Home / 2015 Advisories Archive

2015 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	8 Dec 2015	17 Jan 2016	CPAI-2015-1382	Microsoft MS15-132	CVE-2015-6128	Microsoft Windows Library Loading Elevation of Privilege (MS15-132: CVE-2015-6128)
Critical	6 Jan 2015	14 Jan 2016	CPAI-2015-0009	Adobe APSB14-28	CVE-2014-8449	Adobe Acrobat and Reader Integer Overflow (APSB14-28: CVE-2014-8449)
Critical	14 Jan 2015	14 Jan 2016	CPAI-2015-0041	Adobe APSB14-28	CVE-2014-8453	Adobe Reader and Acrobat Same Origin Policy Bypass (APSB14-28: CVE-2014-8453)
Critical	15 Feb 2015	14 Jan 2016	CPAI-2015-0174			SSL Dyre Forged Certificate
Critical	10 Mar 2015	14 Jan 2016	CPAI-2015-0215	Microsoft MS15-018	CVE-2015-1622	Microsoft Internet Explorer Memory Corruption (MS15-018: CVE-2015-1622)
High	12 Apr 2015	14 Jan 2016	CPAI-2015-0462		CVE-2015-2092	Agilent Technologies Feature Extraction ActiveX Memory Corruption (CVE-2015-2092)
Critical	14 Jul 2015	14 Jan 2016	CPAI-2015-0811	Microsoft MS15-065	CVE-2015-2403	Microsoft Internet Explorer Memory Corruption (MS15-065: CVE-2015-2403)
Critical	8 Sep 2015	14 Jan 2016	CPAI-2015-1094	Microsoft MS15-094	CVE-2015-2501	Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2501)
Critical	13 Oct 2015	14 Jan 2016	CPAI-2015-1127	Microsoft MS15-106	CVE-2015-2482	Microsoft Internet Explorer Memory Corruption (MS15-106: CVE-2015-2482)
Critical	10 Nov 2015	14 Jan 2016	CPAI-2015-1292	Microsoft MS15-106	CVE-2015-6045	Microsoft Internet Explorer Use After Free Remote Code Execution (MS15-106: CVE-2015-6045)
Critical	8 Dec 2015	14 Jan 2016	CPAI-2015-1361	Microsoft MS15-124	CVE-2015-6158	Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6158)
Critical	15 Feb 2015	12 Jan 2016	CPAI-2015-0159			WPScan WordPress Security Scanner
Critical	21 Sep 2015	12 Jan 2016	CPAI-2015-1112			WordPress VisitorTracker JavaScript Function Injection
Critical	27 Oct 2015	12 Jan 2016	CPAI-2015-1233		CVE-2015-7808	vBulletin vB_api Remote Code Execution (CVE-2015-7808)
High	4 Aug 2015	6 Jan 2016	CPAI-2015-0925	ManageEngine		ManageEngine Multiple Products customerName SQL Injection Remote Code Execution
High	8 Dec 2015	3 Jan 2016	CPAI-2015-1383	Microsoft MS15-132	CVE-2015-6132	Microsoft Windows Library Loading Remote Code Execution (MS15-132: CVE-2015-6132)
High	10 Aug 2015	30 Dec 2015	CPAI-2015-0963		CVE-2014-7868	ManageEngine Multiple Products Multiple SQL Injections (CVE-2014-7868)
High	21 Dec 2015	30 Dec 2015	CPAI-2015-1420			Microsoft Windows PowerShell Script Information Disclosure
High	24 Dec 2015	28 Dec 2015	CPAI-2015-1426			Mozilla Firefox Bootstrapped Addon Social Engineering Code Execution
Critical	27 Dec 2015	27 Dec 2015	CPAI-2015-1427	IBM	CVE-2015-1924	IBM Tivoli Storage Manager FastBack Server Opcode 1329 Buffer Overflow (CVE-2015-1924)
Critical	10 Feb 2015	17 Dec 2015	CPAI-2015-0083	Microsoft MS15-009	CVE-2015-0029	Microsoft Internet Explorer Memory Corruption (MS15-009: CVE-2015-0029)
High	10 Mar 2015	17 Dec 2015	CPAI-2015-0229	Microsoft MS15-022	CVE-2015-0097	Microsoft Word Local Zone Remote Code Execution (MS15-022; CVE-2015-0097)
Critical	14 Apr 2015	17 Dec 2015	CPAI-2015-0426	Microsoft MS15-032	CVE-2015-1666	Microsoft Internet Explorer Memory Corruption (MS15-032: CVE-2015-1666)
Critical	1 Jun 2015	17 Dec 2015	CPAI-2015-0445			Web Clients HTTP URL HTML Entity Cross-Site Scripting
Critical	1 Jun 2015	17 Dec 2015	CPAI-2015-0277			Web Clients HTTP URL Escape Sequence Cross-Site Scripting
