Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0209	Microsoft MS17-016	CVE-2017-0055	Microsoft IIS Server XSS Elevation of Privilege (MS17-016: CVE-2017-0055)
Critical	14 Mar 2017	14 Mar 2017	CPAI-2017-0106	Microsoft MS17-006	CVE-2017-0040	Microsoft Internet Explorer Memory Corruption (MS17-006: CVE-2017-0040)
Critical	14 Mar 2017	14 Mar 2017	CPAI-2017-0183	Microsoft MS17-013	CVE-2017-0108	Microsoft Windows Graphics Component Remote Code Execution (MS17-013: CVE-2017-0108)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0212	Microsoft MS17-006	CVE-2017-0154	Microsoft Internet Explorer Elevation of Privilege (MS17-006: CVE-2017-0154)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0187	Microsoft MS17-012	CVE-2017-0100	Microsoft Windows COM Elevation of Privilege (MS17-012: CVE-2017-0100)
High	14 Mar 2017	14 Mar 2017	CPAI-2017-0173	Microsoft MS17-014	CVE-2017-0105	Microsoft Office Information Disclosure (MS17-014: CVE-2017-0105)
Critical	14 Mar 2017	14 Mar 2017	CPAI-2017-0213	Adobe APSB17-07	CVE-2017-2997	Adobe Flash Player Stack Buffer Overflow (APSB17-07: CVE-2017-2997)
Critical	14 Mar 2017	14 Mar 2017	CPAI-2017-0218	Adobe APSB17-07	CVE-2017-2999	Adobe Flash Player Memory Corruption (APSB17-07: CVE-2017-2999)
Critical	14 Mar 2017	14 Mar 2017	CPAI-2017-0217	Adobe APSB17-07	CVE-2017-2998	Adobe Flash Player Memory Corruption (APSB17-07: CVE-2017-2998)
High	12 Mar 2017	12 Mar 2017	CPAI-2017-0220			GSM SIM Editor 5.15 Buffer Overflow
High	12 Mar 2017	12 Mar 2017	CPAI-2017-0216			FusionVM Security Scanner
Medium	26 Feb 2017	9 Mar 2017	CPAI-2017-0145		CVE-2016-8377	Fatek Automation PLC WinProladder Stack Buffer Overflow (CVE-2016-8377)
Medium	27 Feb 2017	9 Mar 2017	CPAI-2017-0147	Brocade	CVE-2016-8206 CVE-2016-8207	Brocade Network Advisor Directory Traversal (CVE-2016-8206; CVE-2016-8207)
High	9 Mar 2017	9 Mar 2017	CPAI-2017-0208	Trend Micro		Trend Micro Control Manager download.php Information Disclosure
Medium	27 Feb 2017	2 Mar 2017	CPAI-2017-0152	Trend Micro 1116624		Trend Micro Control Manager importFile.php Directory Traversal
High	23 Feb 2017	1 Mar 2017	CPAI-2017-0144	HPE	CVE-2016-8519	HPE Operations Orchestration Insecure Deserialization (CVE-2016-8519)
Critical	28 Feb 2017	1 Mar 2017	CPAI-2017-0155			Java Applet FTP Protocol Stream Injection
Critical	27 Feb 2017	27 Feb 2017	CPAI-2017-0148	Brocade	CVE-2016-8205	Brocade Network Advisor DashboardFileReceiveServlet filename Directory Traversal (CVE-2016-8205)
High	26 Jan 2017	26 Feb 2017	CPAI-2017-0068		CVE-2017-5154	Advantech WebAccess updateTemplate.aspx SQL Injection (CVE-2017-5154)
Medium	14 Feb 2017	26 Feb 2017	CPAI-2017-0128		CVE-2009-3861	SafeNet SoftRemote GROUPNAME Buffer Overflow (CVE-2009-3861)
Critical	22 Feb 2017	26 Feb 2017	CPAI-2017-0139		CVE-2017-3271	Oracle OIT PDF Parser Code Execution (CVE-2017-3271)
Critical	31 Jan 2017	23 Feb 2017	CPAI-2017-0072			Chrome Fake Font Malware Installer
Critical	23 Jan 2017	22 Feb 2017	CPAI-2017-0044	Adobe APSB17-01	CVE-2017-2959	Adobe Acrobat and Reader Heap Overflow (APSB17-01: CVE-2017-2959)
Critical	20 Feb 2017	22 Feb 2017	CPAI-2017-0137			Magento RSS Brute Force Attempt
Critical	21 Feb 2017	21 Feb 2017	CPAI-2017-0140			Piwik Superuser Unauthorized File Upload
