Home / 2018 Advisories Archive

2018 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	8 May 2018	13 Nov 2019	CPAI-2018-0415	Microsoft CVE-2018-8157	CVE-2018-8157	Microsoft Office Remote Code Execution (CVE-2018-8157)
Medium	2 Oct 2018	29 Oct 2019	CPAI-2018-1037		CVE-2018-10616	ABB Panel Builder 800 Stack-based Buffer Overflow (CVE-2018-10616)
High	9 Oct 2018	27 Oct 2019	CPAI-2018-0991	Microsoft CVE-2018-8413	CVE-2018-8413	Microsoft Windows Theme API Remote Code Execution (CVE-2018-8413)
High	2 Oct 2018	26 Sep 2019	CPAI-2018-1087		CVE-2018-12613	phpMyAdmin index.php Local File Inclusion (CVE-2018-12613)
High	5 Jul 2018	15 Sep 2019	CPAI-2018-0721			Netis Netcore Router Remote Code Execution
High	30 May 2018	2 Sep 2019	CPAI-2018-0511		CVE-2017-15715	Apache httpd FilesMatch Directive Security Restriction Bypass (CVE-2017-15715)
Critical	24 Oct 2018	7 Aug 2019	CPAI-2018-1092		CVE-2018-19207	WordPress GDPR Compliance Plugin Privilege Escalation (CVE-2018-19207)
High	26 Dec 2018	17 Jul 2019	CPAI-2018-1267		CVE-2018-8040	Apache Traffic Server ESI Plugin Cookie Header Information Disclosure (CVE-2018-8040)
High	13 Feb 2018	11 Jul 2019	CPAI-2018-0122	Adobe APSB18-02	CVE-2018-4907	Adobe Acrobat and Reader Out-of-bounds read (APSB18-02: CVE-2018-4907)
High	31 Dec 2018	12 Jun 2019	CPAI-2019-0017		CVE-2018-4233	Apple WebKit Memory Corruption (CVE-2018-4233)
High	10 Jul 2018	16 May 2019	CPAI-2018-0692	Adobe APSB18-21	CVE-2018-5044 CVE-2019-7771 CVE-2019-7780	Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-5044; CVE-2019-7771; CVE-2019-7780)
High	19 Jul 2018	6 May 2019	CPAI-2018-0713			Unicorn Suspicious Evasion Technique
Critical	8 May 2018	30 Apr 2019	CPAI-2018-0348	Microsoft CVE-2018-8133	CVE-2018-8133	Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-8133)
High	2 Oct 2018	15 Apr 2019	CPAI-2018-1031		CVE-2018-12015	Perl Archive Tar Arbitrary File Overwrite (CVE-2018-12015)
High	27 Sep 2018	27 Mar 2019	CPAI-2018-1019		CVE-2017-17055	Web Servers Code Execution Over HTTP Request Parameters (CVE-2017-17055)
High	22 Nov 2018	20 Mar 2019	CPAI-2019-0089		CVE-2017-15944	Paloaltonetworks Panos Remote Code Execution (CVE-2017-15944) - Ver2
Critical	19 Feb 2018	7 Mar 2019	CPAI-2018-0152			GrandSoft Exploit Kit Landing Page
High	19 Nov 2018	6 Mar 2019	CPAI-2018-1097			XML Containing Malicious File Stream
High	13 Nov 2018	5 Mar 2019	CPAI-2018-1059	Microsoft CVE-2018-8552	CVE-2018-8552	Microsoft Windows Scripting Engine Memory Corruption (CVE-2018-8552)
High	22 Nov 2018	5 Mar 2019	CPAI-2019-0031			Trend Micro IWSVA Deploywizard Haport Parameter Command Injection - Ver2
High	22 Nov 2018	5 Mar 2019	CPAI-2019-0029			Trend Micro IWSVA Parameter Command Injection - Ver2
High	22 Nov 2018	5 Mar 2019	CPAI-2019-0030			Trend Micro IWSVA Domain List Bdn Paremeter Command Injection - Ver2
High	12 Jun 2018	3 Mar 2019	CPAI-2018-0532	Microsoft CVE-2018-8210	CVE-2018-8210	Microsoft Windows Remote Code Execution (CVE-2018-8210)
High	27 Nov 2018	3 Mar 2019	CPAI-2018-1111			Magecart Credit Card Stealer
High	13 Feb 2018	27 Feb 2019	CPAI-2018-0116	Adobe APSB18-02	CVE-2018-4904	Adobe Acrobat and Reader Heap Overflow (APSB18-02: CVE-2018-4904)
