Home / 2020 Advisories Archive

2020 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	8 Jun 2020	10 Jun 2020	CPAI-2020-0491		CVE-2020-3956	VMware Cloud Director Remote Code Execution (CVE-2020-3956)
High	10 Jun 2020	10 Jun 2020	CPAI-2020-0501		CVE-2020-6109	Zoom Client Arbitrary File Write (CVE-2020-6109)
High	9 Jun 2020	9 Jun 2020	CPAI-2020-0448	Microsoft CVE-2020-1207	CVE-2020-1207	Microsoft Win32k Elevation of Privilege (CVE-2020-1207)
Critical	9 Jun 2020	9 Jun 2020	CPAI-2020-0451	Microsoft CVE-2020-1216	CVE-2020-1216	Microsoft VBScript Remote Code Execution (CVE-2020-1216)
Critical	9 Jun 2020	9 Jun 2020	CPAI-2020-0452	Microsoft CVE-2020-1213	CVE-2020-1213	Microsoft VBScript Remote Code Execution (CVE-2020-1213)
High	9 Jun 2020	9 Jun 2020	CPAI-2020-0453	Microsoft CVE-2020-1241	CVE-2020-1241	Microsoft Windows Kernel Security Feature Bypass (CVE-2020-1241)
Critical	9 Jun 2020	9 Jun 2020	CPAI-2020-0455	Microsoft CVE-2020-1260	CVE-2020-1260	Microsoft VBScript Remote Code Execution (CVE-2020-1260)
High	9 Jun 2020	9 Jun 2020	CPAI-2020-0456	Microsoft CVE-2020-1215	CVE-2020-1215	Microsoft VBScript Remote Code Execution (CVE-2020-1215)
High	9 Jun 2020	9 Jun 2020	CPAI-2020-0457	Microsoft CVE-2020-1230	CVE-2020-1230	Microsoft VBScript Remote Code Execution (CVE-2020-1230)
High	9 Jun 2020	9 Jun 2020	CPAI-2020-0458	Microsoft CVE-2020-1214	CVE-2020-1214	Microsoft VBScript Remote Code Execution (CVE-2020-1214)
Critical	9 Jun 2020	9 Jun 2020	CPAI-2020-0483		CVE-2020-1219	Microsoft Browser Memory Corruption (CVE-2020-1219)
High	9 Jun 2020	9 Jun 2020	CPAI-2020-0493		CVE-2020-1284	Microsoft Windows SMB Driver Out of Bounds Read (CVE-2020-1284)
High	9 Jun 2020	9 Jun 2020	CPAI-2020-0494		CVE-2020-1301	Microsoft Windows SMBv1 Driver Integer Overflow Denial Of Service (CVE-2020-1301)
Medium	8 Jun 2020	8 Jun 2020	CPAI-2020-0427		CVE-2020-12629	osTicket Cross-Site Scripting (CVE-2020-12629)
High	8 Jun 2020	8 Jun 2020	CPAI-2020-0436		CVE-2020-10173	Comtrend Command Injection (CVE-2020-10173)
Critical	8 Jun 2020	8 Jun 2020	CPAI-2019-2143		CVE-2019-7194 CVE-2019-7195	QNAP Photo Station Authentication Bypass (CVE-2019-7195; CVE-2019-7194)
Critical	8 Jun 2020	8 Jun 2020	CPAI-2019-2144		CVE-2019-7193	QNAP QTS Remote Command Injection (CVE-2019-7193)
High	8 Jun 2020	8 Jun 2020	CPAI-2020-0476		CVE-2020-11108	Pi-hole Remote Code Execution (CVE-2020-11108)
High	8 Jun 2020	8 Jun 2020	CPAI-2020-0480			Kuicms PHP Persistent Cross-Site Scripting
High	8 Jun 2020	8 Jun 2020	CPAI-2020-0486		CVE-2018-17022	Asus GT-AC5300 Stack Buffer Overflow (CVE-2018-17022)
High	5 Jun 2020	5 Jun 2020	CPAI-2020-0496		CVE-2020-11531	Zoho ManageEngine DataSecurity Plus Directory Traversal (CVE-2020-11531)
Medium	5 Jun 2020	5 Jun 2020	CPAI-2018-1408		CVE-2018-15535	TecRail Responsive Filemanager Directory Traversal (CVE-2018-15535)
Medium	5 Jun 2020	5 Jun 2020	CPAI-2018-1409		CVE-2018-2615	Oracle Oss Support Tools Component Remote Code Execution (CVE-2018-2615)
High	5 Jun 2020	5 Jun 2020	CPAI-2018-1410		CVE-2018-16283	Wechat Brodcast Project Directory Traversal (CVE-2018-16283)
