Home / 2016 Advisories Archive

2016 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	26 May 2016	19 Nov 2024	CPAI-2016-0387	Jenkins	CVE-2016-0792	Jenkins CI Server XStream Insecure Deserialization (CVE-2016-0792)
Medium	21 Mar 2016	17 Nov 2024	CPAI-2016-0222	Oracle CPUJAN2016	CVE-2016-0491	Oracle Application Testing Suite UploadFileAction fileType Directory Traversal (CVE-2016-0491)
Medium	21 Feb 2016	13 Nov 2024	CPAI-2016-0123		CVE-2014-2120	Cisco ASA VPN Portal Cross-Site Scripting (CVE-2014-2120)
Medium	19 Jun 2016	10 Nov 2024	CPAI-2016-0504	Oracle CPUJAN2016	CVE-2016-0492	Oracle Application Testing Suite Authentication Bypass (CVE-2016-0492)
Critical	30 Jun 2016	6 Oct 2024	CPAI-2016-0337		CVE-2016-3714	ImageMagick Remote Code Execution (CVE-2016-3714)
Low	29 Jun 2016	30 Sep 2024	CPAI-2016-0539		CVE-2016-3716	Canonical Ubuntu Linux Arbitrary File Upload (CVE-2016-3716)
Medium	18 Jul 2016	29 Sep 2024	CPAI-2016-0601		CVE-2016-4465	Apache Struts Denial of Service (CVE-2016-4465)
High	13 Jun 2016	29 Sep 2024	CPAI-2016-0502	Squid SQUID-2016_2	CVE-2016-2569	Squid-Cache Squid Denial of Service (CVE-2016-2569)
High	12 Jan 2016	26 Sep 2024	CPAI-2016-0016	Microsoft MS16-004	CVE-2016-0010	Microsoft Office Memory Corruption (CVE-2016-0010)
High	13 Sep 2016	5 Aug 2024	CPAI-2016-0452	Microsoft MS16-080	CVE-2016-3203 CVE-2016-3370	Microsoft Multiple Products Remote Code Execution (CVE-2016-3203; CVE-2016-3370)
Critical	8 Mar 2016	29 Jul 2024	CPAI-2016-0173		CVE-2023-2180	WordPress Sensitive System Files Information Disclosure (CVE-2023-2180)
High	30 Aug 2016	17 Jul 2024	CPAI-2016-0731			Phishing URL Attack Attempt
Critical	9 May 2016	15 Jul 2024	CPAI-2016-0347		CVE-2014-5460 CVE-2020-12800 CVE-2022-1574 CVE-2022-1952 CVE-2022-4328 CVE-2022-4395 CVE-2023-1406	WordPress Suspicious File Upload (CVE-2014-5460; CVE-2020-12800; CVE-2022-1574; CVE-2022-1952; CVE-2022-4328; CVE-2022-4395; CVE-2023-1406)
Critical	21 Nov 2016	10 Jul 2024	CPAI-2016-1039		CVE-2012-6664	Distinct TFTP Directory Traversal (CVE-2012-6664)
Critical	26 Jul 2016	2 Jul 2024	CPAI-2016-0658		CVE-2021-43936 CVE-2022-1813 CVE-2022-24086 CVE-2022-24193 CVE-2022-26536 CVE-2022-31499 CVE-2022-32092 CVE-2022-34538 CVE-2022-37810 CVE-2022-40048 CVE-2022-40475 CVE-2023-25717 CVE-2023-36812	Command Injection Over HTTP (CVE-2021-43936; CVE-2022-1813; CVE-2022-24086; CVE-2022-24193; CVE-2022-26536; CVE-2022-31499; CVE-2022-32092; CVE-2022-34538; CVE-2022-37810; CVE-2022-40048; CVE-2022-40475; CVE-2023-25717; CVE-2023-36812)
