Home / 2016 Advisories Archive

2016 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	13 Oct 2016	18 Oct 2016	CPAI-2016-0885	Adobe APSB16-33	CVE-2016-1089	Adobe Acrobat and Reader Use After Free (APSB16-33: CVE-2016-1089)
Critical	18 Oct 2016	18 Oct 2016	CPAI-2016-0916	Adobe APSB16-33	CVE-2016-6943	Adobe Reader Memory Corruption (APSB16-33: CVE-2016-6943)
Critical	18 Oct 2016	18 Oct 2016	CPAI-2016-0892	Adobe APSB16-32	CVE-2016-6985	Adobe Flash Player Memory Corruption (APSB16-32: CVE-2016-6985)
Critical	18 Oct 2016	18 Oct 2016	CPAI-2016-0813			PHP 7 Unserialization Hash Table Resize Use After Free
Critical	18 Oct 2016	18 Oct 2016	CPAI-2016-0907	Adobe APSB16-32	CVE-2016-6987	Adobe Flash Player Use After Free Code Execution (APSB16-32: CVE-2016-6987)
Critical	6 Oct 2016	13 Oct 2016	CPAI-2016-0826		CVE-2016-5674	Nuuo NVR Log Parameter Unauthenticated Remote Code Execution (CVE-2016-5674)
Critical	6 Oct 2016	13 Oct 2016	CPAI-2016-0825		CVE-2016-5675	Nuuo NVR PHP System Function Unauthenticated Remote Code Execution (CVE-2016-5675)
High	9 Oct 2016	13 Oct 2016	CPAI-2016-0880		CVE-2014-5468	Railo Remote File Include (CVE-2014-5468)
High	11 Oct 2016	13 Oct 2016	CPAI-2016-0847	Microsoft MS16-123	CVE-2016-7211	Microsoft Win32k Elevation of Privilege (MS16-123: CVE-2016-7211)
Critical	13 Oct 2016	13 Oct 2016	CPAI-2016-0890	Adobe APSB16-33	CVE-2016-6945	Adobe Acrobat and Reader Use After Free Code Execution (APSB16-33: CVE-2016-6945)
High	11 Oct 2016	11 Oct 2016	CPAI-2016-0861	Microsoft MS16-124	CVE-2016-0075	Microsoft Windows Kernel Local Elevation of Privilege (MS16-124: CVE-2016-0075)
High	11 Oct 2016	11 Oct 2016	CPAI-2016-0860	Microsoft MS16-124	CVE-2016-0073	Microsoft Windows Kernel Local Elevation of Privilege (MS16-124: CVE-2016-0073)
High	11 Oct 2016	11 Oct 2016	CPAI-2016-0835	Microsoft MS16-120	CVE-2016-3270	Microsoft Windows Win32k Elevation of Privilege (MS16-120: CVE-2016-3270)
High	11 Oct 2016	11 Oct 2016	CPAI-2016-0849	Microsoft MS16-123	CVE-2016-3266	Microsoft Win32k Elevation of Privilege (MS16-123: CVE-2016-3266)
High	11 Oct 2016	11 Oct 2016	CPAI-2016-0857	Microsoft MS16-120	CVE-2016-3263	Microsoft Windows GDI+ Information Disclosure (MS16-120: CVE-2016-3263)
High	11 Oct 2016	11 Oct 2016	CPAI-2016-0859	Microsoft MS16-120	CVE-2016-3262	Microsoft Windows GDI+ Information Disclosure (MS16-120: CVE-2016-3262)
High	11 Oct 2016	11 Oct 2016	CPAI-2016-0855	Microsoft MS16-124	CVE-2016-0079	Microsoft Windows Kernel Local Elevation of Privilege (MS16-124: CVE-2016-0079)
High	11 Oct 2016	11 Oct 2016	CPAI-2016-0839	Microsoft MS16-118	CVE-2016-3387	Microsoft Browser Elevation of Privilege (MS16-118: CVE-2016-3387)
High	11 Oct 2016	11 Oct 2016	CPAI-2016-0846	Microsoft MS16-118	CVE-2016-3388	Microsoft Browser Elevation of Privilege (MS16-118: CVE-2016-3388)
High	11 Oct 2016	11 Oct 2016	CPAI-2016-0856	Microsoft MS16-120	CVE-2016-3209	Microsoft Windows True Type Font Parsing Information Disclosure (MS16-120: CVE-2016-3209)
High	11 Oct 2016	11 Oct 2016	CPAI-2016-0863	Microsoft MS16-123	CVE-2016-3341	Microsoft Windows Transaction Manager Elevation of Privilege (MS16-123: CVE-2016-3341)
High	11 Oct 2016	11 Oct 2016	CPAI-2016-0868	Microsoft MS16-125	CVE-2016-7188	Microsoft Windows Diagnostics Hub Elevation of Privilege (MS16-125: CVE-2016-7188)
High	11 Oct 2016	11 Oct 2016	CPAI-2016-0867	Microsoft MS16-123	CVE-2016-7185	Microsoft Windows Win32k Elevation of Privilege (MS16-123: CVE-2016-7185)
