Home / 2020 Advisories Archive

2020 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	23 Jan 2020	31 Oct 2021	CPAI-2019-0266	Microsoft	CVE-2018-8392	Microsoft JET Database Engine Heap-based Buffer Overflow (CVE-2018-8392)
High	8 Jan 2020	14 Oct 2021	CPAI-2019-1605			Belkin Wemo UPnP Remote Code Execution
Critical	9 Mar 2020	19 Sep 2021	CPAI-2019-1914		CVE-2019-18935	Progress Telerik UI Remote Code Execution (CVE-2019-18935)
High	17 Jun 2020	1 Sep 2021	CPAI-2020-0529		CVE-2020-13252 CVE-2020-22345	Centreon RRDdatabase_status_path Command Injection (CVE-2020-13252; CVE-2020-22345)
High	11 Nov 2020	17 Aug 2021	CPAI-2020-1155		CVE-2020-6756	Rasilient PixelStor Remote Code Execution (CVE-2020-6756)
Critical	9 Sep 2020	5 Aug 2021	CPAI-2019-2211		CVE-2019-12725	Zeroshell Remote Code Execution (CVE-2019-12725)
High	26 May 2020	15 Jul 2021	CPAI-2020-0284			HTTP Suspicious Linux Usr Paths
High	14 May 2020	15 Jul 2021	CPAI-2020-0251			HTTP Suspicious Linux Tilde Paths
Critical	14 Oct 2020	25 Apr 2021	CPAI-2020-0965		CVE-2018-14558 CVE-2020-10987	Tenda Routers Command Injection (CVE-2020-10987; CVE-2018-14558)
Critical	24 Aug 2020	8 Apr 2021	CPAI-2016-1144		CVE-2016-2555	ATutor SQL Injection (CVE-2016-2555)
High	11 Oct 2020	5 Apr 2021	CPAI-2020-0889		CVE-2020-28172	SQL Authentication Bypass (CVE-2020-28172)
Critical	8 Dec 2020	11 Mar 2021	CPAI-2020-1253	Microsoft CVE-2020-17121	CVE-2020-17121	Microsoft SharePoint Remote Code Execution (CVE-2020-17121)
High	21 Dec 2020	10 Mar 2021	CPAI-2020-1286		CVE-2020-10238 CVE-2020-10239 CVE-2021-23132	Joomla! Remote Code Execution (CVE-2020-10238; CVE-2020-10239; CVE-2021-23132)
High	24 Aug 2020	3 Mar 2021	CPAI-2020-0768		CVE-2020-17452	flatCore Unrestricted File Upload (CVE-2020-17452)
High	3 Jun 2020	16 Feb 2021	CPAI-2020-0423		CVE-2020-8518	Horde Groupware Remote Code Execution (CVE-2020-8518)
Critical	27 Dec 2020	7 Feb 2021	CPAI-2020-1346		CVE-2020-14645 CVE-2020-24616 CVE-2020-8840	FasterXML jackson-databind Remote Code Execution (CVE-2020-14645; CVE-2020-24616; CVE-2020-8840)
Critical	27 Feb 2020	25 Jan 2021	CPAI-2020-0097		CVE-2020-6418	Google Chrome Type Confusion (CVE-2020-6418)
High	16 Nov 2020	29 Dec 2020	CPAI-2019-2394		CVE-2019-19824	TOTOLINK Realtek SDK Routers Command Injection (CVE-2019-19824)
Critical	29 Dec 2020	29 Dec 2020	CPAI-2020-1291		CVE-2020-27976	OsCommerce Phoenix CE Command Injection (CVE-2020-27976)
Medium	29 Dec 2020	29 Dec 2020	CPAI-2020-1353		CVE-2020-24723	PHPGurukul Admin Panel Stored Cross Site Scripting (CVE-2020-24723)
Critical	29 Dec 2020	29 Dec 2020	CPAI-2020-1355		CVE-2020-25952	PHPGurukul Admin Panel SQL Injection (CVE-2020-25952)
Medium	29 Dec 2020	29 Dec 2020	CPAI-2020-1361			Linksys RE6500 Remote Code Execution
High	29 Dec 2020	29 Dec 2020	CPAI-2020-1367		CVE-2020-16951	Microsoft SharePoint Server Remote Code Execution (CVE-2020-16951)
High	28 Dec 2020	28 Dec 2020	CPAI-2020-1284		CVE-2020-12000 CVE-2020-13934 CVE-2020-3239 CVE-2020-9490	Web Servers Memory Corruption Attempt (CVE-2020-12000; CVE-2020-13934; CVE-2020-3239; CVE-2020-9490)
Critical	28 Dec 2020	28 Dec 2020	CPAI-2020-1385		CVE-2020-13921	Apache SkyWalking Storage SQL Injection (CVE-2020-13921)
Medium	28 Dec 2020	28 Dec 2020	CPAI-2020-1387		CVE-2020-0939	Microsoft Media Foundation Information Disclosure (CVE-2020-0939)
