Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	11 May 2017	28 May 2017	CPAI-2017-0411	Ntp.org	CVE-2017-6464	Network Time Protocol Daemon peer xmit mode Denial of Service (CVE-2017-6464)
High	21 May 2017	28 May 2017	CPAI-2017-0006			Disk Pulse Enterprise Server HttpParser Buffer Overflow
Medium	28 Feb 2017	25 May 2017	CPAI-2017-0153	OpenSSL	CVE-2017-3730	OpenSSL DHE and ECDHE Parameters NULL Pointer Dereference (CVE-2017-3730)
High	14 Mar 2017	25 May 2017	CPAI-2017-0100	Microsoft MS17-013	CVE-2017-0014	Microsoft Windows Graphics Component Remote Code Execution (MS17-013: CVE-2017-0014)
Medium	22 May 2017	25 May 2017	CPAI-2017-0436	Zabbix	CVE-2017-2824	Zabbix Server Active Proxy Trapper Command Injection (CVE-2017-2824)
Critical	22 May 2017	25 May 2017	CPAI-2017-0434			Microsoft Windows EternalSynergy SMB Remote Code Execution
Critical	25 May 2017	25 May 2017	CPAI-2017-0443			Microsoft Windows ArchiTouch SMB Scanner
Critical	21 May 2017	24 May 2017	CPAI-2017-0431	Dell		Dell SonicWALL GMS-Analyzer license.jsp Information Disclosure
Medium	22 May 2017	24 May 2017	CPAI-2017-0435	Red Hat CVE-2017-2674	CVE-2017-2674	Red Hat JBoss BPM Suite BRMS Tasks List Cross-Site Scripting (CVE-2017-2674)
Critical	22 May 2017	24 May 2017	CPAI-2017-0440			Microsoft Windows SMBTouch Scanner
Critical	24 May 2017	24 May 2017	CPAI-2017-0438			PNG Containing Malicious JavaScript Code
Critical	27 Feb 2017	22 May 2017	CPAI-2017-0149	Microsoft MS17-006	CVE-2017-0037	Microsoft Browser Memory Corruption (MS17-006: CVE-2017-0037)
High	14 Mar 2017	21 May 2017	CPAI-2017-0095	Microsoft MS17-007	CVE-2017-0023	Microsoft PDF Memory Corruption (MS17-007: CVE-2017-0023)
Critical	10 May 2017	21 May 2017	CPAI-2017-0410			Serviio Media Server Cross-Site Scripting
Critical	10 May 2017	21 May 2017	CPAI-2017-0404			Serviio Media Server Remote Code Execution
High	11 May 2017	21 May 2017	CPAI-2017-0413	Oracle CVE-2017-3599	CVE-2017-3599	Oracle MySQL sql_authentication Integer Overflow (CVE-2017-3599)
Medium	15 May 2017	21 May 2017	CPAI-2017-0417	MantisBT 22690	CVE-2017-7615	Mantis Bug Tracker verify.php confirm_hash Remote Password Reset (CVE-2017-7615)
Critical	21 May 2017	21 May 2017	CPAI-2017-0429			Microsoft Windows Eternalchampion SMB Remote Code Execution
Critical	21 May 2017	21 May 2017	CPAI-2017-0433			VLC ParseJSS Null Skip Subtitle Remote Code Execution
Critical	21 May 2017	21 May 2017	CPAI-2017-0432			StremIO Subtitles Remote Code Execution
Critical	14 May 2017	18 May 2017	CPAI-2017-0422			Microsoft Windows DoublePulsar SMB Remote Code Execution
Critical	16 May 2017	18 May 2017	CPAI-2017-0423	Rapid7		Crypttech CryptoLog Remote Code Execution
Critical	15 May 2017	17 May 2017	CPAI-2017-0416	HPE	CVE-2017-5792	HPE Intelligent Management Center RMI Registry Insecure Deserialization (CVE-2017-5792)
Critical	16 May 2017	16 May 2017	CPAI-2017-0419	Microsoft MS17-010	CVE-2017-0148	Microsoft Windows SMB Remote Code Execution (MS17-010: CVE-2017-0148)
Medium	19 Apr 2017	15 May 2017	CPAI-2017-0303	Trend Micro		Trend Micro SafeSync for Enterprise storage.pm device_id role Command Injection
High	10 May 2017	15 May 2017	CPAI-2017-0405	HPE	CVE-2017-5790	HPE Intelligent Management Center accessMgrServlet Insecure Deserialization (CVE-2017-5790)
