Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	2 Jul 2017	6 Aug 2017	CPAI-2017-0544	Trend Micro		Trend Micro IWSVA DeploymentWizardAction GetClusterInfo Command Injection
Critical	6 Aug 2017	6 Aug 2017	CPAI-2017-0667			Dahua IoT Devices Backdoor Unauthorized Access
High	1 Aug 2017	2 Aug 2017	CPAI-2017-0599	ExploitDB	CVE-2017-11346	ManageEngine Desktop Central Remote Code Execution (CVE-2017-11346)
Medium	19 Jul 2017	31 Jul 2017	CPAI-2017-0583	Microsoft	CVE-2017-8557	Microsoft Windows System Information Console XXE Injection Information Disclosure (CVE-2017-8557)
Critical	20 Jul 2017	31 Jul 2017	CPAI-2017-0577	Metasploit	CVE-2017-6326	Symantec Messaging Gateway remote code execution (CVE-2017-6326)
Medium	23 Jul 2017	31 Jul 2017	CPAI-2017-0585	Cisco	CVE-2017-6699	Cisco Prime Infrastructure and EPNM multiple functions Cross Site Scripting (CVE-2017-6699)
High	16 Feb 2017	30 Jul 2017	CPAI-2017-0132			Suspicious Malvertising Redirection
Medium	25 Jul 2017	27 Jul 2017	CPAI-2017-0587	ISC AA-01495	CVE-2017-3140	ISC BIND RPZ Query Processing Denial of Service (CVE-2017-3140)
High	18 Jun 2017	26 Jul 2017	CPAI-2017-0511	AlienVault		AlienVault USM and OSSIM fqdn get_fqdn Command Injection
Critical	3 Jul 2017	25 Jul 2017	CPAI-2017-0546			WordPress Statistics Plugin SQL Injection
Medium	23 Jul 2017	25 Jul 2017	CPAI-2017-0580		CVE-2017-9782	JasPer jp2_decode Out of Bounds Read (CVE-2017-9782)
High	19 Jan 2017	24 Jul 2017	CPAI-2017-0056			Same-Source Weak Password Scan Over HTTP
Critical	2 Jul 2017	24 Jul 2017	CPAI-2017-0543			Suspicious URL Padding Evasion Technique
Critical	9 Jul 2017	23 Jul 2017	CPAI-2017-0558		CVE-2017-9791	Apache Struts2 Struts1_Plugin Remote Code Execution (CVE-2017-9791)
Medium	17 Jul 2017	20 Jul 2017	CPAI-2017-0570	Schneider Electric SEVD-2017-178-01	CVE-2017-7973	Schneider Electric U.motion Builder localize.php SQL Injection (CVE-2017-7973)
Critical	18 Jun 2017	19 Jul 2017	CPAI-2017-0510	Metasploit		Marathon UI Docker Command Execution
Medium	17 Jul 2017	19 Jul 2017	CPAI-2017-0573	StrongSwan	CVE-2017-9023	strongSwan x509 Plugin Denial of Service (CVE-2017-9023)
Critical	8 May 2017	17 Jul 2017	CPAI-2017-0394		CVE-2017-2641	Moodle Remote Code Execution (CVE-2017-2641)
Medium	16 Jul 2017	17 Jul 2017	CPAI-2017-0568	Systemd	CVE-2017-9445	Systemd resolved dns_packet_new Heap Buffer Overflow (CVE-2017-9445)
Critical	17 Jul 2017	17 Jul 2017	CPAI-2017-0569		CVE-2017-2245	WordPress Shortcodes Ultimate Plugin Authenticated Directory Traversal (CVE-2017-2245)
Medium	7 Jun 2017	16 Jul 2017	CPAI-2017-0475	HPE	CVE-2017-5810	HPE Network Automation RedirectServlet SQL Injection (CVE-2017-5810)
Medium	11 Jun 2017	16 Jul 2017	CPAI-2017-0506	Trend Micro		Trend Micro SafeSync for Enterprise deviceTool.pm get_device_info SQL Injection
Medium	11 Jun 2017	16 Jul 2017	CPAI-2017-0502	Trend Micro 1116749		Trend Micro SafeSync for Enterprise deviceTool.pm get_nic_device SQL Injection
Medium	5 Jun 2017	14 Jul 2017	CPAI-2017-0466	MantisBT 22579	CVE-2017-7309	Mantis MantisBT Bug Tracker adm_config_report.php move_attachments_page.php XSS (CVE-2017-7309)
Critical	7 May 2017	13 Jul 2017	CPAI-2017-0393		CVE-2017-7985	Joomla Core Sterilizer Cross-Site Scripting Filter Privilege Escalation (CVE-2017-7985)
