Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	23 May 2017	10 Jun 2020	CPAI-2017-0437	Rapid7	CVE-2016-6277	Netgear R7000 and R6400 cgi-bin Command Injection (CVE-2016-6277)
Critical	14 Aug 2017	10 Jun 2020	CPAI-2017-0688	Metasploit		McAfee SaaS Remote Command Execution
Critical	19 Oct 2017	10 Jun 2020	CPAI-2017-0853			Netgear ReadyNAS Remote Command Execution
Medium	24 Sep 2017	24 Oct 2019	CPAI-2017-0784		CVE-2017-10953 CVE-2019-8160	Foxit Reader and PhantonPDF XFA gotoURL Command Injection (CVE-2017-10953; CVE-2019-8160)
Critical	6 Nov 2017	25 Sep 2019	CPAI-2017-0876			Hikvision IP Cameras Authentication Bypass (CVE-2017-7921)
Critical	10 Aug 2017	4 Sep 2019	CPAI-2017-0679	HPE	CVE-2017-5804 CVE-2017-5805	HPE Intelligent Management Center Imcwlandm Stack Buffer Overflow (CVE-2017-5804; CVE-2017-5805)
Critical	26 Apr 2017	25 Aug 2019	CPAI-2017-0332			Microsoft Windows EternalBlue SMB Remote Code Execution
Critical	8 Aug 2017	6 Jun 2019	CPAI-2017-0606	Adobe APSB17-24	CVE-2017-3124	Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-3124)
Medium	7 Jun 2017	21 May 2019	CPAI-2017-0479	IBM	CVE-2017-1274	IBM Domino IMAP Mailbox Name Stack Buffer Overflow (CVE-2017-1274)
Critical	1 Jun 2017	19 May 2019	CPAI-2017-0445			RIG Exploit Kit Landing Page URL
Critical	7 Mar 2017	12 May 2019	CPAI-2015-1415			Metasploit Meterpreter Reverse Payloads Remote Code Execution - ver2
High	10 Jan 2017	27 Mar 2019	CPAI-2017-0010	Microsoft MS17-004	CVE-2017-0004	Microsoft LSASS Denial of Service (MS17-004: CVE-2017-0004)
Critical	28 Jun 2017	11 Feb 2019	CPAI-2017-0530			Petya Ransomware Lateral Movement Remote Code Execution
Low	20 Nov 2017	23 Jan 2019	CPAI-2017-1008		CVE-2017-16548	Rsync receive_xattr Heap-based Buffer Overread (CVE-2017-16548)
Critical	15 Mar 2017	13 Jan 2019	CPAI-2017-0226		CVE-2013-4980 CVE-2013-4981 CVE-2013-4982	AVTECH Devices Multiple Vulnerabilities (CVE-2013-4980; CVE-2013-4981; CVE-2013-4982)
Critical	26 Jan 2017	23 Dec 2018	CPAI-2017-0067		CVE-2017-3823	Cisco WebEx Meetings Server and Center Remote Code Execution (CVE-2017-3823)
Critical	9 May 2017	5 Dec 2018	CPAI-2017-0399		CVE-2017-5689	Intel AMT Framework Unauthorized Admin Entry (CVE-2017-5689)
Critical	21 Nov 2017	29 Oct 2018	CPAI-2017-1009	Microsoft CVE-2017-11882	CVE-2017-11882	Microsoft Office Memory Corruption Remote Code Execution (CVE-2017-11882)
Critical	7 Jun 2017	22 Oct 2018	CPAI-2017-0473			PowerShell Script Encoding Evasion
Medium	13 Feb 2017	16 Oct 2018	CPAI-2017-0120	Rapid7	CVE-2007-3314	Altap Salamander 2.5 PE Viewer Buffer Overflow (CVE-2007-3314)
Critical	31 Oct 2017	10 Oct 2018	CPAI-2017-0889			Suspicious Metadata Mail Phishing Containing Attachment - ver2
High	13 Jul 2017	3 Sep 2018	CPAI-2017-0566			Malicious JavaScript Trojan Downloader
Medium	8 Aug 2017	28 Aug 2018	CPAI-2017-0607	Adobe APSB17-24	CVE-2017-11209	Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11209)
Medium	8 Aug 2017	27 Aug 2018	CPAI-2017-0674	Cisco cisco-sa-20170517-pcp2	CVE-2017-6621	Cisco Prime Collaboration Provisioning logconfigtracer.jsp Directory Traversal (CVE-2017-6621)
Critical	20 Jul 2017	26 Aug 2018	CPAI-2017-0576	Cisco	CVE-2017-6622	Cisco Prime Collaboration Provisioning ScriptMgr Authentication Bypass (CVE-2017-6622)
Critical	7 Feb 2017	5 Aug 2018	CPAI-2016-1123			Suspicious Proxy Auto-Config File
