Home / 2016 Advisories Archive

2016 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	31 Aug 2016	23 Mar 2017	CPAI-2016-0734	Metasploit	CVE-2010-4742	MOXA MediaDBPlayback ActiveX Control Buffer Overflow (CVE-2010-4742)
Critical	27 Jun 2016	21 Mar 2017	CPAI-2016-0527		CVE-2013-6935	VideoCharge Software Watermark Master (CVE-2013-6935)
Critical	7 Jun 2016	14 Mar 2017	CPAI-2016-0444			WordPress Simple Backup Plugin Unauthorized File Access
High	18 Oct 2016	7 Mar 2017	CPAI-2016-0811		CVE-2016-7479	PHP 7 Unserialization Malicious toString Remote Code Execution (CVE-2016-7479)
Medium	18 Oct 2016	7 Mar 2017	CPAI-2016-0812	PHP Group 73093	CVE-2016-7478	PHP 7 Unserialization Exception Infinite Loop Denial of Service (CVE-2016-7478)
High	20 Mar 2016	27 Feb 2017	CPAI-2016-0218		CVE-2005-1213	Microsoft Outlook Express NNTP handler Buffer Overflow (CVE-2005-1213)
Critical	15 Mar 2016	8 Feb 2017	CPAI-2006-105			Microsoft Office RTF Malicious Known Variables
Critical	30 Jun 2016	1 Feb 2017	CPAI-2016-0549		CVE-2001-0241	Microsoft IIS 5.0 ISAPI Internet Printing Protocol Extension Buffer Overflow - ver 2 (CVE-2001-0241)
Critical	30 Jun 2016	1 Feb 2017	CPAI-2016-0550		CVE-2004-1050	Internet Explorer Malformed IFRAME Buffer Overflow - ver 2 (CVE-2004-1050)
Critical	13 Dec 2016	1 Feb 2017	CPAI-2016-1078	Microsoft MS16-147	CVE-2016-7274	Microsoft Windows Uniscribe Remote Code Execution (MS16-147: CVE-2016-7274)
Critical	24 Nov 2016	31 Jan 2017	CPAI-2016-1045			SVG Javascript Nemucod Downloader
High	13 Dec 2016	29 Jan 2017	CPAI-2016-1084	Microsoft MS16-145	CVE-2016-7287	Microsoft Browser Scripting Engine Memory Corruption (MS16-145: CVE-2016-7287)
High	27 Dec 2016	23 Jan 2017	CPAI-2017-0063	Microsft MS16-130	CVE-2016-7222	Microsoft Task Scheduler Elevation of Privilege (MS16-130: CVE-2016-7222)
High	27 Dec 2016	23 Jan 2017	CPAI-2017-0062	Microsoft MS16-130	CVE-2016-7221	Microsoft Windows IME Elevation of Privilege (MS16-130: CVE-2016-7221)
Medium	13 Dec 2016	19 Jan 2017	CPAI-2016-1057	Microsoft MS16-145	CVE-2016-7206	Microsoft Browser Information Disclosure (MS16-145: CVE-2016-7206)
Medium	14 Jun 2016	12 Jan 2017	CPAI-2016-0434	Microsoft MS16-080	CVE-2016-3215	Microsoft Windows PDF Library Information Disclosure (MS16-080: CVE-2016-3215)
Critical	6 Dec 2016	12 Jan 2017	CPAI-2016-1089	OpenSSL 20160926	CVE-2016-6309	OpenSSL tls_get_message_body Function init_msg Structure Use After Free (CVE-2016-6309)
Medium	20 Mar 2016	11 Jan 2017	CPAI-2016-0219	Autodesk	CVE-2015-8572	Autodesk Design Review GIF GlobalColorTable DataSubBlock Buffer Overflow (CVE-2015-8572)
Critical	27 Jun 2016	11 Jan 2017	CPAI-2016-0529	Adobe APSB16-14	CVE-2016-1078	Adobe Acrobat and Reader Information Disclosure (APSB16-14: CVE-2016-1078)
Critical	8 Nov 2016	11 Jan 2017	CPAI-2016-0958	Microsoft MS16-130	CVE-2016-7212	Microsoft Windows File Manager Remote Code Execution (MS16-130: CVE-2016-7212)
Critical	23 Nov 2016	11 Jan 2017	CPAI-2016-1040		CVE-2016-7434	NTP Daemon _IO_str_init_static_internal Denial of Service (CVE-2016-7434)
N/A	26 Dec 2016	11 Jan 2017	CPAI-2016-1127			SSL TLS_FALLBACK_SCSV Cipher Suite
Critical	9 Aug 2016	8 Jan 2017	CPAI-2016-0676	Microsoft MS16-097	CVE-2016-3301 CVE-2016-3303	Microsoft Windows Graphics Component Remote Code Execution (MS16-097: CVE-2016-3301; CVE-2016-3303)
High	13 Dec 2016	8 Jan 2017	CPAI-2016-1071	Microsoft MS16-148	CVE-2016-7264	Microsoft Office Information Disclosure (MS16-148: CVE-2016-7264)
