Home / 2016 Advisories Archive

2016 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	20 Sep 2016	26 Apr 2018	CPAI-2016-0820	Trend Micro		Trend Micro Control Manager task_controller Information Disclosure
Critical	19 Jul 2016	22 Apr 2018	CPAI-2016-0613			Magnitude Exploit Kit Redirection
Medium	1 Nov 2016	22 Apr 2018	CPAI-2016-0970	OpenSSL	CVE-2016-6305	OpenSSL SSL_peek Infinite Loop Denial of Service (CVE-2016-6305)
High	3 Apr 2016	2 Apr 2018	CPAI-2016-0255			SIPVicious Security Scanner
High	22 Sep 2016	15 Jan 2018	CPAI-2016-0821		CVE-2016-6304	OpenSSL OCSP Extension Unbounded Memory Denial of Service (CVE-2016-6304)
Critical	28 Jun 2016	11 Jan 2018	CPAI-2016-0532	Adobe APSB16-14	CVE-2016-1080	Adobe Reader and Acrobat Information Disclosure (APSB16-14: CVE-2016-1080)
High	10 May 2016	2 Jan 2018	CPAI-2016-0348	Microsoft ms16-049	CVE-2016-0150	Microsoft HTTP.sys HTTP 2.0 Denial of Service (MS16-049; CVE-2016-0150)
Critical	6 Dec 2016	1 Jan 2018	CPAI-2016-1087			Malicious Embedded Flash Downloader
Critical	21 Jan 2016	26 Dec 2017	CPAI-2016-0033	Adobe APSB16-02	CVE-2016-0933	Adobe Acrobat and Reader Memory Corruption (APSB16-02: CVE-2016-0933)
Critical	22 Aug 2016	17 Dec 2017	CPAI-2016-0718	Cisco cisco-sa-20160406-remcode	CVE-2016-1291	Cisco Prime Infrastructure and EPNM Deserialization Code Execution (CVE-2016-1291)
High	13 Sep 2016	12 Dec 2017	CPAI-2016-0750	Microsoft Microsoft MS16-104 CVE-2017-11913	CVE-2016-3375 CVE-2017-11913	Microsoft Internet Explorer Memory Corruption (MS16-104: CVE-2016-3375; CVE-2017-11913)
Medium	21 Sep 2016	3 Dec 2017	CPAI-2016-0817	TrendMicro		Trend Micro Control Manager TreeUserControl_process_tree_event Information Disclosure
N/A	25 Sep 2016	3 Dec 2017	CPAI-2016-0822		CVE-2016-2183	Weak SSL 3DES Cipher Suites (CVE-2016-2183)
High	27 Oct 2016	3 Dec 2017	CPAI-2016-0949	Op5		op5 Monitor command_test.php Command Injection
Medium	19 Sep 2016	29 Nov 2017	CPAI-2016-0809	Trend Micro		Trend Micro Control Manager AdHocQuery_Processor.aspx SQL Injection
Critical	9 Feb 2016	26 Nov 2017	CPAI-2016-0068	Microsoft MS16-009	CVE-2016-0060	Microsoft Internet Explorer Memory Corruption (MS16-009: CVE-2016-0060)
High	8 Nov 2016	26 Nov 2017	CPAI-2016-0956	Microsoft MS16-142	CVE-2016-7195	Microsoft Browser Memory Corruption (MS16-142: CVE-2016-7195)
Critical	13 Dec 2016	26 Nov 2017	CPAI-2016-1067	Microsoft MS16-146	CVE-2016-7272	Microsoft Windows Graphics Remote Code Execution (MS16-146: CVE-2016-7272)
Critical	30 Oct 2016	20 Nov 2017	CPAI-2016-0872	AlienVault ENG-103449		AlienVault USM and OSSIM get_directive_kdb.php directive_id SQL Injection
Critical	5 Jun 2016	15 Nov 2017	CPAI-2016-0436			WordPress WP Mobile Detector Plugin Arbitrary File Upload
Critical	13 Oct 2016	9 Nov 2017	CPAI-2016-0879	Adobe APSB16-33	CVE-2016-6946	Adobe Acrobat and Reader Use After Free (APSB16-33: CVE-2016-6946)
Critical	30 Aug 2016	24 Sep 2017	CPAI-2016-0776			Ransomware Shared Folder Access
High	25 May 2016	11 Sep 2017	CPAI-2016-0382			Suspicious Link Redirection JavaScript Phishing Attempt
Critical	13 Mar 2016	20 Aug 2017	CPAI-2016-0212	CheckPoint		Suspicious Mail Attachment Containing JavaScript Code
Critical	9 Aug 2016	20 Aug 2017	CPAI-2016-0667	Microsoft MS16-096	CVE-2016-3319 CVE-2017-0291	Microsoft Edge PDF Remote Code Execution (MS16-096: CVE-2016-3319; CVE-2017-0291)
