Home / 2016 Advisories Archive

2016 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	7 Sep 2016	11 Sep 2016	CPAI-2016-0765	IBM	CVE-2016-2960	IBM WebSphere Application Server SIP Processing Denial of Service (CVE-2016-2960)
Medium	5 Sep 2016	7 Sep 2016	CPAI-2016-0752			WECON LeviStudio Address Name Heap Buffer Overflow
Critical	14 Jun 2016	6 Sep 2016	CPAI-2016-0435	Microsoft MS16-068	CVE-2016-3222	Microsoft Edge Memory Corruption (MS16-068: CVE-2016-3222)
Medium	15 Jun 2016	6 Sep 2016	CPAI-2016-0482	Squid Project SQUID-2016:6	CVE-2016-4054	Squid Proxy ESI Component Stack Buffer Overflow (CVE-2016-4054)
High	5 Sep 2016	5 Sep 2016	CPAI-2016-0759			ManageEngine OpManager APMIntegBusinessViewHandler OPM_BVNAME SQL Injection
Critical	29 May 2016	1 Sep 2016	CPAI-2016-0395		CVE-2015-8277	Flexera FlexNet Publisher License Server Buffer Overflow (CVE-2015-8277)
High	21 Aug 2016	31 Aug 2016	CPAI-2016-0716	Drupal SA-CONTRIB-2016-039		Drupal Coder Module coder_upgrade.run.php Remote Code Execution
Medium	20 Jun 2016	30 Aug 2016	CPAI-2016-0519	Apple HT206167	CVE-2016-1767	Apple QuickTime FPX File Parsing Memory Corruption (CVE-2016-1767)
Medium	24 Aug 2016	30 Aug 2016	CPAI-2016-0721	PHP Group 71331	CVE-2016-4343	PHP TAR File Parsing Uninitialized Reference (CVE-2016-4343)
Critical	29 Aug 2016	30 Aug 2016	CPAI-2016-0729			WordPress dl-skin.php Arbitrary File Download
High	29 Aug 2016	30 Aug 2016	CPAI-2016-0732		CVE-2016-6896	WordPress Admin API Directory Traversal (CVE-2016-6896)
High	30 Aug 2016	30 Aug 2016	CPAI-2016-0728	Moxa	CVE-2016-5792	Moxa SoftCMS CGI Program SQL Injection (CVE-2016-5792)
Critical	25 Jul 2016	25 Aug 2016	CPAI-2016-0648	Adobe APSB16-14	CVE-2016-1067 CVE-2016-1068 CVE-2016-1069	Adobe Acrobat and Reader Memory Corruption (APSB16-14: CVE-2016-1067; CVE-2016-1068; CVE-2016-1069)
Critical	25 Aug 2016	25 Aug 2016	CPAI-2016-0724			WordPress wSecure Lite Plugin Remote Command Execution
Critical	26 Jun 2016	24 Aug 2016	CPAI-2016-0518			Apache Continuum Arbitrary Command Execution
Critical	14 Aug 2016	23 Aug 2016	CPAI-2016-0701	HPE	CVE-2016-2006	HPE Data Protector EXEC_BAR domain Buffer Overflow (CVE-2016-2006)
Critical	9 Aug 2016	21 Aug 2016	CPAI-2016-0686	Microsoft MS16-099	CVE-2016-3316	Microsoft Office Memory Corruption (MS16-099: CVE-2016-3316)
Critical	21 Aug 2016	21 Aug 2016	CPAI-2016-0715			Fortinet Cookie Overflow Remote Code Execution (EGREGIOUSBLUNDER)
Critical	21 Aug 2016	21 Aug 2016	CPAI-2016-0652	Adobe APSB16-26	CVE-2016-4204	Adobe Reader Memory Corruption (APSB16-26: CVE-2016-4204)
Medium	15 Aug 2016	18 Aug 2016	CPAI-2016-0706	Symantec	CVE-2016-3652	Symantec Endpoint Protection Manager Cross-Site Scripting (CVE-2016-3652)
Critical	17 Aug 2016	18 Aug 2016	CPAI-2016-0694	Adobe APSB16-14	CVE-2016-1040	Adobe Acrobat and Reader Security Bypass (APSB16-14 : CVE-2016-1040)
Critical	18 Aug 2016	18 Aug 2016	CPAI-2016-0698			Command Injection Over Telnet
Critical	31 Jul 2016	17 Aug 2016	CPAI-2016-0684		CVE-2016-3092	Apache Commons FileUpload Denial Of Service (CVE-2016-3092)
Medium	15 Aug 2016	17 Aug 2016	CPAI-2016-0702	Symantec	CVE-2016-3653	Symantec Endpoint Protection Manager Cross Site Request Forgery (CVE-2016-3653)
