Home / 2015 Advisories Archive

2015 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0369		CVE-2010-3974	Microsoft Windows Fax Services Cover Page Editor Heap Buffer Overflow - Ver2 (CVE-2010-3974)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0299		CVE-2013-1862	Apache HTTP Server mod_rewrite RewriteLog Command Execution - Ver2 (CVE-2013-1862)
Critical	26 Mar 2015	26 Mar 2015	CPAI-2015-0326		CVE-2003-1048	Internet Explorer Malformed GIF File Double Free (MS04-025) - Ver2 (CVE-2003-1048)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0331		CVE-2006-3059	X97EmbedAn Excel Document Code Execution - Ver2 (CVE-2006-3059)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0288		CVE-2005-1921	LupperA XMLRPC Propagation Request Code Execution - Ver2 (CVE-2005-1921)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0342		CVE-2010-3600	Oracle Database Client System Analyzer Arbitrary File Upload Code Execution - Ver2 (CVE-2010-3600)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0379		CVE-2007-1229	Nullsoft Shoutcast Server Request Log CrossSite Scripting - Ver2 (CVE-2007-1229)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0320		CVE-2012-2122	MySQL and MariaDB Incorrect Cast Policy Bypass - Ver2 (CVE-2012-2122)
Critical	26 Mar 2015	26 Mar 2015	CPAI-2015-0338		CVE-2013-0928	EMC AlphaStor Device Manager Command Injection Improved performance - Ver2 (CVE-2013-0928)
High	25 Mar 2015	25 Mar 2015	CPAI-2015-0279	Adobe APSB15-05	CVE-2015-0340	Adobe Flash Player Cross Domain Policy Bypass (APSB15-05: CVE-2015-0340)
High	17 Feb 2015	24 Mar 2015	CPAI-2015-0167			Google Email Application Header Parsing Denial Of Service
High	16 Mar 2015	24 Mar 2015	CPAI-2015-0256			FireFlood Denial of Service Tool
High	16 Mar 2015	24 Mar 2015	CPAI-2015-0254			Jays Shell Booter Denial of Service Tool
Critical	24 Mar 2015	24 Mar 2015	CPAI-2015-0276			Domain Name Fake SSL Certificate
Critical	28 Jan 2015	23 Mar 2015	CPAI-2015-0075		CVE-2015-0235	GNU C Library gethostbyname Buffer Overflow (CVE-2015-0235)
Critical	10 Mar 2015	23 Mar 2015	CPAI-2015-0191	Microsoft MS15-020	CVE-2015-0096	Microsoft DLL Planting Remote Code Execution (MS15-020; CVE-2015-0096)
Critical	23 Mar 2015	23 Mar 2015	CPAI-2015-0271	Adobe APSB15-05	CVE-2015-0333	Adobe Flash Player Memory Corruption (APSB15-05: CVE-2015-0333)
Critical	23 Mar 2015	23 Mar 2015	CPAI-2015-0266	Adobe APSB15-05	CVE-2015-0332	Adobe Flash Player Memory Corruption (APSB15-05: CVE-2015-0332)
Critical	23 Mar 2015	23 Mar 2015	CPAI-2015-0268	APSB15-05 Adobe	CVE-2015-0339	Adobe Flash Player Memory Corruption (APSB15-05: CVE-2015-0339)
Critical	23 Mar 2015	23 Mar 2015	CPAI-2015-0269	Adobe APSB15-05	CVE-2015-0338	Adobe Flash Player Integer Overflow Remote Code Execution (APSB15-05: CVE-2015-0338)
High	12 Feb 2015	22 Mar 2015	CPAI-2015-0262		CVE-2015-2292	WordPress SEO by Yoast Plugin SQL Injection (CVE-2015-2292)
Critical	19 Feb 2015	22 Mar 2015	CPAI-2015-0261		CVE-2015-2194	WordPress Fusion Theme Arbitrary File Upload (CVE-2015-2194)
Critical	12 Mar 2015	16 Mar 2015	CPAI-2015-0251		CVE-2015-2040	WordPress Contact Form DB Plugin Cross-Site Scripting (CVE-2015-2040)
Critical	1 Feb 2015	15 Mar 2015	CPAI-2015-0126			Zend PHP Auto Loading Mechanism Local File Inclusion
Critical	10 Feb 2015	15 Mar 2015	CPAI-2015-0116	Microsoft MS15-009	CVE-2015-0053	Microsoft Internet Explorer Memory Corruption (MS15-009: CVE-2015-0053)
High	19 Jan 2015	12 Mar 2015	CPAI-2015-0053	OpenSSL0150108 secadv_20150108	CVE-2015-0206	OpenSSL DTLS dtls1_buffer_record Denial of Service (CVE-2015-0206)
