Home / 2019 Advisories Archive

2019 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	26 Nov 2019	26 Nov 2019	CPAI-2018-1214		CVE-2018-20792	Responsive File Manager Directory Traversal (CVE-2018-20792)
High	26 Nov 2019	26 Nov 2019	CPAI-2019-1520		CVE-2019-0602	Microsoft Graphics Device Interface Information Disclosure (CVE-2019-0602)
High	26 Nov 2019	26 Nov 2019	CPAI-2019-1528		CVE-2019-3560	Facebook Fizz Integer Overflow Denial of Service (CVE-2019-3560)
Critical	26 Nov 2019	26 Nov 2019	CPAI-2019-1529		CVE-2019-1788	ClamAV OLE2 Out-of-Bounds Write (CVE-2019-1788)
High	26 Nov 2019	26 Nov 2019	CPAI-2019-1533		CVE-2019-0540	Microsoft Office Word Security Feature Bypass (CVE-2019-0540)
High	26 Nov 2019	26 Nov 2019	CPAI-2019-1543			Advantech WebAccess Node Spchapi Buffer Overflow Remote Code Execution
Medium	26 Nov 2019	26 Nov 2019	CPAI-2019-1555		CVE-2019-9022	PHP dns_get_record Out of Bounds Read (CVE-2019-9022)
High	26 Nov 2019	26 Nov 2019	CPAI-2019-1559		CVE-2019-11873	wolfSSL DoPreSharedKeys PSK Identity Buffer Overflow (CVE-2019-11873)
High	26 Nov 2019	26 Nov 2019	CPAI-2019-1560		CVE-2019-6444	NTPsec ntpd Out of Bounds Read (CVE-2019-6444)
High	26 Nov 2019	26 Nov 2019	CPAI-2019-1567		CVE-2019-3829	GnuTLS Certificate Verification Use after Free (CVE-2019-3829)
High	4 Feb 2019	25 Nov 2019	CPAI-2019-0093		CVE-2018-16858	LibreOffice and Openoffice Remote Code Execution (CVE-2018-16858)
High	25 Nov 2019	25 Nov 2019	CPAI-2018-1220		CVE-2018-5744	ISC BIND Denial Of Service (CVE-2018-5744)
Critical	25 Nov 2019	25 Nov 2019	CPAI-2019-1510		CVE-2019-6341	Drupal Core file_create_filename Stored Cross-Site Scripting (CVE-2019-6341)
High	25 Nov 2019	25 Nov 2019	CPAI-2019-1511		CVE-2019-6554	Advantech WebAccess Denial of Service (CVE-2019-6554)
Critical	25 Nov 2019	25 Nov 2019	CPAI-2019-1513		CVE-2019-5385	HPE Intelligent Management Center Remote Code Execution (CVE-2019-5385)
High	25 Nov 2019	25 Nov 2019	CPAI-2019-1530		CVE-2019-7107	Adobe InDesign Remote Code Execution (CVE-2019-7107)
Critical	25 Nov 2019	25 Nov 2019	CPAI-2019-1536		CVE-2019-6550	Advantech WebAccess SCADA Buffer Overflow (CVE-2019-6550)
Critical	25 Nov 2019	25 Nov 2019	CPAI-2019-1540		CVE-2019-3953	Advantech WebAccess SCADA Buffer Overflow (CVE-2019-3953)
High	25 Nov 2019	25 Nov 2019	CPAI-2019-1542		CVE-2019-11600	OPF OpenProject Activities API SQL Injection (CVE-2019-11600)
High	25 Nov 2019	25 Nov 2019	CPAI-2019-1545		CVE-2019-9164	Nagios Xi Remote Command Execution (CVE-2019-9164)
Medium	25 Nov 2019	25 Nov 2019	CPAI-2018-1234		CVE-2018-19039	Grafana Labs Arbitrary File Read (CVE-2018-19039)
High	25 Nov 2019	25 Nov 2019	CPAI-2018-1238		CVE-2018-17910	Advantech WebAccess Stack-based Buffer Overflow (CVE-2018-17910)
High	24 Nov 2019	24 Nov 2019	CPAI-2019-1506		CVE-2019-11072	Lighttpd Web Server Denial Of Service (CVE-2019-11072)
Medium	23 Oct 2019	21 Nov 2019	CPAI-2018-1197		CVE-2018-8472	Microsoft Windows Information Disclosure (CVE-2018-8472)
Critical	21 Nov 2019	21 Nov 2019	CPAI-2018-1230		CVE-2018-7114	Hp Intelligent Management Center Buffer Overflow (CVE-2018-7114)
Critical	20 Nov 2019	20 Nov 2019	CPAI-2019-1483		CVE-2019-7091	Adobe ColdFusion Insecure Deserialization (CVE-2019-7091)