Critical	6 Jan 2016	19 Jun 2024	CPAI-2016-0003		CVE-2020-13118 CVE-2020-5510 CVE-2021-36748 CVE-2021-43140 CVE-2022-24219 CVE-2022-24220 CVE-2022-24221 CVE-2022-24222 CVE-2022-27412 CVE-2022-34265 CVE-2022-35121 CVE-2022-36669 CVE-2022-47862 CVE-2023-24780	SQL Injection Scanning Attempt (CVE-2020-13118; CVE-2020-5510; CVE-2021-36748; CVE-2021-43140; CVE-2022-24219; CVE-2022-24220; CVE-2022-24221; CVE-2022-24222; CVE-2022-27412; CVE-2022-34265; CVE-2022-35121; CVE-2022-36669; CVE-2022-47862; CVE-2023-24780)
Critical	22 Mar 2016	21 May 2024	CPAI-2016-0042		CVE-2022-27166 CVE-2022-27926 CVE-2022-28102 CVE-2022-28363 CVE-2022-29548 CVE-2022-30776 CVE-2022-30777 CVE-2022-31798 CVE-2022-3960 CVE-2022-46381 CVE-2022-48311 CVE-2023-23383 CVE-2023-43770 CVE-2024-30268	Cross-Site Scripting Scanning Attempt (CVE-2022-27166; CVE-2022-27926; CVE-2022-28102; CVE-2022-28363; CVE-2022-29548; CVE-2022-30776; CVE-2022-30777; CVE-2022-31798; CVE-2022-3960; CVE-2022-46381; CVE-2022-48311; CVE-2023-23383; CVE-2023-43770; CVE-2024-30268)
High	9 Aug 2016	27 Mar 2024	CPAI-2016-0674	Microsoft MS16-098	CVE-2016-3308	Microsoft Windows Win32k Elevation of Privilege (MS16-098: CVE-2016-3308)
High	14 Jun 2016	27 Mar 2024	CPAI-2016-0430	Microsoft MS16-073	CVE-2016-3218	Microsoft Windows Privilege Escalation (CVE-2016-3218)
Critical	27 Dec 2016	26 Mar 2024	CPAI-2016-1129		CVE-2016-10033 CVE-2016-10045	PHPMailer Mail From Remote Code Execution (CVE-2016-10033; CVE-2016-10045)
High	20 Nov 2016	4 Feb 2024	CPAI-2016-0990		CVE-2016-4977	Spring Security OAuth Remote Code Execution (CVE-2016-4977)
Critical	20 Oct 2016	29 Jan 2024	CPAI-2016-0935			Veil Evasion Payloads
High	1 Feb 2016	8 Jan 2024	CPAI-2016-0086		CVE-2015-2220 CVE-2023-1835	WordPress Ninja Forms Plugin Cross-Site Scripting (CVE-2015-2220; CVE-2023-1835)
Critical	23 May 2016	10 Dec 2023	CPAI-2016-0368		CVE-2016-1524 CVE-2016-1525 CVE-2023-38096 CVE-2023-38098	Netgear ProSAFE NMS300 fileUpload.do Arbitrary File Upload (CVE-2016-1524; CVE-2016-1525; CVE-2023-38096; CVE-2023-38098)
High	12 Jan 2016	6 Dec 2023	CPAI-2016-0010	Microsoft MS16-007	CVE-2016-0016	Microsoft Windows DLL Loading Remote Code Execution (MS16-007: CVE-2016-0016)
Medium	29 Jun 2016	3 Dec 2023	CPAI-2016-0541		CVE-2016-3718	ImageMagick Server Side Request Forgery (CVE-2016-3718)
High	19 Sep 2016	26 Nov 2023	CPAI-2016-0807		CVE-2016-6415	Cisco IKEv1 Information Disclosure (CVE-2016-6415)
High	17 Jul 2016	26 Nov 2023	CPAI-2016-0599	Adobe APSB16-25	CVE-2016-4188	Adobe Flash Player Memory Corruption (CVE-2016-4188)
Critical	18 Aug 2016	21 Nov 2023	CPAI-2016-0712		CVE-2016-6366	Cisco ASA Disable Password Remote Code Execution (CVE-2016-6366)
High	10 May 2016	21 Nov 2023	CPAI-2016-0309	Microsoft MS16-051	CVE-2015-6152 CVE-2016-0189	Microsoft Internet Explorer Memory Corruption (CVE-2015-6152; CVE-2016-0189)
High	10 Mar 2016	20 Nov 2023	CPAI-2016-0196		CVE-2016-1010	Adobe Flash Player Integer Overflow (CVE-2016-1010)
