Home / 2015 Advisories Archive

2015 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0199	Microsoft MS15-021	CVE-2015-0093	Microsoft Windows ATMFD Font Driver Remote Code Execution (MS15-021: CVE-2015-0093)
Critical	10 Mar 2015	10 Mar 2015	CPAI-2015-0238		CVE-2015-0081	Microsoft Windows Text Services Remote Code Execution (MS15-020; CVE-2015-0081)
High	2 Mar 2015	8 Mar 2015	CPAI-2015-0205		CVE-2014-8393	Corel Multiple Products Multiple Insecure Library Loading (CVE-2014-8393)
Critical	3 Mar 2015	8 Mar 2015	CPAI-2015-0208	HP c04553906	CVE-2014-7883	HP Universal CMDB JMX Console Authentication Bypass (CVE-2014-7883)
High	12 Jan 2015	5 Mar 2015	CPAI-2015-0029	OpenSSL0150108.txt secadv_20150108.txt	CVE-2014-3569	OpenSSL ssl23_get_client_hello Function Denial of Service (CVE-2014-3569)
High	22 Feb 2015	5 Mar 2015	CPAI-2015-0189		CVE-2015-1614	WordPress Image Metadata Cruncher Plugin Cross Site Request Forgery (CVE-2015-1614)
High	12 Feb 2015	3 Mar 2015	CPAI-2015-0156		CVE-2015-2090	Wordpress Survey And Poll Plugin SQL Injection (CVE-2015-2090)
Critical	3 Mar 2015	3 Mar 2015	CPAI-2015-0209		CVE-2015-0240	Samba smbd ServerPasswordSet RPC Memory Corruption (CVE-2015-0240)
High	1 Mar 2015	1 Mar 2015	CPAI-2015-0202		CVE-2015-1879	WordPress Google Doc Embedder Plugin Cross-Site Scripting (CVE-2015-1879)
High	1 Mar 2015	1 Mar 2015	CPAI-2015-0201		CVE-2015-1436	WordPress Easing Slider Plugin Cross-Site Request Forgery (CVE-2015-1436)
Critical	26 Feb 2015	26 Feb 2015	CPAI-2015-0195	Sucuri		WordPress Slimstat Plugin SQL Injection
High	23 Feb 2015	25 Feb 2015	CPAI-2015-0182	ManageEngine	CVE-2015-1480	ManageEngine ServiceDesk Plus User Privileges Bypass (CVE-2015-1480)
Critical	13 Jan 2015	24 Feb 2015	CPAI-2014-2471	Microsoft MS15-002	CVE-2015-0014	Microsoft Windows Telnet Service Buffer Overflow (MS15-002; CVE-2015-0014)
High	15 Feb 2015	22 Feb 2015	CPAI-2015-0162	McAfee SB10095	CVE-2015-0921	McAfee ePolicy Orchestrator XML Entity Injection (CVE-2015-0921)
High	22 Feb 2015	22 Feb 2015	CPAI-2015-0179		CVE-2015-1581	WordPress Mobile Domain Plugin Cross Site Request Forgery (CVE-2015-1581)
Critical	20 Feb 2015	20 Feb 2015	CPAI-2015-0178			SuperFish Adware Root Certificate
High	19 Feb 2015	19 Feb 2015	CPAI-2015-0177		CVE-2015-1580	WordPress Redirection Page Plugin Cross Site Request Forgery (CVE-2015-1580)
High	11 Jan 2015	17 Feb 2015	CPAI-2015-0018	Adobe APSB14-27	CVE-2014-8443	Adobe Flash Player Use After Free Code Execution (APSB14-27: CVE-2014-8443)
High	15 Feb 2015	17 Feb 2015	CPAI-2015-0157	Oracle	CVE-2015-0395	Oracle Java PhantomReference Use After Free (CVE-2015-0395)
Critical	16 Feb 2015	17 Feb 2015	CPAI-2015-0164	Red Hat, Inc RHSA-2014-1976	CVE-2014-8118	RPM Package Manager CPIO Header NameSize Integer Overflow (CVE-2014-8118)
Critical	16 Feb 2015	16 Feb 2015	CPAI-2015-0166	PHP	CVE-2015-0231	PHP Core Unserialize Key Name Code Execution (CVE-2015-0231)
Critical	7 Jan 2015	15 Feb 2015	CPAI-2015-0011			Multiple Web Servers Archived Link Information Disclosure
Critical	9 Feb 2015	15 Feb 2015	CPAI-2015-0146	PHP	CVE-2014-8142	PHP Core unserialize process nested data Use After Free (CVE-2014-8142)
Critical	9 Feb 2015	15 Feb 2015	CPAI-2015-0144	Adobe APSB14-28	CVE-2014-9158	Adobe Acrobat and Reader Memory Corruption (APSB14-28: CVE-2014-9158)
Medium	8 Jan 2015	12 Feb 2015	CPAI-2015-0155		CVE-2004-0941	GD Graphics Library PNG Buffer Overflow (CVE-2004-0941)
