Home / 2018 Advisories Archive

2018 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	15 Apr 2018	31 Jul 2018	CPAI-2018-0454		CVE-2017-12491	HPE Intelligent Management Center Remote Code Execution (CVE-2017-12491) - Ver2
Critical	15 Apr 2018	31 Jul 2018	CPAI-2018-0456		CVE-2017-12526	HPE Intelligent Management Center Remote Code Execution (CVE-2017-12526) - Ver2
Critical	15 Apr 2018	31 Jul 2018	CPAI-2018-0791		CVE-2017-12521	HPE Intelligent Management Center Remote Code Execution (CVE-2017-12521) - Ver2
Critical	15 Apr 2018	31 Jul 2018	CPAI-2018-0455		CVE-2017-12500	HPE Intelligent Management Center Remote Code Execution (CVE-2017-12500) - Ver2
High	17 Apr 2018	31 Jul 2018	CPAI-2018-0789			Trend Micro Control Manager External Entity Information Disclosure - Ver2
High	17 Apr 2018	31 Jul 2018	CPAI-2018-0796			WINS Replication Sessions Memory Corruption - Ver2
High	17 Apr 2018	31 Jul 2018	CPAI-2018-0792			Trend Micro Control Manager Directory Traversal In IMPORTFILE.PHP - Ver2
Critical	17 Apr 2018	31 Jul 2018	CPAI-2018-0787	Microsoft	CVE-2017-11779	Microsoft Windows DNSAPI NSEC3 Heap-based Buffer Overflow (CVE-2017-11779) - Ver2
Critical	17 Apr 2018	31 Jul 2018	CPAI-2018-0793			Shadow Brokers Easybee Attack - Ver2
High	22 Apr 2018	31 Jul 2018	CPAI-2018-0781			Alt-N MDaeamon Buffer Overflow - Ver2
High	22 Apr 2018	31 Jul 2018	CPAI-2018-0801		CVE-2017-5404	Mozilla Firefox Table Use After Free (CVE-2017-5404) - Ver2
High	22 Apr 2018	31 Jul 2018	CPAI-2018-0338			MongoDB Unauthenticated Remote Database Drop - Ver2
High	22 Apr 2018	31 Jul 2018	CPAI-2018-0783		CVE-2017-11151	Synology Photo Station Arbitrary File Upload (CVE-2017-11151) - Ver2
Medium	14 May 2018	31 Jul 2018	CPAI-2018-0510		CVE-2018-0494	GNU Wget Cookie Injection Policy Bypass (CVE-2018-0494)
High	19 Jun 2018	31 Jul 2018	CPAI-2018-0724			TippingPoint Web Interface Reverse DNS Lookup Cross Site Scripting - Ver2
High	19 Jun 2018	31 Jul 2018	CPAI-2018-0731			Novell NetWare SMB Transaction Secondary Request DoS - Ver2
Critical	25 Jun 2018	31 Jul 2018	CPAI-2018-0719		CVE-2015-8277	Flexera FlexNet Publisher Buffer Overflow - Ver2 (CVE-2015-8277)
Critical	28 Jun 2018	31 Jul 2018	CPAI-2018-0720		CVE-2004-1094	RealNetworks RealPlayer Remote Code Execution (CVE-2004-1094) - Ver2
Critical	28 Jun 2018	31 Jul 2018	CPAI-2018-0728		CVE-2004-0901	Microsoft WordPad Font Conversion Remote Code Execution (CVE-2004-0901) - Ver2
Critical	5 Jul 2018	31 Jul 2018	CPAI-2018-0723		CVE-2016-1909	Fortinet FortiOS SSH backdoor (CVE-2016-1909) - Ver2
High	25 Jul 2018	30 Jul 2018	CPAI-2018-0767	Project zero	CVE-2018-4218	Apple WebKit Use-after-free (CVE-2018-4218)
Critical	29 Jul 2018	30 Jul 2018	CPAI-2018-0771		CVE-2018-10088	XiongMai uc-httpd Buffer Overflow (CVE-2018-10088)
High	30 Jul 2018	30 Jul 2018	CPAI-2018-0774	Project zero		Microsoft Internet Explorer JsErrorToString Use-after-free
High	30 Jul 2018	30 Jul 2018	CPAI-2018-0768	Project zero	CVE-2018-4222	Apple WebKit Out Of Bounds Read (CVE-2018-4222)
High	30 Jul 2018	30 Jul 2018	CPAI-2018-0773	Project zero		Google Chrome V8 kind confusion
High	10 Jul 2018	29 Jul 2018	CPAI-2018-0590	Adobe APSB18-21	CVE-2018-5030	Adobe Acrobat and Reader Untrusted pointer dereference (APSB18-21: CVE-2018-5030)
