Home / 2015 Advisories Archive

2015 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	19 Feb 2015	3 Nov 2015	CPAI-2015-0406			WordPress Infusionsoft Gravity Forms Add-on Plugin Unrestricted File Upload
Critical	19 Feb 2015	3 Nov 2015	CPAI-2015-0405			WordPress Foxypress Plugin Unrestricted File Upload
High	19 Feb 2015	3 Nov 2015	CPAI-2015-0176		CVE-2015-1172	WordPress Holding Pattern Theme Arbitrary File Upload (CVE-2015-1172)
Medium	25 Oct 2015	3 Nov 2015	CPAI-2015-1234		CVE-2004-0882	Samba Unicode Filename Buffer Overflow (CVE-2004-0882)
Medium	1 Nov 2015	3 Nov 2015	CPAI-2015-1253	IBM	CVE-2015-1938	IBM Tivoli Storage Manager FastBack Server Opcode 1331 lza32 Command Injection (CVE-2015-1938)
Critical	18 Oct 2015	1 Nov 2015	CPAI-2015-1211		CVE-2007-5365	Sun Solaris DHCP Daemon Code Execution (CVE-2007-5365)
High	18 Oct 2015	1 Nov 2015	CPAI-2015-1216			ManageEngine Applications Manager CommonAPIUtil removeMonitorFrmMG haid SQL Injection
Critical	5 Aug 2015	28 Oct 2015	CPAI-2015-0924	Novell	CVE-2014-0611	Novell GroupWise WebAccess Cross-Site Scripting (CVE-2014-0611)
Critical	26 Oct 2015	28 Oct 2015	CPAI-2015-1242			ArabLab Bot ID SSL Certificate
Medium	27 Oct 2015	28 Oct 2015	CPAI-2015-1240	OEMR	CVE-2015-4453	OpenEMR globals.php Authentication Bypass (CVE-2015-4453)
Medium	8 Oct 2015	27 Oct 2015	CPAI-2015-1190			Reprise License Manager edit_lf_get_data Directory Traversal
Critical	13 Oct 2015	27 Oct 2015	CPAI-2015-1164	Microsoft MS15-109	CVE-2015-2515	Microsoft Windows Shell Remote Code Execution (MS15-109: CVE-2015-2515)
Critical	18 Oct 2015	25 Oct 2015	CPAI-2015-1217		CVE-2015-5718	Websense Triton Content Manager handle_debug_network Stack Buffer Overflow (CVE-2015-5718)
High	2 Mar 2015	22 Oct 2015	CPAI-2015-0206	ManageEngine	CVE-2014-7863	ManageEngine Multiple Products FailOverHelperServlet copyfile Information Disclosure (CVE-2014-7863)
High	11 Aug 2015	22 Oct 2015	CPAI-2015-0931	Microsoft MS15-079	CVE-2015-2423	Microsoft Internet Explorer Information Disclosure (MS15-079: CVE-2015-2423)
High	8 Oct 2015	22 Oct 2015	CPAI-2015-1191	Typo3 TYPO3-CORE-SA-2015-009	CVE-2015-5956	Typo3 CMS SanitizeLocalUrl Cross-Site Scripting (CVE-2015-5956)
Critical	7 Jan 2015	21 Oct 2015	CPAI-2015-0013		CVE-2004-0826	Netscape NSS Library Record Parsing Buffer Overflow (CVE-2004-0826)
Critical	14 Apr 2015	21 Oct 2015	CPAI-2015-0410	Microsoft MS15-034	CVE-2015-1635	Microsoft Windows HTTP.sys Remote Code Execution (MS15-034: CVE-2015-1635)
Critical	8 Mar 2015	20 Oct 2015	CPAI-2015-0234	PHP	CVE-2015-0273	PHP Date Time Object Unserialize Memory Corruption (CVE-2015-0273)
Critical	14 Jul 2015	20 Oct 2015	CPAI-2015-0835	Microsoft MS15-067	CVE-2015-2373	Microsoft Windows Remote Desktop Protocol Code Execution (MS15-067: CVE-2015-2373)
High	7 Oct 2015	19 Oct 2015	CPAI-2015-1159	Advantech	CVE-2014-9208	Advantech WebAccess Webdobj ActiveX UpdateProject Stack Buffer Overflow (CVE-2014-9208)
High	13 Oct 2015	19 Oct 2015	CPAI-2015-1152			Reprise License Manager HTTP Parameter Parsing Stack Buffer Overflow
High	15 Oct 2015	19 Oct 2015	CPAI-2015-1214		CVE-2008-2922	Stack-based Buffer Overflow in Artegic Dana IRC Client (CVE-2008-2922)
High	26 Mar 2015	18 Oct 2015	CPAI-2015-0313		CVE-2013-1599	Dlink IP Camera Authenticated Arbitrary Command Execution - Ver2 (CVE-2013-1599)
Critical	18 May 2015	18 Oct 2015	CPAI-2015-0705		CVE-2011-1848	HP Intelligent Management Center img Buffer Overflow - Ver2 (CVE-2011-1848)
