Home / 2020 Advisories Archive

2020 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	28 Nov 2020	9 Nov 2022	CPAI-2020-1089		CVE-2020-6092	Gonitro Nitro Pro Integer Overflow (CVE-2020-6092)
Medium	7 Jul 2020	9 Nov 2022	CPAI-2018-1535		CVE-2018-7466	TestLink installNewDB.php Remote Code Execution (CVE-2018-7466)
High	14 Apr 2020	9 Nov 2022	CPAI-2020-0195	Microsoft CVE-2020-0938	CVE-2020-0938	Microsoft OpenType Font Parsing Remote Code Execution (CVE-2020-0938)
High	27 Dec 2020	8 Nov 2022	CPAI-2020-1374		CVE-2020-4206	IBM Spectrum Protect Plus Command Injection (CVE-2020-4206)
High	16 Jun 2020	8 Nov 2022	CPAI-2018-1417		CVE-2018-5955	GitStack Authentication Bypass (CVE-2018-5955)
High	27 Apr 2020	6 Nov 2022	CPAI-2019-2070		CVE-2019-11287	Pivotal RabbitMQ X-Reason Denial of Service (CVE-2019-11287)
Medium	22 Oct 2020	27 Oct 2022	CPAI-2020-1027		CVE-2020-8877 CVE-2020-8879	Foxit Studio Photo Out of Bounds Read (CVE-2020-8877; CVE-2020-8879)
Critical	5 Jun 2020	21 Sep 2022	CPAI-2018-1412		CVE-2018-6546	Plays.tv Remote Code Execution (CVE-2018-6546)
Critical	11 Mar 2020	31 Aug 2022	CPAI-2018-2096		CVE-2018-14714	Asus Rt Ac3200 Firmware Command Injection (CVE-2018-14714)
Critical	26 Feb 2020	24 Jul 2022	CPAI-2019-1794		CVE-2019-5544 CVE-2021-21974	VMWare OpenSLP Heap Buffer Overflow (CVE-2019-5544; CVE-2021-21974)
High	10 Jun 2020	7 Jul 2022	CPAI-2020-0482		CVE-2021-41487	NOKIA VitalSuite SPM SQL Injection (CVE-2021-41487)
Medium	20 Dec 2020	4 Jul 2022	CPAI-2020-1344		CVE-2020-3153	Cisco AnyConnect Secure Mobility Client Privilege Escalation (CVE-2020-3153)
Medium	29 Jul 2020	18 Apr 2022	CPAI-2019-2207		CVE-2019-5418	Rails Action View Information Disclosure (CVE-2019-5418)
High	2 Aug 2020	21 Mar 2022	CPAI-2019-2204		CVE-2019-19330	HAProxy HTTP2 CRLF Injection (CVE-2019-19330)
High	27 Apr 2020	7 Mar 2022	CPAI-2020-0277			Advantech WebAccess SCADA Heap-based Buffer Overflow
High	26 Feb 2020	17 Feb 2022	CPAI-2020-0088		CVE-2020-9054	ZyXEL NAS Command Injection (CVE-2020-9054)
High	25 Feb 2020	10 Feb 2022	CPAI-2019-1816		CVE-2019-7232	ABB IDAL HTTP Server Stack Buffer Overflow (CVE-2019-7232)
High	31 May 2020	11 Jan 2022	CPAI-2018-1391		CVE-2018-7669	Sitecore.NET Directory Traversal (CVE-2018-7669)
Medium	25 Feb 2020	10 Jan 2022	CPAI-2019-1864		CVE-2019-10352	Jenkins Core Directory Traversal (CVE-2019-10352)
Critical	1 Mar 2020	5 Jan 2022	CPAI-2019-1888		CVE-2019-12526	Squid Proxy Heap Buffer Overflow (CVE-2019-12526)
Critical	8 Jul 2020	3 Jan 2022	CPAI-2020-0566		CVE-2020-6061	CoTURN Heap Overflow (CVE-2020-6061)
Medium	23 Apr 2020	31 Oct 2021	CPAI-2020-0180			WECON LeviStudio ShortMessage Module SMtext Stack Buffer Overflow
High	23 Jan 2020	31 Oct 2021	CPAI-2019-0266	Microsoft	CVE-2018-8392	Microsoft JET Database Engine Heap-based Buffer Overflow (CVE-2018-8392)
High	8 Jan 2020	14 Oct 2021	CPAI-2019-1605			Belkin Wemo UPnP Remote Code Execution
Critical	9 Mar 2020	19 Sep 2021	CPAI-2019-1914		CVE-2019-18935	Progress Telerik UI Remote Code Execution (CVE-2019-18935)
High	17 Jun 2020	1 Sep 2021	CPAI-2020-0529		CVE-2020-13252 CVE-2020-22345	Centreon RRDdatabase_status_path Command Injection (CVE-2020-13252; CVE-2020-22345)
