Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	26 Oct 2017	27 Oct 2022	CPAI-2017-0878	Apache Software Foundation	CVE-2017-12629	Apache Solr xmlparser XML External Entity Expansion Remote Code Execution (CVE-2017-12629)
Critical	25 Oct 2017	23 Jun 2022	CPAI-2017-0885			TVT CCTV Remote Code Execution
Critical	27 Apr 2017	12 May 2022	CPAI-2017-0336	Oracle	CVE-2017-3623	Oracle Solaris Remote Shell Code Execution (CVE-2017-3623)
High	13 Sep 2017	3 May 2022	CPAI-2017-0754			Microsoft Windows RDP Brute Force Login Attempt
Critical	26 Apr 2017	10 Mar 2022	CPAI-2017-0425			Microsoft Windows Eternalromance SMB Remote Code Execution
Medium	19 Sep 2017	24 Feb 2022	CPAI-2017-0778	Microsoft	CVE-2017-8544	Microsoft Windows Search Information Disclosure (CVE-2017-8544)
Critical	21 May 2017	2 Nov 2021	CPAI-2017-0428			PDF File Containing Ransomware Downloader
Critical	7 Dec 2017	31 Oct 2021	CPAI-2017-1059			Cobalt Strike Payload Remote Code Execution
High	8 May 2017	31 Oct 2021	CPAI-2017-0347	SAP	CVE-2017-6950	SAP GUI regsvr32.exe Rule Security Policy Bypass (CVE-2017-6950)
Critical	11 Jul 2017	24 Jun 2021	CPAI-2017-0542	Microsoft CVE-2017-8619	CVE-2017-8619	Microsoft Edge Remote Code Execution (CVE-2017-8619)
Critical	13 Jun 2017	7 Apr 2021	CPAI-2017-0504			Microsoft Office Malicious Macros
Critical	24 Sep 2017	26 Jan 2021	CPAI-2017-0783			Multiple Websites Mine Cryptocurrencies CPU Hijacking
High	25 Sep 2017	21 Jun 2020	CPAI-2017-0789	Linux Kernel Project	CVE-2017-8797	Linux Kernel NFSv4 nfsd PNFS denial of Service (CVE-2017-8797)
Critical	23 May 2017	10 Jun 2020	CPAI-2017-0437	Rapid7	CVE-2016-6277	Netgear R7000 and R6400 cgi-bin Command Injection (CVE-2016-6277)
Critical	14 Aug 2017	10 Jun 2020	CPAI-2017-0688	Metasploit		McAfee SaaS Remote Command Execution
Critical	19 Oct 2017	10 Jun 2020	CPAI-2017-0853			Netgear ReadyNAS Remote Command Execution
Medium	24 Sep 2017	24 Oct 2019	CPAI-2017-0784		CVE-2017-10953 CVE-2019-8160	Foxit Reader and PhantonPDF XFA gotoURL Command Injection (CVE-2017-10953; CVE-2019-8160)
Critical	6 Nov 2017	25 Sep 2019	CPAI-2017-0876			Hikvision IP Cameras Authentication Bypass (CVE-2017-7921)
Critical	10 Aug 2017	4 Sep 2019	CPAI-2017-0679	HPE	CVE-2017-5804 CVE-2017-5805	HPE Intelligent Management Center Imcwlandm Stack Buffer Overflow (CVE-2017-5804; CVE-2017-5805)
Critical	26 Apr 2017	25 Aug 2019	CPAI-2017-0332			Microsoft Windows EternalBlue SMB Remote Code Execution
Critical	8 Aug 2017	6 Jun 2019	CPAI-2017-0606	Adobe APSB17-24	CVE-2017-3124	Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-3124)
Critical	7 Mar 2017	12 May 2019	CPAI-2015-1415			Metasploit Meterpreter Reverse Payloads Remote Code Execution - ver2
High	10 Jan 2017	27 Mar 2019	CPAI-2017-0010	Microsoft MS17-004	CVE-2017-0004	Microsoft LSASS Denial of Service (MS17-004: CVE-2017-0004)
Critical	28 Jun 2017	11 Feb 2019	CPAI-2017-0530			Petya Ransomware Lateral Movement Remote Code Execution
Low	20 Nov 2017	23 Jan 2019	CPAI-2017-1008		CVE-2017-16548	Rsync receive_xattr Heap-based Buffer Overread (CVE-2017-16548)
Critical	15 Mar 2017	13 Jan 2019	CPAI-2017-0226		CVE-2013-4980 CVE-2013-4981 CVE-2013-4982	AVTECH Devices Multiple Vulnerabilities (CVE-2013-4980; CVE-2013-4981; CVE-2013-4982)
