Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	21 May 2017	18 Jun 2017	CPAI-2017-0430	Metasploit	CVE-2014-4977	Dell SonicWALL Scrutinizer methodDetail SQL Injection (CVE-2014-4977)
Medium	11 Jun 2017	18 Jun 2017	CPAI-2017-0501	OpenVPN	CVE-2017-7478	OpenVPN P_CONTROL Denial of Service (CVE-2017-7478)
Medium	11 Jun 2017	18 Jun 2017	CPAI-2017-0499	OpenLDAP	CVE-2017-9287	OpenLDAP ldapsearch pagesize Double Free Denial of Service (CVE-2017-9287)
Medium	14 Mar 2017	15 Jun 2017	CPAI-2017-0205	Microsoft MS17-010	CVE-2017-0147	Microsoft Windows SMB Information Disclosure (MS17-010: CVE-2017-0147)
Medium	11 Apr 2017	15 Jun 2017	CPAI-2017-0271	Microsoft CVE-2017-0208	CVE-2017-0208	Microsoft Edge Scripting Engine Information Disclosure (CVE-2017-0208)
Medium	15 Jun 2017	15 Jun 2017	CPAI-2017-0509	Trend Micro		Trend Micro InterScan Web Security Virtual Appliance VerboseLog Directory Traversal
Critical	29 Mar 2017	14 Jun 2017	CPAI-2017-0249		CVE-2017-7269	Microsoft IIS WebDAV ScStoragePathFromUrl Buffer Overflow (CVE-2017-7269)
High	24 May 2017	14 Jun 2017	CPAI-2017-0439	Trend Micro		Trend Micro IWSVA PacFileManagement delete_pac_files Command Injection
Medium	5 Jun 2017	14 Jun 2017	CPAI-2017-0467	Mozilla	CVE-2017-5428	Mozilla Firefox createImageBitmap Integer Overflow (CVE-2017-5428)
Medium	7 Jun 2017	14 Jun 2017	CPAI-2017-0481	Jenkins	CVE-2017-1000356	Jenkins CI Server Multiple Cross-Site Request Forgery (CVE-2017-1000356)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0496	Adobe APSB17-17	CVE-2017-3075	Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3075)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0498	Adobe APSB17-17	CVE-2017-3077	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3077)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0497	Adobe APSB17-17	CVE-2017-3076	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3076)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0470	Microsoft CVE-2017-8497	CVE-2017-8497	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8497)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0493	Adobe APSB17-17	CVE-2017-3079	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3079)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0494	Adobe APSB17-17	CVE-2017-3081	Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3081)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0495	Adobe APSB17-17	CVE-2017-3078	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3078)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0491	Adobe APSB17-17	CVE-2017-3082	Adobe Flash Player Memory Corruption (APSB17-17: CVE-2017-3082)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0492	Adobe APSB17-17	CVE-2017-3083	Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3083)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0490	Adobe APSB17-17	CVE-2017-3084	Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3084)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0456	Microsoft CVE-2017-8529	CVE-2017-8529	Microsoft Browser Information Disclosure (CVE-2017-8529)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0457	Microsoft CVE-2017-0215	CVE-2017-0215	Microsoft Device Guard Code Integrity Policy Security Feature Bypass (CVE-2017-0215)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0485	Microsoft CVE-2017-8509	CVE-2017-8509	Microsoft Office Remote Code Execution (CVE-2017-8509)
