Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	17 Jul 2017	20 Jul 2017	CPAI-2017-0570	Schneider Electric SEVD-2017-178-01	CVE-2017-7973	Schneider Electric U.motion Builder localize.php SQL Injection (CVE-2017-7973)
Critical	18 Jun 2017	19 Jul 2017	CPAI-2017-0510	Metasploit		Marathon UI Docker Command Execution
Medium	17 Jul 2017	19 Jul 2017	CPAI-2017-0573	StrongSwan	CVE-2017-9023	strongSwan x509 Plugin Denial of Service (CVE-2017-9023)
Critical	8 May 2017	17 Jul 2017	CPAI-2017-0394		CVE-2017-2641	Moodle Remote Code Execution (CVE-2017-2641)
Medium	16 Jul 2017	17 Jul 2017	CPAI-2017-0568	Systemd	CVE-2017-9445	Systemd resolved dns_packet_new Heap Buffer Overflow (CVE-2017-9445)
Critical	17 Jul 2017	17 Jul 2017	CPAI-2017-0569		CVE-2017-2245	WordPress Shortcodes Ultimate Plugin Authenticated Directory Traversal (CVE-2017-2245)
Medium	7 Jun 2017	16 Jul 2017	CPAI-2017-0475	HPE	CVE-2017-5810	HPE Network Automation RedirectServlet SQL Injection (CVE-2017-5810)
Medium	11 Jun 2017	16 Jul 2017	CPAI-2017-0506	Trend Micro		Trend Micro SafeSync for Enterprise deviceTool.pm get_device_info SQL Injection
Medium	11 Jun 2017	16 Jul 2017	CPAI-2017-0502	Trend Micro 1116749		Trend Micro SafeSync for Enterprise deviceTool.pm get_nic_device SQL Injection
Medium	5 Jun 2017	14 Jul 2017	CPAI-2017-0466	MantisBT 22579	CVE-2017-7309	Mantis MantisBT Bug Tracker adm_config_report.php move_attachments_page.php XSS (CVE-2017-7309)
Critical	7 May 2017	13 Jul 2017	CPAI-2017-0393		CVE-2017-7985	Joomla Core Sterilizer Cross-Site Scripting Filter Privilege Escalation (CVE-2017-7985)
Critical	7 May 2017	13 Jul 2017	CPAI-2017-0387		CVE-2017-7986	Joomla Core HTML Attributes Cross-Site Scripting Filter Privilege Escalation (CVE-2017-7986)
Medium	27 Jun 2017	13 Jul 2017	CPAI-2017-0529		CVE-2017-7974	Schneider Electric U.motion Builder runscript.php Directory Traversal (CVE-2017-7974)
Critical	11 Jul 2017	13 Jul 2017	CPAI-2017-0562		CVE-2017-3143	ISC BIND TSIG Authentication Bypass (CVE-2017-3143)
Critical	13 Jul 2017	13 Jul 2017	CPAI-2017-0563	Microsoft	CVE-2017-8487	Microsoft Windows OLE Global Buffer Overflow (CVE-2017-8487)
Medium	19 Jun 2017	12 Jul 2017	CPAI-2017-0517		CVE-2017-7974	Schneider Electric U.motion Builder css.inc.php Arbitrary File Inclusion (CVE-2017-7974)
Medium	21 Jun 2017	12 Jul 2017	CPAI-2017-0520		CVE-2017-7973	Schneider Electric U.motion Builder loadtemplate.php SQL Injection (CVE-2017-7973)
Medium	6 Jul 2017	12 Jul 2017	CPAI-2017-0554		CVE-2017-7973	Schneider Electric U.motion Builder track_import_export.php SQL Injection (CVE-2017-7973)
Critical	11 Jul 2017	11 Jul 2017	CPAI-2017-0556	Adobe APSB17-21	CVE-2017-3099	Adobe Flash Player Information Disclosure (APSB17-21: CVE-2017-3099)
Critical	11 Jul 2017	11 Jul 2017	CPAI-2017-0557	Adobe APSB17-21	CVE-2017-3080	Adobe Flash Player Memory Corruption (APSB17-21: CVE-2017-3080)
Critical	11 Jul 2017	11 Jul 2017	CPAI-2017-0536	Microsoft CVE-2017-8618	CVE-2017-8618	Microsoft Internet Explorer Remote Code Execution (CVE-2017-8618)
Critical	11 Jul 2017	11 Jul 2017	CPAI-2017-0539	Microsoft CVE-2017-8617	CVE-2017-8617	Microsoft Edge Remote Code Execution (CVE-2017-8617)
Critical	11 Jul 2017	11 Jul 2017	CPAI-2017-0532	Microsoft CVE-2017-8605	CVE-2017-8605	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8605)
