Home / 2020 Advisories Archive

2020 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	3 Aug 2020	3 Aug 2020	CPAI-2020-0687		CVE-2020-11956	Rittal PDU Command Injection (CVE-2020-11956)
High	3 Aug 2020	3 Aug 2020	CPAI-2020-0698			Rite CMS Command Injection
High	3 Aug 2020	3 Aug 2020	CPAI-2017-1058		CVE-2017-8897	Invision Power Services Community Suite Reflected Cross Site Scripting (CVE-2017-8897)
Medium	2 Aug 2020	2 Aug 2020	CPAI-2020-0504		CVE-2020-11100	HAProxy HTTP2 HPACK Remote Code Execution (CVE-2020-11100)
Critical	29 Jul 2020	29 Jul 2020	CPAI-2020-0684		CVE-2020-11546	SuperWebMailer Remote Code Execution (CVE-2020-11546)
Critical	29 Jul 2020	29 Jul 2020	CPAI-2020-0713		CVE-2020-15892	D-Link DAP-1520 Buffer Overflow (CVE-2020-15892)
Critical	29 Jul 2020	29 Jul 2020	CPAI-2019-2205		CVE-2019-9081	Laravel Illuminate Remote Code Execution (CVE-2019-9081)
High	29 Jul 2020	29 Jul 2020	CPAI-2020-0733		CVE-2020-2963	Oracle WebLogic Insecure Deserialization (CVE-2020-2963)
Medium	28 Jul 2020	28 Jul 2020	CPAI-2018-1572		CVE-2018-17247	Elasticsearch MachineLearning XML External Entities (CVE-2018-17247)
Medium	28 Jul 2020	28 Jul 2020	CPAI-2020-0697		CVE-2020-7009	Elasticsearch Privilege Escalation (CVE-2020-7009)
Critical	28 Jul 2020	28 Jul 2020	CPAI-2020-0700		CVE-2020-13925	Apache Kylin Command Injection (CVE-2020-13925)
High	28 Jul 2020	28 Jul 2020	CPAI-2019-2203		CVE-2019-18277	HaProxy HTTP Request Smuggling (CVE-2019-18277)
High	27 Jul 2020	27 Jul 2020	CPAI-2020-0671		CVE-2020-13248	BooleBox Stored Cross-Site Scripting (CVE-2020-13248)
Medium	27 Jul 2020	27 Jul 2020	CPAI-2020-0678		CVE-2020-8191	Citrix ADC Reflected Cross Site Scripting (CVE-2020-8191)
High	27 Jul 2020	27 Jul 2020	CPAI-2020-0686		CVE-2020-14946	BSA Radar Information Disclosure (CVE-2020-14946)
High	27 Jul 2020	27 Jul 2020	CPAI-2019-2202		CVE-2019-15310 CVE-2019-15311 CVE-2019-15312	GoAhead Command Injection (CVE-2019-15311; CVE-2019-15310; CVE-2019-15312)
High	23 Jul 2020	23 Jul 2020	CPAI-2020-0704			Redis Authentication Bypass Code Execution
High	23 Jul 2020	23 Jul 2020	CPAI-2020-0705			Google Chrome v8 Object.seal Map Transitions Type Confusion
Critical	22 Jul 2020	22 Jul 2020	CPAI-2013-0789		CVE-2013-0077	Microsoft Windows Media Decompression Remote Code Execution(MS13-011; CVE-2013-0077)
High	22 Jul 2020	22 Jul 2020	CPAI-2020-0703		CVE-2020-2956	Oracle E-Business Suite Human Resources SQL Injection (CVE-2020-2956)
Medium	21 Jul 2020	21 Jul 2020	CPAI-2020-0681		CVE-2020-6286 CVE-2020-6287	SAP NetWeaver Directory Traversal (CVE-2020-6286; CVE-2020-6287)
High	21 Jul 2020	21 Jul 2020	CPAI-2020-0691			HPE IMC deploySelectBootrom Remote Code Execution
High	21 Jul 2020	21 Jul 2020	CPAI-2020-0692		CVE-2020-8470	Trend Micro Multiple Products Directory Traversal (CVE-2020-8470)
High	2 Jul 2020	19 Jul 2020	CPAI-2020-0564			SYLKin Malware Infection Attempt
Critical	19 Jul 2020	19 Jul 2020	CPAI-2020-0668		CVE-2020-15539	We-Com Municipality Portal CMS SQL Injection (CVE-2020-15539)
High	19 Jul 2020	19 Jul 2020	CPAI-2020-0685			WordPress WP With Spritz Remote File Inclusion
