Home / 2016 Advisories Archive

2016 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	18 Aug 2016	26 Dec 2016	CPAI-2016-0713			Netsparker Web Scanner
Medium	18 Dec 2016	26 Dec 2016	CPAI-2016-1120		CVE-2016-8511	HPE Network Automation RPCServlet Insecure Deserialization (CVE-2016-8511)
Critical	8 Nov 2016	25 Dec 2016	CPAI-2016-0964	Microsoft MS16-132	CVE-2016-7205	Microsoft Windows Animation Manager Memory Corruption (MS16-132: CVE-2016-7205)
High	12 Dec 2016	25 Dec 2016	CPAI-2016-1105			PDF Shaper Conversion Buffer Overflow
High	13 Dec 2016	25 Dec 2016	CPAI-2016-1076	Microsoft MS16-145	CVE-2016-7286	Microsoft Edge Memory Corruption (MS16-145: CVE-2016-7286)
Critical	13 Sep 2016	22 Dec 2016	CPAI-2016-0769	Adobe APSB16-29	CVE-2016-4274	Adobe Flash Player Memory Corruption (APSB16-29: CVE-2016-4274)
Medium	30 Nov 2016	22 Dec 2016	CPAI-2016-1053			NodCMS edit_lang_file PHP Code Execution
High	13 Jun 2016	21 Dec 2016	CPAI-2016-0458			WordPress Pingback Denial Of Service
Medium	3 Nov 2016	20 Dec 2016	CPAI-2016-0991	Trend Micro	CVE-2016-6220	Trend Micro Control Manager Information Disclosure (CVE-2016-6220)
Critical	7 Dec 2016	20 Dec 2016	CPAI-2016-1091	Memcached	CVE-2016-8704	Memcached process_bin_append_prepend Integer Overflow (CVE-2016-8704)
Medium	3 Nov 2016	18 Dec 2016	CPAI-2016-0987	Nagios		Nagios Network Analyzer create Cross-Site Request Forgery
Critical	20 Sep 2016	15 Dec 2016	CPAI-2016-0816			SugarCRM REST Unserialize PHP Code Execution
Critical	24 Nov 2016	15 Dec 2016	CPAI-2016-1044			Joomla Suspicious File Upload
Medium	29 Nov 2016	15 Dec 2016	CPAI-2016-1052	Memcached	CVE-2016-8705	Memcached process_bin_update body_len Integer Overflow (CVE-2016-8705)
Critical	14 Dec 2016	15 Dec 2016	CPAI-2016-1098	Dell		Dell SonicWALL Universal Management Suite ImagePreviewServlet SQL Injection
Medium	3 Nov 2016	14 Dec 2016	CPAI-2016-0995			FreePBX Framework remotemod Parameter Remote Command Execution
Critical	11 Dec 2016	14 Dec 2016	CPAI-2016-1112	Adobe APSB16-39	CVE-2016-7873	Adobe Flash Player Memory Corruption (APSB16-39: CVE-2016-7873)
Critical	13 Dec 2016	14 Dec 2016	CPAI-2016-1104	Adobe APSB16-39	CVE-2016-7878	Adobe Flash Player Use After Free Code Execution (APSB16-39: CVE-2016-7878)
Critical	13 Dec 2016	14 Dec 2016	CPAI-2016-1107	Adobe APSB16-39	CVE-2016-7870	Adobe Flash Player Buffer Overflow (APSB16-39: CVE-2016-7870)
Critical	12 Jan 2016	13 Dec 2016	CPAI-2016-0007	Microsoft MS16-002	CVE-2016-0003	Microsoft Edge Memory Corruption (MS16-002: CVE-2016-0003)
Medium	12 Apr 2016	13 Dec 2016	CPAI-2016-0265	Microsoft MS16-038	CVE-2016-0161	Microsoft Edge Elevation of Privilege (MS16-038: CVE-2016-0161)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1055	Microsoft MS16-153	CVE-2016-7295	Microsoft Windows CLFS Driver Information Disclosure (MS16-153: CVE-2016-7295)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1064	Microsoft MS16-144	CVE-2016-7279	Microsoft Internet Explorer Memory Corruption (MS16-144: CVE-2016-7279)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1081	Microsoft MS16-145	CVE-2016-7280	Microsoft Browser Information Disclosure (MS16-145: CVE-2016-7280)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1059	Microsoft MS16-145	CVE-2016-7282	Microsoft Edge Security Feature Bypass (MS16-145: CVE-2016-7282)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1082	Microsoft MS16-149	CVE-2016-7219	Microsoft Windows Crypto