Home / 2015 Advisories Archive

2015 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	6 Apr 2015	8 Apr 2015	CPAI-2015-0440	ManageEngine	CVE-2015-2560	ManageEngine Desktop Central Unauthorized Administrative Password Reset (CVE-2015-2560)
High	6 Apr 2015	7 Apr 2015	CPAI-2015-0430		CVE-2014-9260	WordPress Download Manager Plugin Privilege Escalation (CVE-2014-9260)
Low	6 Apr 2015	7 Apr 2015	CPAI-2015-0429		CVE-2015-1501	SolarWinds Server and Application Monitor loadExtensionFactory Code Execution (CVE-2015-1501)
Critical	5 Apr 2015	6 Apr 2015	CPAI-2015-0422			Torshammer Denial of Service Tool
High	6 Apr 2015	6 Apr 2015	CPAI-2015-0431	SolarWinds	CVE-2015-1500	SolarWinds Server and Application Monitor loadExtensionFactory Stack Buffer Overflow (CVE-2015-1500)
Critical	5 Apr 2015	5 Apr 2015	CPAI-2015-0428			DarkMagic Flooder Denial of Service Tool
Critical	5 Apr 2015	5 Apr 2015	CPAI-2015-0423			Bull-Dosa Denial of Service Tool
High	22 Mar 2015	2 Apr 2015	CPAI-2015-0265		CVE-2006-4694	Microsoft PowerPoint Malformed Record Code Execution (MS06-058) - ver 2 (CVE-2006-4694)
High	30 Mar 2015	1 Apr 2015	CPAI-2015-0412		CVE-2015-2284	SolarWinds Firewall Security Manager userlogin.jsp Policy Bypass (CVE-2015-2284)
Critical	1 Feb 2015	29 Mar 2015	CPAI-2015-0106		CVE-2015-1397	Magento eCommerce Web Sites SQL Injection (CVE-2015-1397)
Critical	1 Feb 2015	29 Mar 2015	CPAI-2015-0107		CVE-2015-1399	Magento eCommerce Web Sites Remote File Inclusion (CVE-2015-1399)
High	26 Mar 2015	29 Mar 2015	CPAI-2015-0398		CVE-2014-8636	Mozilla Firefox Proxy Prototype Remote Code Execution (CVE-2014-8636)
High	29 Mar 2015	29 Mar 2015	CPAI-2006-301		CVE-2006-4694	Microsoft PowerPoint Malformed Record Code Execution (MS06-058; CVE-2006-4694)
Critical	26 Mar 2015	26 Mar 2015	CPAI-2015-0336		CVE-2001-0241	Microsoft IIS 5.0 ISAPI Internet Printing Protocol Extension Buffer Overflow - Ver2 (CVE-2001-0241)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0390		CVE-2005-0553	Internet Explorer DHTML Object Memory Corruption (MS05-020) - Ver2 (CVE-2005-0553)
Critical	26 Mar 2015	26 Mar 2015	CPAI-2015-0325		CVE-2015-1497	Persistent Systems Radia Client Automation Command Execution - Ver2 (CVE-2015-1497)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0280		CVE-2004-1868	Interactive Data eSignal Listener Buffer Overflow - Ver2 (CVE-2004-1868)
Critical	26 Mar 2015	26 Mar 2015	CPAI-2015-0293		CVE-2014-8741	Lexmark MarkVision Enterprise GfdFileUploadServlet Directory Traversal - Ver2 (CVE-2014-8741)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0300		CVE-2003-0907	Microsoft HSC URL RemoteCodeExecution (MS04-011) - Ver2 (CVE-2003-0907)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0281		CVE-2009-1169	Mozilla Firefox XSL Transformation Memory Corruption - Ver2 (CVE-2009-1169)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0282		CVE-2005-3154	BitDefender Antivirus Logging Function Format String - Ver2 (CVE-2005-3154)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0303		CVE-2014-5210	AlienVault OSSIM av-centerd Util.pm remote_task Arbitrary Command Execution - Ver2 (CVE-2014-5210)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0388		CVE-2010-2287	Wireshark SigComp UDVM Dissector Remote Code Execution - Ver2 (CVE-2010-2287)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0297		CVE-2014-5265	Drupal Core XML-RPC Endpoint xmlrpc.php Internal Entity Expansion Denial of Service - Ver2 (CVE-2014-5265)
