Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	11 Jul 2017	5 Sep 2017	CPAI-2017-0531	Microsoft CVE-2017-8594	CVE-2017-8594	Microsoft Internet Explorer Memory Corruption (CVE-2017-8594)
Medium	8 Aug 2017	5 Sep 2017	CPAI-2017-0589	Microsoft CVE-2017-8625	CVE-2017-8625	Microsoft Internet Explorer Security Feature Bypass (CVE-2017-8625)
Medium	8 Aug 2017	5 Sep 2017	CPAI-2017-0666	Adobe APSB17-24	CVE-2017-11255	Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11255)
Critical	4 Jul 2017	4 Sep 2017	CPAI-2017-0548			WordPress Statistics Cross Site Scripting
Critical	23 Jul 2017	4 Sep 2017	CPAI-2017-0584			WordPress WP Hide And Security Enhancer Plugin Arbitrary File Download
Critical	8 Aug 2017	4 Sep 2017	CPAI-2017-0608	Adobe APSB17-24	CVE-2017-11221	Adobe Acrobat and Reader Type Confusion (APSB17-24: CVE-2017-11221)
Medium	29 Aug 2017	3 Sep 2017	CPAI-2017-0723	HPE	CVE-2017-12500 CVE-2017-12526	HPE Intelligent Management Center multiple Expressions Language Injection (CVE-2017-12500; CVE-2017-12526)
Critical	10 Jul 2017	31 Aug 2017	CPAI-2017-0561	Microsoft CVE-2017-0283	CVE-2017-0283	Microsoft Graphics Component Information Disclosure (CVE-2017-0283)
Low	30 Aug 2017	31 Aug 2017	CPAI-2017-0727	Cacti	CVE-2017-12927	Cacti spikekill.php Cross-Site Scripting (CVE-2017-12927)
High	30 Jul 2017	30 Aug 2017	CPAI-2017-0592	FreeRADIUS Server Project FR-GV-301	CVE-2017-10984	FreeRADIUS data2vp_wimax Heap Buffer Overflow (CVE-2017-10984)
High	14 Mar 2017	29 Aug 2017	CPAI-2017-0168	Microsoft MS17-007	CVE-2017-0071 CVE-2017-8548	Microsoft Edge Scripting Engine Memory Corruption (MS17-007: CVE-2017-0071; CVE-2017-8548)
Critical	2 Apr 2017	29 Aug 2017	CPAI-2017-0296			Neptune Exploit Kit
Critical	26 Jun 2017	29 Aug 2017	CPAI-2017-0527		CVE-2017-8558	Microsoft Malware Protection Engine VFS API Remote Code Execution (CVE-2017-8558)
High	10 Jul 2017	29 Aug 2017	CPAI-2017-0560	Microsoft CVE-2017-0288	CVE-2017-0288	Microsoft Windows Graphics Information Disclosure (CVE-2017-0288)
Medium	23 Jul 2017	29 Aug 2017	CPAI-2017-0582	Trend Micro		Trend Micro SafeSync for Enterprise check_nfs_server_status Command Injection
High	8 Aug 2017	29 Aug 2017	CPAI-2017-0668	Adobe APSB17-24	CVE-2017-11229	Adobe Acrobat and Reader Security Bypass (APSB17-24: CVE-2017-11229)
Critical	9 Aug 2017	29 Aug 2017	CPAI-2017-0676		CVE-2017-5638	Apache Struts 2 Content-Disposition Remote Code Execution (CVE-2017-5638)
Critical	17 Aug 2017	29 Aug 2017	CPAI-2017-0699		CVE-2016-9078	Firefox SVG Cross-Domain Cookie Setting (CVE-2016-9078)
High	28 Aug 2017	29 Aug 2017	CPAI-2017-0719			Microsoft Edge EmitAssignment Memory Corruption
High	29 Aug 2017	29 Aug 2017	CPAI-2017-0720	Microsoft CVE-2017-8634	CVE-2017-8634	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8634)
High	11 Jul 2017	28 Aug 2017	CPAI-2017-0538	Microsoft CVE-2017-8601	CVE-2017-8601	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8601)
High	28 Aug 2017	28 Aug 2017	CPAI-2017-0716	Microsoft CVE-2017-8657	CVE-2017-8657	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8657)
High	28 Aug 2017	28 Aug 2017	CPAI-2017-0717	Microsoft CVE-2017-8646	CVE-2017-8646	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8646)
High	28 Aug 2017	28 Aug 2017	CPAI-2017-0714	Microsoft CVE-2017-8645	CVE-2017-8645	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8645)