Critical	7 May 2017	13 Jul 2017	CPAI-2017-0387		CVE-2017-7986	Joomla Core HTML Attributes Cross-Site Scripting Filter Privilege Escalation (CVE-2017-7986)
Medium	27 Jun 2017	13 Jul 2017	CPAI-2017-0529		CVE-2017-7974	Schneider Electric U.motion Builder runscript.php Directory Traversal (CVE-2017-7974)
Critical	11 Jul 2017	13 Jul 2017	CPAI-2017-0562		CVE-2017-3143	ISC BIND TSIG Authentication Bypass (CVE-2017-3143)
Critical	13 Jul 2017	13 Jul 2017	CPAI-2017-0563	Microsoft	CVE-2017-8487	Microsoft Windows OLE Global Buffer Overflow (CVE-2017-8487)
Medium	19 Jun 2017	12 Jul 2017	CPAI-2017-0517		CVE-2017-7974	Schneider Electric U.motion Builder css.inc.php Arbitrary File Inclusion (CVE-2017-7974)
Medium	21 Jun 2017	12 Jul 2017	CPAI-2017-0520		CVE-2017-7973	Schneider Electric U.motion Builder loadtemplate.php SQL Injection (CVE-2017-7973)
Medium	6 Jul 2017	12 Jul 2017	CPAI-2017-0554		CVE-2017-7973	Schneider Electric U.motion Builder track_import_export.php SQL Injection (CVE-2017-7973)
Critical	11 Jul 2017	11 Jul 2017	CPAI-2017-0556	Adobe APSB17-21	CVE-2017-3099	Adobe Flash Player Information Disclosure (APSB17-21: CVE-2017-3099)
Critical	11 Jul 2017	11 Jul 2017	CPAI-2017-0557	Adobe APSB17-21	CVE-2017-3080	Adobe Flash Player Memory Corruption (APSB17-21: CVE-2017-3080)
Critical	11 Jul 2017	11 Jul 2017	CPAI-2017-0536	Microsoft CVE-2017-8618	CVE-2017-8618	Microsoft Internet Explorer Remote Code Execution (CVE-2017-8618)
Critical	11 Jul 2017	11 Jul 2017	CPAI-2017-0539	Microsoft CVE-2017-8617	CVE-2017-8617	Microsoft Edge Remote Code Execution (CVE-2017-8617)
Critical	11 Jul 2017	11 Jul 2017	CPAI-2017-0532	Microsoft CVE-2017-8605	CVE-2017-8605	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8605)
Critical	11 Jul 2017	11 Jul 2017	CPAI-2017-0555	Adobe APSB17-21	CVE-2017-3100	Adobe Flash Player Memory Corruption (APSB17-21: CVE-2017-3100)
High	11 Jul 2017	11 Jul 2017	CPAI-2017-0551	Microsoft CVE-2017-8577	CVE-2017-8577	Microsoft Win32k Elevation of Privilege (CVE-2017-8577)
High	11 Jul 2017	11 Jul 2017	CPAI-2017-0552	Microsoft CVE-2017-8578	CVE-2017-8578	Microsoft Win32k Elevation of Privilege (CVE-2017-8578)
Critical	11 Jul 2017	11 Jul 2017	CPAI-2017-0541	Microsoft CVE-2017-8598	CVE-2017-8598	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8598)
High	11 Jul 2017	11 Jul 2017	CPAI-2017-0537	Microsoft CVE-2017-8592	CVE-2017-8592	Microsoft Browser Security Feature Bypass (CVE-2017-8592)
Critical	30 Jan 2017	10 Jul 2017	CPAI-2017-0071			Suspicious Metadata Mail Phishing Containing Archive Attachment
Critical	30 Apr 2017	9 Jul 2017	CPAI-2017-0345			Mac OSX/Dok Unauthorized Remote Access
Critical	29 May 2017	5 Jul 2017	CPAI-2017-0451		CVE-2017-8542	Microsoft Malware Protection Engine Remote Code Execution (CVE-2017-8542)
Medium	8 Jun 2017	5 Jul 2017	CPAI-2017-0482	Microsoft	CVE-2017-0267	Microsoft Windows SMB Server SMBv1 Out of Bounds Read (CVE-2017-0267)
Medium	14 Jun 2017	5 Jul 2017	CPAI-2017-0505		CVE-2016-8523	HPE Smart Storage Administrator Code Execution (CVE-2016-8523)
Critical	26 Jun 2017	3 Jul 2017	CPAI-2017-0534			Suspicious URL Containing Multiple Top Level Domains
Critical	29 Jun 2017	3 Jul 2017	CPAI-2017-0540		CVE-2017-2619	Samba Symlink Unauthorized File Access (CVE-2017-2619)
Critical	28 Jun 2017	28 Jun 2017	CPAI-2017-0533	HPE	CVE-2017-5816	HPE Intelligent Management Center dbman RestartDB Command Injection (CVE-2017-5816)