Home / 2016 Advisories Archive

2016 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	14 Mar 2016	22 Mar 2016	CPAI-2016-0205			WordPress Ultimate Product Catalogue Plugin Unauthenticated File Upload
High	15 Mar 2016	22 Mar 2016	CPAI-2016-0204	Apache Software Foundation	CVE-2015-5343	Apache Subversion mod_dav_svn Integer Overflow (CVE-2015-5343)
Critical	21 Mar 2016	22 Mar 2016	CPAI-2016-0221			WordPress MiwoFTP Plugin Arbitrary File Download
High	22 Mar 2016	22 Mar 2016	CPAI-2016-0226			Apple OSX File With Non-Executable File Extension Arbitrary File Execution
Critical	21 Mar 2016	21 Mar 2016	CPAI-2016-0201			Cisco Adaptive Security Appliance IKEv1 and IKEv2 multiple payloads Buffer Overflow (CVE-2016-1287)
High	8 Mar 2016	20 Mar 2016	CPAI-2016-0186	LibreOffice	CVE-2015-5212	LibreOffice and OpenOffice ODF Document PrinterSetup Integer Underflow (CVE-2015-5212)
High	20 Mar 2016	20 Mar 2016	CPAI-2016-0220	Oracle	CVE-2016-0476	Oracle Application Testing Suite DownloadServlet reportName Directory Traversal (CVE-2016-0476)
Medium	16 Mar 2016	17 Mar 2016	CPAI-2016-0210	Apache Software Foundation	CVE-2014-3576	Apache ActiveMQ Shutdown Command Denial of Service (CVE-2014-3576)
Critical	16 Mar 2016	17 Mar 2016	CPAI-2016-0207	Microsoft MS15-127	CVE-2015-6125	Microsoft Windows DNS Use After Free (MS15-127: CVE-2015-6125)
High	9 Feb 2016	15 Mar 2016	CPAI-2016-0080	Microsoft MS16-009	CVE-2016-0059	Microsoft Internet Explorer Information Disclosure (MS16-009: CVE-2016-0059)
Medium	1 Mar 2016	15 Mar 2016	CPAI-2016-0160	Unitronics	CVE-2015-7905	Unitronics UniDownloader and VisiLogic OPLC IDE IPWorksSSL.HTTPS Memory Corruption (CVE-2015-7905)
Critical	7 Mar 2016	10 Mar 2016	CPAI-2016-0174	Adobe APSB16-09	CVE-2016-1009	Adobe Acrobat And Reader Memory Corruption (APSB16-09: CVE-2016-1009)
Critical	10 Mar 2016	10 Mar 2016	CPAI-2016-0198	Adobe APSB16-09	CVE-2016-1008	Adobe Acrobat and Reader updaternotifications.dll Library Loading (APSB16-09: CVE-2016-1008)
High	10 Mar 2016	10 Mar 2016	CPAI-2016-0197	Adobe APSB16-09	CVE-2016-1007	Adobe Acrobat And Reader Memory Corruption (APSB16-09: CVE-2016-1007)
Critical	8 Mar 2016	8 Mar 2016	CPAI-2016-0148	Microsoft MS16-024	CVE-2016-0124	Microsoft Edge Memory Corruption (MS16-024: CVE-2016-0124)
Critical	8 Mar 2016	8 Mar 2016	CPAI-2016-0167	Microsoft MS16-029	CVE-2016-0134	Microsoft Office Memory Corruption (MS16-029: CVE-2016-0134)
High	8 Mar 2016	8 Mar 2016	CPAI-2016-0169	Microsoft MS16-031	CVE-2016-0087	Microsoft Windows Elevation of Privilege (MS16-031: CVE-2016-0087)
Critical	8 Mar 2016	8 Mar 2016	CPAI-2016-0145	Microsoft MS16-024	CVE-2016-0123	Microsoft Edge Memory Corruption (MS16-024: CVE-2016-0123)
High	8 Mar 2016	8 Mar 2016	CPAI-2016-0161	Microsoft MS16-029	CVE-2016-0021	Microsoft Office Memory Corruption (MS16-029: CVE-2016-0021)
Critical	8 Mar 2016	8 Mar 2016	CPAI-2016-0164	Microsoft MS16-027	CVE-2016-0098	Microsoft Windows Media Player Remote Code Execution (MS16-027: CVE-2016-0098)
Critical	12 Jan 2016	7 Mar 2016	CPAI-2016-0022	Microsoft MS16-002	CVE-2016-0024	Microsoft Scripting Engine Memory Corruption (MS16-002: CVE-2016-0024)
Critical	9 Feb 2016	6 Mar 2016	CPAI-2016-0009	Microsoft MS16-019	CVE-2016-0033	Microsoft .NET Framework Denial of Service (MS16-019: CVE-2016-0033)
Critical	6 Mar 2016	6 Mar 2016	CPAI-2016-0171			Multiple OS Malicious File Containing JS Downloader
Critical	8 Mar 2016	2 Mar 2016	CPAI-2016-0165	Microsoft MS16-026	CVE-2016-0121	Microsoft Windows OpenType Font Parsing Remote Code Execution (MS16-026: CVE-2016-0121)
