Home / 2020 Advisories Archive

2020 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	5 Jun 2020	5 Jun 2020	CPAI-2018-1408		CVE-2018-15535	TecRail Responsive Filemanager Directory Traversal (CVE-2018-15535)
Medium	5 Jun 2020	5 Jun 2020	CPAI-2018-1409		CVE-2018-2615	Oracle Oss Support Tools Component Remote Code Execution (CVE-2018-2615)
High	5 Jun 2020	5 Jun 2020	CPAI-2018-1410		CVE-2018-16283	Wechat Brodcast Project Directory Traversal (CVE-2018-16283)
Medium	5 Jun 2020	5 Jun 2020	CPAI-2017-1050		CVE-2017-5088	Google Chrome V8 Engine Memory Corruption(CVE-2017-5088)
High	2 Jun 2020	2 Jun 2020	CPAI-2020-0407		CVE-2020-1967	OpenSSL TLS NULL Pointer Dereference Denial of Service (CVE-2020-1967)
High	31 May 2020	1 Jun 2020	CPAI-2018-1390		CVE-2018-5974	Joomla SimpleCalendar Component SQL Injection (CVE-2018-5974)
Medium	31 May 2020	31 May 2020	CPAI-2018-1387		CVE-2018-10956	IPConfigure Orchid Core VMS Directory Traversal (CVE-2018-10956)
Medium	31 May 2020	31 May 2020	CPAI-2018-1388		CVE-2018-16299	Localize My Post Project Directory Traversal (CVE-2018-16299)
Medium	31 May 2020	31 May 2020	CPAI-2018-1389		CVE-2018-18323	CentOS Web Panel Directory Traversal (CVE-2018-18323)
High	31 May 2020	31 May 2020	CPAI-2020-0468		CVE-2020-3251	Cisco UCS Director Directory Traversal (CVE-2020-3251)
High	31 May 2020	31 May 2020	CPAI-2018-1393		CVE-2018-7841	Schneider Electric U.motion SQL Injection (CVE-2018-7841)
High	31 May 2020	31 May 2020	CPAI-2019-2140		CVE-2019-6207	MacOS Out Of Bounds Read (CVE-2019-6207)
High	27 May 2020	27 May 2020	CPAI-2020-0285			HTTP Suspicious Windows Paths
Critical	27 May 2020	27 May 2020	CPAI-2020-0461		CVE-2020-6967	Rockwell Automation FactoryTalk Insecure Deserialization (CVE-2020-6967)
Critical	27 May 2020	27 May 2020	CPAI-2020-0463		CVE-2020-11532	Zoho ManageEngine DataSecurity Plus Authentication Bypass (CVE-2020-11532)
Medium	26 May 2020	26 May 2020	CPAI-2020-0419			WordPress Ajax Load More Plugin SQL Injection
High	24 May 2020	24 May 2020	CPAI-2020-0308			WordPress Compromised Installed Servers Remote Code Execution
High	24 May 2020	24 May 2020	CPAI-2018-1331		CVE-2018-19488	WordPress JobCareer Plugin Authentication Bypass (CVE-2018-19488)
High	24 May 2020	24 May 2020	CPAI-2018-1332		CVE-2018-19487	WordPress JobCareer Plugin Information Disclosure (CVE-2018-19487)
High	22 May 2020	22 May 2020	CPAI-2019-2134		CVE-2019-9618	Gracemedia Media Player Local File Inclusion (CVE-2019-9618)
Medium	22 May 2020	22 May 2020	CPAI-2019-2135		CVE-2019-1153	Microsoft Office Information Disclosure(CVE-2019-1153)
Medium	22 May 2020	22 May 2020	CPAI-2019-2138		CVE-2019-1302	Microsoft Asp.net Core Privilege Escalation (CVE-2019-1302)
Medium	22 May 2020	22 May 2020	CPAI-2019-2139		CVE-2019-1039	Microsoft Windows Information Disclosure(CVE-2019-1039)
High	21 May 2020	21 May 2020	CPAI-2019-2063		CVE-2019-7301	Zen Load Balancer Remote Code Execution (CVE-2019-7301)
High	21 May 2020	21 May 2020	CPAI-2019-2078		CVE-2019-20215	D-Link DIR-859 Remote Code Execution (CVE-2019-20215)
