Home / 2015 Advisories Archive

2015 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	6 Oct 2015	8 Oct 2015	CPAI-2015-1133	Oracle	CVE-2015-4759	Oracle Data Quality Trillium Based SetBasicPreviewData Type Confusion (CVE-2015-4759)
Medium	6 Oct 2015	8 Oct 2015	CPAI-2015-1128			phpFileManager cmd Parameter Command Execution
High	6 Oct 2015	8 Oct 2015	CPAI-2015-1130			Reprise License Manager actserver and akey HTTP Parameters Parsing Stack Buffer Overflow
High	7 Oct 2015	8 Oct 2015	CPAI-2015-1165	ManageEngine		ManageEngine OpManager APMAlertOperationsServlet source SQL Injection
High	7 Oct 2015	8 Oct 2015	CPAI-2015-1175			Novell ZENworks Mobile Management Cross-Site Scripting
Critical	30 Sep 2015	7 Oct 2015	CPAI-2015-1122			Avira Management Console Server HTTP Header Processing Heap Buffer Overflow
Critical	6 Oct 2015	7 Oct 2015	CPAI-2015-1154	ISC AA-01267	CVE-2015-4620	ISC BIND DNSSEC Validation Denial of Service (CVE-2015-4620)
Medium	6 Oct 2015	7 Oct 2015	CPAI-2015-1136	Oracle	CVE-2015-2604	Oracle Endeca Information Discovery Integrator ETL Server CopyFile Directory Traversal (CVE-2015-2604)
Critical	7 Oct 2015	7 Oct 2015	CPAI-2015-1166	APSB15-23 Adobe	CVE-2015-5575	Adobe Flash Player Out of Bounds Memory Corruption (APSB15-23: CVE-2015-5575)
High	18 May 2015	6 Oct 2015	CPAI-2015-1143		CVE-2015-2825	Wordpress Simple Ads Manager Arbitrary File Upload - Ver2 (CVE-2015-2825)
Medium	4 Oct 2015	6 Oct 2015	CPAI-2015-1126	Oracle	CVE-2015-2605	Oracle Endeca Information Discovery Integrator ETL Server MoveFile Directory Traversal (CVE-2015-2605)
High	6 Oct 2015	6 Oct 2015	CPAI-2015-1137			Sysax Multi Server SSH Component Denial Of Service
High	29 Sep 2015	1 Oct 2015	CPAI-2015-1119	ManageEngine		ManageEngine OpManager AgentDetailsUtil agentKey SQL Injection
Critical	29 Sep 2015	1 Oct 2015	CPAI-2015-1117	EMC	CVE-2015-0538	EMC AutoStart ftagent Opcode 85 Subcode 33 SQL Injection (CVE-2015-0538)
Medium	30 Sep 2015	1 Oct 2015	CPAI-2015-1121	Oracle	CVE-2015-2606	Oracle Endeca Information Discovery Integrator ETL Server RenameFile Directory Traversal (CVE-2015-2606)
High	8 Sep 2015	30 Sep 2015	CPAI-2015-1096	Microsoft MS15-097	CVE-2015-2506	Microsoft Windows OpenType Font Parsing Denial Of Service (MS15-097: CVE-2015-2506)
High	29 Sep 2015	30 Sep 2015	CPAI-2015-1120	ManageEngine		ManageEngine Multiple Products It360SPUtil resIds SQL Injection
Critical	29 Sep 2015	29 Sep 2015	CPAI-2015-1116	EMC	CVE-2015-0538	EMC AutoStart ftagent Opcode 83 Subcode 22 SQL Injection (CVE-2015-0538)
High	22 Sep 2015	24 Sep 2015	CPAI-2015-1114		CVE-2014-5337	WordPress Mobile Pack Information Disclosure (CVE-2014-5337)
Critical	20 Sep 2015	20 Sep 2015	CPAI-2015-1111		CVE-2015-4499	Bugzilla Mail Authentication Mechanism Bypass (CVE-2015-4499)
Critical	18 May 2015	17 Sep 2015	CPAI-2015-0763		CVE-2004-0627	MySQL Malformed Password Authentication - Ver2 (CVE-2004-0627)
High	18 May 2015	17 Sep 2015	CPAI-2015-0696		CVE-2002-1315	IPlanet Web Admin Cross-Site Scripting - Ver2 (CVE-2002-1315)
Medium	15 Jul 2015	17 Sep 2015	CPAI-2015-0854	Adobe APSB15-16	CVE-2015-3114	Adobe Flash Player Security Bypass (APSB15-16: CVE-2015-3114)