High	28 Aug 2017	28 Aug 2017	CPAI-2017-0711	Microsoft CVE-2017-8635	CVE-2017-8635	Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-8635)
Critical	22 Jun 2017	27 Aug 2017	CPAI-2017-0525			Seamless Exploit Kits Traffic Distribution System
Medium	8 Aug 2017	27 Aug 2017	CPAI-2017-0662	Adobe APSB17-24	CVE-2017-11254	Adobe Acrobat and Reader Use After Free (APSB17-24: CVE-2017-11254)
Critical	27 Aug 2017	27 Aug 2017	CPAI-2017-0709		CVE-2015-6585	Hangul Word Processor Type Confusion (CVE-2015-6585)
Critical	9 Jan 2017	23 Aug 2017	CPAI-2017-0015			Suspicious Microsoft Office File Archive Mail Attachment
Critical	23 Aug 2017	23 Aug 2017	CPAI-2017-0705			Multiple PHP Webservers Ransomware Upload
Critical	13 Jun 2017	21 Aug 2017	CPAI-2017-0486	Microsoft CVE-2017-8543	CVE-2017-8543	Microsoft Windows Search Remote Code Execution (CVE-2017-8543)
Medium	2 Jul 2017	21 Aug 2017	CPAI-2017-0545	Cisco	CVE-2017-6662	Cisco Prime Infrastructure and EPNM DashboardRenderer XML External Entity Injection (CVE-2017-6662)
Medium	16 Aug 2017	21 Aug 2017	CPAI-2017-0695	Microsoft	CVE-2017-8652	Microsoft Edge Use After Free (CVE-2017-8652)
Critical	21 Aug 2017	21 Aug 2017	CPAI-2017-0704		CVE-2017-9934	Joomla Core SetType Cross-Site Scripting (CVE-2017-9934)
Medium	13 Jul 2017	20 Aug 2017	CPAI-2017-0564	Cisco cisco-sa-20170517-pcp3	CVE-2017-6635	Cisco Prime Collaboration Provisioning licensestatus.jsp Arbitrary File Deletion (CVE-2017-6635)
Medium	15 Aug 2017	20 Aug 2017	CPAI-2017-0690		CVE-2017-9638	Mitsubishi Electric E-Designer SetupAlarm Font Stack Buffer Overflow (CVE-2017-9638)
Critical	17 Aug 2017	20 Aug 2017	CPAI-2017-0698			WordPress Plugin I-Recommend-This SQL Injection
Critical	17 Aug 2017	20 Aug 2017	CPAI-2017-0697	Wpvulndb		WordPress Plugin Link-Library Authenticated SQL Injection
Critical	31 Jul 2017	17 Aug 2017	CPAI-2017-0596			Microsoft Windows SMB SMBLoris Denial of Service
Medium	13 Aug 2017	16 Aug 2017	CPAI-2017-0685	Trend Micro		Trend Micro SafeSync for Enterprise dead_local_device Command Injection
Medium	14 Aug 2017	16 Aug 2017	CPAI-2017-0687	Dell	CVE-2017-10949	Dell Storage Manager EmWebsiteServlet Directory Traversal (CVE-2017-10949)
Critical	23 Jul 2017	15 Aug 2017	CPAI-2017-0578	HPE	CVE-2017-5806	HPE Intelligent Management Center imcwlandm SSID Stack Buffer Overflow (CVE-2017-5806)
Medium	7 Aug 2017	15 Aug 2017	CPAI-2017-0671	Phamm	CVE-2017-0378	Phamm helpers.php Cross-Site Scripting (CVE-2017-0378)
High	14 Aug 2017	15 Aug 2017	CPAI-2017-0689	Trend Micro	CVE-2017-11384	Trend Micro Control Manager cmdHandlerLicenseManager SQL Injection (CVE-2017-11384)
Medium	26 Jul 2017	14 Aug 2017	CPAI-2017-0588	Kaspersky	CVE-2017-9812	Kaspersky Anti-Virus for Linux File Server getReportStatus Directory Traversal (CVE-2017-9812)
High	31 Jul 2017	13 Aug 2017	CPAI-2017-0597	Apache Software Foundation	CVE-2017-7668	Apache httpd ap_find_token Out of Bounds Read (CVE-2017-7668)
High	6 Aug 2017	13 Aug 2017	CPAI-2017-0656	Microsoft CVE-2017-8603	CVE-2017-8603	Microsoft Edge AsmJsInterpreter Use After Free (CVE-2017-8603)
Medium	31 Jul 2017	10 Aug 2017	CPAI-2017-0594	Trend Micro		Trend Micro SafeSync for Enterprise replace_local_disk Command Injection
High	8 Aug 2017	9 Aug 2017	CPAI-2017-0626	Adobe APSB17-23	CVE-2017-3085	Adobe Flash Player Security Bypass (APSB17-23: CVE-2017-3085)
Critical	8 Aug 2017	8 Aug 2017	CPAI-2017-0602	Adobe APSB17-24	CVE-2017-3123	Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-3123)