Home / 2016 Advisories Archive

2016 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	9 Aug 2016	27 Mar 2024	CPAI-2016-0674	Microsoft MS16-098	CVE-2016-3308	Microsoft Windows Win32k Elevation of Privilege (MS16-098: CVE-2016-3308)
High	14 Jun 2016	27 Mar 2024	CPAI-2016-0430	Microsoft MS16-073	CVE-2016-3218	Microsoft Windows Privilege Escalation (CVE-2016-3218)
Critical	6 Jan 2016	27 Mar 2024	CPAI-2016-0003		CVE-2020-13118 CVE-2020-5510 CVE-2021-36748 CVE-2021-43140 CVE-2022-24219 CVE-2022-24220 CVE-2022-24221 CVE-2022-24222 CVE-2022-27412 CVE-2022-34265 CVE-2022-35121 CVE-2022-36669 CVE-2022-47862 CVE-2023-24780	SQL Injection Scanning Attempt (CVE-2020-13118; CVE-2020-5510; CVE-2021-36748; CVE-2021-43140; CVE-2022-24219; CVE-2022-24220; CVE-2022-24221; CVE-2022-24222; CVE-2022-27412; CVE-2022-34265; CVE-2022-35121; CVE-2022-36669; CVE-2022-47862; CVE-2023-24780)
Critical	27 Dec 2016	26 Mar 2024	CPAI-2016-1129		CVE-2016-10033 CVE-2016-10045	PHPMailer Mail From Remote Code Execution (CVE-2016-10033; CVE-2016-10045)
Critical	22 Mar 2016	25 Feb 2024	CPAI-2016-0042		CVE-2022-26564 CVE-2022-27166 CVE-2022-27926 CVE-2022-28102 CVE-2022-28363 CVE-2022-29548 CVE-2022-30776 CVE-2022-30777 CVE-2022-31798 CVE-2022-3960 CVE-2022-46381 CVE-2022-48311 CVE-2023-23383 CVE-2023-43770	Cross-Site Scripting Scanning Attempt (CVE-2022-26564; CVE-2022-27166; CVE-2022-27926; CVE-2022-28102; CVE-2022-28363; CVE-2022-29548; CVE-2022-30776; CVE-2022-30777; CVE-2022-31798; CVE-2022-3960; CVE-2022-46381; CVE-2022-48311; CVE-2023-23383; CVE-2023-43770)
Critical	9 May 2016	20 Feb 2024	CPAI-2016-0347		CVE-2014-5460 CVE-2020-12800 CVE-2022-1574 CVE-2022-1952 CVE-2022-4328 CVE-2022-4395	WordPress Suspicious File Upload (CVE-2014-5460; CVE-2020-12800; CVE-2022-1574; CVE-2022-1952; CVE-2022-4328; CVE-2022-4395)
High	20 Nov 2016	4 Feb 2024	CPAI-2016-0990		CVE-2016-4977	Spring Security OAuth Remote Code Execution (CVE-2016-4977)
Critical	20 Oct 2016	29 Jan 2024	CPAI-2016-0935			Veil Evasion Payloads
High	1 Feb 2016	8 Jan 2024	CPAI-2016-0086		CVE-2015-2220 CVE-2023-1835	WordPress Ninja Forms Plugin Cross-Site Scripting (CVE-2015-2220; CVE-2023-1835)
Critical	23 May 2016	10 Dec 2023	CPAI-2016-0368		CVE-2016-1524 CVE-2016-1525 CVE-2023-38096 CVE-2023-38098	Netgear ProSAFE NMS300 fileUpload.do Arbitrary File Upload (CVE-2016-1524; CVE-2016-1525; CVE-2023-38096; CVE-2023-38098)
High	12 Jan 2016	6 Dec 2023	CPAI-2016-0010	Microsoft MS16-007	CVE-2016-0016	Microsoft Windows DLL Loading Remote Code Execution (MS16-007: CVE-2016-0016)
Medium	29 Jun 2016	3 Dec 2023	CPAI-2016-0541		CVE-2016-3718	ImageMagick Server Side Request Forgery (CVE-2016-3718)
High	19 Sep 2016	26 Nov 2023	CPAI-2016-0807		CVE-2016-6415	Cisco IKEv1 Information Disclosure (CVE-2016-6415)