Critical	1 Jun 2016	5 Jan 2017	CPAI-2016-0425		CVE-2015-2794	DotNetNuke Administration Authentication Bypass (CVE-2015-2794)
High	13 Sep 2016	4 Jan 2017	CPAI-2016-0745	Microsoft MS16-104	CVE-2016-3351	Microsoft Browser Information Disclosure (MS16-104: CVE-2016-3351)
Critical	19 Dec 2016	4 Jan 2017	CPAI-2016-1118		CVE-2008-6976	MikroTik RouterOS SNMP Security Bypass (CVE-2008-6976)
High	20 Dec 2016	3 Jan 2017	CPAI-2017-0002		CVE-2015-2350	MikroTik RouterOS Admin Password Change (CVE-2015-2350)
Critical	22 Dec 2016	3 Jan 2017	CPAI-2016-1122			WordPress WooCommerce Tax Rates Cross-Site Scripting
Critical	26 Dec 2016	3 Jan 2017	CPAI-2016-1126		CVE-2012-6050	Mikrotik Router Remote Denial Of Service (CVE-2012-6050)
High	29 Dec 2016	2 Jan 2017	CPAI-2016-1134		CVE-2016-8707	Imagemagick Compressed TIFF File Conversion Remote Code Execution (CVE-2016-8707)
Critical	8 Nov 2016	29 Dec 2016	CPAI-2016-0941	Microsoft MS16-129	CVE-2016-7242	Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7242)
High	27 Nov 2016	29 Dec 2016	CPAI-2016-1047	Metasploit	CVE-2012-4869	FreePBX callmenum Remote Code Execution (CVE-2012-4869)
Critical	14 Dec 2016	29 Dec 2016	CPAI-2016-1072	Adobe APSB16-33	CVE-2016-7854	Adobe Reader DC JPEG2000 Out-of-Bounds Read (CVE-2016-7854)
High	15 Dec 2016	29 Dec 2016	CPAI-2016-1119	Microsoft MS16-35	CVE-2016-7218	Microsoft Bowser.sys Information Disclosure (MS16-135: CVE-2016-7218)
Critical	25 Dec 2016	29 Dec 2016	CPAI-2016-1125	3CX		3CX Phone System VAD_Deploy.aspx Arbitrary File Upload
Critical	18 Oct 2016	28 Dec 2016	CPAI-2016-0953	Adobe APSB16-33	CVE-2016-6944	Adobe Acrobat and Reader Use-After-Free Code Execution (APSB16-33: CVE-2016-6944)
High	8 Nov 2016	28 Dec 2016	CPAI-2016-0963	Microsoft MS16-129	CVE-2016-7241	Microsoft Browser Remote Code Execution (MS16-129: CVE-2016-7241)
Medium	13 Dec 2016	28 Dec 2016	CPAI-2016-1058	Microsoft MS16-148	CVE-2016-7262	Microsoft Office Security Feature Bypass (MS16-148: CVE-2016-7262)
Medium	7 Feb 2016	27 Dec 2016	CPAI-2016-0081	Apple L4356	CVE-2014-2856 CVE-2015-1159	Apple CUPS Web Interface URL Handling Cross-Site Scripting - ver 2 (CVE-2014-2856; CVE-2015-1159)
High	18 Aug 2016	26 Dec 2016	CPAI-2016-0713			Netsparker Web Scanner
Medium	18 Dec 2016	26 Dec 2016	CPAI-2016-1120		CVE-2016-8511	HPE Network Automation RPCServlet Insecure Deserialization (CVE-2016-8511)
Critical	8 Nov 2016	25 Dec 2016	CPAI-2016-0964	Microsoft MS16-132	CVE-2016-7205	Microsoft Windows Animation Manager Memory Corruption (MS16-132: CVE-2016-7205)
High	12 Dec 2016	25 Dec 2016	CPAI-2016-1105			PDF Shaper Conversion Buffer Overflow
High	13 Dec 2016	25 Dec 2016	CPAI-2016-1076	Microsoft MS16-145	CVE-2016-7286	Microsoft Edge Memory Corruption (MS16-145: CVE-2016-7286)
Critical	13 Sep 2016	22 Dec 2016	CPAI-2016-0769	Adobe APSB16-29	CVE-2016-4274	Adobe Flash Player Memory Corruption (APSB16-29: CVE-2016-4274)
Medium	30 Nov 2016	22 Dec 2016	CPAI-2016-1053			NodCMS edit_lang_file PHP Code Execution
High	13 Jun 2016	21 Dec 2016	CPAI-2016-0458			WordPress Pingback Denial Of Service
Medium	3 Nov 2016	20 Dec 2016	CPAI-2016-0991	Trend Micro	CVE-2016-6220	Trend Micro Control Manager Information Disclosure (CVE-2016-6220)
Critical	7 Dec 2016	20 Dec 2016	CPAI-2016-1091	Memcached	CVE-2016-8704	Memcached process_bin_append_prepend Integer Overflow (CVE-2016-8704)