Critical	28 Jul 2015	17 Sep 2015	CPAI-2015-0888		CVE-2015-2212 CVE-2015-5623	WordPress post Request Privilege Escalation (CVE-2015-2212; CVE-2015-5623)
Critical	17 Sep 2015	17 Sep 2015	CPAI-2015-1110	Adobe APSB15-19	CVE-2015-5127	Adobe Flash Player Use after Free Code Execution (APSB15-19: CVE-2015-5127)
High	7 Jun 2015	16 Sep 2015	CPAI-2015-0643			Microsoft Word Intruder RTF FILE
Critical	8 Sep 2015	16 Sep 2015	CPAI-2015-1100			PHP Unserialize Function Use After Free
Critical	8 Sep 2015	16 Sep 2015	CPAI-2015-1066	Microsoft MS15-094	CVE-2015-2487	Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2487)
Critical	16 Sep 2015	16 Sep 2015	CPAI-2015-1107			Cisco Router SYNful Knock Implant HTTP Request
High	10 Sep 2015	10 Sep 2015	CPAI-2015-1103			Adobe Reader and Acrobat Corrupted Stream Denial of Service
High	8 Sep 2015	8 Sep 2015	CPAI-2015-1095	Microsoft MS15-99	CVE-2015-2523	Microsoft Office Memory Corruption (MS15-99: CVE-2015-2523)
High	8 Sep 2015	8 Sep 2015	CPAI-2015-1093	Microsoft MS15-099	CVE-2015-2520	Microsoft Office Memory Corruption (MS15-099: CVE-2015-2520)
High	8 Sep 2015	8 Sep 2015	CPAI-2015-1099	Microsoft MS15-099	CVE-2015-2521	Microsoft Office Memory Corruption (MS15-99: CVE-2015-2521)
High	8 Sep 2015	8 Sep 2015	CPAI-2015-1071	Microsoft MS15-094	CVE-2015-2484	Microsoft Edge security bypass (MS15-094: CVE-2015-2484)
Critical	8 Sep 2015	8 Sep 2015	CPAI-2015-1065	Microsoft MS15-098	CVE-2015-2513	Microsoft Windows Journal Remote Code Execution (MS15-098: CVE-2015-2513)
High	18 Jun 2015	7 Sep 2015	CPAI-2015-0669			Shodan Scanner BACNET Request
High	18 Jun 2015	7 Sep 2015	CPAI-2015-0671			Shodan Scanner ENIP Request
High	18 Jun 2015	7 Sep 2015	CPAI-2015-0673			Shodan Scanner GTP Request
High	18 Jun 2015	7 Sep 2015	CPAI-2015-0674			Shodan Scanner ISAKMP Request
Critical	3 Sep 2015	7 Sep 2015	CPAI-2015-1081			Malicious Mail Payload Containing JavaScript Downloader
Critical	6 Sep 2015	6 Sep 2015	CPAI-2015-1067	Microsoft Security Bulletin MS15-094		Microsoft Edge Memory Corruption (MS15-094: CVE-2015-2488; CVE-2015-2488)
Critical	24 Aug 2015	6 Sep 2015	CPAI-2015-1061	Adobe APSB15-15	CVE-2015-5105	Adobe Acrobat and Reader Memory Corruption (APSB15-15: CVE-2015-5105)
High	3 Sep 2015	6 Sep 2015	CPAI-2015-1073		CVE-2007-4807	Focus SIS staticpath File Inclusion (CVE-2007-4807)
High	6 Sep 2015	6 Sep 2015	CPAI-2015-1080		CVE-2007-4921	Ajax File Browser settings.inc.php File Inclusion (CVE-2007-4921)
High	6 Sep 2015	6 Sep 2015	CPAI-2015-1079			WordPress All-in-One Migration Plugin Export
High	6 Sep 2015	6 Sep 2015	CPAI-2015-1076		CVE-2007-2530	Tropicalm Crowell Resource RESPATH File Inclusion (CVE-2007-2530)
High	25 Jun 2015	3 Sep 2015	CPAI-2015-0685	HP	CVE-2015-2120	HP SiteScope Log Analyzer Information Disclosure (CVE-2015-2120)
Critical	10 Aug 2015	3 Sep 2015	CPAI-2015-0960		CVE-2013-2645	TP-LINK WR1043N Multiple Cross-Site Request Forgery (CVE-2013-2645)
Critical	1 Sep 2015	2 Sep 2015	CPAI-2015-1062			FTP ftpchk3.php File Upload
Medium	31 Aug 2015	1 Sep 2015	CPAI-2015-1059	NetIQ	CVE-2015-0795	NetIQ Security Solutions for ISeries SafeShellExecute Stack Buffer Overflow (CVE-2015-0795)