Home / 2015 Advisories Archive

2015 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	18 May 2015	18 May 2015	CPAI-2015-0752		CVE-2013-2472	Oracle Java Runtime Environment ShortComponentRaster.verify Memory Corruption - Ver2 (CVE-2013-2472)
High	18 May 2015	18 May 2015	CPAI-2015-0748		CVE-2011-0978	Microsoft Office Excel CatSerRange Record Remote Code Execution (MS11-021) - Ver2 (CVE-2011-0978)
High	18 May 2015	18 May 2015	CPAI-2015-0746		CVE-2012-4820	IBM Java ProxyUtil Sandbox Breach - Ver2 (CVE-2012-4820)
Critical	18 May 2015	18 May 2015	CPAI-2015-0700		CVE-2014-8142	PHP Core unserialize process nested data Use After Free - Ver2 (CVE-2014-8142)
Medium	18 May 2015	18 May 2015	CPAI-2015-0703		CVE-2012-5703	VMware ESX and ESXi Server SOAP Request Handling Denial Of Service - Ver2 (CVE-2012-5703)
Critical	18 May 2015	18 May 2015	CPAI-2015-0769		CVE-2014-8455	Adobe Acrobat And Reader Use-After-Free (APSB14-28: CVE-2014-8455) - Ver2
Critical	9 Feb 2015	17 May 2015	CPAI-2015-0145	SAP	CVE-2014-9264	SAP SQL Anywhere .NET Data Provider Column Alias Buffer Overflow (CVE-2014-9264)
High	2 Mar 2015	17 May 2015	CPAI-2015-0203	Symantec	CVE-2014-7288	Symantec Encryption Management Server Database Backup Command Injection (CVE-2014-7288)
Critical	11 May 2015	17 May 2015	CPAI-2015-0558	Adobe APSB10-02	CVE-2009-3953	Adobe Reader U3D array boundary code execution (APSB10-02: CVE-2009-3953)
Critical	29 Apr 2015	13 May 2015	CPAI-2015-0512		CVE-2014-8142 CVE-2015-0231	PHP Core unserialize process nested data Use After Free - ver 2 (CVE-2014-8142; CVE-2015-0231)
High	11 May 2015	12 May 2015	CPAI-2015-0564	Microsoft MS15-048	CVE-2015-1672	Microsoft .NET Framework Denial of Service (MS15-048: CVE-2015-1672)
High	12 May 2015	12 May 2015	CPAI-2015-0549	Microsoft MS15-046	CVE-2015-1682	Microsoft Office Memory Corruption (MS15-046: CVE-2015-1682)
High	12 May 2015	12 May 2015	CPAI-2015-0547	Microsoft MS15-054	CVE-2015-1681	Microsoft Management Console File Format Denial of Service (MS15-054; CVE-2015-1681)
Critical	12 May 2015	12 May 2015	CPAI-2015-0515	Microsoft MS15-045	CVE-2015-1695	Microsoft Windows Journal Remote Code Execution (MS15-045: CVE-2015-1695)
High	12 May 2015	12 May 2015	CPAI-2015-0525	Microsoft MS15-043	CVE-2015-1686	Microsoft Internet Explorer Memory Corruption (MS15-043: CVE-2015-1686)
Critical	12 May 2015	12 May 2015	CPAI-2015-0516	Microsoft MS15-045	CVE-2015-1697	Microsoft Windows Journal Remote Code Execution (MS15-045: CVE-2015-1697)
Critical	12 May 2015	12 May 2015	CPAI-2015-0517	Microsoft MS15-045	CVE-2015-1696	Microsoft Windows Journal Remote Code Execution (MS15-045: CVE-2015-1696)
Critical	12 May 2015	12 May 2015	CPAI-2015-0518	Microsoft MS15-045	CVE-2015-1699	Microsoft Windows Journal Remote Code Execution (MS15-045: CVE-2015-1699)
Critical	12 May 2015	12 May 2015	CPAI-2015-0514	Microsoft MS15-045	CVE-2015-1698	Microsoft Windows Journal Remote Code Execution (MS15-045: CVE-2015-1698)
Critical	12 May 2015	12 May 2015	CPAI-2015-0513	Microsoft MS15-045	CVE-2015-1675	Microsoft Windows Journal Remote Code Execution (MS15-045: CVE-2015-1675)
Critical	12 May 2015	12 May 2015	CPAI-2015-0563			MacKeeper Remote Code Execution
Critical	10 Feb 2015	11 May 2015	CPAI-2015-0147	Microsoft MS15-010	CVE-2015-0059	Microsoft Windows TrueType Font Parsing Remote Code Execution (MS15-010; CVE-2015-0059)
High	10 May 2015	10 May 2015	CPAI-2015-0544	Fortinet	CVE-2015-2281	Fortinet Single Sign On Hello Message Multiple Vulnerabilities - ver 2 (CVE-2015-2281)
High	7 May 2015	7 May 2015	CPAI-2015-0538	ESF	CVE-2015-2295	ESF pfSense webgui deletefile Directory Traversal (CVE-2015-2295)