Critical	9 Feb 2016	29 Feb 2016	CPAI-2016-0085	Oracle	CVE-2016-0490	Oracle Application Testing Suite UploadServlet filename Directory Traversal (CVE-2016-0490)
Critical	24 Feb 2016	28 Feb 2016	CPAI-2016-0134			Multiple OS Malicious E-Mail Attachment Code Execution
Critical	25 Feb 2016	28 Feb 2016	CPAI-2016-0150	ISC AA-01335	CVE-2015-8704	ISC BIND apl_42.c INSIST Assertion Failure Denial of Service (CVE-2015-8704)
High	9 Feb 2016	24 Feb 2016	CPAI-2016-0088			WordPress Newsletter Pro Plugin Open Redirect
Critical	23 Feb 2016	24 Feb 2016	CPAI-2016-0136			Microsoft Office Mail Attachment Containing Malicious Downloader
Medium	22 Feb 2016	23 Feb 2016	CPAI-2016-0129	Unitronics	CVE-2015-6478	Unitronics VisiLogic OPLC IDE TeePreviewer ChartLink Memory Corruption (CVE-2015-6478)
Medium	22 Feb 2016	23 Feb 2016	CPAI-2016-0128	Unitronics	CVE-2015-6478	Unitronics VisiLogic OPLC TeeCommander ChartLink ActiveX Control Memory Corruption (CVE-2015-6478)
Medium	22 Feb 2016	23 Feb 2016	CPAI-2016-0130	Unitronics	CVE-2015-6478	Unitronics VisiLogic OPLC TeeChart ActiveX RemoveSeries Out of Bounds Array Indexing (CVE-2015-6478)
Critical	23 Feb 2016	23 Feb 2016	CPAI-2016-0131	IBM	CVE-2015-4931	IBM Tivoli Storage Manager FastBack Server Opcode 4115 Buffer Overflow (CVE-2015-4931)
Medium	23 Feb 2016	23 Feb 2016	CPAI-2015-1185		CVE-2015-6972	Ignite Realtime Openfire group-summary.jsp Cross-Site Scripting (CVE-2015-6972)
Critical	2 Feb 2016	22 Feb 2016	CPAI-2016-0061			Magento Sales User Info Cross Site Scripting
High	10 Jan 2016	17 Feb 2016	CPAI-2016-0117	Microsoft MS06-017	CVE-2006-0015	Microsoft FrontPage Server Extensions Cross Site Scripting (MS06-017: CVE-2006-0015)
Critical	14 Feb 2016	17 Feb 2016	CPAI-2016-0098	Adobe APSB16-04	CVE-2016-0972	Adobe Flash Player Memory Corruption (APSB16-04: CVE-2016-0972)
Critical	9 Feb 2016	16 Feb 2016	CPAI-2016-0109			Web Servers Containing Suspicious JavaScript Downloader
High	8 Feb 2016	15 Feb 2016	CPAI-2016-0083		CVE-2014-4377	Apple IOS PDF Reader Parsing Memory Corruption (CVE-2014-4377)
Critical	10 Feb 2016	15 Feb 2016	CPAI-2016-0099	Adobe APSB16-04	CVE-2016-0970	Adobe Flash Player Memory Corruption (APSB16-04: CVE-2016-0970)
Critical	7 Feb 2016	14 Feb 2016	CPAI-2016-0082			Suspicious Image File Remote Code Execution Attempt
Critical	9 Feb 2016	14 Feb 2016	CPAI-2016-0073	Microsoft MS16-015	CVE-2016-0052	Microsoft Office Memory Corruption (MS16-015: CVE-2016-0052)
High	19 Jan 2016	9 Feb 2016	CPAI-2016-0031			WordPress Tubepress Plugin Version 2 Cross Site Scripting
Critical	27 Jan 2016	9 Feb 2016	CPAI-2016-0046		CVE-2016-0940	Adobe Acrobat and Reader Use After Free Code Execution (APSB16-02: CVE-2016-0940)
High	9 Feb 2016	9 Feb 2016	CPAI-2016-0084	Microsoft MS16-011	CVE-2016-0080	Microsoft Edge ASLR Bypass (MS16-011: CVE-2016-0080)
High	9 Feb 2016	9 Feb 2016	CPAI-2016-0079	Microsoft MS16-018	CVE-2016-0048	Microsoft Windows Win32k Elevation of Privilege (MS16-018: CVE-2016-0048)
Critical	9 Feb 2016	9 Feb 2016	CPAI-2016-0063	Microsoft MS16-013	CVE-2016-0038	Microsoft Windows Journal File Parsing Invalid Reference (MS16-013: CVE-2016-0038)
High	9 Feb 2016	9 Feb 2016	CPAI-2016-0071	Microsoft MS16-004	CVE-2016-0042	Microsoft Windows DLL Loading Remote Code Execution (MS16-014: CVE-2016-0042)
Critical	9 Feb 2016	9 Feb 2016	CPAI-2016-0075	Microsoft MS16-012	CVE-2016-0058	Microsoft Windows PDF Library Buffer Overflow (MS16-012; CVE-2016-0058)
High	9 Feb 2016	9 Feb 2016	CPAI-2016-0065	Microsoft MS16-014	CVE-2016-0040	Microsoft Windows Elevation of Privilege (MS16-014: CVE-2016-0040)