Medium	7 Jun 2017	24 Jul 2018	CPAI-2017-0480	Digium		Digium Asterisk SIP CSeq Heap Buffer Overflow
High	12 Dec 2017	10 Jul 2018	CPAI-2017-1032	Microsoft CVE-2017-11888	CVE-2017-11888 CVE-2018-8125	Microsoft Edge Memory Corruption (CVE-2017-11888; CVE-2018-8125)
Medium	20 Jun 2017	8 Jul 2018	CPAI-2017-0519	Mozilla	CVE-2017-5459	Mozilla Firefox WebGL Integer Overflow (CVE-2017-5459)
Medium	6 Jun 2017	27 Jun 2018	CPAI-2017-0469	HPE	CVE-2017-5812	HPE Network Automation PermissionFilter Authentication Bypass (CVE-2017-5812)
Critical	26 Oct 2017	5 Jun 2018	CPAI-2017-0879			Suspicious SMB Ransomware Propagation Attempt
Critical	8 Aug 2017	29 May 2018	CPAI-2017-0670	Adobe APSB17-24	CVE-2017-11227	Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11227)
Critical	14 Nov 2017	29 May 2018	CPAI-2017-0979	Adobe APSB17-36	CVE-2017-16416	Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36: CVE-2017-16416)
High	12 Dec 2017	29 May 2018	CPAI-2017-1033	Microsoft CVE-2017-11893	CVE-2017-11893	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11893)
Medium	18 Oct 2017	28 May 2018	CPAI-2017-0844	Microsoft	CVE-2017-11779	Microsoft Windows DNSAPI NSEC3 Heap-based Buffer Overflow (CVE-2017-11779)
Critical	14 Nov 2017	28 May 2018	CPAI-2017-0958	Adobe APSB17-36	CVE-2017-16404	Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16404)
Critical	1 Oct 2017	16 May 2018	CPAI-2017-0815	Trend Micro	CVE-2017-14078	Trend Micro Mobile Security Enterprise eas_agent_unregister slink_id SQL Injection (CVE-2017-14078)
High	5 Jun 2017	8 Apr 2018	CPAI-2017-0210	LIBTIFF	CVE-2016-9537	LibTIFF tiffcrop Integer Overflow (CVE-2016-9537)
Critical	31 Oct 2017	21 Mar 2018	CPAI-2017-0888			Suspicious Hyperlink Mail Phishing Attempt - ver2
Critical	21 Nov 2017	21 Mar 2018	CPAI-2017-1010	Metasploit	CVE-2010-0356	Viscom Software Movie Player Pro SDK ActiveX Buffer Overflow (CVE-2010-0356)
Critical	14 Nov 2017	4 Mar 2018	CPAI-2017-0934	Adobe APSB17-36	CVE-2017-16381	Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36: CVE-2017-16381)
Critical	14 Nov 2017	4 Mar 2018	CPAI-2017-0994	Adobe APSB17-36	CVE-2017-16418	Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16418)
Medium	27 Feb 2017	22 Feb 2018	CPAI-2017-0151	OpenSSL	CVE-2017-3731	OpenSSL ChaCha20-Poly1305 and RC4-MD5 Integer Underflow (CVE-2017-3731)
Medium	17 Sep 2017	15 Feb 2018	CPAI-2017-0766	HPE	CVE-2017-12521	HPE Intelligent Management Center userSelectPagingContent Expression Language Injection (CVE-2017-12521)
Medium	24 Oct 2017	13 Feb 2018	CPAI-2017-0868	Adobe APSB17-11	CVE-2017-3043	Adobe Acrobat and Reader Information Disclosure (APSB17-11: CVE-2017-3043)
High	10 Oct 2017	11 Feb 2018	CPAI-2017-0812	Microsoft CVE-2017-11810	CVE-2017-11810	Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2017-11810)
Critical	14 Nov 2017	8 Feb 2018	CPAI-2017-0943	Adobe APSB17-33	CVE-2017-11213	Adobe Flash Player Integer Overflow (APSB17-33: CVE-2017-11213)
Critical	3 Oct 2017	1 Feb 2018	CPAI-2017-0822		CVE-2017-14496	Dnsmasq Integer Underflow Denial Of Service (CVE-2017-14496)
Critical	26 Sep 2017	28 Jan 2018	CPAI-2017-0790		CVE-2017-14596	Joomla LDAP Information Disclosure (CVE-2017-14596)
Medium	28 May 2017	22 Jan 2018	CPAI-2017-0448	ISC AA-01453	CVE-2017-3135	ISC BIND DNS64 and RPZ Query Processing Denial of Service (CVE-2017-3135)