Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	28 Sep 2017	28 Sep 2017	CPAI-2017-0805			WordPress Visual Editor Cross Site Scripting
Medium	7 Aug 2017	27 Sep 2017	CPAI-2017-0672	Microsoft	CVE-2017-0170	Microsoft Windows Performance Monitor XXE Injection Information Disclosure (CVE-2017-0170)
Medium	19 Sep 2017	27 Sep 2017	CPAI-2017-0772	STRONG SWAN	CVE-2017-11185	strongSwan gmp Plugin Denial of Service (CVE-2017-11185)
Medium	25 Sep 2017	27 Sep 2017	CPAI-2017-0787	Elastic ESA-2015-08	CVE-2015-5531	Elastic Elasticsearch Snapshot API Directory Traversal (CVE-2015-5531)
Critical	4 Jul 2017	26 Sep 2017	CPAI-2017-0550	Rapid7 Exploit-db	CVE-2015-2843 CVE-2015-2844 CVE-2015-2845	GoAutoDial 3.3 Authentication Bypass Command Injection (CVE-2015-2843; CVE-2015-2844; CVE-2015-2845)
Medium	14 Mar 2017	24 Sep 2017	CPAI-2017-0087	Microsoft MS17-006	CVE-2017-0033	Microsoft Browser Spoofing (MS17-006: CVE-2017-0033)
High	25 Jul 2017	24 Sep 2017	CPAI-2017-0586	Rapid7	CVE-2017-0372	MediaWiki SyntaxHighlight Option Injection (CVE-2017-0372)
Critical	8 Aug 2017	24 Sep 2017	CPAI-2017-0664	Adobe APSB17-24	CVE-2017-11257	Adobe Acrobat and Reader Type Confusion (APSB17-24: CVE-2017-11257)
High	28 Aug 2017	24 Sep 2017	CPAI-2017-0710	Microsoft CVE-2017-8656	CVE-2017-8656	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8656)
Medium	29 Aug 2017	24 Sep 2017	CPAI-2017-0724		CVE-2015-0802 CVE-2015-0816	Firefox PDF.js Javascript Injection (CVE-2015-0802; CVE-2015-0816)
High	19 Sep 2017	24 Sep 2017	CPAI-2017-0777	HPE	CVE-2017-8994	HPE Operations Orchestration central-remoting Insecure Deserialization (CVE-2017-8994)
Critical	17 Sep 2017	19 Sep 2017	CPAI-2017-0775			Repetitive IMAP Login Failures
Medium	18 Sep 2017	19 Sep 2017	CPAI-2017-0769	ExploitDB ExploitDB	CVE-2017-14147	Multiple Routers Unauthenticated Router Factory Reset (CVE-2017-14147)
Critical	14 Sep 2017	18 Sep 2017	CPAI-2017-0759	EMC ESA-2017-062	CVE-2017-4997	EMC VMAX3 VASA Provider UploadConfigurator Directory Traversal (CVE-2017-4997)
High	29 Aug 2017	17 Sep 2017	CPAI-2017-0722	PostgreSQL Global Development Group	CVE-2017-7546	PostgreSQL Database Core Server non-libpq Client Policy Bypass (CVE-2017-7546)
Medium	17 Sep 2017	17 Sep 2017	CPAI-2017-0763	Rapid7 ExploitDB Rapid7 EDB-ID: 42560		Disk Pulse Enterprise GET Buffer Overflow
Medium	23 Jul 2017	14 Sep 2017	CPAI-2017-0579	Metasploit	CVE-2017-9757	IPFire ids.cgi OINKCODE Parameter Command Injection (CVE-2017-9757)
Critical	8 Aug 2017	14 Sep 2017	CPAI-2017-0625	Adobe APSB17-24	CVE-2017-11223	Adobe Acrobat And Reader Use After Free (APSB17-24: CVE-2017-11223)
Critical	20 Aug 2017	14 Sep 2017	CPAI-2017-0702	Microsoft	CVE-2017-8620	Microsoft Windows Search Type Confusion (CVE-2017-8620)
High	13 Sep 2017	14 Sep 2017	CPAI-2017-0755	TrendMicro 1117722	CVE-2017-11383	Trend Micro Control Manager cmdHandlerTVCSCommander SQL Injection (CVE-2017-11383)
Critical	8 Aug 2017	13 Sep 2017	CPAI-2017-0610	Adobe APSB17-24	CVE-2017-11220	Adobe Acrobat and Reader Heap Overflow (APSB17-24: CVE-2017-11220)
Medium	5 Jul 2017	12 Sep 2017	CPAI-2017-0553	GnuTLS	CVE-2017-7507	GnuTLS status_request Extension Null Pointer Dereference (CVE-2017-7507)