High	11 Nov 2020	17 Aug 2021	CPAI-2020-1155		CVE-2020-6756	Rasilient PixelStor Remote Code Execution (CVE-2020-6756)
Critical	9 Sep 2020	5 Aug 2021	CPAI-2019-2211		CVE-2019-12725	Zeroshell Remote Code Execution (CVE-2019-12725)
High	26 May 2020	15 Jul 2021	CPAI-2020-0284			HTTP Suspicious Linux Usr Paths
High	14 May 2020	15 Jul 2021	CPAI-2020-0251			HTTP Suspicious Linux Tilde Paths
Critical	14 Oct 2020	25 Apr 2021	CPAI-2020-0965		CVE-2018-14558 CVE-2020-10987	Tenda Routers Command Injection (CVE-2020-10987; CVE-2018-14558)
Critical	24 Aug 2020	8 Apr 2021	CPAI-2016-1144		CVE-2016-2555	ATutor SQL Injection (CVE-2016-2555)
High	11 Oct 2020	5 Apr 2021	CPAI-2020-0889		CVE-2020-28172	SQL Authentication Bypass (CVE-2020-28172)
Critical	8 Dec 2020	11 Mar 2021	CPAI-2020-1253	Microsoft CVE-2020-17121	CVE-2020-17121	Microsoft SharePoint Remote Code Execution (CVE-2020-17121)
High	21 Dec 2020	10 Mar 2021	CPAI-2020-1286		CVE-2020-10238 CVE-2020-10239 CVE-2021-23132	Joomla! Remote Code Execution (CVE-2020-10238; CVE-2020-10239; CVE-2021-23132)
High	24 Aug 2020	3 Mar 2021	CPAI-2020-0768		CVE-2020-17452	flatCore Unrestricted File Upload (CVE-2020-17452)
High	3 Jun 2020	16 Feb 2021	CPAI-2020-0423		CVE-2020-8518	Horde Groupware Remote Code Execution (CVE-2020-8518)
Critical	27 Dec 2020	7 Feb 2021	CPAI-2020-1346		CVE-2020-14645 CVE-2020-24616 CVE-2020-8840	FasterXML jackson-databind Remote Code Execution (CVE-2020-14645; CVE-2020-24616; CVE-2020-8840)
Critical	27 Feb 2020	25 Jan 2021	CPAI-2020-0097		CVE-2020-6418	Google Chrome Type Confusion (CVE-2020-6418)
High	16 Nov 2020	29 Dec 2020	CPAI-2019-2394		CVE-2019-19824	TOTOLINK Realtek SDK Routers Command Injection (CVE-2019-19824)
Critical	29 Dec 2020	29 Dec 2020	CPAI-2020-1291		CVE-2020-27976	OsCommerce Phoenix CE Command Injection (CVE-2020-27976)
Medium	29 Dec 2020	29 Dec 2020	CPAI-2020-1353		CVE-2020-24723	PHPGurukul Admin Panel Stored Cross Site Scripting (CVE-2020-24723)
Critical	29 Dec 2020	29 Dec 2020	CPAI-2020-1355		CVE-2020-25952	PHPGurukul Admin Panel SQL Injection (CVE-2020-25952)
Medium	29 Dec 2020	29 Dec 2020	CPAI-2020-1361			Linksys RE6500 Remote Code Execution
High	29 Dec 2020	29 Dec 2020	CPAI-2020-1367		CVE-2020-16951	Microsoft SharePoint Server Remote Code Execution (CVE-2020-16951)
High	28 Dec 2020	28 Dec 2020	CPAI-2020-1284		CVE-2020-12000 CVE-2020-13934 CVE-2020-3239 CVE-2020-9490	Web Servers Memory Corruption Attempt (CVE-2020-12000; CVE-2020-13934; CVE-2020-3239; CVE-2020-9490)
Critical	28 Dec 2020	28 Dec 2020	CPAI-2020-1385		CVE-2020-13921	Apache SkyWalking Storage SQL Injection (CVE-2020-13921)
Medium	28 Dec 2020	28 Dec 2020	CPAI-2020-1387		CVE-2020-0939	Microsoft Media Foundation Information Disclosure (CVE-2020-0939)
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1063		CVE-2020-8620	ISC BIND DNS Server Denial of Service (CVE-2020-8620)
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1283		CVE-2020-10631 CVE-2020-13158 CVE-2020-13886 CVE-2020-3240	Web Servers Directory Traversal Attempt (CVE-2020-10631; CVE-2020-13158; CVE-2020-13886; CVE-2020-3240)