Home / 2016 Advisories Archive

2016 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	5 Jun 2016	7 Nov 2018	CPAI-2016-0438			Magento Braintree Credit Card Stealer
Critical	5 Jul 2016	23 Oct 2018	CPAI-2016-0553		CVE-2016-3646	Symantec ZIP Decompression Memory Access Violation (CVE-2016-3646)
Critical	13 Oct 2016	17 Sep 2018	CPAI-2016-0894	Adobe APSB16-33	CVE-2016-6942	Adobe Acrobat and Reader Memory Corruption (APSB16-33: CVE-2016-6942)
Critical	4 Aug 2016	16 Sep 2018	CPAI-2016-0690		CVE-2015-2208	MongoDB phpMoAdmin Unauthenticated Remote Code Execution (CVE-2015-2208)
Critical	16 Jun 2016	2 Sep 2018	CPAI-2016-0501	Adobe APSB16-14	CVE-2016-1039	Adobe Acrobat and Reader Security Bypass (APSB16-14: CVE-2016-1039)
High	13 Oct 2016	2 Sep 2018	CPAI-2016-0910	Adobe APSB16-33	CVE-2016-6953	Adobe Acrobat and Reader Use After Free (APSB16-33: CVE-2016-6953)
Critical	2 Aug 2016	15 Aug 2018	CPAI-2016-0689			Generic DVR Default Credentials Login Attempt
Medium	5 Oct 2016	2 Aug 2018	CPAI-2016-0864	Metasploit	CVE-2014-8791	Tuleap PHP Unserialize Code Execution (CVE-2014-8791)
Critical	12 Jul 2016	19 Jul 2018	CPAI-2016-0593		CVE-2018-8735 CVE-2018-8736	Nagios XI Command Injection (CVE-2018-8735; CVE-2018-8736)
Critical	12 Jul 2016	11 Jul 2018	CPAI-2016-0594		CVE-2018-8734	Nagios XI SQL Injection (CVE-2018-8734)
Medium	6 Jul 2016	8 Jul 2018	CPAI-2016-0567			Micro Focus Rumba WallData.Macro PlayMacro Memory Corruption
Medium	15 Sep 2016	29 Apr 2018	CPAI-2016-0799	Micro Focus	CVE-2016-1605	Micro Focus NetIQ Sentinel Server ReportViewServlet Directory Traversal (CVE-2016-1605)
High	20 Sep 2016	26 Apr 2018	CPAI-2016-0820	Trend Micro		Trend Micro Control Manager task_controller Information Disclosure
Medium	1 Nov 2016	22 Apr 2018	CPAI-2016-0970	OpenSSL	CVE-2016-6305	OpenSSL SSL_peek Infinite Loop Denial of Service (CVE-2016-6305)
High	3 Apr 2016	2 Apr 2018	CPAI-2016-0255			SIPVicious Security Scanner
High	22 Sep 2016	15 Jan 2018	CPAI-2016-0821		CVE-2016-6304	OpenSSL OCSP Extension Unbounded Memory Denial of Service (CVE-2016-6304)
High	10 May 2016	2 Jan 2018	CPAI-2016-0348	Microsoft ms16-049	CVE-2016-0150	Microsoft HTTP.sys HTTP 2.0 Denial of Service (MS16-049; CVE-2016-0150)
Critical	21 Jan 2016	26 Dec 2017	CPAI-2016-0033	Adobe APSB16-02	CVE-2016-0933	Adobe Acrobat and Reader Memory Corruption (APSB16-02: CVE-2016-0933)
Critical	22 Aug 2016	17 Dec 2017	CPAI-2016-0718	Cisco cisco-sa-20160406-remcode	CVE-2016-1291	Cisco Prime Infrastructure and EPNM Deserialization Code Execution (CVE-2016-1291)
Medium	21 Sep 2016	3 Dec 2017	CPAI-2016-0817	TrendMicro		Trend Micro Control Manager TreeUserControl_process_tree_event Information Disclosure
N/A	25 Sep 2016	3 Dec 2017	CPAI-2016-0822		CVE-2016-2183	Weak SSL 3DES Cipher Suites (CVE-2016-2183)
High	27 Oct 2016	3 Dec 2017	CPAI-2016-0949	Op5		op5 Monitor command_test.php Command Injection
Medium	19 Sep 2016	29 Nov 2017	CPAI-2016-0809	Trend Micro		Trend Micro Control Manager AdHocQuery_Processor.aspx SQL Injection
Critical	9 Feb 2016	26 Nov 2017	CPAI-2016-0068	Microsoft MS16-009	CVE-2016-0060	Microsoft Internet Explorer Memory Corruption (MS16-009: CVE-2016-0060)