High	5 Sep 2017	12 Sep 2017	CPAI-2017-0730	Trend Micro	CVE-2017-11385	Trend Micro Control Manager cmdHandlerStatusMonitor SQL Injection (CVE-2017-11385)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0746	Microsoft CVE-2017-8682	CVE-2017-8682	Microsoft Win32k Graphics Remote Code Execution (CVE-2017-8682)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0744	Microsoft CVE-2017-8731	CVE-2017-8731	Microsoft Edge Memory Corruption (CVE-2017-8731)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0733	Microsoft CVE-2017-8737	CVE-2017-8737	Microsoft Windows PDF Library Remote Code Execution (CVE-2017-8737)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0735	Microsoft CVE-2017-8757	CVE-2017-8757	Microsoft Edge Remote Code Execution (CVE-2017-8757)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0743	Microsoft CVE-2017-8750	CVE-2017-8750	Microsoft Browser Memory Corruption (CVE-2017-8750)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0739	Microsoft CVE-2017-8753	CVE-2017-8753	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8753)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0734	Microsoft CVE-2017-8738	CVE-2017-8738	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8738)
High	12 Sep 2017	12 Sep 2017	CPAI-2017-0748	Adobe APSB17-28	CVE-2017-11282	Adobe Flash Player Memory Corruption (APSB17-28: CVE-2017-11282)
High	12 Sep 2017	12 Sep 2017	CPAI-2017-0749	Adobe APSB17-28	CVE-2017-11281	Adobe Flash Player Memory Corruption (APSB17-28: CVE-2017-11281)
Medium	26 Jun 2017	11 Sep 2017	CPAI-2017-0528	Trend Micro		Trend Micro SafeSync for Enterprise license Command Injection
Critical	8 Aug 2017	11 Sep 2017	CPAI-2017-0609	Adobe APSB17-24	CVE-2017-11222	Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11222)
Medium	11 Sep 2017	11 Sep 2017	CPAI-2017-0591		CVE-2017-0190	Microsoft Windows GDI Information Disclosure (CVE-2017-0190)
Critical	8 Sep 2017	8 Sep 2017	CPAI-2017-0747		CVE-2017-12611	Apache Struts2 Freemarker Remote Code Execution (CVE-2017-12611)
High	9 Aug 2017	6 Sep 2017	CPAI-2017-0677			Suspicious Credential Harvesting
High	28 Aug 2017	6 Sep 2017	CPAI-2017-0712	Microsoft CVE-2017-8636	CVE-2017-8636	Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-8636)
Medium	3 Sep 2017	6 Sep 2017	CPAI-2017-0728	Symantec	CVE-2017-6327	Symantec Messaging Gateway performRestore Command Injection (CVE-2017-6327)
Medium	8 Aug 2017	5 Sep 2017	CPAI-2017-0589	Microsoft CVE-2017-8625	CVE-2017-8625	Microsoft Internet Explorer Security Feature Bypass (CVE-2017-8625)
Medium	8 Aug 2017	5 Sep 2017	CPAI-2017-0666	Adobe APSB17-24	CVE-2017-11255	Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11255)
Critical	4 Jul 2017	4 Sep 2017	CPAI-2017-0548			WordPress Statistics Cross Site Scripting
Critical	23 Jul 2017	4 Sep 2017	CPAI-2017-0584			WordPress WP Hide And Security Enhancer Plugin Arbitrary File Download
Critical	8 Aug 2017	4 Sep 2017	CPAI-2017-0608	Adobe APSB17-24	CVE-2017-11221	Adobe Acrobat and Reader Type Confusion (APSB17-24: CVE-2017-11221)
Medium	29 Aug 2017	3 Sep 2017	CPAI-2017-0723	HPE	CVE-2017-12500 CVE-2017-12526	HPE Intelligent Management Center multiple Expressions Language Injection (CVE-2017-12500; CVE-2017-12526)
Critical	10 Jul 2017	31 Aug 2017	CPAI-2017-0561	Microsoft CVE-2017-0283	CVE-2017-0283	Microsoft Graphics Component Information Disclosure (CVE-2017-0283)
Low	30 Aug 2017	31 Aug 2017	CPAI-2017-0727	Cacti	CVE-2017-12927	Cacti spikekill.php Cross-Site Scripting (CVE-2017-12927)
High	30 Jul 2017	30 Aug 2017	CPAI-2017-0592	FreeRADIUS Server Project FR-GV-301	CVE-2017-10984	FreeRADIUS data2vp_wimax Heap Buffer Overflow (CVE-2017-10984)
High	14 Mar 2017	29 Aug 2017	CPAI-2017-0168	Microsoft MS17-007	CVE-2017-0071 CVE-2017-8548	Microsoft Edge Scripting Engine Memory Corruption (MS17-007: CVE-2017-0071; CVE-2017-8548)
Critical	2 Apr 2017	29 Aug 2017	CPAI-2017-0296			Neptune Exploit Kit