Home / 2016 Advisories Archive

2016 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	22 Sep 2016	15 Jan 2018	CPAI-2016-0821		CVE-2016-6304	OpenSSL OCSP Extension Unbounded Memory Denial of Service (CVE-2016-6304)
Critical	28 Jun 2016	11 Jan 2018	CPAI-2016-0532	Adobe APSB16-14	CVE-2016-1080	Adobe Reader and Acrobat Information Disclosure (APSB16-14: CVE-2016-1080)
High	10 May 2016	2 Jan 2018	CPAI-2016-0348	Microsoft ms16-049	CVE-2016-0150	Microsoft HTTP.sys HTTP 2.0 Denial of Service (MS16-049; CVE-2016-0150)
Critical	21 Jan 2016	26 Dec 2017	CPAI-2016-0033	Adobe APSB16-02	CVE-2016-0933	Adobe Acrobat and Reader Memory Corruption (APSB16-02: CVE-2016-0933)
Critical	22 Aug 2016	17 Dec 2017	CPAI-2016-0718	Cisco cisco-sa-20160406-remcode	CVE-2016-1291	Cisco Prime Infrastructure and EPNM Deserialization Code Execution (CVE-2016-1291)
Medium	21 Sep 2016	3 Dec 2017	CPAI-2016-0817	TrendMicro		Trend Micro Control Manager TreeUserControl_process_tree_event Information Disclosure
N/A	25 Sep 2016	3 Dec 2017	CPAI-2016-0822		CVE-2016-2183	Weak SSL 3DES Cipher Suites (CVE-2016-2183)
High	27 Oct 2016	3 Dec 2017	CPAI-2016-0949	Op5		op5 Monitor command_test.php Command Injection
Medium	19 Sep 2016	29 Nov 2017	CPAI-2016-0809	Trend Micro		Trend Micro Control Manager AdHocQuery_Processor.aspx SQL Injection
Critical	9 Feb 2016	26 Nov 2017	CPAI-2016-0068	Microsoft MS16-009	CVE-2016-0060	Microsoft Internet Explorer Memory Corruption (MS16-009: CVE-2016-0060)
High	8 Nov 2016	26 Nov 2017	CPAI-2016-0956	Microsoft MS16-142	CVE-2016-7195	Microsoft Browser Memory Corruption (MS16-142: CVE-2016-7195)
Critical	13 Dec 2016	26 Nov 2017	CPAI-2016-1067	Microsoft MS16-146	CVE-2016-7272	Microsoft Windows Graphics Remote Code Execution (MS16-146: CVE-2016-7272)
Critical	30 Oct 2016	20 Nov 2017	CPAI-2016-0872	AlienVault ENG-103449		AlienVault USM and OSSIM get_directive_kdb.php directive_id SQL Injection
Critical	5 Jun 2016	15 Nov 2017	CPAI-2016-0436			WordPress WP Mobile Detector Plugin Arbitrary File Upload
Critical	13 Oct 2016	9 Nov 2017	CPAI-2016-0879	Adobe APSB16-33	CVE-2016-6946	Adobe Acrobat and Reader Use After Free (APSB16-33: CVE-2016-6946)
Critical	30 Aug 2016	24 Sep 2017	CPAI-2016-0776			Ransomware Shared Folder Access
High	25 May 2016	11 Sep 2017	CPAI-2016-0382			Suspicious Link Redirection JavaScript Phishing Attempt
Critical	13 Mar 2016	20 Aug 2017	CPAI-2016-0212	CheckPoint		Suspicious Mail Attachment Containing JavaScript Code
Critical	9 Aug 2016	20 Aug 2017	CPAI-2016-0667	Microsoft MS16-096	CVE-2016-3319 CVE-2017-0291	Microsoft Edge PDF Remote Code Execution (MS16-096: CVE-2016-3319; CVE-2017-0291)
Critical	12 Jan 2016	30 Jul 2017	CPAI-2016-0014	Microsoft MS16-006	CVE-2016-0034	Microsoft Silverlight Runtime Remote Code Execution (MS16-006: CVE-2016-0034)
High	25 Apr 2016	18 Jul 2017	CPAI-2016-0298			Suspicious Sender Mail Phishing Attempt
High	25 Jan 2016	16 Jul 2017	CPAI-2016-0039		CVE-2015-2196	WordPress Webdorado Spider Event Calendar Plugin SQL Injection (CVE-2015-2196)
High	26 Jan 2016	16 Jul 2017	CPAI-2016-0047		CVE-2015-2314	WordPress WPML Plugin SQL Injection (CVE-2015-2314)
Critical	18 Apr 2016	16 Jul 2017	CPAI-2016-0288		CVE-2016-0710	Apache Jetspeed SQL Injection (CVE-2016-0710)
Critical	3 May 2016	16 Jul 2017	CPAI-2016-0325			WordPress Ocim MP3 Plugin SQL Injection
