Home / 2015 Advisories Archive

2015 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	24 Nov 2015	3 Dec 2015	CPAI-2015-1332	ManageEngine	CVE-2015-7765 CVE-2015-7766	ManageEngine OpManager SubmitQuery IntegrationUser SQL Code Execution (CVE-2015-7765; CVE-2015-7766)
High	2 Dec 2015	2 Dec 2015	CPAI-2015-1207	BP		Labtam ProFTP Client Banner Buffer Overflow (CVE-2009-3976)
High	11 Aug 2015	2 Dec 2015	CPAI-2015-0443	Microsoft MS15-081	CVE-2015-1642	Microsoft Office Component Use After Free (MS15-081: CVE-2015-1642)
Medium	4 Nov 2015	2 Dec 2015	CPAI-2015-1270			SAP 3D Visual Enterprise Viewer Flic Animation Buffer Overflow
Critical	18 Nov 2015	2 Dec 2015	CPAI-2015-1326	Adobe APSB15-28	CVE-2015-7663	Adobe Flash Player Use After Free Code Execution (APSB15-28: CVE-2015-7663)
Critical	18 Nov 2015	2 Dec 2015	CPAI-2015-1324	Adobe APSB15-28	CVE-2015-7659	Adobe Flash Player Type Confusion (APSB15-28: CVE-2015-7659)
High	26 Nov 2015	2 Dec 2015	CPAI-2015-1338	IBM	CVE-2015-1941	IBM Tivoli Storage Manager FastBack Server Opcode 1329 Directory Traversal (CVE-2015-1941)
Critical	7 Oct 2015	30 Nov 2015	CPAI-2015-1188	ISC AA-01287	CVE-2015-5722	ISC BIND DNSSEC Key Parsing buffer.c Denial of Service (CVE-2015-5722)
High	13 May 2015	29 Nov 2015	CPAI-2015-0566	MIT	CVE-2014-5355	MIT Kerberos 5 recvauth Denial Of Service (CVE-2014-5355)
Critical	18 Nov 2015	29 Nov 2015	CPAI-2015-1318	Adobe APSB15-28	CVE-2015-7654	Adobe Flash Player Use After Free Code Execution (APSB15-28: CVE-2015-7654)
Critical	18 Nov 2015	29 Nov 2015	CPAI-2015-1316	Adobe APSB15-28	CVE-2015-7652	Adobe Flash Player Use After Free Code Execution (APSB15-28: CVE-2015-7652)
Critical	18 Nov 2015	29 Nov 2015	CPAI-2015-1315	Adobe APSB15-28	CVE-2015-7651	Adobe Flash Player Use After Free Code Execution (APSB15-28: CVE-2015-7651)
High	26 Nov 2015	29 Nov 2015	CPAI-2015-1340	AlienVault ENG-101338		AlienVault Unified Security Management av-forward Deserialization Remote Code Execution
Critical	16 Aug 2015	26 Nov 2015	CPAI-2015-0991			Web Server Exposed Git Repository Information Disclosure
High	6 Oct 2015	26 Nov 2015	CPAI-2015-1132	Advantech	CVE-2014-9208	Advantech WebAccess AspVCObj.AspDataDriven ActiveX Stack Buffer Overflow (CVE-2014-9208)
High	25 Nov 2015	26 Nov 2015	CPAI-2015-1334			Dell Foundation Services Root Certificate Man-in-the-Middle Attack
High	26 Nov 2015	26 Nov 2015	CPAI-2015-1339		CVE-2013-2010	WordPress W3 Total Cache and W3 Super Cache PHP Code Execution (CVE-2013-2010)
High	26 Nov 2015	26 Nov 2015	CPAI-2015-1341			WordPress W3 Total Cache Security Credentials Hash Extract
Critical	9 Jun 2015	25 Nov 2015	CPSA-2003-07		CVE-2005-0543 CVE-2014-4075 CVE-2014-4116 CVE-2014-6325 CVE-2014-6365 CVE-2015-1636 CVE-2015-1640 CVE-2015-1757	Cross-Site Scripting (CVE-2005-0543; CVE-2014-4075; CVE-2014-4116; CVE-2014-6325; CVE-2014-6365; CVE-2015-1636; CVE-2015-1640; CVE-2015-1757)
High	27 Oct 2015	25 Nov 2015	CPAI-2015-1239	Microsoft MS15-046	CVE-2015-1683	Microsoft Office File Modification Password Use After Free (MS15-046; CVE-2015-1683)
Critical	11 Nov 2015	25 Nov 2015	CPAI-2015-1297	IBM	CVE-2015-1929	IBM Tivoli Storage Manager FastBack Server FXCLI_OraBR_Exec_Command Buffer Overflow (CVE-2015-1929)
Critical	13 Oct 2015	24 Nov 2015	CPAI-2015-1203		CVE-2013-4890	Samsung PS50C7700 3D Plasma-TV Denial of Service (CVE-2013-4890)
High	7 Oct 2015	23 Nov 2015	CPAI-2015-1174		CVE-2015-6973	Ignite Realtime Openfire user-password.jsp Cross-Site Request Forgery (CVE-2015-6973)