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1063		CVE-2020-8620	ISC BIND DNS Server Denial of Service (CVE-2020-8620)
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1283		CVE-2020-10631 CVE-2020-13158 CVE-2020-13886 CVE-2020-3240	Web Servers Directory Traversal Attempt (CVE-2020-10631; CVE-2020-13158; CVE-2020-13886; CVE-2020-3240)
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1276		CVE-2020-27017	Trend Micro IMSVA External Entity Injection (CVE-2020-27017)
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1371		CVE-2020-15418	Veeam ONE SSRSReport XML External Entity Injection (CVE-2020-15418)
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1372			Nagios XI SNMP Trap SQL Injection
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1373		CVE-2020-9374	TP-Link TL-WR849N Routers Remote Code Execution (CVE-2020-9374)
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1375		CVE-2020-11852	Micro Focus Secure Messaging Gateway Command Injection (CVE-2020-11852)
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1279		CVE-2020-3119 CVE-2020-3120 CVE-2020-3172 CVE-2020-8450	Web Servers Buffer Overflow Attempt (CVE-2020-3119; CVE-2020-3120; CVE-2020-3172; CVE-2020-8450)
Medium	27 Dec 2020	27 Dec 2020	CPAI-2020-1287		CVE-2020-28976 CVE-2020-28977 CVE-2020-28978	WordPress Canto Plugin Server-Side Request Forgery (CVE-2020-28976; CVE-2020-28977; CVE-2020-28978)
Medium	17 Dec 2020	27 Dec 2020	CPAI-2020-1288		CVE-2020-29075	Adobe Acrobat Data Exfiltration (CVE-2020-29075)
Medium	27 Dec 2020	27 Dec 2020	CPAI-2020-1378		CVE-2020-1210	Microsoft Sharepoint Remote Code Execution (CVE-2020-1210)
Critical	27 Dec 2020	27 Dec 2020	CPAI-2020-1379		CVE-2020-10188	Netkit Telnet Buffer Overflow (CVE-2020-10188)
Medium	23 Dec 2020	23 Dec 2020	CPAI-2020-1295		CVE-2020-7318	McAfee ePolicy Orchestrator Reflected Cross Site Scripting (CVE-2020-7318)
High	23 Dec 2020	23 Dec 2020	CPAI-2016-1036		CVE-2016-3225	Microsoft Windows Privilege Escalation (CVE-2016-3225)
High	22 Dec 2020	22 Dec 2020	CPAI-2020-1292		CVE-2020-29282	Bloodx Project SQL Injection (CVE-2020-29282)
High	22 Dec 2020	22 Dec 2020	CPAI-2020-1293		CVE-2020-28133	SourceCodester Sales and Inventory System SQL Injection (CVE-2020-28133)
High	22 Dec 2020	22 Dec 2020	CPAI-2020-1325		CVE-2020-35378	Online Bus Ticket Reservation Project SQL Injection (CVE-2020-35378)
Critical	22 Dec 2020	22 Dec 2020	CPAI-2015-1084		CVE-2015-5477	ISC BIND TKEY Queries Assertion Failure (CVE-2015-5477)
High	22 Dec 2020	22 Dec 2020	CPAI-2020-1362		CVE-2020-25157	Advantech R-SeeNet SQL Injection (CVE-2020-25157)
High	22 Dec 2020	22 Dec 2020	CPAI-2020-1363		CVE-2020-13953	Apache Tapestry Information Disclosure (CVE-2020-13953)
High	22 Dec 2020	22 Dec 2020	CPAI-2020-1364		CVE-2020-15902	Nagios XI Graph Explorer Cross-Site Scripting (CVE-2020-15902)
High	22 Dec 2020	22 Dec 2020	CPAI-2016-1035		CVE-2016-0096	Microsoft Windows Privilege Escalation (CVE-2016-0096)
Medium	22 Dec 2020	22 Dec 2020	CPAI-2016-1037		CVE-2016-8020	Mcafee VirusScan Enterprise Remote Code Execution (CVE-2016-8020)
Critical	22 Dec 2020	22 Dec 2020	CPAI-2016-1038		CVE-2016-7552	Trendmicro Threat Discovery Appliance Directory Traversal (CVE-2016-7552)