High	10 Jul 2018	29 Jul 2018	CPAI-2018-0597	Adobe APSB18-24	CVE-2018-5008	Adobe Flash Player Out-of-bounds read (APSB18-24: CVE-2018-5008)
Critical	14 Jun 2018	23 Jul 2018	CPAI-2018-0542			Suspicious Powershell Downloader
High	18 Jul 2018	23 Jul 2018	CPAI-2018-0717			VBScript Malicious Obfuscation Technique
Medium	18 Jul 2018	23 Jul 2018	CPAI-2018-0711			PoshRat Command Control Attempt
High	9 Jul 2018	16 Jul 2018	CPAI-2018-0697		CVE-2018-11311	mySCADA myPRO 7 Authentication Bypass (CVE-2018-11311)
Critical	15 Jul 2018	16 Jul 2018	CPAI-2018-0705		CVE-2017-6549	ASUSWRT AC53 Session Stealing Remote Command Execution (CVE-2017-6549)
High	16 Jul 2018	16 Jul 2018	CPAI-2018-0709			D-Link DIR601 Authentication Bypass
High	16 Jul 2018	16 Jul 2018	CPAI-2018-0708		CVE-2018-0706	QNAP Qcenter Virtual Appliance Information Disclosure (CVE-2018-0706)
High	15 Jul 2018	15 Jul 2018	CPAI-2018-0706		CVE-2018-12812	Adobe Acrobat Reader DC Collab Remote Code Execution (CVE-2018-12812)
High	15 Jul 2018	15 Jul 2018	CPAI-2018-0704		CVE-2018-12815	Adobe Acrobat and Reader Use After Free (APSB18-09 : CVE-2018-12815)
Critical	12 Jun 2018	12 Jul 2018	CPAI-2018-0530	Microsoft CVE-2018-8229	CVE-2018-8229	Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-8229)
High	10 Jul 2018	12 Jul 2018	CPAI-2018-0605	Adobe APSB18-21	CVE-2018-5018	Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-5018)
High	12 Jul 2018	12 Jul 2018	CPAI-2018-0570		CVE-2018-12520	ntopng Network Analyzer Authentication Bypass (CVE-2018-12520)
High	12 Jul 2018	12 Jul 2018	CPAI-2018-0701	Project zero	CVE-2018-8139	Microsoft Edge Out Of Bounds Read (CVE-2018-8139)
Medium	12 Jul 2018	12 Jul 2018	CPAI-2018-0700		CVE-2018-8733	NagiosXI Authentication Bypass (CVE-2018-8733)
Critical	4 Jan 2018	11 Jul 2018	CPAI-2018-0011		CVE-2017-5715 CVE-2017-5753 CVE-2017-5754 CVE-2018-3639	Meltdown/Spectre Multiple Browsers Speculative Execution (CVE-2017-5715; CVE-2017-5753; CVE-2017-5754; CVE-2018-3639)
High	9 Jul 2018	10 Jul 2018	CPAI-2018-0696		CVE-2018-1000094	CMS Made Simple File Manager Remote Code Execution (CVE-2018-1000094)
High	10 Jul 2018	10 Jul 2018	CPAI-2018-0626	Adobe APSB18-21	CVE-2018-12803	Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-12803)
High	10 Jul 2018	10 Jul 2018	CPAI-2018-0591	Adobe APSB18-21	CVE-2018-5032	Adobe Acrobat and Reader Heap Overflow (APSB18-21: CVE-2018-5032)
High	10 Jul 2018	10 Jul 2018	CPAI-2018-0688	Adobe APSB18-21	CVE-2018-5054	Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-5054)
High	10 Jul 2018	10 Jul 2018	CPAI-2018-0670	Microsoft CVE-2018-0949	CVE-2018-0949	Microsoft Internet Explorer Security Feature Bypass (CVE-2018-0949)
High	10 Jul 2018	10 Jul 2018	CPAI-2018-0600	Adobe APSB18-21	CVE-2018-12771	Adobe Acrobat and Reader Out-of-bounds write (APSB18-21: CVE-2018-12771)
High	10 Jul 2018	10 Jul 2018	CPAI-2018-0598	Adobe APSB18-21	CVE-2018-12770	Adobe Acrobat and Reader Use After Free (APSB18-21: CVE-2018-12770)
High	10 Jul 2018	10 Jul 2018	CPAI-2018-0607	Adobe APSB18-21	CVE-2018-12773	Adobe Acrobat and Reader Use After Free (APSB18-21: CVE-2018-12773)