Home / 2015 Advisories Archive

2015 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	10 Nov 2015	10 Nov 2015	CPAI-2015-1287	Microsoft MS15-116	CVE-2015-6092	Microsoft Office Memory Corruption (MS15-116: CVE-2015-6092)
High	10 Nov 2015	10 Nov 2015	CPAI-2015-1276	Microsoft MS15-116	CVE-2015-6093	Microsoft Office Memory Corruption (MS15-116: CVE-2015-6093)
High	10 Nov 2015	10 Nov 2015	CPAI-2015-1281	Microsoft MS15-119	CVE-2015-2478	Microsoft Windows Winsock Elevation of Privilege (MS15-119: CVE-2015-2478)
Critical	10 Nov 2015	10 Nov 2015	CPAI-2015-1254	Microsoft MS15-112	CVE-2015-6064	Microsoft Internet Explorer Use After Free Remote Code Execution (MS15-112: CVE-2015-6064)
Critical	10 Nov 2015	10 Nov 2015	CPAI-2015-1274	Microsoft MS15-115	CVE-2015-6104	Microsoft Windows Graphics Memory Remote Code Execution (MS15-115: CVE-2015-6104)
High	10 Nov 2015	10 Nov 2015	CPAI-2015-1286	Microsoft MS15-116	CVE-2015-6091	Microsoft Office Memory Corruption (MS15-116: CVE-2015-6091)
High	10 Nov 2015	10 Nov 2015	CPAI-2015-1280		CVE-2015-6094	Microsoft Office Memory Corruption (MS15-116: CVE-2015-6094)
High	10 Nov 2015	10 Nov 2015	CPAI-2015-1278	Microsoft MS15-116	CVE-2015-6038	Microsoft Office Memory Corruption (MS15-116: CVE-2015-6038)
High	8 Nov 2015	8 Nov 2015	CPAI-2015-1289			Uniscan Security Scanner
High	14 Jan 2015	5 Nov 2015	CPAI-2015-0043		CVE-2014-9295	NTP Daemon Configure Buffer Overflow (CVE-2014-9295)
Critical	7 Oct 2015	5 Nov 2015	CPAI-2015-1162	OpenLDAP ITS#8240	CVE-2015-6908	OpenLDAP ber_get_next Denial of Service (CVE-2015-6908)
Medium	25 Oct 2015	4 Nov 2015	CPAI-2015-1252		CVE-2003-0178	IBM Lotus Domino Web Server iNotes Buffer Overflow (CVE-2003-0178)
High	26 Oct 2015	4 Nov 2015	CPAI-2015-1236	Advantech	CVE-2014-9208	Advantech WebAccess ActiveX ConvToSafeArray Stack Buffer Overflow (CVE-2014-9208)
High	28 Oct 2015	4 Nov 2015	CPAI-2015-1241	ManageEngine		ManageEngine Applications Manager CommonAPIUtil moveSubGroup haid tohaid SQL Injection
Critical	11 Jan 2015	3 Nov 2015	CPAI-2015-0021	Lexmark	CVE-2014-8741	Lexmark MarkVision Enterprise GfdFileUploadServlet Directory Traversal (CVE-2014-8741)
High	20 Jan 2015	3 Nov 2015	CPAI-2015-0058		CVE-2014-9404	ManageEngine Desktop Central MSP StatusUpdateServlet fileName Directory Traversal (CVE-2014-9404)
High	9 Feb 2015	3 Nov 2015	CPAI-2015-0143		CVE-2014-9308	Wordpress Shopping Cart Plugin Unrestricted File Upload (CVE-2014-9308)
Critical	19 Feb 2015	3 Nov 2015	CPAI-2015-0406			WordPress Infusionsoft Gravity Forms Add-on Plugin Unrestricted File Upload
Critical	19 Feb 2015	3 Nov 2015	CPAI-2015-0405			WordPress Foxypress Plugin Unrestricted File Upload
High	19 Feb 2015	3 Nov 2015	CPAI-2015-0176		CVE-2015-1172	WordPress Holding Pattern Theme Arbitrary File Upload (CVE-2015-1172)
Medium	25 Oct 2015	3 Nov 2015	CPAI-2015-1234		CVE-2004-0882	Samba Unicode Filename Buffer Overflow (CVE-2004-0882)
Medium	1 Nov 2015	3 Nov 2015	CPAI-2015-1253	IBM	CVE-2015-1938	IBM Tivoli Storage Manager FastBack Server Opcode 1331 lza32 Command Injection (CVE-2015-1938)
Critical	18 Oct 2015	1 Nov 2015	CPAI-2015-1211		CVE-2007-5365	Sun Solaris DHCP Daemon Code Execution (CVE-2007-5365)
High	18 Oct 2015	1 Nov 2015	CPAI-2015-1216			ManageEngine Applications Manager CommonAPIUtil removeMonitorFrmMG haid SQL Injection
Critical	5 Aug 2015	28 Oct 2015	CPAI-2015-0924	Novell	CVE-2014-0611	Novell GroupWise WebAccess Cross-Site Scripting (CVE-2014-0611)
