Home / 2016 Advisories Archive

2016 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	20 Dec 2016	14 Jun 2017	CPAI-2016-1121	Google	CVE-2016-5182	Google Chrome Blink ImageBitmap Integer Overflow (CVE-2016-5182)
Critical	9 Aug 2016	13 Jun 2017	CPAI-2016-0679	Microsoft Microsoft MS16-099 CVE-2017-8510	CVE-2016-3318 CVE-2017-8510	Microsoft Graphics Component Memory Corruption (MS16-099: CVE-2016-3318; CVE-2017-8510)
Medium	21 Aug 2016	5 Jun 2017	CPAI-2016-0717	PHP Group	CVE-2016-6292	PHP Exif_Process_User_Comment Null Pointer Dereference (CVE-2016-6292)
High	2 Feb 2016	1 Jun 2017	CPAI-2016-0062			Angler Exploit Kit Redirection
High	29 Jun 2016	29 May 2017	CPAI-2016-0463			WordPress xmlrpc Weak Password Access Attempt
Critical	13 Dec 2016	23 May 2017	CPAI-2016-1054	Microsoft MS16-144	CVE-2016-7283	Microsoft Internet Explorer Memory Corruption (MS16-144: CVE-2016-7283)
Critical	9 Aug 2016	17 May 2017	CPAI-2016-0666	Microsoft MS16-097	CVE-2016-3304	Microsoft Windows Graphics Component Remote Code Execution (MS16-097: CVE-2016-3304)
Critical	11 Oct 2016	14 May 2017	CPAI-2016-0833	Microsoft MS16-118	CVE-2016-3331	Microsoft Browser Memory Corruption (MS16-118: CVE-2016-3331)
Critical	11 Oct 2016	10 May 2017	CPAI-2016-0866	Microsoft MS16-121	CVE-2016-7193	Microsoft Office Memory Corruption (MS16-121: CVE-2016-7193)
Critical	6 Oct 2016	23 Apr 2017	CPAI-2016-0870		CVE-2016-7572	Drupal Sensitive Core Files Information Disclosure (CVE-2016-7572)
High	13 Dec 2016	13 Apr 2017	CPAI-2016-1079	Microsoft MS16-151	CVE-2016-7259	Microsoft Windows Win32k Elevation of Privilege (MS16-151: CVE-2016-7259)
Medium	28 Dec 2016	12 Apr 2017	CPAI-2016-1132	Vim	CVE-2016-1248	Vim modelines Remote Command Execution (CVE-2016-1248)
Critical	31 Aug 2016	23 Mar 2017	CPAI-2016-0734	Metasploit	CVE-2010-4742	MOXA MediaDBPlayback ActiveX Control Buffer Overflow (CVE-2010-4742)
Critical	27 Jun 2016	21 Mar 2017	CPAI-2016-0527		CVE-2013-6935	VideoCharge Software Watermark Master (CVE-2013-6935)
Critical	7 Jun 2016	14 Mar 2017	CPAI-2016-0444			WordPress Simple Backup Plugin Unauthorized File Access
High	18 Oct 2016	7 Mar 2017	CPAI-2016-0811		CVE-2016-7479	PHP 7 Unserialization Malicious toString Remote Code Execution (CVE-2016-7479)
Medium	18 Oct 2016	7 Mar 2017	CPAI-2016-0812	PHP Group 73093	CVE-2016-7478	PHP 7 Unserialization Exception Infinite Loop Denial of Service (CVE-2016-7478)
High	20 Mar 2016	27 Feb 2017	CPAI-2016-0218		CVE-2005-1213	Microsoft Outlook Express NNTP handler Buffer Overflow (CVE-2005-1213)
Critical	14 Feb 2016	19 Feb 2017	CPAI-2016-0096		CVE-2016-1287	Cisco Adaptive Security Appliance IKEv1 and IKEv2 Buffer Overflow (CVE-2016-1287)
Critical	15 Mar 2016	8 Feb 2017	CPAI-2006-105			Microsoft Office RTF Malicious Known Variables
Critical	30 Jun 2016	1 Feb 2017	CPAI-2016-0549		CVE-2001-0241	Microsoft IIS 5.0 ISAPI Internet Printing Protocol Extension Buffer Overflow - ver 2 (CVE-2001-0241)
Critical	30 Jun 2016	1 Feb 2017	CPAI-2016-0550		CVE-2004-1050	Internet Explorer Malformed IFRAME Buffer Overflow - ver 2 (CVE-2004-1050)
Critical	13 Dec 2016	1 Feb 2017	CPAI-2016-1078	Microsoft MS16-147	CVE-2016-7274	Microsoft Windows Uniscribe Remote Code Execution (MS16-147: CVE-2016-7274)
Critical	14 Jun 2016	31 Jan 2017	CPAI-2016-0455	Microsoft MS16-063	CVE-2016-3212	Microsoft Internet Explorer XSS Filter Bypass (MS16-063: CVE-2016-3212)
Critical	24 Nov 2016	31 Jan 2017	CPAI-2016-1045			SVG Javascript Nemucod Downloader
