Home / 2020 Advisories Archive

2020 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	21 Sep 2020	21 Sep 2020	CPAI-2020-0868		CVE-2020-24193	Sourcecodetester Daily Tracker System SQL Injection (CVE-2020-24193)
High	21 Sep 2020	21 Sep 2020	CPAI-2020-0870		CVE-2020-16875	Microsoft Exchange Memory Corruption (CVE-2020-16875)
Critical	21 Sep 2020	21 Sep 2020	CPAI-2015-1058		CVE-2015-2419	Microsoft Internet Explorer Memory Corruption (CVE-2015-2419)
High	21 Sep 2020	21 Sep 2020	CPAI-2020-0879		CVE-2020-14295	Cacti color.php SQL Injection (CVE-2020-14295)
Critical	21 Sep 2020	21 Sep 2020	CPAI-2018-1691		CVE-2018-1000861	Jenkins Stapler Web Framework Code Execution (CVE-2018-1000861)
Critical	16 Sep 2020	16 Sep 2020	CPAI-2017-1064		CVE-2017-15981 CVE-2017-15982	Geniusocean News SQL Injection (CVE-2017-15981; CVE-2017-15982)
Critical	16 Sep 2020	16 Sep 2020	CPAI-2020-0852		CVE-2020-24203	Projects World Travel Management System Authentication Bypass (CVE-2020-24203)
Medium	16 Sep 2020	16 Sep 2020	CPAI-2017-1094		CVE-2017-14186	Fortinet FortiOS Cross-Site Scripting (CVE-2017-14186)
Medium	16 Sep 2020	16 Sep 2020	CPAI-2017-1095		CVE-2017-12824	InPage Reader Remote Code Execution (CVE-2017-12824)
High	15 Sep 2020	15 Sep 2020	CPAI-2020-0834			Sharpshooter HTML Remote Code Execution
High	15 Sep 2020	15 Sep 2020	CPAI-2020-0859		CVE-2020-5776	Magneto MAGMI Remote Code Execution (CVE-2020-5776)
Medium	13 Sep 2020	13 Sep 2020	CPAI-2020-0756			WordPress Newsletter Plugin Reflected Cross Site Scripting
High	10 Sep 2020	10 Sep 2020	CPAI-2020-0821			WordPress Colorbox Plugin Persistent Cross-Site Scripting
High	10 Sep 2020	10 Sep 2020	CPAI-2020-0832			Demiguise HTML Remote Code Execution
Critical	10 Sep 2020	10 Sep 2020	CPAI-2019-2246		CVE-2019-18396	Technicolor TD5130v2 Oi_Fw_V20 Command Injection (CVE-2019-18396)
High	10 Sep 2020	10 Sep 2020	CPAI-2019-2247		CVE-2019-19356	Netis WF2419 Remote Code Execution (CVE-2019-19356)
Critical	10 Sep 2020	10 Sep 2020	CPAI-2019-2248		CVE-2019-16072	Netsas Enigma Network Management Solution Remote Code Execution (CVE-2019-16072)
Critical	9 Sep 2020	9 Sep 2020	CPAI-2009-0524		CVE-2009-0075	Microsoft Internet Explorer Uninitialized Memory Corruption (CVE-2009-0075)
High	9 Sep 2020	9 Sep 2020	CPAI-2020-0840			QNAP NAS Remote Code Execution
Critical	9 Sep 2020	9 Sep 2020	CPAI-2019-2212		CVE-2019-6340	Drupal Core Remote PHP Code Execution (CVE-2019-6340)
High	8 Sep 2020	8 Sep 2020	CPAI-2020-0826	Microsoft CVE-2020-1152	CVE-2020-1152	Microsoft Windows Win32k Elevation of Privilege (CVE-2020-1152)
High	8 Sep 2020	8 Sep 2020	CPAI-2020-0827	Microsoft CVE-2020-0664	CVE-2020-0664	Microsoft Active Directory Information Disclosure (CVE-2020-0664)
High	8 Sep 2020	8 Sep 2020	CPAI-2020-0828	Microsoft CVE-2020-1115	CVE-2020-1115	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2020-1115)
High	8 Sep 2020	8 Sep 2020	CPAI-2020-0854	Microsoft CVE-2020-1308	CVE-2020-1308	Microsoft DirectX Elevation of Privilege (CVE-2020-1308)
High	8 Sep 2020	8 Sep 2020	CPAI-2020-0857	Microsoft CVE-2020-1245	CVE-2020-1245	Microsoft Win32k Elevation of Privilege (CVE-2020-1245)