High	11 Oct 2016	11 Oct 2016	CPAI-2016-0871	Microsoft MS16-120	CVE-2016-7182	Microsoft Windows True Type Font Parsing Elevation of Privilege (MS16-120: CVE-2016-7182)
Low	16 Jun 2016	10 Oct 2016	CPAI-2016-0491	Apache	CVE-2016-0712	Apache Jetspeed Portal URI Path Cross-Site Scripting (CVE-2016-0712)
Medium	15 Sep 2016	9 Oct 2016	CPAI-2016-0798	ISC AA-01393	CVE-2016-2775	ISC BIND lwresd Query Name Denial of Service (CVE-2016-2775)
Medium	18 Sep 2016	9 Oct 2016	CPAI-2016-0804	Micro Focus	CVE-2016-1605	Micro Focus NetIQ Sentinel Server SentinelContext Authentication Bypass (CVE-2016-1605)
Medium	5 Oct 2016	9 Oct 2016	CPAI-2016-0806	Foxit Reader		Foxit Reader GoToR Action Stack Buffer Overflow
Critical	27 Sep 2016	6 Oct 2016	CPAI-2016-0830		CVE-2016-7413	PHP WDDX Deserialization Use After Free (CVE-2016-7413)
Critical	24 Aug 2016	5 Oct 2016	CPAI-2016-0741			Joomla Sensitive Core Files Information Disclosure
Critical	28 Sep 2016	5 Oct 2016	CPAI-2016-0858			Microsoft Excel Files Containing Malicious Macro
Critical	12 Apr 2016	28 Sep 2016	CPAI-2016-0259	Microsoft MS16-044	CVE-2016-0153	Microsoft Windows OLE Remote Code Execution (MS16-044: CVE-2016-0153)
Medium	14 Jun 2016	28 Sep 2016	CPAI-2016-0469	Oracle	CVE-2016-0487	Oracle Application Testing Suite ActionServlet Authentication Bypass (CVE-2016-0487)
Medium	17 Jul 2016	28 Sep 2016	CPAI-2016-0466	HP	CVE-2015-5426	HP LoadRunner Controller Scenario File Stack Buffer Overflow (CVE-2015-5426)
High	28 Sep 2016	28 Sep 2016	CPAI-2015-1194	OpenSSH	CVE-2015-5600	OpenSSH kbdint_next_device Policy Bypass (CVE-2015-5600)
High	19 Jun 2016	27 Sep 2016	CPAI-2016-0507	Nagios Enterprises		Nagios XI Incident Manager Integration Component SQL Injection
High	12 Sep 2016	26 Sep 2016	CPAI-2016-0780			Canon IR-ADV Password Extractor
High	22 Sep 2016	26 Sep 2016	CPAI-2016-0819		CVE-2015-6922	Kaseya Virtual System Administrator Multiple Vulnerabilities (CVE-2015-6922)
Medium	7 Jul 2016	25 Sep 2016	CPAI-2016-0582			WECON LeviStudio Stack Buffer Overflow
Critical	20 Sep 2016	25 Sep 2016	CPAI-2016-0814		CVE-2010-2343	D.R. Software Easy CD-DA Recorder PLS Buffer Overflow (CVE-2010-2343)
High	21 Jul 2016	22 Sep 2016	CPAI-2016-0810			PayPal Suspicious URL Phishing Attempt
High	3 Jan 2016	21 Sep 2016	CPAI-2016-0002	IBM	CVE-2015-5040	IBM Domino Image File Parsing Buffer Overflow (CVE-2015-5040)
Critical	29 Jun 2016	20 Sep 2016	CPAI-2016-0535		CVE-2008-1898	Microsoft Works and Office WkImgSrv.dll ActiveX Control Code Execution (CVE-2008-1898)
Critical	25 Aug 2016	20 Sep 2016	CPAI-2016-0725		CVE-2016-6600	WebNMS Framework Server Arbitrary File Upload (CVE-2016-6600)
Medium	18 Sep 2016	19 Sep 2016	CPAI-2016-0803	Mantis	CVE-2016-6837	Mantis Bug Tracker Filter API view_type Cross Site Scripting (CVE-2016-6837)
High	12 Jul 2016	18 Sep 2016	CPAI-2016-0546	Microsoft MS16-085	CVE-2016-3271	Microsoft Scripting Engine Information Disclosure (MS16-085: CVE-2016-3271)
Medium	28 Aug 2016	18 Sep 2016	CPAI-2016-0726		CVE-2014-8150	Web Server HTTP Request URL Injection (CVE-2014-8150)
High	13 Sep 2016	18 Sep 2016	CPAI-2016-0681	Microsoft MS16-096	CVE-2016-3294	Microsoft Edge Memory Corruption (MS2016-08: CVE-2016-3294)
High	15 Sep 2016	18 Sep 2016	CPAI-2016-0783	Adobe APSB16-29	CVE-2016-4277	Adobe Flash Player Security Bypass (APSB16-29: CVE-2016-4277)
High	5 Sep 2016	15 Sep 2016	CPAI-2016-0762		CVE-2010-3301	Linux Kernel x86-64 IA32SysCall Privilege Escalation (CVE-2010-3301)