High	8 Nov 2016	15 Nov 2023	CPAI-2016-0942	Microsoft MS16-129	CVE-2016-7201	Microsoft Edge Memory Corruption (CVE-2016-7201)
Medium	11 Oct 2016	9 Nov 2023	CPAI-2016-0848	Microsoft MS16-118	CVE-2016-3298	Microsoft Multiple Products Information Disclosure (CVE-2016-3298)
High	16 May 2016	9 Nov 2023	CPAI-2016-0355		CVE-2017-1000028	Oracle GlassFish Server Directory Traversal (CVE-2017-1000028)
Critical	6 Apr 2016	8 Nov 2023	CPAI-2016-0264	Adobe APSA16-01	CVE-2016-1019	Adobe Flash Player Denial of Service (CVE-2016-1019)
High	14 Feb 2016	2 Nov 2023	CPAI-2016-0115	Adobe APSB16-04	CVE-2016-0984	Adobe Flash Player Use After Free (CVE-2016-0984)
Critical	8 Nov 2016	30 Oct 2023	CPAI-2016-0944	Microsoft MS16-129	CVE-2016-7200	Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7200)
High	4 May 2016	23 Oct 2023	CPAI-2016-0338		CVE-2016-3715	ImageMagick Arbitrary File Deletion (CVE-2016-3715)
Critical	17 Feb 2016	15 Oct 2023	CPAI-2016-0127		CVE-2017-5053 CVE-2017-5071 CVE-2022-2853 CVE-2023-4352	JavaScript Malicious Enumerator Obfuscation Technique (CVE-2017-5053; CVE-2017-5071; CVE-2022-2853; CVE-2023-4352)
High	30 May 2016	9 Oct 2023	CPAI-2016-0409		CVE-2016-10709	pfSense Command Injection (CVE-2016-10709)
High	18 Feb 2016	3 Oct 2023	CPAI-2016-0120		CVE-2015-7547	GNU glibc Buffer Overflow (CVE-2015-7547)
High	17 Mar 2016	9 Aug 2023	CPAI-2016-0215			ZMap Security Scanner
Critical	9 Mar 2016	7 Aug 2023	CPAI-2016-0190	Microsoft MS16-021	CVE-2016-0050	Microsoft Network Policy Server RADIUS Denial of Service (MS16-021; CVE-2016-0050)
Critical	23 Feb 2016	19 Jul 2023	CPAI-2016-0135			Suspicious Executable Mail Attachment
Critical	17 Feb 2016	22 Jun 2023	CPAI-2016-0124			JavaScript Malicious Shifting Obfuscation Technique
Critical	17 Feb 2016	20 Jun 2023	CPAI-2016-0126			JavaScript Malicious Escape Obfuscation Technique
Critical	19 Jan 2016	19 Jun 2023	CPAI-2016-0125		CVE-2017-11799 CVE-2017-5040	JavaScript Malicious Reverse Obfuscation Technique (CVE-2017-11799; CVE-2017-5040)
High	14 Jun 2016	28 May 2023	CPAI-2016-0422	Microsoft MS16-063	CVE-2016-3210	Microsoft Internet Explorer Use After Free (CVE-2016-3210)
Critical	31 Oct 2016	4 May 2023	CPAI-2016-0967		CVE-2010-1876 CVE-2010-4854 CVE-2014-8295 CVE-2014-9239 CVE-2017-7886 CVE-2018-11528 CVE-2018-14418 CVE-2018-19893 CVE-2018-5977 CVE-2018-5978 CVE-2020-10546 CVE-2020-10547 CVE-2020-10548 CVE-2020-10549	SQL Servers SQL Injection Obfuscation Techniques (CVE-2010-1876; CVE-2010-4854; CVE-2014-8295; CVE-2014-9239; CVE-2017-7886; CVE-2018-11528; CVE-2018-14418; CVE-2018-19893; CVE-2018-5977; CVE-2018-5978; CVE-2020-10546; CVE-2020-10547; CVE-2020-10548; CVE-2020-10549)
Critical	8 Mar 2016	4 May 2023	CPAI-2016-0153	Microsoft MS16-028	CVE-2016-0117	Microsoft Windows PDF Library Remote Code Execution (MS16-028: CVE-2016-0117)