Home / 2020 Advisories Archive

2020 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	4 Nov 2020	4 Nov 2020	CPAI-2020-1057		CVE-2020-26582	D-Link DAP-1360U Command Injection (CVE-2020-26582)
High	28 Oct 2020	2 Nov 2020	CPAI-2020-1060		CVE-2020-8845	Foxit PhantomPDF Use After Free (CVE-2020-8845)
Critical	14 Jan 2020	29 Oct 2020	CPAI-2020-0002	Microsoft CVE-2020-0609	CVE-2020-0609	Microsoft Windows RDP Gateway Server Remote Code Execution (CVE-2020-0609)
Critical	14 Jan 2020	29 Oct 2020	CPAI-2020-0003	Microsoft CVE-2020-0610	CVE-2020-0610	Microsoft Windows RDP Gateway Server Remote Code Execution (CVE-2020-0610)
Critical	29 Oct 2020	29 Oct 2020	CPAI-2019-2196		CVE-2019-19006	Sangoma FreePBX Authentication Bypass (CVE-2019-19006)
High	29 Oct 2020	29 Oct 2020	CPAI-2020-1047		CVE-2020-12284	FFmpeg Heap-based Buffer Overflow (CVE-2020-12284)
High	28 Oct 2020	28 Oct 2020	CPAI-2020-0983			Nagios XI users.php do_update_user Stored Cross-Site Scripting
Medium	28 Oct 2020	28 Oct 2020	CPAI-2010-0650		CVE-2010-3272	ZOHO ManageEngine ADSelfService Plus Information Disclosure (CVE-2010-3272)
Critical	28 Oct 2020	28 Oct 2020	CPAI-2019-2346		CVE-2019-3922	Alcatel Lucent Stack Overflow (CVE-2019-3922)
High	28 Oct 2020	28 Oct 2020	CPAI-2020-1058		CVE-2020-1300	Microsoft Windows Remote Code Execution (CVE-2020-1300)
High	9 Jun 2020	26 Oct 2020	CPAI-2020-0481		CVE-2020-1206	Microsoft Windows SMBv3 Client/Server Information Disclosure (CVE-2020-1206)
High	26 Oct 2020	26 Oct 2020	CPAI-2020-0891		CVE-2020-6468	Google Chrome Type Confusion (CVE-2020-6468)
High	26 Oct 2020	26 Oct 2020	CPAI-2020-1029		CVE-2020-6381	Google Chrome Integer Overflow (CVE-2020-6381)
Critical	26 Oct 2020	26 Oct 2020	CPAI-2020-1036		CVE-2020-5734	SolarWinds DameWare Heap Overflow (CVE-2020-5734)
Critical	26 Oct 2020	26 Oct 2020	CPAI-2020-1042		CVE-2020-3280	Cisco Unified Contact Center Express Insecure Deserialization (CVE-2020-3280)
High	26 Oct 2020	26 Oct 2020	CPAI-2019-2332		CVE-2019-1430	Microsoft Media Foundation Use After Free (CVE-2019-1430)
Critical	26 Oct 2020	26 Oct 2020	CPAI-2020-1090		CVE-2020-27615	WordPress Loginizer Plugin SQL injection (CVE-2020-27615)
High	8 Sep 2020	25 Oct 2020	CPAI-2020-0842	Microsoft CVE-2020-0856	CVE-2020-0856	Microsoft Active Directory Information Disclosure (CVE-2020-0856)
High	25 Oct 2020	25 Oct 2020	CPAI-2020-1018		CVE-2020-10639	Eaton HMiSoft Stack Buffer Overflow (CVE-2020-10639)
High	25 Oct 2020	25 Oct 2020	CPAI-2020-1028		CVE-2020-2856	Oracle E-Business Suite Advanced Outbound Telephony Cross-Site Scripting (CVE-2020-2856)
High	25 Oct 2020	25 Oct 2020	CPAI-2020-1032		CVE-2020-9283	Google Golang Crypto Denial of Service (CVE-2020-9283)
Critical	25 Oct 2020	25 Oct 2020	CPAI-2020-1034		CVE-2020-6471	Google Chrome Sandbox Escape (CVE-2020-6471)
Critical	25 Oct 2020	25 Oct 2020	CPAI-2020-1044		CVE-2020-0718	Microsoft Windows Active Directory Remote Code Execution (CVE-2020-0718)
High	25 Oct 2020	25 Oct 2020	CPAI-2020-1056		CVE-2020-6378	Google Chrome Use After Free (CVE-2020-6378)