Critical	10 May 2017	14 May 2017	CPAI-2017-0409	Oracle	CVE-2017-3230	Oracle Fusion Middleware MapViewer FileUploaderServlet fileName Directory Traversal (CVE-2017-3230)
Medium	14 May 2017	14 May 2017	CPAI-2017-0415			Magento Vimeo Invalid Image Cross Site Request Forgery
Critical	13 Feb 2017	11 May 2017	CPAI-2017-0122	Rapid7	CVE-2009-0476	Audiotran 1.4.1 (PLS File) Stack Buffer Overflow (CVE-2009-0476)
Critical	23 Feb 2017	11 May 2017	CPAI-2017-0143		CVE-2014-7205	Bassmaster Batch Arbitrary JavaScript Injection Remote Code Execution (CVE-2014-7205)
High	26 Mar 2017	11 May 2017	CPAI-2017-0245	Rapid7		Maple Maplet File Creation and Command Execution
High	14 Mar 2017	10 May 2017	CPAI-2017-0091	Microsoft MS17-022	CVE-2017-0022	Microsoft XML Core Services Information Disclosure (MS17-022: CVE-2017-0022)
Critical	12 Apr 2017	10 May 2017	CPAI-2017-0282	Adobe APSB17-11	CVE-2017-3036	Adobe Acrobat and Reader Memory Corruption (APSB17-11: CVE-2017-3036)
Critical	4 May 2017	10 May 2017	CPAI-2017-0364			Kodi Open Subtitles Addon Remote Code Execution
Critical	8 May 2017	10 May 2017	CPAI-2017-0395	HPE	CVE-2017-5794	HPE Intelligent Management Center FileUploadServlet Directory Traversal (CVE-2017-5794)
Critical	10 May 2017	10 May 2017	CPAI-2017-0408	HPE	CVE-2017-5793	HPE Intelligent Management Center CommonUtils ZIP Directory Traversal (CVE-2017-5793)
Critical	10 May 2017	10 May 2017	CPAI-2017-0403		CVE-2017-0261	Microsoft Office Multiple Remote Code Execution (CVE-2017-0261)
High	10 May 2017	10 May 2017	CPAI-2017-0402		CVE-2017-2491	Apple Safari WebKit JSString Use After Free Code Execution (CVE-2017-2491)
High	9 May 2017	9 May 2017	CPAI-2017-0400			Check-Host Website Monitoring Service
High	9 May 2017	9 May 2017	CPAI-2017-0379	Microsoft CVE-2017-0213	CVE-2017-0213	Microsoft Windows COM Elevation of Privilege (CVE-2017-0213)
High	9 May 2017	9 May 2017	CPAI-2017-0366	Microsoft CVE-2017-0214	CVE-2017-0214	Microsoft Windows COM Elevation of Privilege (CVE-2017-0214)
Critical	9 May 2017	9 May 2017	CPAI-2017-0334	Microsoft CVE-2017-0236	CVE-2017-0236	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-0236)
Critical	9 May 2017	9 May 2017	CPAI-2017-0360	Microsoft CVE-2017-0234	CVE-2017-0234	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-0234)
Critical	9 May 2017	9 May 2017	CPAI-2017-0361	Microsoft CVE-2017-0266	CVE-2017-0266	Microsoft Edge Remote Code Execution (CVE-2017-0266)
High	9 May 2017	9 May 2017	CPAI-2017-0370	Microsoft CVE-2017-0263	CVE-2017-0263	Microsoft Win32k Elevation of Privilege (CVE-2017-0263)
Critical	9 May 2017	9 May 2017	CPAI-2017-0335	Microsoft CVE-2017-0238	CVE-2017-0238	Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-0238)
High	9 May 2017	9 May 2017	CPAI-2017-0331	Microsoft CVE-2017-0077	CVE-2017-0077	Microsoft Win32k Information Disclosure (CVE-2017-0077)
High	9 May 2017	9 May 2017	CPAI-2017-0371	Microsoft CVE-2017-0175	CVE-2017-0175	Microsoft Windows Kernel Information Disclosure (CVE-2017-0175)
High	9 May 2017	9 May 2017	CPAI-2017-0365	Microsoft CVE-2017-0171	CVE-2017-0171	Microsoft Windows DNS Server Denial of Service (CVE-2017-0171)
Critical	9 May 2017	9 May 2017	CPAI-2017-0330	Microsoft CVE-2017-0228	CVE-2017-0228	Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-0228)