Critical	13 Jun 2017	13 Jun 2017	CPAI-2017-0471	Microsoft CVE-2017-8524	CVE-2017-8524	Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-8524)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0488	Microsoft CVE-2017-8468	CVE-2017-8468	Microsoft Win32k Elevation of Privilege (CVE-2017-8468)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0487	Microsoft CVE-2017-8466	CVE-2017-8466	Microsoft Windows Cursor Elevation of Privilege (CVE-2017-8466)
High	13 Jun 2017	13 Jun 2017	CPAI-2017-0483	Microsoft CVE-2017-8465	CVE-2017-8465	Microsoft Win32k Elevation of Privilege (CVE-2017-8465)
Critical	12 Jun 2017	12 Jun 2017	CPAI-2017-0503		CVE-2017-4914	VMware vSphere Data Protection Remote Code Execution (CVE-2017-4914)
Critical	4 Jun 2017	11 Jun 2017	CPAI-2017-0462	Metasploit	CVE-2017-6553	Quest Privilege Manager pmmasterd Buffer Overflow (CVE-2017-6553)
Medium	11 Jun 2017	11 Jun 2017	CPAI-2017-0500	Digium		Digium Asterisk chan_skinny SCCP packet Denial of Service
Critical	15 Mar 2017	7 Jun 2017	CPAI-2017-0227	Brocade	CVE-2016-8204	Brocade Network Advisor FileReceiveServlet filename Directory Traversal (CVE-2016-8204)
Medium	7 Jun 2017	7 Jun 2017	CPAI-2017-0478	Splunk SPL-128840		Splunk Enterprise alerts alerts_id Server-Side Request Forgery
Medium	29 May 2017	5 Jun 2017	CPAI-2017-0460	Foxit Software	CVE-2016-8334	Foxit PDF Reader JBIG2 Symbol Dictionary Out of Bounds Read (CVE-2016-8334)
Medium	1 Jun 2017	5 Jun 2017	CPAI-2017-0459	TrendMicro		Trend Micro Control Manager ProductTree_RightWindow XML External Entity Processing
Medium	4 Jun 2017	5 Jun 2017	CPAI-2017-0463	Trend Micro		Trend Micro Control Manager XML External Entity Processing
Medium	5 Jun 2017	5 Jun 2017	CPAI-2017-0468	ISC	CVE-2017-3138	ISC BIND rndc Control Channel Interface Assertion Failure Denial of Service (CVE-2017-3138)
Medium	5 Jun 2017	5 Jun 2017	CPAI-2017-0465	Trend Micro		Trend Micro IWSVA ReportHandler DoCmd Command Injection
Medium	24 May 2017	4 Jun 2017	CPAI-2017-0441	Mailstore Software		MailStore Server search-result Reflected Cross-Site Scripting
Medium	24 May 2017	1 Jun 2017	CPAI-2017-0442	Trend Micro VRTS-388		Trend Micro Smart Protection Server wcs_bwlists_handler.php Command Injection
High	24 Apr 2017	29 May 2017	CPAI-2017-0325	GnuTLS GNUTLS-SA-2017-1	CVE-2017-5334	GnuTLS Proxy Certificate Information Extension Memory Corruption (CVE-2017-5334)
Medium	24 May 2017	29 May 2017	CPAI-2017-0455	WordPress		WordPress REST API Posts Controller Privilege Escalation
Critical	29 May 2017	29 May 2017	CPAI-2017-0453		CVE-2017-8541	Microsoft Malware Protection Engine Remote Code Execution (CVE-2017-8541)
Critical	29 May 2017	29 May 2017	CPAI-2017-0454		CVE-2017-8539	Microsoft Malware Protection Engine Denial of Service (CVE-2017-8539)
Critical	29 May 2017	29 May 2017	CPAI-2017-0446		CVE-2017-8538	Microsoft Malware Protection Engine Remote Code Execution (CVE-2017-8538)
Critical	29 May 2017	29 May 2017	CPAI-2017-0447		CVE-2017-8535	Microsoft Malware Protection Engine Denial of Service (CVE-2017-8535)
Critical	29 May 2017	29 May 2017	CPAI-2017-0452		CVE-2017-8537	Microsoft Malware Protection Engine Denial of Service (CVE-2017-8537)
Critical	29 May 2017	29 May 2017	CPAI-2017-0450		CVE-2017-8536	Microsoft Malware Protection Engine Denial of Service (CVE-2017-8536)
High	23 Apr 2017	28 May 2017	CPAI-2017-0312	Trend Micro		Trend Micro SafeSync for Enterprise storage.pm discovery_iscsi_device Command Injection
Medium	24 Apr 2017	28 May 2017	CPAI-2017-0322	Trend Micro		Trend Micro SafeSync for Enterprise rollback Command Injection
High	30 Apr 2017	28 May 2017	CPAI-2017-0348	HPE	CVE-2017-5789	HPE LoadRunner and Performance Center libxdrutil.dll mxdr_string Heap Buffer Overflow (CVE-2017-5789)