High	8 Nov 2016	26 Nov 2017	CPAI-2016-0956	Microsoft MS16-142	CVE-2016-7195	Microsoft Browser Memory Corruption (MS16-142: CVE-2016-7195)
Critical	13 Dec 2016	26 Nov 2017	CPAI-2016-1067	Microsoft MS16-146	CVE-2016-7272	Microsoft Windows Graphics Remote Code Execution (MS16-146: CVE-2016-7272)
Critical	30 Oct 2016	20 Nov 2017	CPAI-2016-0872	AlienVault ENG-103449		AlienVault USM and OSSIM get_directive_kdb.php directive_id SQL Injection
Critical	13 Oct 2016	9 Nov 2017	CPAI-2016-0879	Adobe APSB16-33	CVE-2016-6946	Adobe Acrobat and Reader Use After Free (APSB16-33: CVE-2016-6946)
Critical	30 Aug 2016	24 Sep 2017	CPAI-2016-0776			Ransomware Shared Folder Access
High	25 May 2016	11 Sep 2017	CPAI-2016-0382			Suspicious Link Redirection JavaScript Phishing Attempt
Critical	13 Mar 2016	20 Aug 2017	CPAI-2016-0212	CheckPoint		Suspicious Mail Attachment Containing JavaScript Code
Critical	9 Aug 2016	20 Aug 2017	CPAI-2016-0667	Microsoft MS16-096	CVE-2016-3319 CVE-2017-0291	Microsoft Edge PDF Remote Code Execution (MS16-096: CVE-2016-3319; CVE-2017-0291)
Critical	12 Jan 2016	30 Jul 2017	CPAI-2016-0014	Microsoft MS16-006	CVE-2016-0034	Microsoft Silverlight Runtime Remote Code Execution (MS16-006: CVE-2016-0034)
High	25 Apr 2016	18 Jul 2017	CPAI-2016-0298			Suspicious Sender Mail Phishing Attempt
High	25 Jan 2016	16 Jul 2017	CPAI-2016-0039		CVE-2015-2196	WordPress Webdorado Spider Event Calendar Plugin SQL Injection (CVE-2015-2196)
High	26 Jan 2016	16 Jul 2017	CPAI-2016-0047		CVE-2015-2314	WordPress WPML Plugin SQL Injection (CVE-2015-2314)
Critical	18 Apr 2016	16 Jul 2017	CPAI-2016-0288		CVE-2016-0710	Apache Jetspeed SQL Injection (CVE-2016-0710)
Critical	3 May 2016	16 Jul 2017	CPAI-2016-0325			WordPress Ocim MP3 Plugin SQL Injection
High	24 May 2016	16 Jul 2017	CPAI-2016-0374			WordPress SP Projects and Document Manager Plugin SQL Injection
High	30 May 2016	16 Jul 2017	CPAI-2016-0404			WordPress Booking Calendar Contact Form Plugin SQL injection
Critical	10 Mar 2016	14 Jul 2017	CPAI-2016-0199		CVE-2015-3429	WordPress Genericons Cross-Site Scripting (CVE-2015-3429)
Critical	13 Mar 2016	14 Jul 2017	CPAI-2016-0921	CheckPoint		Suspicious HTTPS Gmail Mail Attachment Containing JavaScript Code
Critical	13 Mar 2016	14 Jul 2017	CPAI-2016-0920	CheckPoint		Suspicious HTTPS YAHOO Mail Attachment Containing JavaScript Code
High	3 May 2016	14 Jul 2017	CPAI-2016-0331			WordPress DZS Videogallery Plugin Cross-Site Scripting
High	3 May 2016	14 Jul 2017	CPAI-2016-0330			WordPress Captcha Plugin Cross-Site Scripting
High	4 Jul 2016	14 Jul 2017	CPAI-2016-0564	ESF		ESF pfSense squid_clwarn.php Cross Site Scripting
High	25 Jul 2016	14 Jul 2017	CPAI-2016-0650		CVE-2016-1564	WordPress Core Authenticated Cross-Site Scripting (CVE-2016-1564)
Medium	12 Jan 2016	5 Jul 2017	CPAI-2016-0011	Microsoft MS16-007	CVE-2016-0018	Microsoft Windows DLL Loading Remote Code Execution (MS16-007: CVE-2016-0018)
Critical	14 Jun 2016	5 Jul 2017	CPAI-2016-0449	Microsoft MS16-077	CVE-2016-3236	Microsoft Windows WPAD Proxy Discovery Elevation of Privilege (MS16-077; CVE-2016-3236)
Medium	7 Dec 2016	5 Jul 2017	CPAI-2016-1090	ISC AA-01434	CVE-2016-8864	ISC BIND DNAME Response Processing Denial of Service (CVE-2016-8864)