Medium	13 Sep 2016	2 Aug 2017	CPAI-2016-0739	Microsoft MS16-104	CVE-2016-3324	Microsoft Internet Explorer Memory Corruption (MS16-104: CVE-2016-3324)
Critical	12 Jan 2016	30 Jul 2017	CPAI-2016-0014	Microsoft MS16-006	CVE-2016-0034	Microsoft Silverlight Runtime Remote Code Execution (MS16-006: CVE-2016-0034)
High	25 Apr 2016	18 Jul 2017	CPAI-2016-0298			Suspicious Sender Mail Phishing Attempt
High	25 Jan 2016	16 Jul 2017	CPAI-2016-0039		CVE-2015-2196	WordPress Webdorado Spider Event Calendar Plugin SQL Injection (CVE-2015-2196)
High	26 Jan 2016	16 Jul 2017	CPAI-2016-0047		CVE-2015-2314	WordPress WPML Plugin SQL Injection (CVE-2015-2314)
Critical	18 Apr 2016	16 Jul 2017	CPAI-2016-0288		CVE-2016-0710	Apache Jetspeed SQL Injection (CVE-2016-0710)
Critical	3 May 2016	16 Jul 2017	CPAI-2016-0325			WordPress Ocim MP3 Plugin SQL Injection
High	24 May 2016	16 Jul 2017	CPAI-2016-0374			WordPress SP Projects and Document Manager Plugin SQL Injection
High	30 May 2016	16 Jul 2017	CPAI-2016-0404			WordPress Booking Calendar Contact Form Plugin SQL injection
High	13 Dec 2016	16 Jul 2017	CPAI-2016-1066	Microsoft MS16-145	CVE-2016-7288	Microsoft Edge Use After Free (MS16-145: CVE-2016-7288)
Critical	10 Mar 2016	14 Jul 2017	CPAI-2016-0199		CVE-2015-3429	WordPress Genericons Cross-Site Scripting (CVE-2015-3429)
Critical	13 Mar 2016	14 Jul 2017	CPAI-2016-0921	CheckPoint		Suspicious HTTPS Gmail Mail Attachment Containing JavaScript Code
Critical	13 Mar 2016	14 Jul 2017	CPAI-2016-0920	CheckPoint		Suspicious HTTPS YAHOO Mail Attachment Containing JavaScript Code
High	3 May 2016	14 Jul 2017	CPAI-2016-0331			WordPress DZS Videogallery Plugin Cross-Site Scripting
High	3 May 2016	14 Jul 2017	CPAI-2016-0330			WordPress Captcha Plugin Cross-Site Scripting
High	4 Jul 2016	14 Jul 2017	CPAI-2016-0564	ESF		ESF pfSense squid_clwarn.php Cross Site Scripting
High	25 Jul 2016	14 Jul 2017	CPAI-2016-0650		CVE-2016-1564	WordPress Core Authenticated Cross-Site Scripting (CVE-2016-1564)
Medium	12 Jan 2016	5 Jul 2017	CPAI-2016-0011	Microsoft MS16-007	CVE-2016-0018	Microsoft Windows DLL Loading Remote Code Execution (MS16-007: CVE-2016-0018)
Critical	14 Jun 2016	5 Jul 2017	CPAI-2016-0449	Microsoft MS16-077	CVE-2016-3236	Microsoft Windows WPAD Proxy Discovery Elevation of Privilege (MS16-077; CVE-2016-3236)
Medium	7 Dec 2016	5 Jul 2017	CPAI-2016-1090	ISC AA-01434	CVE-2016-8864	ISC BIND DNAME Response Processing Denial of Service (CVE-2016-8864)
High	12 Apr 2016	2 Jul 2017	CPAI-2016-0280	Adobe APSB16-10	CVE-2016-1014	Adobe Flash Player Insecure Library Loading (APSB16-10: CVE-2016-1014)
Critical	12 Apr 2016	2 Jul 2017	CPAI-2016-0195	Adobe APSB15-32	CVE-2015-8822	Adobe Flash Player Use After Free Code Execution (APSB15-32: CVE-2015-8822)
Medium	17 Jul 2016	2 Jul 2017	CPAI-2016-0624	Adobe APSB16-25	CVE-2016-4224	Adobe Flash Player Memory Corruption (APSB16-25: CVE-2016-4224)
High	10 May 2016	27 Jun 2017	CPAI-2016-0312	Microsoft MS16-062	CVE-2016-0174	Microsoft Windows Win32k Elevation of Privilege (MS16-062: CVE-2016-0174)
Critical	13 Dec 2016	14 Jun 2017	CPAI-2016-1075	Microsoft MS16-148	CVE-2016-7289	Microsoft Office Memory Corruption (MS16-148: CVE-2016-7289)