Home / 2016 Advisories Archive

2016 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	3 Nov 2016	18 Dec 2016	CPAI-2016-0987	Nagios		Nagios Network Analyzer create Cross-Site Request Forgery
Critical	20 Sep 2016	15 Dec 2016	CPAI-2016-0816			SugarCRM REST Unserialize PHP Code Execution
Critical	24 Nov 2016	15 Dec 2016	CPAI-2016-1044			Joomla Suspicious File Upload
Medium	29 Nov 2016	15 Dec 2016	CPAI-2016-1052	Memcached	CVE-2016-8705	Memcached process_bin_update body_len Integer Overflow (CVE-2016-8705)
Critical	14 Dec 2016	15 Dec 2016	CPAI-2016-1098	Dell		Dell SonicWALL Universal Management Suite ImagePreviewServlet SQL Injection
Medium	3 Nov 2016	14 Dec 2016	CPAI-2016-0995			FreePBX Framework remotemod Parameter Remote Command Execution
Critical	11 Dec 2016	14 Dec 2016	CPAI-2016-1112	Adobe APSB16-39	CVE-2016-7873	Adobe Flash Player Memory Corruption (APSB16-39: CVE-2016-7873)
Critical	13 Dec 2016	14 Dec 2016	CPAI-2016-1104	Adobe APSB16-39	CVE-2016-7878	Adobe Flash Player Use After Free Code Execution (APSB16-39: CVE-2016-7878)
Critical	13 Dec 2016	14 Dec 2016	CPAI-2016-1107	Adobe APSB16-39	CVE-2016-7870	Adobe Flash Player Buffer Overflow (APSB16-39: CVE-2016-7870)
Critical	12 Jan 2016	13 Dec 2016	CPAI-2016-0007	Microsoft MS16-002	CVE-2016-0003	Microsoft Edge Memory Corruption (MS16-002: CVE-2016-0003)
Medium	12 Apr 2016	13 Dec 2016	CPAI-2016-0265	Microsoft MS16-038	CVE-2016-0161	Microsoft Edge Elevation of Privilege (MS16-038: CVE-2016-0161)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1055	Microsoft MS16-153	CVE-2016-7295	Microsoft Windows CLFS Driver Information Disclosure (MS16-153: CVE-2016-7295)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1064	Microsoft MS16-144	CVE-2016-7279	Microsoft Internet Explorer Memory Corruption (MS16-144: CVE-2016-7279)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1081	Microsoft MS16-145	CVE-2016-7280	Microsoft Browser Information Disclosure (MS16-145: CVE-2016-7280)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1059	Microsoft MS16-145	CVE-2016-7282	Microsoft Edge Security Feature Bypass (MS16-145: CVE-2016-7282)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1082	Microsoft MS16-149	CVE-2016-7219	Microsoft Windows Crypto Driver Information Disclosure (MS16-149: CVE-2016-7219)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1060	Microsoft MS16-148	CVE-2016-7275	Microsoft Office OLE DLL Side Loading (MS16-148: CVE-2016-7275)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1085	Microsoft MS16-148	CVE-2016-7276	Microsoft Office Information Disclosure (MS16-148: CVE-2016-7276)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1086	Microsoft MS16-148	CVE-2016-7277	Microsoft Office Memory Corruption (MS16-148: CVE-2016-7277)
Critical	13 Dec 2016	13 Dec 2016	CPAI-2016-1097	Adobe APSB16-39	CVE-2016-7868	Adobe Flash Player Buffer Overflow (APSB16-39: CVE-2016-7868)
Critical	13 Dec 2016	13 Dec 2016	CPAI-2016-1099	Adobe APSB16-39	CVE-2016-7877	Adobe Flash Player Use After Free Code Execution (APSB16-39: CVE-2016-7877)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1056	Microsoft MS16-148	CVE-2016-7268	Microsoft Office Information Disclosure (MS16-148: CVE-2016-7268)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1083	Microsoft MS16-151	CVE-2016-7260	Microsoft Windows Win32k Elevation of Privilege (MS16-151: CVE-2016-7260)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1073	Microsoft MS16-148	CVE-2016-7267	Microsoft Office Security Feature Bypass (MS16-148: CVE-2016-7267)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1074	Microsoft MS16-146	CVE-2016-7257	Microsoft Windows GDI Information Disclosure (MS16-146: CVE-2016-7257)