Critical	19 Jul 2020	19 Jul 2020	CPAI-2011-0621		CVE-2011-0035	Microsoft Internet Explorer Memory Corruption (MS11-003; CVE-2011-0035)
Critical	19 Jul 2020	19 Jul 2020	CPAI-2012-0713		CVE-2012-0003	Microsoft Windows Media Player MIDI Remote Code Execution (MS12-004; CVE-2012-0003)
Critical	16 Jul 2020	16 Jul 2020	CPAI-2020-0659		CVE-2020-8519 CVE-2020-8520 CVE-2020-8521	Phpzag SQL Injection (CVE-2020-8519; CVE-2020-8520; CVE-2020-8521)
High	15 Jul 2020	15 Jul 2020	CPAI-2020-0630		CVE-2020-13640	WordPress gVectors wpDiscuz Plugin SQL Injection (CVE-2020-13640)
Critical	14 Jul 2020	14 Jul 2020	CPAI-2020-0574	Microsoft CVE-2020-1403	CVE-2020-1403	Microsoft VBScript Remote Code Execution (CVE-2020-1403)
Critical	14 Jul 2020	14 Jul 2020	CPAI-2020-0570	Microsoft CVE-2020-1374	CVE-2020-1374	Microsoft Remote Desktop Client Remote Code Execution (CVE-2020-1374)
High	14 Jul 2020	14 Jul 2020	CPAI-2020-0571	Microsoft CVE-2020-1381	CVE-2020-1381	Microsoft Windows Graphics Component Elevation of Privilege (CVE-2020-1381)
High	14 Jul 2020	14 Jul 2020	CPAI-2020-0572	Microsoft CVE-2020-1399	CVE-2020-1399	Microsoft Windows Runtime Elevation of Privilege (CVE-2020-1399)
High	14 Jul 2020	14 Jul 2020	CPAI-2020-0573	Microsoft CVE-2020-1426	CVE-2020-1426	Microsoft Windows Kernel Information Disclosure (CVE-2020-1426)
High	14 Jul 2020	14 Jul 2020	CPAI-2020-0661	Microsoft CVE-2020-1382	CVE-2020-1382	Microsoft Windows Graphics Component Elevation of Privilege (CVE-2020-1382)
High	14 Jul 2020	14 Jul 2020	CPAI-2020-0660		CVE-2020-1410	Microsoft Windows Address Book Contact File Parsing Integer Overflow (CVE-2020-1410)
Critical	13 Jul 2020	13 Jul 2020	CPAI-2017-1057		CVE-2017-11317 CVE-2017-11357	Telerik UI Arbitrary File Upload (CVE-2017-11317; CVE-2017-11357)
High	12 Jul 2020	12 Jul 2020	CPAI-2020-0633			Joomla J2 Jobs SQL Injection
Critical	8 Jul 2020	8 Jul 2020	CPAI-2020-0575		CVE-2020-14473	DrayTek Vigor Buffer Overflow (CVE-2020-14473)
Critical	8 Jul 2020	8 Jul 2020	CPAI-2020-0576		CVE-2020-14472	DrayTek Vigor Remote Code Execution (CVE-2020-14472)
High	8 Jul 2020	8 Jul 2020	CPAI-2020-0577			Netgear Nighthawk R6700 Router Heap Overflow
High	8 Jul 2020	8 Jul 2020	CPAI-2017-1055		CVE-2017-6320	Barracuda Load Balancer Remote Code Execution (CVE-2017-6320)
High	18 Mar 2020	7 Jul 2020	CPAI-2020-0144		CVE-2020-15348	Zyxel Cloud CNM SecuManager Remote Code Execution (CVE-2020-15348)
High	7 Jul 2020	7 Jul 2020	CPAI-2018-1536		CVE-2018-17057	TCPDF Phar Insecure Deserialization (CVE-2018-17057)
Medium	26 Feb 2020	6 Jul 2020	CPAI-2019-1786		CVE-2019-16113	Bludit CMS Arbitrary File Upload (CVE-2019-16113)
High	6 Jul 2020	6 Jul 2020	CPAI-2018-1534		CVE-2018-7180	Joomla Saxum Astro Component SQL Injection (CVE-2018-7180)
High	5 Jul 2020	5 Jul 2020	CPAI-2020-0565			OpenEMR controller Remote Code Execution
High	5 Jul 2020	5 Jul 2020	CPAI-2020-0569		CVE-2020-14993	DrayTek Buffer Overflow (CVE-2020-14993)
High	5 Jul 2020	5 Jul 2020	CPAI-2015-1057		CVE-2015-5958	phpFileManager Remote Code Execution (CVE-2015-5958)