High	7 May 2015	7 May 2015	CPAI-2015-0541	Novell 7016431	CVE-2015-0780	Novell ZENworks Configuration Management GetStoredResult.class SQL Injection (CVE-2015-0780)
Medium	14 Apr 2015	5 May 2015	CPAI-2015-0472	ESF	CVE-2015-2294	ESF pfSense status_captiveportal Cross Site Scripting (CVE-2015-2294)
High	14 Apr 2015	5 May 2015	CPAI-2015-0453	Microsoft MS15-033	CVE-2015-1650	Microsoft Office Component Use After Free (MS15-033: CVE-2015-1650)
Critical	24 Feb 2015	29 Apr 2015	CPAI-2015-0221		CVE-2010-0188 CVE-2010-2883	PDF Containing Obfuscated JavaScript Code (CVE-2010-0188; CVE-2010-2883)
Critical	29 Apr 2015	29 Apr 2015	CPAI-2015-0509	Novell	CVE-2015-0779	Novell ZENworks Configuration Management UploadServlet Directory Traversal (CVE-2015-0779)
High	19 Apr 2015	28 Apr 2015	CPAI-2015-0489	Mozilla mfsa2015-09	CVE-2014-8636	Mozilla Firefox XrayWrapper Policy Bypass (CVE-2014-8636)
High	7 Apr 2015	27 Apr 2015	CPAI-2015-0441	Exploit-DB	CVE-2012-6518	DIY CMS 1.0 Poll - Multiple Vulnerabilities (CVE-2012-6518)
Critical	14 Apr 2015	26 Apr 2015	CPAI-2015-0454	Microsoft MS15-033	CVE-2015-1649	Microsoft Office Component Use After Free (MS15-033: CVE-2015-1649)
Critical	22 Apr 2015	26 Apr 2015	CPAI-2015-0503	Adobe APSB15-06	CVE-2015-0351	Adobe Flash Player Use After Free Remote Code Execution (APSB15-06: CVE-2015-0351)
High	26 Apr 2015	26 Apr 2015	CPAI-2015-0498	Microsoft MS15-026	CVE-2015-1629	Microsoft ExchangeDLP Cross Site Scripting (MS15-026; CVE-2015-1629)
High	14 Apr 2015	21 Apr 2015	CPAI-2015-0469	OpenSSL0150319 secadv_20150319	CVE-2015-0291	OpenSSL ClientHello signature_algorithms Extension Denial of Service (CVE-2015-0291)
Critical	20 Apr 2015	20 Apr 2015	CPAI-2015-0499	Adobe APSB15-06	CVE-2015-3042	Adobe Flash Player Memory Corruption (APSB15-06: CVE-2015-3042)
High	11 Jan 2015	19 Apr 2015	CPAI-2015-0019			Morfeus Security Scanner
Critical	19 Feb 2015	19 Apr 2015	CPAI-2015-0250			WordPress DesignFolio-Plus Theme Arbitrary File Upload
High	16 Apr 2015	16 Apr 2015	CPAI-2015-0479	SolarWinds	CVE-2014-9566	SolarWinds Orion GetAccountGroups Multiple SQL Injections (CVE-2014-9566)
High	12 Feb 2015	15 Apr 2015	CPAI-2015-0463		CVE-2014-9097	Wordpress Video Gallery Plugin SQL Injection (CVE-2014-9097)
Critical	11 Mar 2015	15 Apr 2015	CPAI-2015-0437			JavaScript Data Encoding Evasion
Critical	30 Mar 2015	14 Apr 2015	CPAI-2015-0404	HP c04583185	CVE-2014-7890	HP Point of Sale OPOS Driver opostoneindicator.ocx Open Method Stack Buffer Overflow (CVE-2014-7890)
Critical	14 Apr 2015	14 Apr 2015	CPAI-2015-0413	Microsoft MS15-032	CVE-2015-1661	Microsoft Internet Explorer Memory Corruption (MS15-032 : CVE-2015-1661)
Critical	14 Apr 2015	14 Apr 2015	CPAI-2015-0456	Microsoft MS15-033	CVE-2015-1651	Microsoft Office Component Use After Free (MS15-033: CVE-2015-1651)
High	14 Apr 2015	14 Apr 2015	CPAI-2015-0452	Microsoft MS15-036	CVE-2015-1653	Microsoft SharePoint Cross-site Scripting (MS15-036; CVE-2015-1653)
Critical	14 Apr 2015	14 Apr 2015	CPAI-2015-0409	Microsoft MS15-032	CVE-2015-1652	Microsoft Internet Explorer Memory Corruption (MS15-032: CVE-2015-1652)
High	14 Apr 2015	14 Apr 2015	CPAI-2015-0420	Microsoft MS15-038	CVE-2015-1644	Microsoft Windows MS-DOS Device Name Elevation of Privilege (MS15-038; CVE-2015-1644)
High	12 Apr 2015	13 Apr 2015	CPAI-2015-0459	SolarWinds	CVE-2014-9566	Multiple SolarWinds Orion GetAccounts SQL Injections (CVE-2014-9566)
Critical	1 Apr 2015	12 Apr 2015	CPAI-2015-0415			PHP DateTimeZone Object timezone Unserialize Type Confusion
Critical	5 Apr 2015	12 Apr 2015	CPAI-2015-0455	Eclipse	CVE-2015-2080	Eclipse Foundation Jetty Web Server HttpParser Remote Information Disclosure (CVE-2015-2080)