High	10 May 2020	21 Oct 2020	CPAI-2020-0322		CVE-2020-0932	Microsoft SharePoint Remote Code Execution (CVE-2020-0932)
High	19 Oct 2020	19 Oct 2020	CPAI-2020-0991		CVE-2020-6386	Google Chrome Speech Use After Free (CVE-2020-6386)
Critical	19 Oct 2020	19 Oct 2020	CPAI-2020-1002		CVE-2020-6461	Google Chrome Use After Free (CVE-2020-6461)
Critical	19 Oct 2020	19 Oct 2020	CPAI-2020-1005		CVE-2020-6462	Google Chrome Use After Free (CVE-2020-6462)
Critical	19 Oct 2020	19 Oct 2020	CPAI-2020-1007		CVE-2020-10621	Advantech WebAccess Arbitrary File Upload (CVE-2020-10621)
High	19 Oct 2020	19 Oct 2020	CPAI-2020-1010		CVE-2020-6385	Google Chrome Policy Bypass (CVE-2020-6385)
High	19 Oct 2020	19 Oct 2020	CPAI-2020-1022			Authors ePublisher Command Injection
Critical	15 Oct 2020	15 Oct 2020	CPAI-2020-0995		CVE-2020-6466	Google Chrome Heap Corruption (CVE-2020-6466)
Critical	15 Oct 2020	15 Oct 2020	CPAI-2020-0996		CVE-2020-6465	Google Chrome Use After Free (CVE-2020-6465)
High	15 Oct 2020	15 Oct 2020	CPAI-2020-0997		CVE-2020-6383	Google Chrome Heap Corruption (CVE-2020-6383)
High	15 Oct 2020	15 Oct 2020	CPAI-2020-0998		CVE-2020-6455	Google Chrome Heap Corruption (CVE-2020-6455)
High	15 Oct 2020	15 Oct 2020	CPAI-2020-1001		CVE-2020-6459	Google Chrome Use After Free (CVE-2020-6459)
High	16 Aug 2020	14 Oct 2020	CPAI-2020-0715			HTTP Server Side Template Injection
High	14 Oct 2020	14 Oct 2020	CPAI-2015-1078		CVE-2015-1209	Google Chrome Use After Free (CVE-2015-1209)
Critical	14 Oct 2020	14 Oct 2020	CPAI-2020-0993		CVE-2020-6493	Google Chrome Audio Use After Free (CVE-2020-6493)
High	14 Oct 2020	14 Oct 2020	CPAI-2020-0994		CVE-2020-6420	Google Chrome Media Cross Origin Bypass (CVE-2020-6420)
Critical	13 Oct 2020	13 Oct 2020	CPAI-2020-0901	Microsoft CVE-2020-16898	CVE-2020-16898	Microsoft Windows TCP/IP Remote Code Execution (CVE-2020-16898)
High	13 Oct 2020	13 Oct 2020	CPAI-2020-0902	Microsoft CVE-2020-16899	CVE-2020-16899	Microsoft Windows TCP/IP Denial of Service (CVE-2020-16899)
High	13 Oct 2020	13 Oct 2020	CPAI-2020-0999	Microsoft CVE-2020-16896	CVE-2020-16896	Microsoft Windows Remote Desktop Protocol (RDP) Information Disclosure (CVE-2020-16896)
Low	13 Oct 2020	13 Oct 2020	CPAI-2020-1004		CVE-2020-16915	Microsoft Windows Media Foundation H265 Stream Parsing Remote Code Execution (CVE-2020-16915)
Medium	11 Oct 2020	11 Oct 2020	CPAI-2020-0966			GetSimple CMS Persistent Cross-Site Scripting
Medium	11 Oct 2020	11 Oct 2020	CPAI-2020-0967			Typesetter CMS Persistent Cross-Site Scripting
Critical	11 Oct 2020	11 Oct 2020	CPAI-2020-0985		CVE-2020-6449	Google Chrome Audio Use After Free (CVE-2020-6449)
Critical	11 Oct 2020	11 Oct 2020	CPAI-2020-0987		CVE-2020-6427	Google Chrome Audio Use After Free (CVE-2020-6427)
High	7 Oct 2020	7 Oct 2020	CPAI-2020-0888		CVE-2020-5722	Grandstream UCM6202 Command Injection (CVE-2020-5722)
High	4 Oct 2020	4 Oct 2020	CPAI-2017-1097		CVE-2017-2789	JustSystems Ichitaro Buffer Overflow (CVE-2017-2789)