Driver Information Disclosure (MS16-149: CVE-2016-7219)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1060	Microsoft MS16-148	CVE-2016-7275	Microsoft Office OLE DLL Side Loading (MS16-148: CVE-2016-7275)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1085	Microsoft MS16-148	CVE-2016-7276	Microsoft Office Information Disclosure (MS16-148: CVE-2016-7276)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1086	Microsoft MS16-148	CVE-2016-7277	Microsoft Office Memory Corruption (MS16-148: CVE-2016-7277)
Critical	13 Dec 2016	13 Dec 2016	CPAI-2016-1097	Adobe APSB16-39	CVE-2016-7868	Adobe Flash Player Buffer Overflow (APSB16-39: CVE-2016-7868)
Critical	13 Dec 2016	13 Dec 2016	CPAI-2016-1099	Adobe APSB16-39	CVE-2016-7877	Adobe Flash Player Use After Free Code Execution (APSB16-39: CVE-2016-7877)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1056	Microsoft MS16-148	CVE-2016-7268	Microsoft Office Information Disclosure (MS16-148: CVE-2016-7268)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1083	Microsoft MS16-151	CVE-2016-7260	Microsoft Windows Win32k Elevation of Privilege (MS16-151: CVE-2016-7260)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1073	Microsoft MS16-148	CVE-2016-7267	Microsoft Office Security Feature Bypass (MS16-148: CVE-2016-7267)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1074	Microsoft MS16-146	CVE-2016-7257	Microsoft Windows GDI Information Disclosure (MS16-146: CVE-2016-7257)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1062	Microsoft MS16-148	CVE-2016-7265	Microsoft Office Information Disclosure (MS16-148: CVE-2016-7265)
Critical	13 Dec 2016	13 Dec 2016	CPAI-2016-1070	Microsoft MS16-145	CVE-2016-7296	Microsoft Edge Memory Corruption (MS16-145: CVE-2016-7296)
Critical	13 Dec 2016	12 Dec 2016	CPAI-2016-1106	Adobe APSB16-39	CVE-2016-7869	Adobe Flash Player Buffer Overflow (APSB16-39: CVE-2016-7869)
Medium	1 Dec 2016	11 Dec 2016	CPAI-2016-1069	FFmpeg	CVE-2016-5199	FFmpeg mov_read_keys Integer Overflow (CVE-2016-5199)
Medium	8 Dec 2016	11 Dec 2016	CPAI-2016-1094	Memcached	CVE-2016-8706	Memcached process_bin_sasl_auth Integer Underflow (CVE-2016-8706)
Critical	5 Oct 2016	8 Dec 2016	CPAI-2016-0873		CVE-2016-2776	DNS Server Bind 9 Response Message Rendering Denial of Service (CVE-2016-2776)
High	14 Nov 2016	8 Dec 2016	CPAI-2016-1092	Trend Micro 1114913	CVE-2016-6267	Trend Micro Smart Protection Server admin_notification.php Command Injection (CVE-2016-6267)
High	6 Dec 2016	8 Dec 2016	CPAI-2016-1048		CVE-2013-0209	Movable Type Web Upgrade Remote Code Execution (CVE-2013-0209)
Critical	8 Dec 2016	8 Dec 2016	CPAI-2016-1095		CVE-2015-6522	WordPress Symposium Plugin SQL Injection (CVE-2015-6522)
Critical	8 Dec 2016	8 Dec 2016	CPAI-2016-1093			WordPress Answer My Question Plugin SQL Injection
Medium	16 Jun 2016	7 Dec 2016	CPAI-2016-0490	Apache	CVE-2016-0711	Apache Jetspeed PageManagementService Cross-Site Scripting (CVE-2016-0711)
Medium	26 Jun 2016	6 Dec 2016	CPAI-2016-0520			Suspicious Webpage JavaScript Downloader
Medium	1 Nov 2016	6 Dec 2016	CPAI-2016-0971	Squid Project SQUID-2016:9	CVE-2016-4555	Squid Proxy ESI Response Processing Denial of Service (CVE-2016-4555)
Critical	1 Dec 2016	1 Dec 2016	CPAI-2016-1061			Eir D1000 Routers Remote Code Execution
Critical	8 Mar 2016	29 Nov 2016	CPAI-2016-0154	Microsoft MS16-028	CVE-2016-0118	Microsoft Windows PDF Library Remote Code Execution (MS16-028: CVE-2016-0118)