Critical	26 Mar 2015	26 Mar 2015	CPAI-2015-0308		CVE-2013-6194	HP Data Protector Opcode 42 Directory Traversal - Ver2 (CVE-2013-6194)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0389		CVE-2004-0199	Microsoft HSC URL Remote Code Execution (MS04-015) - Ver2 (CVE-2004-0199)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0285		CVE-2004-1043	Internet Explorer HTML Help Remote Code Execution (MS05-001) - Ver2 (CVE-2004-1043)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0298		CVE-2005-3657	McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite - Ver2 (CVE-2005-3657)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0376		CVE-2009-1072	Linux Kernel nfsd CAP_MKNOD Security Bypass - Ver2 (CVE-2009-1072)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0289		CVE-2004-0846	Microsoft Excel Cell Length Buffer Overflow (MS04-033) - Ver2 (CVE-2004-0846)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0352		CVE-2006-0014	Microsoft Outlook Express Windows Address Book File Overflow (MS06-016) - Ver2 (CVE-2006-0014)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0354		CVE-2007-3490	Microsoft Excel Sheet Name Memory Corruption - Ver2 (CVE-2007-3490)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2004-137		CVE-2003-0907	Microsoft HSC URL RemoteCodeExecution (MS04-011) - Ver2 (CVE-2003-0907)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0353		CVE-2007-3033	Microsoft Windows Vista Feed Headlines Gadget Code Execution (MS07-048) - Ver2 (CVE-2007-3033)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0371		CVE-2010-1882	Microsoft DirectShow MPEG 3 Channel Mode Memory Corruption - Ver2 (CVE-2010-1882)
Critical	26 Mar 2015	26 Mar 2015	CPAI-2015-0306		CVE-2004-0212	Microsoft Windows Task Scheduler Buffer Overflow attack - Ver2 (CVE-2004-0212)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0356		CVE-2014-1761	Microsoft Word RTF listoverridecount Memory Corruption - Ver2 (CVE-2014-1761)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0312		CVE-2007-1010	Rphp zf_path Parameter PHP Code Execution - Ver2 (CVE-2007-1010)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0317		CVE-2013-2570	Zavio IP Camera Firmware 1603 OS Command Injection - Ver2 (CVE-2013-2570)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0304		CVE-2013-5877	Oracle Demantra 1221 Arbitrary File Disclosure - Ver2 (CVE-2013-5877)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0290		CVE-2004-0699	CheckPoint VPN1 ASN 1 Decoding Heap Overflow attack - Ver2 (CVE-2004-0699)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0339		CVE-2007-1017	VS News System show_news_inc.php newsordner Parameter PHP Code Execution - Ver2 (CVE-2007-1017)
Low	26 Mar 2015	26 Mar 2015	CPAI-2015-0316		CVE-2007-0775	Mozilla Firefox Floating Layer Column Layout Denial of Service - Ver2 (CVE-2007-0775)
Critical	26 Mar 2015	26 Mar 2015	CPAI-2015-0295		CVE-2008-1331	Alcatel OmniPCX Office FastJSDatacgi id2 Parameter Command Execution - Ver2 (CVE-2008-1331)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0302		CVE-2010-3333	Microsoft Office RTF Stack Buffer Overflow (MS10-087) - Ver2 (CVE-2010-3333)
High	26 Mar 2015	26 Mar 2015	CPAI-2014-1817		CVE-2014-5265	Drupal Core XML-RPC Endpoint xmlrpc.php Internal Entity Expansion Denial of Service - Ver2 (CVE-2014-5265)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0344		CVE-2009-1545	Microsoft Windows AVI Processing Malformed Header Code Execution (MS09-038) - Ver2 (CVE-2009-1545)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0315		CVE-2008-4844	Microsoft Internet Explorer Data Binding Memory Corruption - Ver2 (CVE-2008-4844)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0358		CVE-2009-0217	Microsoft XML Signature HMAC Truncation Bypass (MS10-041) - Ver2 (CVE-2009-0217)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0367		CVE-2011-2710	Joomla index.php Multiple Parameter XSS - Ver2 (CVE-2011-2710)