Home / 2016 Advisories Archive

2016 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1074	Microsoft MS16-146	CVE-2016-7257	Microsoft Windows GDI Information Disclosure (MS16-146: CVE-2016-7257)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1062	Microsoft MS16-148	CVE-2016-7265	Microsoft Office Information Disclosure (MS16-148: CVE-2016-7265)
Critical	13 Dec 2016	13 Dec 2016	CPAI-2016-1070	Microsoft MS16-145	CVE-2016-7296	Microsoft Edge Memory Corruption (MS16-145: CVE-2016-7296)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1077	Microsoft MS16-144	CVE-2016-7284	Microsoft Internet Explorer Information Disclosure (MS16-144: CVE-2016-7284)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1065	Microsoft MS16-144	CVE-2016-7278	Microsoft Internet Explorer Information Disclosure (MS16-144: CVE-2016-7278)
Critical	13 Dec 2016	12 Dec 2016	CPAI-2016-1106	Adobe APSB16-39	CVE-2016-7869	Adobe Flash Player Buffer Overflow (APSB16-39: CVE-2016-7869)
Medium	1 Dec 2016	11 Dec 2016	CPAI-2016-1069	FFmpeg	CVE-2016-5199	FFmpeg mov_read_keys Integer Overflow (CVE-2016-5199)
Medium	8 Dec 2016	11 Dec 2016	CPAI-2016-1094	Memcached	CVE-2016-8706	Memcached process_bin_sasl_auth Integer Underflow (CVE-2016-8706)
Critical	5 Oct 2016	8 Dec 2016	CPAI-2016-0873		CVE-2016-2776	DNS Server Bind 9 Response Message Rendering Denial of Service (CVE-2016-2776)
High	14 Nov 2016	8 Dec 2016	CPAI-2016-1092	Trend Micro 1114913	CVE-2016-6267	Trend Micro Smart Protection Server admin_notification.php Command Injection (CVE-2016-6267)
High	6 Dec 2016	8 Dec 2016	CPAI-2016-1048		CVE-2013-0209	Movable Type Web Upgrade Remote Code Execution (CVE-2013-0209)
Critical	8 Dec 2016	8 Dec 2016	CPAI-2016-1095		CVE-2015-6522	WordPress Symposium Plugin SQL Injection (CVE-2015-6522)
Critical	8 Dec 2016	8 Dec 2016	CPAI-2016-1093			WordPress Answer My Question Plugin SQL Injection
Medium	16 Jun 2016	7 Dec 2016	CPAI-2016-0490	Apache	CVE-2016-0711	Apache Jetspeed PageManagementService Cross-Site Scripting (CVE-2016-0711)
Medium	26 Jun 2016	6 Dec 2016	CPAI-2016-0520			Suspicious Webpage JavaScript Downloader
Medium	1 Nov 2016	6 Dec 2016	CPAI-2016-0971	Squid Project SQUID-2016:9	CVE-2016-4555	Squid Proxy ESI Response Processing Denial of Service (CVE-2016-4555)
Critical	1 Dec 2016	1 Dec 2016	CPAI-2016-1061			Eir D1000 Routers Remote Code Execution
Critical	8 Mar 2016	29 Nov 2016	CPAI-2016-0154	Microsoft MS16-028	CVE-2016-0118	Microsoft Windows PDF Library Remote Code Execution (MS16-028: CVE-2016-0118)
Medium	19 Sep 2016	29 Nov 2016	CPAI-2016-0808	Nagios		Nagios Network Analyzer Report Generator Command Injection
Critical	28 Nov 2016	29 Nov 2016	CPAI-2016-1050		CVE-2012-5088	Java Applet Method Handle Remote Code Execution (CVE-2012-5088)
Critical	21 Nov 2016	27 Nov 2016	CPAI-2016-1046			Social Media Infected Image File (ImageGate)
Medium	23 Nov 2016	24 Nov 2016	CPAI-2016-1042		CVE-2013-3502	GroundWork monarch_scan.cgi OS Command Injection (CVE-2013-3502)
Critical	23 Nov 2016	24 Nov 2016	CPAI-2016-1041			ShadowGate Redirector
High	17 Mar 2016	22 Nov 2016	CPAI-2016-0214			Jorgee Security Scanner
Critical	20 Sep 2016	22 Nov 2016	CPAI-2016-0795		CVE-2016-6662 CVE-2016-6663 CVE-2016-6664	MySQL Remote Code Execution (CVE-2016-6662; CVE-2016-6663; CVE-2016-6664)
High	25 Sep 2016	22 Nov 2016	CPAI-2016-0832	Metasploit	CVE-2015-2857	Accellion FTA getStatus verify_oauth_token Command Execution (CVE-2015-2857)