High	8 Sep 2020	8 Sep 2020	CPAI-2020-0858	Microsoft CVE-2020-0941	CVE-2020-0941	Microsoft Win32k Information Disclosure (CVE-2020-0941)
High	5 Sep 2020	5 Sep 2020	CPAI-2020-0748			Online Shopping Alphaware Authentication Bypass
Medium	5 Sep 2020	5 Sep 2020	CPAI-2018-1596		CVE-2018-16864	Systemd journald Privilege Escalation (CVE-2018-16864)
Medium	5 Sep 2020	5 Sep 2020	CPAI-2018-1597		CVE-2018-17463	Google Chrome V8 Remote Code Execution (CVE-2018-17463)
High	5 Sep 2020	5 Sep 2020	CPAI-2020-0805			WordPress NextGen Gallery Sell Photo Plugin Cross Site Scripting
Critical	5 Sep 2020	5 Sep 2020	CPAI-2020-0836		CVE-2020-10621	Advantech WebAccess NMS ConfigRestoreAction Arbitrary File Upload (CVE-2020-10621)
Critical	16 Jun 2020	2 Sep 2020	CPAI-2020-0506		CVE-2020-8816	Pi-Hole DHCP Command Injection (CVE-2020-8816)
High	2 Sep 2020	2 Sep 2020	CPAI-2020-0735			Elaniin CMS Authentication Bypass
High	2 Sep 2020	2 Sep 2020	CPAI-2017-1060		CVE-2017-14702	ERS Data System Remote Code Execution (CVE-2017-14702)
High	2 Sep 2020	2 Sep 2020	CPAI-2020-0767		CVE-2020-7361	Easycorp Zentao Pro Command Injection (CVE-2020-7361)
High	1 Sep 2020	1 Sep 2020	CPAI-2020-0745		CVE-2020-15038	WordPress SeedProd Plugin Persistent Cross-Site Scripting (CVE-2020-15038)
Critical	1 Sep 2020	1 Sep 2020	CPAI-2020-0769		CVE-2020-13404	Atos Magento Command Injection (CVE-2020-13404)
High	1 Sep 2020	1 Sep 2020	CPAI-2020-0820		CVE-2020-3249	Cisco UCS Director saveWindowsNetworkConfig Directory Traversal (CVE-2020-3249)
High	1 Sep 2020	1 Sep 2020	CPAI-2017-1063		CVE-2017-8779	RPCbind XDR Parsing Memory Exhaustion Denial of Service (CVE-2017-8779)
High	1 Sep 2020	1 Sep 2020	CPAI-2020-0823		CVE-2020-3248	Cisco UCS Director saveStaticConfig Directory Traversal (CVE-2020-3248)
Medium	31 Aug 2020	31 Aug 2020	CPAI-2020-0744		CVE-2020-9495	Apache Archiva Command Injection (CVE-2020-9495)
High	27 Aug 2020	27 Aug 2020	CPAI-2018-1593		CVE-2018-0952	Microsoft Diagnostic Hub Standard Collector Elevation Of Privilege (CVE-2018-0952)
Medium	27 Aug 2020	27 Aug 2020	CPAI-2018-1598		CVE-2018-15533	Geutebrueck re_porter 16 DVR Cross-site Scripting (CVE-2018-15533)
Critical	27 Aug 2020	27 Aug 2020	CPAI-2018-1599		CVE-2018-11138	Quest KACE System Management Appliance Unauthorized Access (CVE-2018-11138)
High	27 Aug 2020	27 Aug 2020	CPAI-2018-1601		CVE-2018-8562	Microsoft Windows Win32k Elevation Of Privilege (CVE-2018-8562)
Critical	27 Aug 2020	27 Aug 2020	CPAI-2020-0824		CVE-2020-4212	IBM Spectrum Protect Plus hfpackage Command Injection (CVE-2020-4212)
High	25 Aug 2020	25 Aug 2020	CPAI-2020-0739		CVE-2020-13641	WordPress Real-Time Find and Replace Plugin Cross-Site Scripting (CVE-2020-13641)
Critical	25 Aug 2020	25 Aug 2020	CPAI-2018-1595		CVE-2018-8115	Microsoft Windows Host Compute Service Shim Remote Code Execution (CVE-2018-8115)
Critical	25 Aug 2020	25 Aug 2020	CPAI-2019-2209		CVE-2019-17638	Jenkins Jetty Buffer Overflow (CVE-2019-17638)
High	25 Aug 2020	25 Aug 2020	CPAI-2020-0811			VBulletin Persistent Cross Site Scripting