Critical	20 Nov 2019	20 Nov 2019	CPAI-2019-1484		CVE-2019-8917	SolarWinds Orion NPM OrionModuleEngine Remote Code Execution (CVE-2019-8917)
Critical	19 Nov 2019	19 Nov 2019	CPAI-2019-0223	Oracle cpuoct2018-4428296	CVE-2018-3191	Oracle WebLogic Server AbstractPlatformTransactionManager Insecure Deserialization (CVE-2018-3191)
Critical	28 Apr 2019	19 Nov 2019	CPAI-2019-0546		CVE-2019-2725	Oracle WebLogic Server Remote Code Execution (CVE-2019-2725)
Critical	19 Nov 2019	19 Nov 2019	CPAI-2019-1493		CVE-2019-11448	Zoho ManageEngine Applications Manager SQL Injection (CVE-2019-11448)
High	18 Nov 2019	18 Nov 2019	CPAI-2019-0489		CVE-2018-18996	LAquis SCADA Web Server Command Injection (CVE-2018-18996)
Critical	18 Nov 2019	18 Nov 2019	CPAI-2018-1192		CVE-2018-1215	Dell EMC VMAX Virtual Appliance Manager Directory Traversal (CVE-2018-1215)
Critical	18 Nov 2019	18 Nov 2019	CPAI-2018-1193		CVE-2018-14007	Citrix Xenserver Directory Traversal (CVE-2018-14007)
High	18 Nov 2019	18 Nov 2019	CPAI-2018-1195		CVE-2018-1418	IBM QRadar SIEM Authentication Bypass (CVE-2018-1418)
Medium	14 Nov 2019	14 Nov 2019	CPAI-2019-1432		CVE-2019-6556	OMRON CX-One CX-Programmer Program Use after Free (CVE-2019-6556)
Medium	13 Nov 2019	13 Nov 2019	CPAI-2019-1442		CVE-2019-0619	Microsoft Graphics Device Interface Information Disclosure (CVE-2019-0619)
Critical	13 Nov 2019	13 Nov 2019	CPAI-2019-1485		CVE-2019-4013	IBM Bigfix Platform Arbitrary File Upload (CVE-2019-4013)
Critical	13 Nov 2019	13 Nov 2019	CPAI-2019-1503		CVE-2019-17132	vBulletin updateAvatar Remote Code Execution (CVE-2019-17132)
High	13 Nov 2019	13 Nov 2019	CPAI-2019-1507		CVE-2019-3398	Atlassian Confluence Directory Traversal (CVE-2019-3398)
Critical	12 Nov 2019	12 Nov 2019	CPAI-2019-1480	Microsoft CVE-2019-1390	CVE-2019-1390	Microsoft VBScript Remote Code Execution (CVE-2019-1390)
High	7 Nov 2019	7 Nov 2019	CPAI-2018-1194		CVE-2018-3147	Oracle Outside In Excel Information Disclosure (CVE-2018-3147)
High	7 Nov 2019	7 Nov 2019	CPAI-2019-1475		CVE-2019-13608	Citrix StoreFront Server XML External Entity Injection (CVE-2019-13608)
Medium	7 Nov 2019	7 Nov 2019	CPAI-2019-1496		CVE-2019-10475	Jenkins build-metrics Plugin Cross-Site Scripting (CVE-2019-10475)
Medium	5 Nov 2019	5 Nov 2019	CPAI-2019-1376		CVE-2019-12828	Electronic Arts Origin Client URI Handler Remote Code Execution (CVE-2019-12828)
Medium	23 Sep 2019	5 Nov 2019	CPAI-2019-1298		CVE-2019-0537	Microsoft Visual Studio Vscontent Information Disclosure (CVE-2019-0537)
Medium	4 Nov 2019	4 Nov 2019	CPAI-2019-0274		CVE-2018-7514	OMRON CX-One CX-Stack-based Buffer Overflow (CVE-2018-7514)
High	9 Apr 2019	4 Nov 2019	CPAI-2019-0467	Adobe APSB19-17	CVE-2019-7125	Adobe Acrobat and Reader Heap Overflow (APSB19-17: CVE-2019-7125)
High	4 Nov 2019	4 Nov 2019	CPAI-2019-1454			WECON PIStudio basedll TextContent Stack-based Buffer Overflow
High	4 Nov 2019	4 Nov 2019	CPAI-2018-1203		CVE-2018-18988	LAquis SCADA LGX Report Arbitrary File Write (CVE-2018-18988)
High	16 Oct 2019	3 Nov 2019	CPAI-2019-1372		CVE-2019-8207 CVE-2019-8222	Adobe Acrobat and Reader Out-of-Bounds Read (APSB19-49; CVE-2019-8207; CVE-2019-8222)