Critical	26 Oct 2015	17 Dec 2015	CPAI-2015-1238	GnuTLS GNUTLS-SA-2015-3	CVE-2015-6251	GnuTLS DistinguishedName Decoding Double Free (CVE-2015-6251)
High	15 Dec 2015	17 Dec 2015	CPAI-2015-1404	Microsoft MS15-123	CVE-2015-6061	Microsoft Lync and Skype for Business Security Bypass (MS15-123: CVE-2015-6061)
High	16 Dec 2015	16 Dec 2015	CPAI-2015-1408		CVE-2015-8351	WordPress Gwolle Guestbook Plugin Remote File Inclusion (CVE-2015-8351)
High	30 Jun 2015	15 Dec 2015	CPAI-2015-0690		CVE-2015-4024	PHP Multipart Remote Denial of Service (CVE-2015-4024)
High	18 Oct 2015	8 Dec 2015	CPAI-2015-1223			Paros Proxy Scanner
High	8 Dec 2015	8 Dec 2015	CPAI-2015-1379	Microsoft MS15-134	CVE-2015-6131	Microsoft Windows Media Center Remote Code Execution (MS15-134: CVE-2015-6131)
High	8 Dec 2015	8 Dec 2015	CPAI-2015-1374	Microsoft MS15-132	CVE-2015-6133	Microsoft Windows Library Loading Remote Code Execution (MS15-132: CVE-2015-6133)
High	8 Dec 2015	8 Dec 2015	CPAI-2015-1380	Microsoft MS15-131	CVE-2015-6118	Microsoft Office Memory Corruption (MS15-131: CVE-2015-6118)
High	8 Dec 2015	8 Dec 2015	CPAI-2015-1373	Microsoft MS15-134	CVE-2015-6127	Microsoft Windows Media Center Information Disclosure (MS15-134: CVE-2015-6127)
High	8 Dec 2015	8 Dec 2015	CPAI-2015-1378	Microsoft MS15-131	CVE-2015-6124	Microsoft Office Memory Corruption (MS15-131: CVE-2015-6124)
High	8 Dec 2015	8 Dec 2015	CPAI-2015-1384	Microsoft MS15-131	CVE-2015-6122	Microsoft Office Memory Corruption (MS15-131: CVE-2015-6122) - ver 2
High	8 Dec 2015	8 Dec 2015	CPAI-2015-1381	Microsoft MS15-131	CVE-2015-6122	Microsoft Office Memory Corruption (MS15-131: CVE-2015-6122)
High	8 Dec 2015	8 Dec 2015	CPAI-2015-1385	Microsoft MS15-131	CVE-2015-6040	Microsoft Office Memory Corruption (MS15-131: CVE-2015-6040)
Critical	8 Dec 2015	8 Dec 2015	CPAI-2015-1344	Microsoft MS15-124	CVE-2015-6141	Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6141)
Critical	8 Dec 2015	8 Dec 2015	CPAI-2015-1367	Microsoft MS15-125	CVE-2015-6168	Microsoft Edge Memory Corruption (MS15-125: CVE-2015-6168)
High	8 Dec 2015	8 Dec 2015	CPAI-2015-1376	Microsoft MS15-128	CVE-2015-6106	Microsoft Office Memory Corruption (MS15-128: CVE-2015-6106)
Critical	8 Dec 2015	8 Dec 2015	CPAI-2015-1335	Microsoft MS15-128	CVE-2015-6107	Microsoft Graphics Component Memory Corruption (MS15-128: CVE-2015-6107)
Medium	8 Dec 2015	8 Dec 2015	CPAI-2015-1388	Microsoft MS15-131	CVE-2015-6177	Microsoft Office Memory Corruption (MS15-131: CVE-2015-6177)
High	8 Dec 2015	8 Dec 2015	CPAI-2015-1377	Microsoft MS15-125	CVE-2015-6170	Microsoft Edge Elevation of Privilege (MS15-125: CVE-2015-6170)
High	16 Nov 2015	7 Dec 2015	CPAI-2015-1300	Squid Project		Squid SSL-Bump Denial of Service
Critical	6 Oct 2015	3 Dec 2015	CPAI-2015-1147		CVE-2015-5082	Endian Firewall Proxy Password Change Command Execution (CVE-2015-5082)
High	12 Oct 2015	3 Dec 2015	CPAI-2015-1201	Schneider Electric SEVD-2015-251-01	CVE-2015-7374	Schneider Electric InduSoft Web Studio Remote Agent Remote Code Execution (CVE-2015-7374)
Critical	24 Oct 2015	3 Dec 2015	CPAI-2015-1232		CVE-2015-7871	NTP Servers Symmetric Association Authentication Bypass (CVE-2015-7871)
High	17 Nov 2015	3 Dec 2015	CPAI-2015-1310	Advantech	CVE-2014-9208	Advantech WebAccess AspVCObj.AspDataDriven ActiveX GetWideStrCpy Stack Buffer Overflow (CVE-2014-9208)
Critical	18 Nov 2015	3 Dec 2015	CPAI-2015-1319	IBM	CVE-2015-1949	IBM Tivoli Storage Manager FastBack Server Opcode 1330 Command Injection (CVE-2015-1949)