High	13 Dec 2016	29 Jan 2017	CPAI-2016-1084	Microsoft MS16-145	CVE-2016-7287	Microsoft Browser Scripting Engine Memory Corruption (MS16-145: CVE-2016-7287)
Critical	1 Nov 2016	25 Jan 2017	CPAI-2016-0450	Microsoft MS16-063	CVE-2016-3213	Microsoft Internet Explorer NetBIOS Spoofing (MS16-063: CVE-2016-3213)
High	27 Dec 2016	23 Jan 2017	CPAI-2017-0063	Microsft MS16-130	CVE-2016-7222	Microsoft Task Scheduler Elevation of Privilege (MS16-130: CVE-2016-7222)
High	27 Dec 2016	23 Jan 2017	CPAI-2017-0062	Microsoft MS16-130	CVE-2016-7221	Microsoft Windows IME Elevation of Privilege (MS16-130: CVE-2016-7221)
Medium	13 Dec 2016	19 Jan 2017	CPAI-2016-1057	Microsoft MS16-145	CVE-2016-7206	Microsoft Browser Information Disclosure (MS16-145: CVE-2016-7206)
Medium	14 Jun 2016	12 Jan 2017	CPAI-2016-0434	Microsoft MS16-080	CVE-2016-3215	Microsoft Windows PDF Library Information Disclosure (MS16-080: CVE-2016-3215)
Medium	11 Oct 2016	12 Jan 2017	CPAI-2016-0869	Microsoft MS16-118	CVE-2016-3267	Microsoft Internet Explorer Information Disclosure (MS16-118: CVE-2016-3267)
Critical	6 Dec 2016	12 Jan 2017	CPAI-2016-1089	OpenSSL 20160926	CVE-2016-6309	OpenSSL tls_get_message_body Function init_msg Structure Use After Free (CVE-2016-6309)
High	8 Mar 2016	11 Jan 2017	CPAI-2016-0137	Microsoft MS16-023	CVE-2016-0108	Microsoft Internet Explorer Memory Corruption (MS16-023: CVE-2016-0108)
Medium	20 Mar 2016	11 Jan 2017	CPAI-2016-0219	Autodesk	CVE-2015-8572	Autodesk Design Review GIF GlobalColorTable DataSubBlock Buffer Overflow (CVE-2015-8572)
Critical	27 Jun 2016	11 Jan 2017	CPAI-2016-0529	Adobe APSB16-14	CVE-2016-1078	Adobe Acrobat and Reader Information Disclosure (APSB16-14: CVE-2016-1078)
Critical	8 Nov 2016	11 Jan 2017	CPAI-2016-0958	Microsoft MS16-130	CVE-2016-7212	Microsoft Windows File Manager Remote Code Execution (MS16-130: CVE-2016-7212)
Critical	23 Nov 2016	11 Jan 2017	CPAI-2016-1040		CVE-2016-7434	NTP Daemon _IO_str_init_static_internal Denial of Service (CVE-2016-7434)
N/A	26 Dec 2016	11 Jan 2017	CPAI-2016-1127			SSL TLS_FALLBACK_SCSV Cipher Suite
Medium	13 Sep 2016	10 Jan 2017	CPAI-2016-0740	Microsoft MS16-104	CVE-2016-3247	Microsoft Internet Explorer Memory Corruption (MS16-104: CVE-2016-3247)
Critical	9 Aug 2016	8 Jan 2017	CPAI-2016-0676	Microsoft MS16-097	CVE-2016-3301 CVE-2016-3303	Microsoft Windows Graphics Component Remote Code Execution (MS16-097: CVE-2016-3301; CVE-2016-3303)
High	13 Dec 2016	8 Jan 2017	CPAI-2016-1071	Microsoft MS16-148	CVE-2016-7264	Microsoft Office Information Disclosure (MS16-148: CVE-2016-7264)
Critical	1 Jun 2016	5 Jan 2017	CPAI-2016-0425		CVE-2015-2794	DotNetNuke Administration Authentication Bypass (CVE-2015-2794)
High	13 Sep 2016	4 Jan 2017	CPAI-2016-0745	Microsoft MS16-104	CVE-2016-3351	Microsoft Browser Information Disclosure (MS16-104: CVE-2016-3351)
Critical	19 Dec 2016	4 Jan 2017	CPAI-2016-1118		CVE-2008-6976	MikroTik RouterOS SNMP Security Bypass (CVE-2008-6976)
High	20 Dec 2016	3 Jan 2017	CPAI-2017-0002		CVE-2015-2350	MikroTik RouterOS Admin Password Change (CVE-2015-2350)
Critical	22 Dec 2016	3 Jan 2017	CPAI-2016-1122			WordPress WooCommerce Tax Rates Cross-Site Scripting
Critical	26 Dec 2016	3 Jan 2017	CPAI-2016-1126		CVE-2012-6050	Mikrotik Router Remote Denial Of Service (CVE-2012-6050)
High	29 Dec 2016	2 Jan 2017	CPAI-2016-1134		CVE-2016-8707	Imagemagick Compressed TIFF File Conversion Remote Code Execution (CVE-2016-8707)
Critical	9 Feb 2016	29 Dec 2016	CPAI-2016-0048	Microsoft MS16-009	CVE-2016-0061	Microsoft Internet Explorer Memory Corruption (MS16-009: CVE-2016-0061)