High	12 Feb 2017	15 Feb 2017	CPAI-2017-0123			Beetel Connection Manager Buffer Overflow
High	13 Feb 2017	15 Feb 2017	CPAI-2017-0121			Total Video Player SEH Buffer Overflow
Critical	14 Feb 2017	15 Feb 2017	CPAI-2017-0127	Adobe APSB17-04	CVE-2017-2986	Adobe Flash Player Heap Buffer Overflow (APSB17-04: CVE-2017-2986)
High	12 Feb 2017	14 Feb 2017	CPAI-2017-0113	Metasploit		VUPlayer CUE File Buffer Overflow
High	14 Feb 2017	14 Feb 2017	CPAI-2017-0126	Rapid7	CVE-2007-2888	UltraISO CUE File Parsing Buffer Overflow (CVE-2007-2888)
Critical	14 Feb 2017	14 Feb 2017	CPAI-2017-0114	Adobe APSB17-04	CVE-2017-2982	Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2982)
Critical	14 Feb 2017	14 Feb 2017	CPAI-2017-0117	Adobe APSB17-04	CVE-2017-2995	Adobe Flash Player Type Confusion (APSB17-04: CVE-2017-2995)
Critical	14 Feb 2017	14 Feb 2017	CPAI-2017-0116	Adobe APSB17-04	CVE-2017-2994	Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2994)
Critical	14 Feb 2017	14 Feb 2017	CPAI-2017-0112	Adobe APSB17-04	CVE-2017-2984	Adobe Flash Player Heap Buffer Overflow (APSB17-04: CVE-2017-2984)
Critical	14 Feb 2017	14 Feb 2017	CPAI-2017-0119	Adobe APSB17-04	CVE-2017-2996	Adobe Flash Player Memory Corruption (APSB17-04: CVE-2017-2996)
Critical	14 Feb 2017	14 Feb 2017	CPAI-2017-0125	Adobe APSB17-04	CVE-2017-2985	Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2985)
Critical	14 Feb 2017	14 Feb 2017	CPAI-2017-0115	Adobe APSB17-04	CVE-2017-2991	Adobe Flash Player Memory Corruption (APSB17-04: CVE-2017-2991)
Critical	14 Feb 2017	14 Feb 2017	CPAI-2017-0111	Adobe APSB17-04	CVE-2017-2990	Adobe Flash Player Memory Corruption (APSB17-04: CVE-2017-2990)
Critical	14 Feb 2017	14 Feb 2017	CPAI-2017-0118	Adobe APSB17-04	CVE-2017-2993	Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2993)
Critical	14 Feb 2017	14 Feb 2017	CPAI-2017-0124	Adobe APSB17-04	CVE-2017-2992	Adobe Flash Player Heap Buffer Overflow (APSB17-04: CVE-2017-2992)
Medium	24 Jan 2017	8 Feb 2017	CPAI-2017-0073	Microsoft MS17-001	CVE-2017-0002	Microsoft Edge document.domain Same Origin Policy Bypass (MS17-001: CVE-2017-0002)
Critical	7 Feb 2017	8 Feb 2017	CPAI-2017-0107		CVE-2017-5521	NETGEAR Routers Authentication Bypass (CVE-2017-5521)
Critical	12 Jan 2017	5 Feb 2017	CPAI-2017-0026	Adobe APSB17-01	CVE-2017-2946	Adobe Acrobat and Reader Out of Bounds Read (APSB17-01: CVE-2017-2946)
Critical	2 Feb 2017	2 Feb 2017	CPAI-2017-0081			WordPress REST API Content Injection
Medium	24 Jan 2017	1 Feb 2017	CPAI-2017-0064		CVE-2015-8523	IBM Tivoli Storage Manager FastBack Server Denial of Service (CVE-2015-8523)
High	25 Jan 2017	1 Feb 2017	CPAI-2017-0065	Samba	CVE-2016-2123	Samba NDR Parsing ndr_pull_dnsp_name Integer Overflow (CVE-2016-2123)
High	3 Jan 2017	30 Jan 2017	CPAI-2017-0003			Red5 Server Apache Commons Collections Insecure Deserialization
Critical	19 Jan 2017	30 Jan 2017	CPAI-2017-0058		CVE-2015-3628	F5 Multiple Products iControl iCall Script Privilege Escalation (CVE-2015-3628)
Critical	30 Jan 2017	30 Jan 2017	CPAI-2017-0069		CVE-2014-8877	WordPress CM Download Manager Code Injection (CVE-2014-8877)
Critical	18 Jan 2017	29 Jan 2017	CPAI-2017-0052	Adobe APSB17-01	CVE-2017-2963	Adobe Acrobat and Reader Memory Corruption (APSB17-01: CVE-2017-2963)