Critical	26 Oct 2015	28 Oct 2015	CPAI-2015-1242			ArabLab Bot ID SSL Certificate
Medium	27 Oct 2015	28 Oct 2015	CPAI-2015-1240	OEMR	CVE-2015-4453	OpenEMR globals.php Authentication Bypass (CVE-2015-4453)
Medium	8 Oct 2015	27 Oct 2015	CPAI-2015-1190			Reprise License Manager edit_lf_get_data Directory Traversal
Critical	13 Oct 2015	27 Oct 2015	CPAI-2015-1164	Microsoft MS15-109	CVE-2015-2515	Microsoft Windows Shell Remote Code Execution (MS15-109: CVE-2015-2515)
Critical	18 Oct 2015	25 Oct 2015	CPAI-2015-1217		CVE-2015-5718	Websense Triton Content Manager handle_debug_network Stack Buffer Overflow (CVE-2015-5718)
High	2 Mar 2015	22 Oct 2015	CPAI-2015-0206	ManageEngine	CVE-2014-7863	ManageEngine Multiple Products FailOverHelperServlet copyfile Information Disclosure (CVE-2014-7863)
High	11 Aug 2015	22 Oct 2015	CPAI-2015-0931	Microsoft MS15-079	CVE-2015-2423	Microsoft Internet Explorer Information Disclosure (MS15-079: CVE-2015-2423)
High	8 Oct 2015	22 Oct 2015	CPAI-2015-1191	Typo3 TYPO3-CORE-SA-2015-009	CVE-2015-5956	Typo3 CMS SanitizeLocalUrl Cross-Site Scripting (CVE-2015-5956)
Critical	7 Jan 2015	21 Oct 2015	CPAI-2015-0013		CVE-2004-0826	Netscape NSS Library Record Parsing Buffer Overflow (CVE-2004-0826)
Critical	14 Apr 2015	21 Oct 2015	CPAI-2015-0410	Microsoft MS15-034	CVE-2015-1635	Microsoft Windows HTTP.sys Remote Code Execution (MS15-034: CVE-2015-1635)
Critical	8 Mar 2015	20 Oct 2015	CPAI-2015-0234	PHP	CVE-2015-0273	PHP Date Time Object Unserialize Memory Corruption (CVE-2015-0273)
Critical	14 Jul 2015	20 Oct 2015	CPAI-2015-0835	Microsoft MS15-067	CVE-2015-2373	Microsoft Windows Remote Desktop Protocol Code Execution (MS15-067: CVE-2015-2373)
High	7 Oct 2015	19 Oct 2015	CPAI-2015-1159	Advantech	CVE-2014-9208	Advantech WebAccess Webdobj ActiveX UpdateProject Stack Buffer Overflow (CVE-2014-9208)
High	13 Oct 2015	19 Oct 2015	CPAI-2015-1152			Reprise License Manager HTTP Parameter Parsing Stack Buffer Overflow
High	15 Oct 2015	19 Oct 2015	CPAI-2015-1214		CVE-2008-2922	Stack-based Buffer Overflow in Artegic Dana IRC Client (CVE-2008-2922)
High	26 Mar 2015	18 Oct 2015	CPAI-2015-0313		CVE-2013-1599	Dlink IP Camera Authenticated Arbitrary Command Execution - Ver2 (CVE-2013-1599)
Critical	18 May 2015	18 Oct 2015	CPAI-2015-0705		CVE-2011-1848	HP Intelligent Management Center img Buffer Overflow - Ver2 (CVE-2011-1848)
Medium	18 May 2015	18 Oct 2015	CPAI-2015-0726		CVE-2013-3724	Monkey HTTPD Server Denial of Service - Ver2 (CVE-2013-3724)
Critical	11 Oct 2015	18 Oct 2015	CPAI-2015-1193		CVE-2015-6973	Ignite Realtime Openfire user-create.jsp Cross-Site Request Forgery (CVE-2015-6973)
Critical	11 Aug 2015	15 Oct 2015	CPAI-2015-0914	Microsoft MS15-081	CVE-2015-2477	Microsoft Office Memory Corruption (MS15-081: CVE-2015-2477)
Medium	6 Sep 2015	15 Oct 2015	CPAI-2015-1082		CVE-2009-1776 CVE-2009-1777	Matt Wright FormMail Multiple cross-site scripting (XSS) vulnerabilities (CVE-2009-1776; CVE-2009-1777)
Critical	14 Oct 2015	15 Oct 2015	CPAI-2015-1210	IBM	CVE-2015-1925	IBM Tivoli Storage Manager FastBack Server Opcode 1332 Buffer Overflow (CVE-2015-1925)
Critical	15 Oct 2015	15 Oct 2015	CPAI-2015-1213			Magento E-Commerce Platform Magmi Plugin Information Disclosure
Critical	8 Jul 2015	14 Oct 2015	CPAI-2015-0806		CVE-2015-5119	Adobe Flash ActionScript 3 ByteArray Use After Free (APSA15-03: CVE-2015-5119)
High	1 Oct 2015	14 Oct 2015	CPAI-2015-1123	Dell	CVE-2015-5696	Dell NetVault Backup Denial of Service (CVE-2015-5696)