Critical	10 Feb 2015	10 Feb 2015	CPAI-2015-0100	Microsoft MS15-009	CVE-2015-0048	Microsoft Internet Explorer Memory Corruption (MS15-009: CVE-2015-0048)
Critical	10 Feb 2015	10 Feb 2015	CPAI-2015-0124	Microsoft MS15-009	CVE-2015-0070	Microsoft Internet Explorer Remote Code Execution (MS15-009: CVE-2015-0070)
High	10 Feb 2015	10 Feb 2015	CPAI-2015-0082	Microsoft MS15-016	CVE-2015-0061	Microsoft Windows TIFF Processing Information Disclosure (MS15-016; CVE-2015-0061)
High	10 Feb 2015	10 Feb 2015	CPAI-2015-0122	Microsoft MS15-012	CVE-2015-0063	Microsoft Excel Memory Corruption (MS15-012: CVE-2015-0063)
High	10 Feb 2015	10 Feb 2015	CPAI-2015-0128	Microsoft MS15-012	CVE-2015-0065	Microsoft Word OneTableDocumentStream Remote Code Execution (MS15-012; CVE-2015-0065)
High	10 Feb 2015	10 Feb 2015	CPAI-2015-0120	Microsoft MS15-012	CVE-2015-0064	Microsoft Word Memory Corruption (MS15-012: CVE-2015-0064)
High	2 Feb 2015	9 Feb 2015	CPAI-2015-0121		CVE-2014-9192	Trihedral VTScada Web Interface Integer Overflow (CVE-2014-9192)
Critical	7 Jan 2015	8 Feb 2015	CPAI-2015-0010	Adobe APSB14-28	CVE-2014-8448	Adobe Reader Javascript API Information Disclosure (APSB14-28: CVE-2014-8448)
Critical	13 Jan 2015	8 Feb 2015	CPAI-2015-0038	Adobe APSB14-28	CVE-2014-8461	Adobe Acrobat and Reader Memory Corruption (APSB14-28: CVE-2014-8461)
High	21 Jan 2015	8 Feb 2015	CPAI-2015-0030	Adobe APSB14-28	CVE-2014-8447	Adobe Reader and Acrobat Memory Corruption (APSB14-28: CVE-2014-8447)
Critical	28 Jan 2015	8 Feb 2015	CPAI-2015-0078	Zenoss ZEN-12657	CVE-2014-6261	Zenoss Core Version Check Remote Code Execution (CVE-2014-6261)
High	20 Jan 2015	5 Feb 2015	CPAI-2015-0059	ManageEngine SD-58396	CVE-2014-5301	ManageEngine Multiple Products File Attachment Directory Traversal (CVE-2014-5301)
High	4 Feb 2015	4 Feb 2015	CPAI-2015-0138	OpenSSL	CVE-2014-3510	OpenSSL DTLS Anonymous ECDH Denial of Service (CVE-2014-3510)
High	13 Jan 2015	3 Feb 2015	CPAI-2015-0036	Adobe APSB14-28	CVE-2014-8458	Adobe Acrobat and Reader Memory Corruption (APSB14-28: CVE-2014-8458)
High	1 Feb 2015	3 Feb 2015	CPAI-2015-0114	OpenSSL Project0141015 secadv_20141015	CVE-2014-3513	OpenSSL DTLS SRTP Extension Parsing Denial of Service (CVE-2014-3513)
Critical	26 Jan 2015	29 Jan 2015	CPAI-2015-0069		CVE-2015-0310 CVE-2015-0311	Adobe Flash Player Action Script Evasion (CVE-2015-0310; CVE-2015-0311)
Critical	21 Jan 2015	27 Jan 2015	CPAI-2015-0061		CVE-2014-7192	Browserify Node.js Remote Code Execution (CVE-2014-7192)
Medium	26 Jan 2015	26 Jan 2015	CPAI-2004-131_TEST			TCPDUMP ISAKMP Payload Handling DoS (CVE-2004-0183)
Medium	19 Jan 2015	26 Jan 2015	CPAI-2015-0054	Git	CVE-2014-9390	Git Client Path Validation Command Execution (CVE-2014-9390)
High	21 Jan 2015	26 Jan 2015	CPAI-2015-0062		CVE-2011-5129	XChat Bounds Checking Buffer Overflow (CVE-2011-5129)
High	11 Jan 2015	22 Jan 2015	CPAI-2015-0020	Adobe APSB14-28	CVE-2014-8460	Adobe Reader Memory Corruption (APSB14-28: CVE-2014-8460) - ver 2
Critical	13 Jan 2015	22 Jan 2015	CPAI-2015-0037	Adobe APSB14-28	CVE-2014-8459	Adobe Acrobat and Reader Memory Corruption (APSB14-28: CVE-2014-8459)
High	19 Jan 2015	21 Jan 2015	CPAI-2015-0060			PDF Containing Suspicious File Info Fields
High	8 Jan 2015	20 Jan 2015	CPAI-2015-0016			Web Clients Cookie Arbitrary Website Redirection
Critical	16 Jan 2015	19 Jan 2015	CPAI-2015-0050	ManageEngine SD-57430	CVE-2014-5302	ManageEngine Multiple Products WsDiscoveryServlet Directory Traversal (CVE-2014-5302)