Critical	26 Jan 2017	23 Dec 2018	CPAI-2017-0067		CVE-2017-3823	Cisco WebEx Meetings Server and Center Remote Code Execution (CVE-2017-3823)
Critical	9 May 2017	5 Dec 2018	CPAI-2017-0399		CVE-2017-5689	Intel AMT Framework Unauthorized Admin Entry (CVE-2017-5689)
Critical	21 Nov 2017	29 Oct 2018	CPAI-2017-1009	Microsoft CVE-2017-11882	CVE-2017-11882	Microsoft Office Memory Corruption Remote Code Execution (CVE-2017-11882)
Critical	7 Jun 2017	22 Oct 2018	CPAI-2017-0473			PowerShell Script Encoding Evasion
Medium	13 Feb 2017	16 Oct 2018	CPAI-2017-0120	Rapid7	CVE-2007-3314	Altap Salamander 2.5 PE Viewer Buffer Overflow (CVE-2007-3314)
Critical	31 Oct 2017	10 Oct 2018	CPAI-2017-0889			Suspicious Metadata Mail Phishing Containing Attachment - ver2
High	13 Jul 2017	3 Sep 2018	CPAI-2017-0566			Malicious JavaScript Trojan Downloader
Medium	8 Aug 2017	28 Aug 2018	CPAI-2017-0607	Adobe APSB17-24	CVE-2017-11209	Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11209)
Medium	8 Aug 2017	27 Aug 2018	CPAI-2017-0674	Cisco cisco-sa-20170517-pcp2	CVE-2017-6621	Cisco Prime Collaboration Provisioning logconfigtracer.jsp Directory Traversal (CVE-2017-6621)
Critical	20 Jul 2017	26 Aug 2018	CPAI-2017-0576	Cisco	CVE-2017-6622	Cisco Prime Collaboration Provisioning ScriptMgr Authentication Bypass (CVE-2017-6622)
Critical	7 Feb 2017	5 Aug 2018	CPAI-2016-1123			Suspicious Proxy Auto-Config File
Medium	7 Jun 2017	24 Jul 2018	CPAI-2017-0480	Digium		Digium Asterisk SIP CSeq Heap Buffer Overflow
High	12 Dec 2017	10 Jul 2018	CPAI-2017-1032	Microsoft CVE-2017-11888	CVE-2017-11888 CVE-2018-8125	Microsoft Edge Memory Corruption (CVE-2017-11888; CVE-2018-8125)
Medium	20 Jun 2017	8 Jul 2018	CPAI-2017-0519	Mozilla	CVE-2017-5459	Mozilla Firefox WebGL Integer Overflow (CVE-2017-5459)
Critical	26 Oct 2017	5 Jun 2018	CPAI-2017-0879			Suspicious SMB Ransomware Propagation Attempt
Critical	8 Aug 2017	29 May 2018	CPAI-2017-0670	Adobe APSB17-24	CVE-2017-11227	Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11227)
Critical	14 Nov 2017	29 May 2018	CPAI-2017-0979	Adobe APSB17-36	CVE-2017-16416	Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36: CVE-2017-16416)
High	12 Dec 2017	29 May 2018	CPAI-2017-1033	Microsoft CVE-2017-11893	CVE-2017-11893	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11893)
Medium	18 Oct 2017	28 May 2018	CPAI-2017-0844	Microsoft	CVE-2017-11779	Microsoft Windows DNSAPI NSEC3 Heap-based Buffer Overflow (CVE-2017-11779)
Critical	14 Nov 2017	28 May 2018	CPAI-2017-0958	Adobe APSB17-36	CVE-2017-16404	Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16404)
Critical	1 Oct 2017	16 May 2018	CPAI-2017-0815	Trend Micro	CVE-2017-14078	Trend Micro Mobile Security Enterprise eas_agent_unregister slink_id SQL Injection (CVE-2017-14078)
High	5 Jun 2017	8 Apr 2018	CPAI-2017-0210	LIBTIFF	CVE-2016-9537	LibTIFF tiffcrop Integer Overflow (CVE-2016-9537)
Critical	31 Oct 2017	21 Mar 2018	CPAI-2017-0888			Suspicious Hyperlink Mail Phishing Attempt - ver2
Critical	21 Nov 2017	21 Mar 2018	CPAI-2017-1010	Metasploit	CVE-2010-0356	Viscom Software Movie Player Pro SDK ActiveX Buffer Overflow (CVE-2010-0356)