Medium	18 May 2015	18 Oct 2015	CPAI-2015-0726		CVE-2013-3724	Monkey HTTPD Server Denial of Service - Ver2 (CVE-2013-3724)
Critical	11 Oct 2015	18 Oct 2015	CPAI-2015-1193		CVE-2015-6973	Ignite Realtime Openfire user-create.jsp Cross-Site Request Forgery (CVE-2015-6973)
Critical	11 Aug 2015	15 Oct 2015	CPAI-2015-0914	Microsoft MS15-081	CVE-2015-2477	Microsoft Office Memory Corruption (MS15-081: CVE-2015-2477)
Medium	6 Sep 2015	15 Oct 2015	CPAI-2015-1082		CVE-2009-1776 CVE-2009-1777	Matt Wright FormMail Multiple cross-site scripting (XSS) vulnerabilities (CVE-2009-1776; CVE-2009-1777)
Critical	14 Oct 2015	15 Oct 2015	CPAI-2015-1210	IBM	CVE-2015-1925	IBM Tivoli Storage Manager FastBack Server Opcode 1332 Buffer Overflow (CVE-2015-1925)
Critical	15 Oct 2015	15 Oct 2015	CPAI-2015-1213			Magento E-Commerce Platform Magmi Plugin Information Disclosure
Critical	8 Jul 2015	14 Oct 2015	CPAI-2015-0806		CVE-2015-5119	Adobe Flash ActionScript 3 ByteArray Use After Free (APSA15-03: CVE-2015-5119)
High	1 Oct 2015	14 Oct 2015	CPAI-2015-1123	Dell	CVE-2015-5696	Dell NetVault Backup Denial of Service (CVE-2015-5696)
High	14 Oct 2015	14 Oct 2015	CPAI-2015-1206		CVE-2010-3600	Oracle Database Client System Analyzer Arbitrary File Upload Code Execution (CVE-2010-3600)
Critical	13 Oct 2015	13 Oct 2015	CPAI-2015-1161	Microsoft Security Bulletin MS15-106	CVE-2015-6045	Microsoft Internet Explorer Memory Corruption (MS15-106: CVE-2015-6045; CVE-2015-6045)
High	7 Jul 2015	13 Oct 2015	CPAI-2015-0803			WordPress MailChimp Subscribe Forms PHP Code Execution
High	16 Sep 2015	13 Oct 2015	CPAI-2015-1108		CVE-2004-0503	Microsoft Outlook RTF Embedded Object Security Bypass (CVE-2004-0503)
High	6 Oct 2015	13 Oct 2015	CPAI-2015-1205	Oracle	CVE-2015-2602	Oracle Endeca IDI ETL Server UploadFileConent Directory Traversal (CVE-2015-2602)
High	7 Oct 2015	13 Oct 2015	CPAI-2015-1204	General Electric	CVE-2015-6459	General Electric MDS PulseNET FileDownloadServlet Directory Traversal (CVE-2015-6459)
Medium	8 Oct 2015	13 Oct 2015	CPAI-2015-1202	Oracle	CVE-2015-4745	Oracle Endeca IDI ETL Server DownloadFileContent Directory Traversal (CVE-2015-4745)
High	13 Oct 2015	13 Oct 2015	CPAI-2015-1167	Microsoft MS15-106	CVE-2015-6046	Microsoft Internet Explorer Information Disclosure (MS15-106: CVE-2015-6046)
High	13 Oct 2015	13 Oct 2015	CPAI-2015-1182	Microsoft MS15-110	CVE-2015-2557	Microsoft Office Memory Corruption (MS15-110: CVE-2015-2557)
High	13 Oct 2015	13 Oct 2015	CPAI-2015-1181	Microsoft MS15-110	CVE-2015-2555	Microsoft Office Memory Corruption (MS15-110: CVE-2015-2555)
High	13 Oct 2015	13 Oct 2015	CPAI-2015-1197	Microsoft MS15-106	CVE-2015-6059	Microsoft Internet Explorer Information Disclosure (MS15-106: CVE-2015-6059)
Critical	13 Oct 2015	13 Oct 2015	CPAI-2015-1124	Microsoft MS15-106	CVE-2015-6055	Microsoft Internet Explorer Scripting Engine Memory Corruption (MS15-106: CVE-2015-6055)
High	10 Aug 2015	12 Oct 2015	CPAI-2015-0958		CVE-2015-4495	Mozilla Firefox Same Origin Violation And Local File Access (2015-78; CVE-2015-4495)
High	6 Sep 2015	12 Oct 2015	CPAI-2015-1077		CVE-2005-0678	Form Mail Script Formmail.inc.php File Inclusion (CVE-2005-0678)
Medium	6 Oct 2015	12 Oct 2015	CPAI-2015-1129	Foxit		Foxit Multiple Products PNG To PDF Conversion Heap Buffer Overflow
Medium	6 Oct 2015	12 Oct 2015	CPAI-2015-1135	ManageEngine		ManageEngine ServiceDesk File Upload Directory Traversal
High	7 Oct 2015	12 Oct 2015	CPAI-2015-1179		CVE-2015-4029	pfSense WebGUI Zone Parameter Cross-Site Scripting (CVE-2015-4029)