High	24 May 2016	16 Jul 2017	CPAI-2016-0374			WordPress SP Projects and Document Manager Plugin SQL Injection
High	30 May 2016	16 Jul 2017	CPAI-2016-0404			WordPress Booking Calendar Contact Form Plugin SQL injection
High	13 Dec 2016	16 Jul 2017	CPAI-2016-1066	Microsoft MS16-145	CVE-2016-7288	Microsoft Edge Use After Free (MS16-145: CVE-2016-7288)
Critical	10 Mar 2016	14 Jul 2017	CPAI-2016-0199		CVE-2015-3429	WordPress Genericons Cross-Site Scripting (CVE-2015-3429)
Critical	13 Mar 2016	14 Jul 2017	CPAI-2016-0921	CheckPoint		Suspicious HTTPS Gmail Mail Attachment Containing JavaScript Code
Critical	13 Mar 2016	14 Jul 2017	CPAI-2016-0920	CheckPoint		Suspicious HTTPS YAHOO Mail Attachment Containing JavaScript Code
High	3 May 2016	14 Jul 2017	CPAI-2016-0331			WordPress DZS Videogallery Plugin Cross-Site Scripting
High	3 May 2016	14 Jul 2017	CPAI-2016-0330			WordPress Captcha Plugin Cross-Site Scripting
High	4 Jul 2016	14 Jul 2017	CPAI-2016-0564	ESF		ESF pfSense squid_clwarn.php Cross Site Scripting
High	25 Jul 2016	14 Jul 2017	CPAI-2016-0650		CVE-2016-1564	WordPress Core Authenticated Cross-Site Scripting (CVE-2016-1564)
Medium	12 Jan 2016	5 Jul 2017	CPAI-2016-0011	Microsoft MS16-007	CVE-2016-0018	Microsoft Windows DLL Loading Remote Code Execution (MS16-007: CVE-2016-0018)
Critical	14 Jun 2016	5 Jul 2017	CPAI-2016-0449	Microsoft MS16-077	CVE-2016-3236	Microsoft Windows WPAD Proxy Discovery Elevation of Privilege (MS16-077; CVE-2016-3236)
Medium	7 Dec 2016	5 Jul 2017	CPAI-2016-1090	ISC AA-01434	CVE-2016-8864	ISC BIND DNAME Response Processing Denial of Service (CVE-2016-8864)
High	10 May 2016	27 Jun 2017	CPAI-2016-0312	Microsoft MS16-062	CVE-2016-0174	Microsoft Windows Win32k Elevation of Privilege (MS16-062: CVE-2016-0174)
Critical	13 Dec 2016	14 Jun 2017	CPAI-2016-1075	Microsoft MS16-148	CVE-2016-7289	Microsoft Office Memory Corruption (MS16-148: CVE-2016-7289)
Medium	20 Dec 2016	14 Jun 2017	CPAI-2016-1121	Google	CVE-2016-5182	Google Chrome Blink ImageBitmap Integer Overflow (CVE-2016-5182)
Critical	9 Aug 2016	13 Jun 2017	CPAI-2016-0679	Microsoft Microsoft MS16-099 CVE-2017-8510	CVE-2016-3318 CVE-2017-8510	Microsoft Graphics Component Memory Corruption (MS16-099: CVE-2016-3318; CVE-2017-8510)
Medium	21 Aug 2016	5 Jun 2017	CPAI-2016-0717	PHP Group	CVE-2016-6292	PHP Exif_Process_User_Comment Null Pointer Dereference (CVE-2016-6292)
High	29 Jun 2016	29 May 2017	CPAI-2016-0463			WordPress xmlrpc Weak Password Access Attempt
Critical	9 Aug 2016	17 May 2017	CPAI-2016-0666	Microsoft MS16-097	CVE-2016-3304	Microsoft Windows Graphics Component Remote Code Execution (MS16-097: CVE-2016-3304)
Critical	11 Oct 2016	14 May 2017	CPAI-2016-0833	Microsoft MS16-118	CVE-2016-3331	Microsoft Browser Memory Corruption (MS16-118: CVE-2016-3331)
Critical	11 Oct 2016	10 May 2017	CPAI-2016-0866	Microsoft MS16-121	CVE-2016-7193	Microsoft Office Memory Corruption (MS16-121: CVE-2016-7193)
Critical	6 Oct 2016	23 Apr 2017	CPAI-2016-0870		CVE-2016-7572	Drupal Sensitive Core Files Information Disclosure (CVE-2016-7572)
High	13 Dec 2016	13 Apr 2017	CPAI-2016-1079	Microsoft MS16-151	CVE-2016-7259	Microsoft Windows Win32k Elevation of Privilege (MS16-151: CVE-2016-7259)
Medium	28 Dec 2016	12 Apr 2017	CPAI-2016-1132	Vim	CVE-2016-1248	Vim modelines Remote Command Execution (CVE-2016-1248)