High	21 May 2020	21 May 2020	CPAI-2020-0338		CVE-2020-10882 CVE-2020-10883 CVE-2020-10884	TP-Link Archer A7/C7 Remote Code Execution (CVE-2020-10884; CVE-2020-10882; CVE-2020-10883)
High	21 May 2020	21 May 2020	CPAI-2020-0351		CVE-2020-11794	Alcatel OpenTouch Command Injection (CVE-2020-11794)
Medium	21 May 2020	21 May 2020	CPAI-2020-0369		CVE-2020-3161	Cisco IP Phone Denial of Service (CVE-2020-3161)
High	21 May 2020	21 May 2020	CPAI-2019-2127		CVE-2019-1194	Microsoft Internet Explorer Memory Corruption(CVE-2019-1194)
High	21 May 2020	21 May 2020	CPAI-2020-0424			Microsoft Windows Contact Files HTML Injection
Medium	21 May 2020	21 May 2020	CPAI-2019-2128		CVE-2019-1094	Microsoft Windows Information Disclosure(CVE-2019-1094)
Medium	21 May 2020	21 May 2020	CPAI-2019-2129		CVE-2019-1313	Microsoft SQL Server Management Studio Information Disclosure (CVE-2019-1313)
High	21 May 2020	21 May 2020	CPAI-2020-0431			Suspicious Defacement Traffic
Medium	18 May 2020	18 May 2020	CPAI-2020-0324		CVE-2020-5844	Pandora FMS Remote Code Execution (CVE-2020-5844)
Medium	18 May 2020	18 May 2020	CPAI-2020-0409		CVE-2020-9594	Adobe Acrobat and Reader Out Of Bounds Read (APSB20-24: CVE-2020-9594)
High	14 May 2020	14 May 2020	CPAI-2019-1999		CVE-2019-7486	SonicWall SMA100 Remote Code Execution (CVE-2019-7486)
High	14 May 2020	14 May 2020	CPAI-2019-2017		CVE-2019-7482	SonicWall SMA100 and SRA Buffer Overflow (CVE-2019-7482)
High	27 Apr 2020	14 May 2020	CPAI-2020-0293		CVE-2020-4428	IBM Data Risk Manager Command Injection (CVE-2020-4428)
Critical	14 May 2020	14 May 2020	CPAI-2020-0304			Apple MobileMail and Maild Remote Code Execution
High	13 May 2020	13 May 2020	CPAI-2020-0390		CVE-2020-9612	Adobe Acrobat and Reader Buffer Overflow (APSB20-24: CVE-2020-9612)
High	13 May 2020	13 May 2020	CPAI-2020-0397		CVE-2020-9600	Adobe Acrobat and Reader Out-Of-Bounds Read (APSB20-24: CVE-2020-9600)
High	13 May 2020	13 May 2020	CPAI-2020-0398		CVE-2020-9599	Adobe Acrobat and Reader Out-Of-Bounds Read (APSB20-24: CVE-2020-9599)
High	13 May 2020	13 May 2020	CPAI-2020-0400		CVE-2020-9601	Adobe Acrobat and Reader Out-of-Bounds Read (APSB20-24: CVE-2020-9601)
High	13 May 2020	13 May 2020	CPAI-2020-0405		CVE-2020-9597	Adobe Acrobat and Reader Out-Of-Bounds Write (APSB20-24: CVE-2020-9597)
High	13 May 2020	13 May 2020	CPAI-2020-0406		CVE-2020-9592	Adobe Acrobat and Reader Digital Signature Bypass (APSB20-24: CVE-2020-9592)
High	12 May 2020	12 May 2020	CPAI-2020-0327	Microsoft CVE-2020-1035	CVE-2020-1035	Microsoft VBScript Remote Code Execution (CVE-2020-1035)
High	12 May 2020	12 May 2020	CPAI-2020-0329	Microsoft CVE-2020-1058	CVE-2020-1058	Microsoft VBScript Remote Code Execution (CVE-2020-1058)
High	12 May 2020	12 May 2020	CPAI-2020-0331	Microsoft CVE-2020-1060	CVE-2020-1060	Microsoft VBScript Remote Code Execution (CVE-2020-1060)
High	11 May 2020	11 May 2020	CPAI-2020-0174		CVE-2020-9436	Phoenix Contact TC Router Command Injection (CVE-2020-9436)
Critical	11 May 2020	11 May 2020	CPAI-2020-0359		CVE-2020-4429	IBM Data Risk Manager Authentication Bypass (CVE-2020-4429)