Medium	5 Jun 2020	5 Jun 2020	CPAI-2017-1050		CVE-2017-5088	Google Chrome V8 Engine Memory Corruption(CVE-2017-5088)
High	2 Jun 2020	2 Jun 2020	CPAI-2020-0407		CVE-2020-1967	OpenSSL TLS NULL Pointer Dereference Denial of Service (CVE-2020-1967)
High	31 May 2020	1 Jun 2020	CPAI-2018-1390		CVE-2018-5974	Joomla SimpleCalendar Component SQL Injection (CVE-2018-5974)
Medium	31 May 2020	31 May 2020	CPAI-2018-1387		CVE-2018-10956	IPConfigure Orchid Core VMS Directory Traversal (CVE-2018-10956)
Medium	31 May 2020	31 May 2020	CPAI-2018-1388		CVE-2018-16299	Localize My Post Project Directory Traversal (CVE-2018-16299)
Medium	31 May 2020	31 May 2020	CPAI-2018-1389		CVE-2018-18323	CentOS Web Panel Directory Traversal (CVE-2018-18323)
High	31 May 2020	31 May 2020	CPAI-2020-0468		CVE-2020-3251	Cisco UCS Director Directory Traversal (CVE-2020-3251)
High	31 May 2020	31 May 2020	CPAI-2018-1393		CVE-2018-7841	Schneider Electric U.motion SQL Injection (CVE-2018-7841)
High	31 May 2020	31 May 2020	CPAI-2019-2140		CVE-2019-6207	MacOS Out Of Bounds Read (CVE-2019-6207)
High	27 May 2020	27 May 2020	CPAI-2020-0285			HTTP Suspicious Windows Paths
Critical	27 May 2020	27 May 2020	CPAI-2020-0461		CVE-2020-6967	Rockwell Automation FactoryTalk Insecure Deserialization (CVE-2020-6967)
Critical	27 May 2020	27 May 2020	CPAI-2020-0463		CVE-2020-11532	Zoho ManageEngine DataSecurity Plus Authentication Bypass (CVE-2020-11532)
Medium	26 May 2020	26 May 2020	CPAI-2020-0419			WordPress Ajax Load More Plugin SQL Injection
High	24 May 2020	24 May 2020	CPAI-2020-0308			WordPress Compromised Installed Servers Remote Code Execution
High	24 May 2020	24 May 2020	CPAI-2018-1331		CVE-2018-19488	WordPress JobCareer Plugin Authentication Bypass (CVE-2018-19488)
High	24 May 2020	24 May 2020	CPAI-2018-1332		CVE-2018-19487	WordPress JobCareer Plugin Information Disclosure (CVE-2018-19487)
High	22 May 2020	22 May 2020	CPAI-2019-2134		CVE-2019-9618	Gracemedia Media Player Local File Inclusion (CVE-2019-9618)
Medium	22 May 2020	22 May 2020	CPAI-2019-2135		CVE-2019-1153	Microsoft Office Information Disclosure(CVE-2019-1153)
Medium	22 May 2020	22 May 2020	CPAI-2019-2136		CVE-2019-1334	Microsoft Windows Information Disclosure(CVE-2019-1334)
Medium	22 May 2020	22 May 2020	CPAI-2019-2137		CVE-2019-1227	Microsoft Windows Information Disclosure(CVE-2019-1227)
Medium	22 May 2020	22 May 2020	CPAI-2019-2138		CVE-2019-1302	Microsoft Asp.net Core Privilege Escalation (CVE-2019-1302)
Medium	22 May 2020	22 May 2020	CPAI-2019-2139		CVE-2019-1039	Microsoft Windows Information Disclosure(CVE-2019-1039)
High	21 May 2020	21 May 2020	CPAI-2019-2063		CVE-2019-7301	Zen Load Balancer Remote Code Execution (CVE-2019-7301)
High	21 May 2020	21 May 2020	CPAI-2019-2078		CVE-2019-20215	D-Link DIR-859 Remote Code Execution (CVE-2019-20215)
High	21 May 2020	21 May 2020	CPAI-2020-0338		CVE-2020-10882 CVE-2020-10883 CVE-2020-10884	TP-Link Archer A7/C7 Remote Code Execution (CVE-2020-10884; CVE-2020-10882; CVE-2020-10883)
High	21 May 2020	21 May 2020	CPAI-2020-0351		CVE-2020-11794	Alcatel OpenTouch Command Injection (CVE-2020-11794)