Critical	11 Jul 2017	11 Jul 2017	CPAI-2017-0555	Adobe APSB17-21	CVE-2017-3100	Adobe Flash Player Memory Corruption (APSB17-21: CVE-2017-3100)
High	11 Jul 2017	11 Jul 2017	CPAI-2017-0551	Microsoft CVE-2017-8577	CVE-2017-8577	Microsoft Win32k Elevation of Privilege (CVE-2017-8577)
High	11 Jul 2017	11 Jul 2017	CPAI-2017-0552	Microsoft CVE-2017-8578	CVE-2017-8578	Microsoft Win32k Elevation of Privilege (CVE-2017-8578)
Critical	11 Jul 2017	11 Jul 2017	CPAI-2017-0541	Microsoft CVE-2017-8598	CVE-2017-8598	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8598)
High	11 Jul 2017	11 Jul 2017	CPAI-2017-0537	Microsoft CVE-2017-8592	CVE-2017-8592	Microsoft Browser Security Feature Bypass (CVE-2017-8592)
Critical	30 Jan 2017	10 Jul 2017	CPAI-2017-0071			Suspicious Metadata Mail Phishing Containing Archive Attachment
Critical	30 Apr 2017	9 Jul 2017	CPAI-2017-0345			Mac OSX/Dok Unauthorized Remote Access
Critical	29 May 2017	5 Jul 2017	CPAI-2017-0451		CVE-2017-8542	Microsoft Malware Protection Engine Remote Code Execution (CVE-2017-8542)
Medium	8 Jun 2017	5 Jul 2017	CPAI-2017-0482	Microsoft	CVE-2017-0267	Microsoft Windows SMB Server SMBv1 Out of Bounds Read (CVE-2017-0267)
Medium	14 Jun 2017	5 Jul 2017	CPAI-2017-0505		CVE-2016-8523	HPE Smart Storage Administrator Code Execution (CVE-2016-8523)
Critical	26 Jun 2017	3 Jul 2017	CPAI-2017-0534			Suspicious URL Containing Multiple Top Level Domains
Critical	29 Jun 2017	3 Jul 2017	CPAI-2017-0540		CVE-2017-2619	Samba Symlink Unauthorized File Access (CVE-2017-2619)
Critical	28 Jun 2017	28 Jun 2017	CPAI-2017-0533	HPE	CVE-2017-5816	HPE Intelligent Management Center dbman RestartDB Command Injection (CVE-2017-5816)
Critical	1 Jun 2017	27 Jun 2017	CPAI-2017-0458			Windows Browser MFT Crash Bug
Critical	4 Jun 2017	27 Jun 2017	CPAI-2017-0461			PowerPoint Malicious Hover Exploit
High	14 Jun 2017	27 Jun 2017	CPAI-2017-0508		CVE-2015-5374	Siemens SIPROTEC Denial of Service (CVE-2015-5374)
Critical	8 Mar 2017	26 Jun 2017	CPAI-2017-0201			Suspicious Metadata Mail Phishing Redirection
High	26 Feb 2017	25 Jun 2017	CPAI-2017-0146	PHP	CVE-2017-5340	PHP zend_hash_destroy Uninitialized Pointer Code Execution (CVE-2017-5340)
Medium	19 Jun 2017	25 Jun 2017	CPAI-2017-0514	HPE	CVE-2017-5811	HPE Network Automation FileServlet Information Disclosure (CVE-2017-5811)
Medium	20 Jun 2017	25 Jun 2017	CPAI-2017-0518	Microsoft	CVE-2017-0271	Microsoft Windows SMB Server SMBv1 Information Disclosure (CVE-2017-0271)
High	18 Jun 2017	21 Jun 2017	CPAI-2017-0512	Trend Micro 1117412		Trend Micro IWSVA ManageSRouteSettings HttpServlet Command Injection
Critical	19 Jun 2017	21 Jun 2017	CPAI-2017-0513	IBM	CVE-2017-1092	IBM Informix Dynamic Server index.php testconn Heap Buffer Overflow (CVE-2017-1092)
High	21 Jun 2017	21 Jun 2017	CPAI-2017-0521	HPE	CVE-2017-5822	HPE Intelligent Management Center dbman FileTrans Arbitrary File Write (CVE-2017-5822)
Medium	19 Jun 2017	20 Jun 2017	CPAI-2017-0516		CVE-2017-8311	VideoLan VLC Media Player ParseJSS Heap Buffer Overflow (CVE-2017-8311)
Medium	19 Jun 2017	19 Jun 2017	CPAI-2017-0515	Digium AST-2017-003		Digium Asterisk pjsip_multipart_parse Denial of Service
Critical	10 May 2017	18 Jun 2017	CPAI-2017-0406		CVE-2017-0262	Microsoft Office EPS Remote Code Execution (CVE-2017-0262)
High	17 May 2017	18 Jun 2017	CPAI-2017-0421	Trend Micro		Trend Micro IWSVA LogSettingHandler doPostMountDevice Command Injection