Critical	8 Mar 2015	11 Mar 2015	CPAI-2015-0241		CVE-2015-2069	WordPress WooCommerce Plugin Cross-Site Scripting (CVE-2015-2069)
High	10 Mar 2015	11 Mar 2015	CPAI-2015-0248			MC-SQLR Reflected Denial of Service
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0214	Microsoft MS15-018	CVE-2015-0032	Microsoft Internet Explorer Memory Corruption (MS15-018: CVE-2015-0032)
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0239	Microsoft MS15-018	CVE-2015-1634	Microsoft Internet Explorer Memory Corruption (MS15-018: CVE-2015-1634)
High	10 Mar 2015	10 Mar 2015	CPAI-2015-0231	Mircosoft MS15-022	CVE-2015-1633	Microsoft SharePoint User Name XSS (MS15-022; CVE-2015-1633)
High	10 Mar 2015	10 Mar 2015	CPAI-2015-0242	Microsoft MS15-026	CVE-2015-1632	Microsoft Exchange Error Message Cross Site Scripting (MS15-026; CVE-2015-1632)
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0218	Microsoft MS15-018	CVE-2015-0056	Microsoft Internet Explorer Memory Corruption (MS15-018: CVE-2015-0056)
High	10 Mar 2015	10 Mar 2015	CPAI-2015-0240		CVE-2015-0076	Microsoft JPEG XR Parser Information Disclosure (MS15-029; CVE-2015-0076)
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0217	Microsoft MS15-018	CVE-2015-1624	Microsoft Internet Explorer Memory Corruption (MS15-018: CVE-2015-1624)
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0220	Microsoft MS15-018	CVE-2015-1625	Microsoft Internet Explorer Memory Corruption (MS15-018: CVE-2015-1625)
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0225	Microsoft MS15-018	CVE-2015-1626	Microsoft Internet Explorer Memory Corruption (MS15-018: CVE-2015-1626)
High	10 Mar 2015	10 Mar 2015	CPAI-2015-0227	Microsoft MS15-018	CVE-2015-1627	Microsoft Internet Explorer Elevation of Privilege (MS15-018: CVE-2015-1627)
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0216	Microsoft MS15-018	CVE-2015-1623	Microsoft Internet Explorer Memory Corruption (MS15-018: CVE-2015-1623)
High	10 Mar 2015	10 Mar 2015	CPAI-2015-0193	Microsoft MS15-021	CVE-2015-0087	Microsoft Windows ATMFD Font Driver Information Disclosure (MS15-021: CVE-2015-0087)
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0200	Microsoft MS15-021	CVE-2015-0090	Microsoft Windows ATMFD Font Driver Remote Code Execution (MS15-021: CVE-2015-0090)
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0228	Microsoft MS15-022	CVE-2015-0086	Microsoft Office Memory Corruption (MS15-022; CVE-2015-0086)
High	10 Mar 2015	10 Mar 2015	CPAI-2015-0194	Microsoft MS15-022	CVE-2015-0085	Microsoft Office Component Use After Free (MS15-022: CVE-2015-0085)
High	10 Mar 2015	10 Mar 2015	CPAI-2015-0233	Microsoft MS15-026	CVE-2015-1628	Microsoft Outlook Web Access Modified Canary Parameter Cross Site Scripting (MS15-026; CVE-2015-1628)
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0199	Microsoft MS15-021	CVE-2015-0093	Microsoft Windows ATMFD Font Driver Remote Code Execution (MS15-021: CVE-2015-0093)
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0238		CVE-2015-0081	Microsoft Windows Text Services Remote Code Execution (MS15-020; CVE-2015-0081)
Critical	17 Feb 2015	9 Mar 2015	CPAI-2015-0169	Adobe APSB15-04	CVE-2015-0317	Adobe Flash Player Type Confusion Code Execution (APSB15-04: CVE-2015-0317)
Critical	2 Mar 2015	9 Mar 2015	CPAI-2015-0204	Adobe APSB15-04	CVE-2015-0323	Adobe Flash Player Heap Buffer Overflow (APSB15-04: CVE-2015-0323)
High	1 Feb 2015	8 Mar 2015	CPAI-2015-0113	Adobe APSB15-03	CVE-2015-0312	Adobe Flash Player Double Free (APSB15-03: CVE-2015-0312)
High	2 Mar 2015	8 Mar 2015	CPAI-2015-0205		CVE-2014-8393	Corel Multiple Products Multiple Insecure Library Loading (CVE-2014-8393)