High	13 Dec 2016	13 Dec 2016	CPAI-2016-1062	Microsoft MS16-148	CVE-2016-7265	Microsoft Office Information Disclosure (MS16-148: CVE-2016-7265)
Critical	13 Dec 2016	13 Dec 2016	CPAI-2016-1070	Microsoft MS16-145	CVE-2016-7296	Microsoft Edge Memory Corruption (MS16-145: CVE-2016-7296)
Critical	13 Dec 2016	12 Dec 2016	CPAI-2016-1106	Adobe APSB16-39	CVE-2016-7869	Adobe Flash Player Buffer Overflow (APSB16-39: CVE-2016-7869)
Medium	1 Dec 2016	11 Dec 2016	CPAI-2016-1069	FFmpeg	CVE-2016-5199	FFmpeg mov_read_keys Integer Overflow (CVE-2016-5199)
Medium	8 Dec 2016	11 Dec 2016	CPAI-2016-1094	Memcached	CVE-2016-8706	Memcached process_bin_sasl_auth Integer Underflow (CVE-2016-8706)
Critical	5 Oct 2016	8 Dec 2016	CPAI-2016-0873		CVE-2016-2776	DNS Server Bind 9 Response Message Rendering Denial of Service (CVE-2016-2776)
High	14 Nov 2016	8 Dec 2016	CPAI-2016-1092	Trend Micro 1114913	CVE-2016-6267	Trend Micro Smart Protection Server admin_notification.php Command Injection (CVE-2016-6267)
High	6 Dec 2016	8 Dec 2016	CPAI-2016-1048		CVE-2013-0209	Movable Type Web Upgrade Remote Code Execution (CVE-2013-0209)
Critical	8 Dec 2016	8 Dec 2016	CPAI-2016-1095		CVE-2015-6522	WordPress Symposium Plugin SQL Injection (CVE-2015-6522)
Critical	8 Dec 2016	8 Dec 2016	CPAI-2016-1093			WordPress Answer My Question Plugin SQL Injection
Medium	16 Jun 2016	7 Dec 2016	CPAI-2016-0490	Apache	CVE-2016-0711	Apache Jetspeed PageManagementService Cross-Site Scripting (CVE-2016-0711)
Medium	26 Jun 2016	6 Dec 2016	CPAI-2016-0520			Suspicious Webpage JavaScript Downloader
Medium	1 Nov 2016	6 Dec 2016	CPAI-2016-0971	Squid Project SQUID-2016:9	CVE-2016-4555	Squid Proxy ESI Response Processing Denial of Service (CVE-2016-4555)
Critical	1 Dec 2016	1 Dec 2016	CPAI-2016-1061			Eir D1000 Routers Remote Code Execution
Critical	8 Mar 2016	29 Nov 2016	CPAI-2016-0154	Microsoft MS16-028	CVE-2016-0118	Microsoft Windows PDF Library Remote Code Execution (MS16-028: CVE-2016-0118)
Medium	19 Sep 2016	29 Nov 2016	CPAI-2016-0808	Nagios		Nagios Network Analyzer Report Generator Command Injection
Critical	28 Nov 2016	29 Nov 2016	CPAI-2016-1050		CVE-2012-5088	Java Applet Method Handle Remote Code Execution (CVE-2012-5088)
Critical	21 Nov 2016	27 Nov 2016	CPAI-2016-1046			Social Media Infected Image File (ImageGate)
Medium	23 Nov 2016	24 Nov 2016	CPAI-2016-1042		CVE-2013-3502	GroundWork monarch_scan.cgi OS Command Injection (CVE-2013-3502)
Critical	23 Nov 2016	24 Nov 2016	CPAI-2016-1041			ShadowGate Redirector
High	17 Mar 2016	22 Nov 2016	CPAI-2016-0214			Jorgee Security Scanner
Critical	20 Sep 2016	22 Nov 2016	CPAI-2016-0795		CVE-2016-6662 CVE-2016-6663 CVE-2016-6664	MySQL Remote Code Execution (CVE-2016-6662; CVE-2016-6663; CVE-2016-6664)
High	25 Sep 2016	22 Nov 2016	CPAI-2016-0832	Metasploit	CVE-2015-2857	Accellion FTA getStatus verify_oauth_token Command Execution (CVE-2015-2857)
High	26 Sep 2016	22 Nov 2016	CPAI-2016-0824	Metasploit	CVE-2015-1592	SixApart MovableType Storable Perl Code Execution (CVE-2015-1592)
High	8 Nov 2016	22 Nov 2016	CPAI-2016-0945	Microsoft MS16-129	CVE-2016-7240	Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7240)