Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	9 Oct 2017	29 Oct 2017	CPAI-2017-0832	Microsoft CVE-2017-0201	CVE-2017-0201	Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2017-0201)
Critical	8 Aug 2017	26 Oct 2017	CPAI-2017-0627	Adobe APSB17-24	CVE-2017-11224	Adobe Acrobat And Reader Use After Free (APSB17-24: CVE-2017-11224)
High	23 Oct 2017	26 Oct 2017	CPAI-2017-0867	Microsoft	CVE-2017-11781	Microsoft Windows SMB Server SMBv1 Out of Bounds Read (CVE-2017-11781)
Critical	26 Oct 2017	26 Oct 2017	CPAI-2017-0880			Suspicious JavaScript Web Evasions
Critical	20 Feb 2017	25 Oct 2017	CPAI-2017-0138			Suspected Ransomware Dropzone
Medium	18 Oct 2017	25 Oct 2017	CPAI-2017-0873	ExploitDB	CVE-2017-11785	Microsoft Windows Kernel NtQueryObject Information Disclosure (CVE-2017-11785)
High	9 Oct 2017	24 Oct 2017	CPAI-2017-0830	HPE	CVE-2017-8956	HPE Intelligent Management Center dbman Stack Buffer Overflow (CVE-2017-8956)
Medium	28 Sep 2017	23 Oct 2017	CPAI-2017-0810	Digium	CVE-2017-14099	Digium Asterisk RTP Stack Information Disclosure (CVE-2017-14099)
Medium	15 Oct 2017	23 Oct 2017	CPAI-2017-0835	OpenVPN	CVE-2017-12166	OpenVPN read_key Stack Based Buffer Overflow (CVE-2017-12166)
Critical	23 Oct 2017	23 Oct 2017	CPAI-2017-0864		CVE-2017-14127	Technicolor TD5336 Router Remote Code Execution (CVE-2017-14127)
High	29 Aug 2017	22 Oct 2017	CPAI-2017-0721	Apache-advisory CVE-2017-9800-advisory	CVE-2017-9800	Apache Subversion svn-ssh URL Command Execution (CVE-2017-9800)
Medium	8 Oct 2017	22 Oct 2017	CPAI-2017-0827	Apache	CVE-2017-12617	Apache Tomcat HTTP PUT Remote Code Execution (CVE-2017-12617)
Critical	22 Oct 2017	22 Oct 2017	CPAI-2017-0861			Vacron NVR Remote Code Execution
Critical	22 Oct 2017	22 Oct 2017	CPAI-2017-0860		CVE-2017-5121	Google Chrome V8 Remote Code Execution (CVE-2017-5121)
High	22 Oct 2017	22 Oct 2017	CPAI-2017-0741			Microsoft Windows Remote Desktop Protocol Scanning Attempt
Critical	17 Oct 2017	19 Oct 2017	CPAI-2017-0843	DNSmasq	CVE-2017-14493	Dnsmasq DHCPv6 Stack Buffer Overflow Remote Code Execution (CVE-2017-14493)
Critical	19 Oct 2017	19 Oct 2017	CPAI-2017-0852			D-Link DIR-600/300 Router Unauthenticated Remote Command Execution
Critical	19 Oct 2017	19 Oct 2017	CPAI-2017-0855	Dnsmasq	CVE-2017-14494	Dnsmasq DHCPv6 Remote Unauthenticated Information Disclosure (CVE-2017-14494)
Medium	8 Aug 2017	18 Oct 2017	CPAI-2017-0636	Adobe APSB17-24	CVE-2017-3115	Adobe Acrobat and Reader Information Disclosure (APSB17-24: CVE-2017-3115)
High	12 Sep 2017	18 Oct 2017	CPAI-2017-0732	Microsoft CVE-2017-8728	CVE-2017-8728	Microsoft Windows PDF Library Remote Code Execution (CVE-2017-8728)
Critical	18 Oct 2017	18 Oct 2017	CPAI-2017-0851		CVE-2016-5681	D-Link 850L Router Cookie Overflow Remote Code Execution (CVE-2016-5681)
Critical	18 Oct 2017	18 Oct 2017	CPAI-2017-0847			D-Link 850L Router Remote Code Execution
High	19 Sep 2017	17 Oct 2017	CPAI-2017-0776			WordPress Display Widgets Plugin Spammers Backdoor
Medium	1 Oct 2017	17 Oct 2017	CPAI-2017-0813	Elastic	CVE-2015-5377	Elastic Elasticsearch ThrowableObjectInputStream Insecure Deserialization (CVE-2015-5377)
Critical	8 Aug 2017	16 Oct 2017	CPAI-2017-0665	Adobe APSB17-24	CVE-2017-11256	Adobe Acrobat and Reader Use After Free (APSB17-24: CVE-2017-11256)
Medium	27 Sep 2017	16 Oct 2017	CPAI-2017-0809	HPE	CVE-2017-12490	HPE Intelligent Management Center getSelInsBean Expression Language Injection (CVE-2017-12490)
