Home / 2015 Advisories Archive

2015 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0362		CVE-2004-0632	Adobe Reader and Acrobat File Extension Buffer Overflow - Ver2 (CVE-2004-0632)
High	26 Mar 2015	26 Mar 2015	CPAI-2004-191		CVE-2004-0846	Microsoft Excel Cell Length Buffer Overflow (MS04-033) - Ver2 (CVE-2004-0846)
Critical	26 Mar 2015	26 Mar 2015	CPAI-2015-0318		CVE-2004-0480	Lotus Notes URI Handler Argument Injection - Ver2 (CVE-2004-0480)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0330		CVE-2006-1986	Apple Safari KWQListIteratorImpl HTML Tag Handling DoS - Ver2 (CVE-2006-1986)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0382		CVE-2006-3991	Voodoo Chat index.php file_path Parameter PHP Code Execution - Ver2 (CVE-2006-3991)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0361		CVE-2013-5745	GNOME Vino VNC Server Denial of Service - Ver2 (CVE-2013-5745)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0380		CVE-2014-6333	Microsoft Office Double Delete Remote Code Execution (MS14-069) - Ver2 (CVE-2014-6333)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0351		CVE-2014-6334	Microsoft Office Bad Index Remote Code Execution (MS14-069) - Ver2 (CVE-2014-6334)
Critical	26 Mar 2015	26 Mar 2015	CPAI-2015-0384		CVE-2004-0540	Microsoft Windows 2000 Domain Authentication Bypass attack - Ver2 (CVE-2004-0540)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0283		CVE-2007-2867	Mozilla Firefox SVG pathSegListgetItem Negative Argument Memory Corruption - Ver2 (CVE-2007-2867)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0365		CVE-2006-4610	GrapAgenda index.php page Parameter PHP Code Execution - Ver2 (CVE-2006-4610)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0323		CVE-2004-0116	Microsoft RPCSS Denial of Service RPCSYSAC badUNClen - Ver2 (CVE-2004-0116)
High	26 Mar 2015	26 Mar 2015	CPAI-2005-304		CVE-2005-3154	BitDefender Antivirus Logging Function Format String - Ver2 (CVE-2005-3154)
Critical	26 Mar 2015	26 Mar 2015	CPAI-2015-0363		CVE-2004-0209	Microsoft Windows Graphics Rendering Engine Buffer Overflow (MS04-032) - Ver2 (CVE-2004-0209)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0294		CVE-2006-1738	Mozilla Firefox mozgrid Modification Denial of Service - Ver2 (CVE-2006-1738)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0296		CVE-2010-4091	Adobe Reader JavaScript printSeps Function Heap Corruption (APSB10-28) - Ver2 (CVE-2010-4091)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0373		CVE-2002-1186	Internet Explorer URLEncoded Characters Information Disclosure - Ver2 (CVE-2002-1186)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0368		CVE-2002-0071	Microsoft IIS HTR Request Buffer Overflow - Ver2 (CVE-2002-0071)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0385		CVE-2010-2745	Microsoft Browser Embedded Media Player Memory Corruption (MS10-082) - Ver2 (CVE-2010-2745)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0369		CVE-2010-3974	Microsoft Windows Fax Services Cover Page Editor Heap Buffer Overflow - Ver2 (CVE-2010-3974)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0299		CVE-2013-1862	Apache HTTP Server mod_rewrite RewriteLog Command Execution - Ver2 (CVE-2013-1862)
Critical	26 Mar 2015	26 Mar 2015	CPAI-2015-0326		CVE-2003-1048	Internet Explorer Malformed GIF File Double Free (MS04-025) - Ver2 (CVE-2003-1048)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0331		CVE-2006-3059	X97EmbedAn Excel Document Code Execution - Ver2 (CVE-2006-3059)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0288		CVE-2005-1921	LupperA XMLRPC Propagation Request Code Execution - Ver2 (CVE-2005-1921)