High	17 Jul 2016	26 Nov 2023	CPAI-2016-0599	Adobe APSB16-25	CVE-2016-4188	Adobe Flash Player Memory Corruption (CVE-2016-4188)
Critical	18 Aug 2016	21 Nov 2023	CPAI-2016-0712		CVE-2016-6366	Cisco ASA Disable Password Remote Code Execution (CVE-2016-6366)
High	10 May 2016	21 Nov 2023	CPAI-2016-0309	Microsoft MS16-051	CVE-2015-6152 CVE-2016-0189	Microsoft Internet Explorer Memory Corruption (CVE-2015-6152; CVE-2016-0189)
High	10 Mar 2016	20 Nov 2023	CPAI-2016-0196		CVE-2016-1010	Adobe Flash Player Integer Overflow (CVE-2016-1010)
Critical	26 May 2016	16 Nov 2023	CPAI-2016-0387	Jenkins	CVE-2016-0792	Jenkins CI Server XStream Insecure Deserialization (CVE-2016-0792)
High	8 Nov 2016	15 Nov 2023	CPAI-2016-0942	Microsoft MS16-129	CVE-2016-7201	Microsoft Edge Memory Corruption (CVE-2016-7201)
Medium	11 Oct 2016	9 Nov 2023	CPAI-2016-0848	Microsoft MS16-118	CVE-2016-3298	Microsoft Multiple Products Information Disclosure (CVE-2016-3298)
High	16 May 2016	9 Nov 2023	CPAI-2016-0355		CVE-2017-1000028	Oracle GlassFish Server Directory Traversal (CVE-2017-1000028)
Critical	6 Apr 2016	8 Nov 2023	CPAI-2016-0264	Adobe APSA16-01	CVE-2016-1019	Adobe Flash Player Denial of Service (CVE-2016-1019)
High	14 Feb 2016	2 Nov 2023	CPAI-2016-0115	Adobe APSB16-04	CVE-2016-0984	Adobe Flash Player Use After Free (CVE-2016-0984)
Critical	8 Nov 2016	30 Oct 2023	CPAI-2016-0944	Microsoft MS16-129	CVE-2016-7200	Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7200)
Critical	13 Sep 2016	25 Oct 2023	CPAI-2016-0452	Microsoft MS16-080	CVE-2016-3203 CVE-2016-3370	Microsoft Windows PDF Library Remote Code Execution (MS16-080: CVE-2016-3203; CVE-2016-3370)
High	4 May 2016	23 Oct 2023	CPAI-2016-0338		CVE-2016-3715	ImageMagick Arbitrary File Deletion (CVE-2016-3715)
Critical	26 Jul 2016	17 Oct 2023	CPAI-2016-0658		CVE-2021-43936 CVE-2022-1813 CVE-2022-24086 CVE-2022-24193 CVE-2022-26536 CVE-2022-31499 CVE-2022-32092 CVE-2022-34538 CVE-2022-37810 CVE-2022-40048 CVE-2022-40475 CVE-2023-25717 CVE-2023-36812	Command Injection Over HTTP (CVE-2021-43936; CVE-2022-1813; CVE-2022-24086; CVE-2022-24193; CVE-2022-26536; CVE-2022-31499; CVE-2022-32092; CVE-2022-34538; CVE-2022-37810; CVE-2022-40048; CVE-2022-40475; CVE-2023-25717; CVE-2023-36812)
Critical	17 Feb 2016	15 Oct 2023	CPAI-2016-0127		CVE-2017-5053 CVE-2017-5071 CVE-2022-2853 CVE-2023-4352	JavaScript Malicious Enumerator Obfuscation Technique (CVE-2017-5053; CVE-2017-5071; CVE-2022-2853; CVE-2023-4352)
High	30 May 2016	9 Oct 2023	CPAI-2016-0409		CVE-2016-10709	pfSense Command Injection (CVE-2016-10709)
High	18 Feb 2016	3 Oct 2023	CPAI-2016-0120		CVE-2015-7547	GNU glibc Buffer Overflow (CVE-2015-7547)
High	17 Mar 2016	9 Aug 2023	CPAI-2016-0215			ZMap Security Scanner
