft Office Shared Component ASLR Bypass (MS15-013; CVE-2014-6362)
Critical	22 Jun 2015	13 Apr 2016	CPAI-2015-0679			PDF Containing Multiple Filters
Critical	1 Jan 2015	11 Apr 2016	CPAI-2015-0002			Angler Exploit Kit Landing Page
Medium	18 Oct 2015	7 Apr 2016	CPAI-2015-1220		CVE-2015-6973	Ignite Realtime Openfire server-props.jsp Cross-Site Request Forgery (CVE-2015-6973)
High	1 Feb 2015	4 Apr 2016	CPAI-2015-0108		CVE-2015-1398	Magento eCommerce Web Sites Authentication Bypass (CVE-2015-1398)
Critical	16 Apr 2015	3 Apr 2016	CPAI-2015-0508			Max Ping Echo Reply Size
High	10 Aug 2015	30 Mar 2016	CPAI-2015-0961	Microsoft MS15-061	CVE-2015-1722	Microsoft Windows Kernel Bitmap Handling Use After Free (MS15-061: CVE-2015-1722)
High	10 Nov 2015	30 Mar 2016	CPAI-2015-1293	Microsoft MS15-115	CVE-2015-6113	Microsoft Windows Kernel Security Feature Bypass (MS15-115: CVE-2015-6113)
High	10 Nov 2015	30 Mar 2016	CPAI-2015-1294		CVE-2015-6123	Microsoft Outlook for Mac Spoofing (MS15-116: CVE-2015-6123)
High	10 Nov 2015	30 Mar 2016	CPAI-2015-1284	Microsoft MS15-118	CVE-2015-6096	Microsoft .NET Information Disclosure (MS15-118: CVE-2015-6096)