High	26 Mar 2015	26 Mar 2015	CPAI-2015-0342		CVE-2010-3600	Oracle Database Client System Analyzer Arbitrary File Upload Code Execution - Ver2 (CVE-2010-3600)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0379		CVE-2007-1229	Nullsoft Shoutcast Server Request Log CrossSite Scripting - Ver2 (CVE-2007-1229)
Medium	26 Mar 2015	26 Mar 2015	CPAI-2015-0320		CVE-2012-2122	MySQL and MariaDB Incorrect Cast Policy Bypass - Ver2 (CVE-2012-2122)
Critical	26 Mar 2015	26 Mar 2015	CPAI-2015-0338		CVE-2013-0928	EMC AlphaStor Device Manager Command Injection Improved performance - Ver2 (CVE-2013-0928)
High	17 Feb 2015	24 Mar 2015	CPAI-2015-0167			Google Email Application Header Parsing Denial Of Service
High	16 Mar 2015	24 Mar 2015	CPAI-2015-0256			FireFlood Denial of Service Tool
High	16 Mar 2015	24 Mar 2015	CPAI-2015-0254			Jays Shell Booter Denial of Service Tool
Critical	24 Mar 2015	24 Mar 2015	CPAI-2015-0276			Domain Name Fake SSL Certificate
Critical	28 Jan 2015	23 Mar 2015	CPAI-2015-0075		CVE-2015-0235	GNU C Library gethostbyname Buffer Overflow (CVE-2015-0235)
Critical	10 Mar 2015	23 Mar 2015	CPAI-2015-0191	Microsoft MS15-020	CVE-2015-0096	Microsoft DLL Planting Remote Code Execution (MS15-020; CVE-2015-0096)
High	12 Feb 2015	22 Mar 2015	CPAI-2015-0262		CVE-2015-2292	WordPress SEO by Yoast Plugin SQL Injection (CVE-2015-2292)
Critical	19 Feb 2015	22 Mar 2015	CPAI-2015-0261		CVE-2015-2194	WordPress Fusion Theme Arbitrary File Upload (CVE-2015-2194)
Critical	12 Mar 2015	16 Mar 2015	CPAI-2015-0251		CVE-2015-2040	WordPress Contact Form DB Plugin Cross-Site Scripting (CVE-2015-2040)
Critical	1 Feb 2015	15 Mar 2015	CPAI-2015-0126			Zend PHP Auto Loading Mechanism Local File Inclusion
High	19 Jan 2015	12 Mar 2015	CPAI-2015-0053	OpenSSL0150108 secadv_20150108	CVE-2015-0206	OpenSSL DTLS dtls1_buffer_record Denial of Service (CVE-2015-0206)
Critical	8 Mar 2015	11 Mar 2015	CPAI-2015-0241		CVE-2015-2069	WordPress WooCommerce Plugin Cross-Site Scripting (CVE-2015-2069)
High	10 Mar 2015	11 Mar 2015	CPAI-2015-0248			MC-SQLR Reflected Denial of Service
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0239	Microsoft MS15-018	CVE-2015-1634	Microsoft Internet Explorer Memory Corruption (MS15-018: CVE-2015-1634)
High	10 Mar 2015	10 Mar 2015	CPAI-2015-0231	Mircosoft MS15-022	CVE-2015-1633	Microsoft SharePoint User Name XSS (MS15-022; CVE-2015-1633)
High	10 Mar 2015	10 Mar 2015	CPAI-2015-0242	Microsoft MS15-026	CVE-2015-1632	Microsoft Exchange Error Message Cross Site Scripting (MS15-026; CVE-2015-1632)
High	10 Mar 2015	10 Mar 2015	CPAI-2015-0240		CVE-2015-0076	Microsoft JPEG XR Parser Information Disclosure (MS15-029; CVE-2015-0076)
High	10 Mar 2015	10 Mar 2015	CPAI-2015-0193	Microsoft MS15-021	CVE-2015-0087	Microsoft Windows ATMFD Font Driver Information Disclosure (MS15-021: CVE-2015-0087)
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0200	Microsoft MS15-021	CVE-2015-0090	Microsoft Windows ATMFD Font Driver Remote Code Execution (MS15-021: CVE-2015-0090)
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0228	Microsoft MS15-022	CVE-2015-0086	Microsoft Office Memory Corruption (MS15-022; CVE-2015-0086)
High	10 Mar 2015	10 Mar 2015	CPAI-2015-0194	Microsoft MS15-022	CVE-2015-0085	Microsoft Office Component Use After Free (MS15-022: CVE-2015-0085)
High	10 Mar 2015	10 Mar 2015	CPAI-2015-0233	Microsoft MS15-026	CVE-2015-1628	Microsoft Outlook Web Access Modified Canary Parameter Cross Site Scripting (MS15-026; CVE-2015-1628)