High	26 Sep 2016	22 Nov 2016	CPAI-2016-0824	Metasploit	CVE-2015-1592	SixApart MovableType Storable Perl Code Execution (CVE-2015-1592)
High	8 Nov 2016	22 Nov 2016	CPAI-2016-0945	Microsoft MS16-129	CVE-2016-7240	Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7240)
Medium	21 Nov 2016	21 Nov 2016	CPAI-2016-0818	Vendor Advisory	CVE-2016-4264	Adobe ColdFusion OOXML XXE Information Disclosure (CVE-2016-4264)
Critical	26 Oct 2016	20 Nov 2016	CPAI-2016-0992	Metasploit	CVE-2010-1465	Trellian FTP Client PASV Remote Buffer Overflow (CVE-2010-1465)
High	3 Nov 2016	20 Nov 2016	CPAI-2016-1014			SugarCRM PHP Deserialization Script Injection
Critical	9 Nov 2016	20 Nov 2016	CPAI-2016-1007	Adobe APSB16-08	CVE-2016-0999	Adobe Flash Player Use After Free Code Execution (APSB16-08: CVE-2016-0999)
Critical	11 Oct 2016	15 Nov 2016	CPAI-2016-0854	Microsoft MS16-119	CVE-2016-3386	Microsoft Edge Memory Corruption (MS16-119: CVE-2016-3386)
High	10 Nov 2016	14 Nov 2016	CPAI-2016-1009	Microsoft MS16-110	CVE-2016-3369	Microsoft Windows AHCACHE.SYS Denial of Service (MS16-110: CVE-2016-3369)
Critical	14 Jun 2016	13 Nov 2016	CPAI-2016-0474		CVE-2016-8367 CVE-2016-8374	Schneider Electric Magelis HMI Advanced Panel Remote Denial Of Service (CVE-2016-8367; CVE-2016-8374)
Medium	11 Jul 2016	13 Nov 2016	CPAI-2016-0589	MIT	CVE-2015-8630	MIT Kerberos 5 kadmind KADM5_POLICY Denial of Service (CVE-2015-8630)
High	11 Oct 2016	13 Nov 2016	CPAI-2016-0844	Microsoft MS16-119	CVE-2016-7190	Microsoft Edge Scripting Engine Memory Corruption (MS16-119: CVE-2016-7190)
Critical	11 Oct 2016	10 Nov 2016	CPAI-2016-0852	Microsoft MS16-118	CVE-2016-3382	Microsoft Internet Explorer Memory Corruption (MS16-118: CVE-2016-3382)
High	26 Oct 2016	10 Nov 2016	CPAI-2016-0933	Metasploit		Javascript Injection for Eval-based Unpackers
Critical	9 Nov 2016	10 Nov 2016	CPAI-2016-1008			XpoLog Center Remote Command Execution
Critical	8 Nov 2016	9 Nov 2016	CPAI-2016-0998	Adobe APSB16-37	CVE-2016-7864	Adobe Flash Player Use After Free (APSB16-37: CVE-2016-7864)
Critical	9 Nov 2016	9 Nov 2016	CPAI-2016-0996	Adobe APSB16-37	CVE-2016-7863	Adobe Flash Player Use After Free (APSB16-37: CVE-2016-7863)
Critical	9 Nov 2016	9 Nov 2016	CPAI-2016-1000	Adobe APSB16-37	CVE-2016-7865	Adobe Flash Player Type Confusion (APSB16-37: CVE-2016-7865)
Medium	1 Nov 2016	8 Nov 2016	CPAI-2016-0972	LibGD	CVE-2016-5766	GD Library LibGD Integer Overflow (CVE-2016-5766)
High	8 Nov 2016	8 Nov 2016	CPAI-2016-0982	Microsoft MS16-133	CVE-2016-7231	Microsoft Office Memory Corruption (MS16-133: CVE-2016-7231)
High	8 Nov 2016	8 Nov 2016	CPAI-2016-0951	Microsoft MS16-138	CVE-2016-7225	Microsoft Windows VHDFS Driver Elevation of Privilege (MS16-138: CVE-2016-7225)
High	8 Nov 2016	8 Nov 2016	CPAI-2016-0984	Microsoft MS16-133	CVE-2016-7232	Microsoft Office Memory Corruption (MS16-133: CVE-2016-7232)
High	8 Nov 2016	8 Nov 2016	CPAI-2016-0962	Microsoft MS16-138	CVE-2016-7224	Microsoft Windows VHDFS Driver Elevation of Privilege (MS16-138: CVE-2016-7224)
High	8 Nov 2016	8 Nov 2016	CPAI-2016-0977	Microsoft MS16-133	CVE-2016-7213	Microsoft Office Memory Corruption (MS16-133: CVE-2016-7213)
High	8 Nov 2016	8 Nov 2016	CPAI-2016-0957	Microsoft MS16-132	CVE-2016-7210	Microsoft Windows Open Type Font Information Disclosure (MS16-132: CVE-2016-7210)