High	16 Oct 2017	16 Oct 2017	CPAI-2017-0837	Schneider Electric	CVE-2017-7973	Schneider Electric U.motion Builder nfcserver.php SQL Injection (CVE-2017-7973)
Critical	16 Oct 2017	16 Oct 2017	CPAI-2017-0839	Microsoft CVE-2017-11802	CVE-2017-11802	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11802)
High	16 Oct 2017	16 Oct 2017	CPAI-2017-0838	Microsoft CVE-2017-11823	CVE-2017-11823	Microsoft Device Guard Security Feature Bypass (CVE-2017-11823)
Critical	16 Oct 2017	16 Oct 2017	CPAI-2017-0841	Microsoft CVE-2017-11799	CVE-2017-11799	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11799)
Medium	24 Sep 2017	15 Oct 2017	CPAI-2017-0781		CVE-2017-12710	Advantech WebAccess rmTemplate.aspx SQL Injection (CVE-2017-12710)
Critical	25 Sep 2017	15 Oct 2017	CPAI-2017-0786	Microsoft	CVE-2017-8744	Microsoft Office WordPerfect Document Converter Heap-based Buffer Overflow (CVE-2017-8744)
High	3 Oct 2017	15 Oct 2017	CPAI-2017-0824	Oracle	CVE-2010-0842	Oracle Java SE MixerSequencer Object GM_Song Remote Code Execution (CVE-2010-0842)
Medium	4 Sep 2017	10 Oct 2017	CPAI-2017-0729	Atlassian FE-6892	CVE-2017-9512	Atlassian FishEye and Crucible mostActiveCommitters Information Disclosure (CVE-2017-9512)
High	10 Oct 2017	10 Oct 2017	CPAI-2017-0814	Microsoft CVE-2017-8694	CVE-2017-8694	Microsoft Win32k Elevation of Privilege (CVE-2017-8694)
High	10 Oct 2017	10 Oct 2017	CPAI-2017-0825	Microsoft CVE-2017-8689	CVE-2017-8689	Microsoft Win32k Elevation of Privilege (CVE-2017-8689)
Critical	10 Oct 2017	10 Oct 2017	CPAI-2017-0802	Microsoft CVE-2017-8727	CVE-2017-8727	Microsoft Windows Shell Memory Corruption (CVE-2017-8727)
Critical	10 Oct 2017	10 Oct 2017	CPAI-2017-0794	Microsoft CVE-2017-11800	CVE-2017-11800	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11800)
Critical	10 Oct 2017	10 Oct 2017	CPAI-2017-0795	Microsoft CVE-2017-11822	CVE-2017-11822	Microsoft Internet Explorer Memory Corruption (CVE-2017-11822)
Critical	10 Oct 2017	10 Oct 2017	CPAI-2017-0803	Microsoft CVE-2017-11762	CVE-2017-11762	Microsoft Windows Graphics Remote Code Execution (CVE-2017-11762)
Critical	10 Oct 2017	10 Oct 2017	CPAI-2017-0797	Microsoft CVE-2017-11763	CVE-2017-11763	Microsoft Windows Graphics Remote Code Execution (CVE-2017-11763)
Critical	10 Oct 2017	10 Oct 2017	CPAI-2017-0796	Microsoft CVE-2017-11798	CVE-2017-11798	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11798)
Critical	1 Oct 2017	3 Oct 2017	CPAI-2017-0817			Microsoft Office Undocumented Feature Information Disclosure
Critical	3 Oct 2017	3 Oct 2017	CPAI-2017-0821		CVE-2017-14491	Dnsmasq Heap Based Overflow Remote Code Execution (CVE-2017-14491)
High	28 Sep 2017	2 Oct 2017	CPAI-2017-0820			SMBv1 Scanner
High	28 Sep 2017	2 Oct 2017	CPAI-2017-0819			Nodejs V8 Debugger Remote Code Execution
High	2 Oct 2017	2 Oct 2017	CPAI-2017-0818		CVE-2017-12616	Apache Tomcat VirtualDirContext Information Disclosure (CVE-2017-12616)
Critical	23 Aug 2017	1 Oct 2017	CPAI-2017-0706		CVE-2017-10951	Foxit Reader PDF Command Injection Remote Code Execution (CVE-2017-10951)
Critical	23 Aug 2017	1 Oct 2017	CPAI-2017-0707		CVE-2017-10952	Foxit Reader PDF Arbitrary File Write Remote Code Execution (CVE-2017-10952)
Medium	18 Sep 2017	1 Oct 2017	CPAI-2017-0773	Apache s2-051	CVE-2017-9793	Apache Struts 2 REST Plugin XStream Denial of Service (CVE-2017-9793)