High	15 Apr 2018	27 Feb 2019	CPAI-2018-0278	Microsoft CVE-2018-0950	CVE-2018-0950	Microsoft Office Information Disclosure (CVE-2018-0950)
High	2 Oct 2018	27 Feb 2019	CPAI-2018-0904	Adobe APSB18-30	CVE-2018-12855	Adobe Acrobat and Reader Buffer Errors (APSB18-30: CVE-2018-12855)
High	13 Mar 2018	26 Feb 2019	CPAI-2018-0159	Microsoft CVE-2018-0893	CVE-2018-0893	Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-0893)
High	25 Dec 2018	24 Feb 2019	CPAI-2019-0001		CVE-2018-19615	Rockwell Automation Allen-Bradley PowerMonitor 1000 Cross-Site Scripting (CVE-2018-19615)
Critical	29 Mar 2018	20 Feb 2019	CPAI-2018-0192		CVE-2018-7600	Drupal Core Remote Code Execution (CVE-2018-7600)
Low	9 Dec 2018	13 Feb 2019	CPAI-2018-1226		CVE-2018-7503	Advantech WebAccess NMS DownloadAction Directory Traversal (CVE-2018-7503)
High	22 Oct 2018	24 Jan 2019	CPAI-2019-0058		CVE-2018-10594	Delta Electronics Delta Industrial Automation Buffer Overflow (CVE-2018-10594)
Critical	12 Sep 2018	23 Jan 2019	CPAI-2018-0881		CVE-2018-8475	Microsoft Windows Remote Code Execution (CVE-2018-8475)
High	26 Dec 2018	23 Jan 2019	CPAI-2018-1286		CVE-2018-20377	Orange Livebox ADSL modem Information Disclosure (CVE-2018-20377)
Critical	1 Nov 2018	21 Jan 2019	CPAI-2018-1045	Microsoft CVE-2018-8476	CVE-2018-8476	Microsoft Windows Deployment Services TFTP Server Code Execution (CVE-2018-8476)
Critical	7 Oct 2018	20 Jan 2019	CPAI-2018-1119			Hadoop YARN ResourceManager Remote Command Execution
High	18 Dec 2018	17 Jan 2019	CPAI-2018-1288		CVE-2018-1000140	Red Hat librelp Stack Buffer Overflow (CVE-2018-1000140)
High	10 Jul 2018	16 Jan 2019	CPAI-2018-0627	Adobe APSB18-21	CVE-2018-5067	Adobe Acrobat and Reader Heap Overflow (APSB18-21: CVE-2018-5067)
Medium	18 Dec 2018	16 Jan 2019	CPAI-2018-1272		CVE-2018-17207	WordPress Snap Creek Duplicator Code Injection (CVE-2018-17207)
Medium	6 Dec 2018	15 Jan 2019	CPAI-2018-1141		CVE-2018-15768	Dell OpenManage Network Manager Authentication Bypass (CVE-2018-15768)
High	5 Nov 2018	13 Jan 2019	CPAI-2018-1036		CVE-2018-18471	Axentra Hipserv Multiple Vulnerabilities (CVE-2018-18471)
High	5 Nov 2018	13 Jan 2019	CPAI-2018-1073		CVE-2018-3953 CVE-2018-3954 CVE-2018-3955	Linksys ESeries OS Command Injection (CVE-2018-3953; CVE-2018-3954; CVE-2018-3955)
High	13 Dec 2018	6 Jan 2019	CPAI-2018-1255		CVE-2017-14384	Dell EMC Storage Manager EmConfigMigration Servlet Directory Traversal (CVE-2017-14384)
High	10 Dec 2018	4 Jan 2019	CPAI-2018-1170			Microsoft Word Mail Attachment Remote Code Execution
Medium	13 Dec 2018	3 Jan 2019	CPAI-2018-1262	0-day 0DAY_ID_31688	CVE-2018-1000845	Avahi avahi-daemon Denial Of Service (CVE-2018-1000845)
Medium	24 Dec 2018	3 Jan 2019	CPAI-2018-1287		CVE-2018-15715	Zoom Desktop Application Unauthorized UDP Message (CVE-2018-15715)
High	25 Dec 2018	3 Jan 2019	CPAI-2018-1291		CVE-2018-1821	IBM Operational Decision Manager External Entity Injection (CVE-2018-1821)
High	7 Nov 2018	1 Jan 2019	CPAI-2018-1080		CVE-2018-3910	Yi Technology Home Camera cloudAPI SSID Code Execution (CVE-2018-3910)
High	14 Nov 2018	31 Dec 2018	CPAI-2018-1107		CVE-2018-3928	Yi Technology Home Camera 27US Denial Of Service (CVE-2018-3928)
High	27 Nov 2018	31 Dec 2018	CPAI-2018-1112		CVE-2018-3935	Yi Technology Home Camera CRCDec Denial Of Service (CVE-2018-3935)