Critical	9 Mar 2016	7 Aug 2023	CPAI-2016-0190	Microsoft MS16-021	CVE-2016-0050	Microsoft Network Policy Server RADIUS Denial of Service (MS16-021; CVE-2016-0050)
Critical	23 Feb 2016	19 Jul 2023	CPAI-2016-0135			Suspicious Executable Mail Attachment
Critical	17 Feb 2016	22 Jun 2023	CPAI-2016-0124			JavaScript Malicious Shifting Obfuscation Technique
Critical	17 Feb 2016	20 Jun 2023	CPAI-2016-0126			JavaScript Malicious Escape Obfuscation Technique
Critical	19 Jan 2016	19 Jun 2023	CPAI-2016-0125		CVE-2017-11799 CVE-2017-5040	JavaScript Malicious Reverse Obfuscation Technique (CVE-2017-11799; CVE-2017-5040)
High	14 Jun 2016	28 May 2023	CPAI-2016-0422	Microsoft MS16-063	CVE-2016-3210	Microsoft Internet Explorer Use After Free (CVE-2016-3210)
Critical	31 Oct 2016	4 May 2023	CPAI-2016-0967		CVE-2010-1876 CVE-2010-4854 CVE-2014-8295 CVE-2014-9239 CVE-2017-7886 CVE-2018-11528 CVE-2018-14418 CVE-2018-19893 CVE-2018-5977 CVE-2018-5978 CVE-2020-10546 CVE-2020-10547 CVE-2020-10548 CVE-2020-10549	SQL Servers SQL Injection Obfuscation Techniques (CVE-2010-1876; CVE-2010-4854; CVE-2014-8295; CVE-2014-9239; CVE-2017-7886; CVE-2018-11528; CVE-2018-14418; CVE-2018-19893; CVE-2018-5977; CVE-2018-5978; CVE-2020-10546; CVE-2020-10547; CVE-2020-10548; CVE-2020-10549)
Critical	8 Mar 2016	4 May 2023	CPAI-2016-0153	Microsoft MS16-028	CVE-2016-0117	Microsoft Windows PDF Library Remote Code Execution (MS16-028: CVE-2016-0117)
High	13 Dec 2016	24 Apr 2023	CPAI-2016-0961	Microsoft Microsoft MS16-129 MS16-144	CVE-2016-7202	Microsoft Edge Memory Corruption (CVE-2016-7202)
Critical	8 Mar 2016	18 Apr 2023	CPAI-2016-0173			WordPress Sensitive System Files Information Disclosure
High	31 Aug 2016	22 Mar 2023	CPAI-2016-0733	Trend Micro		Trend Micro IWSVA Command Injection
Critical	26 Oct 2016	1 Mar 2023	CPAI-2016-0934		CVE-2014-9583	ASUS WRT Remote Code Execution (CVE-2014-9583)
Critical	16 Jun 2016	27 Feb 2023	CPAI-2016-0511			Microsoft Office Files Containing Malicious VBScript Downloader
Critical	25 Apr 2016	1 Feb 2023	CPAI-2016-0515			PayPal Mail Phishing Containing Attachment
Critical	12 Jul 2016	18 Jan 2023	CPAI-2016-0595			WordPress All In One SEO Pack Plugin Cross-site Scripting
Medium	3 Nov 2016	13 Nov 2022	CPAI-2016-0993	OpenJPEG	CVE-2016-8332	OpenJPEG JPEG2000 Image Processing Out-of-Bounds Write (CVE-2016-8332)
High	19 Jul 2016	26 Oct 2022	CPAI-2016-0626		CVE-2016-2098	Ruby on Rails Remote Code Execution (CVE-2016-2098)
Critical	15 Sep 2016	29 Sep 2022	CPAI-2016-0802			Suspicious Metadata Mail Phishing Containing Attachment
High	1 Dec 2016	22 Sep 2022	CPAI-2016-1063		CVE-2016-9079 CVE-2017-5375	Mozilla Multiple Products Remote Code Execution (CVE-2016-9079; CVE-2017-5375)