High	11 Nov 2015	23 Nov 2015	CPAI-2015-1296	ManageEngine		ManageEngine Applications Manager CommonAPIUtil enableDisableAlarmsAction SQL Injection
Medium	23 Nov 2015	23 Nov 2015	CPAI-2015-1329			Borland AccuRev SaveContentServiceImpl Servlet Directory Traversal
Critical	16 Mar 2015	22 Nov 2015	CPAI-2015-0258		CVE-2005-0363	AWStats Plugin Multiple Remote Command Execution (CVE-2005-0363)
Critical	19 Nov 2015	19 Nov 2015	CPAI-2015-1320			Jenkins Apache Commons Java Collections Library Remote Code Execution
High	8 Oct 2015	17 Nov 2015	CPAI-2015-1195			Email Parameter Cross-Site Scripting
Critical	16 Nov 2015	17 Nov 2015	CPAI-2015-1301			Spartan Exploit Kit Landing Page
Critical	17 Nov 2015	17 Nov 2015	CPAI-2015-1307			NullHole Exploit Kit Landing Page
High	22 Oct 2015	16 Nov 2015	CPAI-2015-1229		CVE-2006-0547	Oracle Database Server Login Access Control Bypass (CVE-2006-0547)
Critical	10 Nov 2015	15 Nov 2015	CPAI-2015-1271	Microsoft MS15-112	CVE-2015-6075	Microsoft Internet Explorer Memory Corruption (MS15-112: CVE-2015-6075)
High	22 Jul 2015	12 Nov 2015	CPAI-2015-0629	Samsung	CVE-2015-1499	Samsung Security Manager ActiveMQ Broker Service Multiple Vulnerabilities (CVE-2015-1499)
Medium	12 Nov 2015	12 Nov 2015	CPAI-2015-1298			ABBS Audio Media Player Buffer Overflow
High	29 Oct 2015	11 Nov 2015	CPAI-2015-1251	NTP.org	CVE-2015-7855	Network Time Protocol Daemon decodenetnum Assertion Failure (CVE-2015-7855)
High	6 Apr 2015	10 Nov 2015	CPAI-2015-0435	Apache	CVE-2015-0203	Apache Qpid Session.gap Denial of Service (CVE-2015-0203)
Critical	7 May 2015	10 Nov 2015	CPAI-2015-0539	IBM	CVE-2015-0119	IBM Tivoli Storage Manager FastBack Mount Opcode 0x09 Stack Buffer Overflow (CVE-2015-0119)
Critical	1 Jul 2015	10 Nov 2015	CPAI-2015-0777	IBM	CVE-2015-0120	IBM Tivoli Storage Manager FastBack Mount Stack Buffer Overflow (CVE-2015-0120)
Critical	7 Jul 2015	10 Nov 2015	CPAI-2015-0805	IBM	CVE-2015-1896	IBM Tivoli Storage Manager FastBack Mount vault Stack Buffer Overflow (CVE-2015-1896)
High	14 Jul 2015	10 Nov 2015	CPAI-2015-0794	Microsoft MS15-058	CVE-2015-1762	Microsoft SQL Server Remote Code Execution (MS15-058; CVE-2015-1762)
Critical	20 Jul 2015	10 Nov 2015	CPAI-2015-0686	HP	CVE-2015-2110	HP LoadRunner launcher.dll Stack Buffer Overflow (CVE-2015-2110)
Critical	6 Oct 2015	10 Nov 2015	CPAI-2015-1151	IBM	CVE-2015-0117	IBM Domino LDAP Server ModifyRequest Stack Buffer Overflow (CVE-2015-0117)
High	6 Oct 2015	10 Nov 2015	CPAI-2015-1153	Apache	CVE-2015-1830	Apache ActiveMQ File Upload Directory Traversal (CVE-2015-1830)
High	14 Oct 2015	10 Nov 2015	CPAI-2015-1209		CVE-2006-5792	Xlink FTP Server Request Buffer Overflow (CVE-2006-5792)
High	10 Nov 2015	10 Nov 2015	CPAI-2015-1287	Microsoft MS15-116	CVE-2015-6092	Microsoft Office Memory Corruption (MS15-116: CVE-2015-6092)
High	10 Nov 2015	10 Nov 2015	CPAI-2015-1275	Microsoft MS15-112	CVE-2015-6088	Microsoft Internet Explorer ASLR Bypass (MS15-112: CVE-2015-6088)
High	10 Nov 2015	10 Nov 2015	CPAI-2015-1276	Microsoft MS15-116	CVE-2015-6093	Microsoft Office Memory Corruption (MS15-116: CVE-2015-6093)
Critical	10 Nov 2015	10 Nov 2015	CPAI-2015-1256	Microsoft MS15-112	CVE-2015-6081	Microsoft Internet Explorer Memory Corruption (MS15-112: CVE-2015-6081)
Critical	10 Nov 2015	10 Nov 2015	CPAI-2015-1255	Microsoft MS15-112	CVE-2015-6080	Microsoft Internet Explorer Memory Corruption (MS15-112: CVE-2015-6080)
Critical	10 Nov 2015	10 Nov 2015	CPAI-2015-1257	Microsoft MS15-112	CVE-2015-6082	Microsoft Internet Explorer Memory Corruption (MS15-112: CVE-2015-6082)