Critical	16 Aug 2016	17 Aug 2016	CPAI-2016-0709			Drupal CODER Module Remote Code Execution
Critical	17 Aug 2016	17 Aug 2016	CPAI-2016-0711			WordPress Ninja Forms Plugin SQL Injection
Critical	25 Jul 2016	16 Aug 2016	CPAI-2016-0651			Drupal RESTWS Remote Code Execution
Critical	1 Aug 2016	16 Aug 2016	CPAI-2016-0687			WordPress All In One WP Security and Firewall Plugin Login CAPTCHA Bypass
Medium	15 Aug 2016	16 Aug 2016	CPAI-2016-0707		CVE-2016-5304	Symantec Endpoint Protection Manager Open Redirect Report-Routing Component (CVE-2016-5304)
Medium	16 Aug 2016	16 Aug 2016	CPAI-2016-0705			WECON LeviStudio String Content Heap Buffer Overflow
Medium	10 May 2016	15 Aug 2016	CPAI-2016-0303	Microsoft MS16-055	CVE-2016-0168	Microsoft Windows Graphics Component Information Disclosure (MS16-055: CVE-2016-0168)
Critical	10 Aug 2016	15 Aug 2016	CPAI-2016-0695		CVE-2016-3642	Solarwinds Virtualization Manager Apache Commons Collections Insecure Deserialization (CVE-2016-3642)
High	10 Aug 2016	15 Aug 2016	CPAI-2016-0697	SolarWinds		SolarWinds SRM Profiler RulesMetaData addNewRule SQL Injection
Medium	26 Jul 2016	11 Aug 2016	CPAI-2016-0513			Schneider Electric GP-Pro EX ParseAPI Heap Buffer Overflow
Medium	8 Aug 2016	11 Aug 2016	CPAI-2016-0693		CVE-1999-0660	Snort Back Orifice BOPing - ver 2 (CVE-1999-0660)
High	9 Feb 2016	10 Aug 2016	CPAI-2016-0077	Microsoft MS16-014	CVE-2016-0041	Microsoft Windows DLL Loading Remote Code Execution (MS16-014: CVE-2016-0041)
Critical	31 Jul 2016	10 Aug 2016	CPAI-2016-0688			Centreon Web Useralias Remote Command Execution
High	14 Jun 2016	9 Aug 2016	CPAI-2016-0427	Microsoft MS16-070	CVE-2016-3234	Microsoft Office Information Disclosure (MS16-070: CVE-2016-3234)
High	9 Aug 2016	9 Aug 2016	CPAI-2016-0683	Microsoft MS16-098	CVE-2016-3309	Microsoft Windows Win32k Elevation of Privilege (MS16-098: CVE-2016-3309)
High	9 Aug 2016	9 Aug 2016	CPAI-2016-0677	Microsoft MS16-099	CVE-2016-3313	Microsoft Office Memory Corruption (MS16-099: CVE-2016-3313)
High	9 Aug 2016	9 Aug 2016	CPAI-2016-0678	Microsoft MS16-098	CVE-2016-3311	Microsoft Win32k Elevation of Privilege (MS16-098: CVE-2016-3311)
High	9 Aug 2016	9 Aug 2016	CPAI-2016-0682	Microsoft MS16-098	CVE-2016-3310	Microsoft Win32k Elevation of Privilege (MS16-098: CVE-2016-3310)
High	9 Aug 2016	9 Aug 2016	CPAI-2016-0673	Microsoft MS16-099	CVE-2016-3317	Microsoft Office Memory Corruption (MS16-099: CVE-2016-3317)
High	9 Aug 2016	9 Aug 2016	CPAI-2016-0668	Microsoft MS16-095	CVE-2016-3321	Microsoft Internet Explorer Information Disclosure (MS16-095: CVE-2016-3321)
High	17 Mar 2016	8 Aug 2016	CPAI-2016-0216			Apache Tomcat Web Manager Scanning Attempt
Critical	23 Mar 2016	8 Aug 2016	CPAI-2016-0227			WordPress Slider Revolution Plugin Remote File Inclusion
High	27 Mar 2016	8 Aug 2016	CPAI-2016-0235			The Beast Security Scanner
Critical	4 Aug 2016	8 Aug 2016	CPAI-2016-0692			PHP7 Unserialization Use After Free
Critical	4 Aug 2016	8 Aug 2016	CPAI-2016-0691			Suspicious Image Attachment In Phishing Mail
Critical	24 Jul 2016	7 Aug 2016	CPAI-2016-0644	Adobe APSB16-26	CVE-2016-4206	Adobe Acrobat and Reader Use After Free (APSB16-26: CVE-2016-4206)