Home / 2020 Advisories Archive

2020 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1276		CVE-2020-27017	Trend Micro IMSVA External Entity Injection (CVE-2020-27017)
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1371		CVE-2020-15418	Veeam ONE SSRSReport XML External Entity Injection (CVE-2020-15418)
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1372			Nagios XI SNMP Trap SQL Injection
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1373		CVE-2020-9374	TP-Link TL-WR849N Routers Remote Code Execution (CVE-2020-9374)
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1375		CVE-2020-11852	Micro Focus Secure Messaging Gateway Command Injection (CVE-2020-11852)
High	27 Dec 2020	27 Dec 2020	CPAI-2020-1279		CVE-2020-3119 CVE-2020-3120 CVE-2020-3172 CVE-2020-8450	Web Servers Buffer Overflow Attempt (CVE-2020-3119; CVE-2020-3120; CVE-2020-3172; CVE-2020-8450)
Medium	27 Dec 2020	27 Dec 2020	CPAI-2020-1287		CVE-2020-28976 CVE-2020-28977 CVE-2020-28978	WordPress Canto Plugin Server-Side Request Forgery (CVE-2020-28976; CVE-2020-28977; CVE-2020-28978)
Medium	17 Dec 2020	27 Dec 2020	CPAI-2020-1288		CVE-2020-29075	Adobe Acrobat Data Exfiltration (CVE-2020-29075)
Medium	27 Dec 2020	27 Dec 2020	CPAI-2020-1378		CVE-2020-1210	Microsoft Sharepoint Remote Code Execution (CVE-2020-1210)
Critical	27 Dec 2020	27 Dec 2020	CPAI-2020-1379		CVE-2020-10188	Netkit Telnet Buffer Overflow (CVE-2020-10188)
Medium	23 Dec 2020	23 Dec 2020	CPAI-2020-1295		CVE-2020-7318	McAfee ePolicy Orchestrator Reflected Cross Site Scripting (CVE-2020-7318)
High	23 Dec 2020	23 Dec 2020	CPAI-2016-1036		CVE-2016-3225	Microsoft Windows Privilege Escalation (CVE-2016-3225)
High	22 Dec 2020	22 Dec 2020	CPAI-2020-1292		CVE-2020-29282	Bloodx Project SQL Injection (CVE-2020-29282)
High	22 Dec 2020	22 Dec 2020	CPAI-2020-1293		CVE-2020-28133	SourceCodester Sales and Inventory System SQL Injection (CVE-2020-28133)
High	22 Dec 2020	22 Dec 2020	CPAI-2020-1325		CVE-2020-35378	Online Bus Ticket Reservation Project SQL Injection (CVE-2020-35378)
Critical	22 Dec 2020	22 Dec 2020	CPAI-2015-1084		CVE-2015-5477	ISC BIND TKEY Queries Assertion Failure (CVE-2015-5477)
High	22 Dec 2020	22 Dec 2020	CPAI-2020-1362		CVE-2020-25157	Advantech R-SeeNet SQL Injection (CVE-2020-25157)
High	22 Dec 2020	22 Dec 2020	CPAI-2020-1363		CVE-2020-13953	Apache Tapestry Information Disclosure (CVE-2020-13953)
High	22 Dec 2020	22 Dec 2020	CPAI-2020-1364		CVE-2020-15902	Nagios XI Graph Explorer Cross-Site Scripting (CVE-2020-15902)
High	22 Dec 2020	22 Dec 2020	CPAI-2016-1035		CVE-2016-0096	Microsoft Windows Privilege Escalation (CVE-2016-0096)
Medium	22 Dec 2020	22 Dec 2020	CPAI-2016-1037		CVE-2016-8020	Mcafee VirusScan Enterprise Remote Code Execution (CVE-2016-8020)
Critical	22 Dec 2020	22 Dec 2020	CPAI-2016-1038		CVE-2016-7552	Trendmicro Threat Discovery Appliance Directory Traversal (CVE-2016-7552)
Critical	21 Dec 2020	21 Dec 2020	CPAI-2020-1261		CVE-2020-1948	Apache Dubbo Remote Code Execution (CVE-2020-1948)
High	21 Dec 2020	21 Dec 2020	CPAI-2020-1285		CVE-2020-26217	XStream Remote Code Execution (CVE-2020-26217)
High	21 Dec 2020	21 Dec 2020	CPAI-2015-1083		CVE-2015-6655	Pligg CMS Cross Site Request Forgery (CVE-2015-6655)
Critical	21 Dec 2020	21 Dec 2020	CPAI-2020-1304		CVE-2020-26085	Cisco Jabber Cross-Site Scripting (CVE-2020-26085)
High	20 Dec 2020	20 Dec 2020	CPAI-2020-1338			SolarWinds SUPERNOVA .NET Webshell Traffic
Critical	20 Dec 2020	20 Dec 2020	CPAI-2016-1031		CVE-2016-3593	Oracle Fusion Middleware OiT Component Multiple Vulnerabilities (CVE-2016-3593)
Medium	20 Dec 2020	20 Dec 2020	CPAI-2016-1032		CVE-2016-6435	Cisco Firepower Management Center Arbitrary File Read (CVE-2016-6435)
Medium	20 Dec 2020	20 Dec 2020	CPAI-2016-1033		CVE-2016-8710	Libbpg Project Out of Bounds Write (CVE-2016-8710)
Medium	20 Dec 2020	20 Dec 2020	CPAI-2016-1034		CVE-2016-4305	Kaspersky Internet Security KLIF driver Denial of service (CVE-2016-4305)
High	20 Dec 2020	20 Dec 2020	CPAI-2020-1345			Nagios Log Server Mail Settings Cross-Site Scripting
High	17 Dec 2020	17 Dec 2020	CPAI-2020-1281		CVE-2020-17408 CVE-2020-24916 CVE-2020-25079 CVE-2020-3117 CVE-2020-7049	HTTP Authenticated OS Command Injection (CVE-2020-17408; CVE-2020-24916; CVE-2020-25079; CVE-2020-3117; CVE-2020-7049)
High	17 Dec 2020	17 Dec 2020	CPAI-2020-1282		CVE-2020-10220 CVE-2020-15533 CVE-2020-23833 CVE-2020-23973 CVE-2020-23976 CVE-2020-23978 CVE-2020-23979	Web Servers SQL Injection Attempt (CVE-2020-10220; CVE-2020-15533; CVE-2020-23833; CVE-2020-23973; CVE-2020-23976; CVE-2020-23978; CVE-2020-23979)
High	17 Dec 2020	17 Dec 2020	CPAI-2016-1029		CVE-2016-0006	Microsoft Windows Privilege Escalation (CVE-2016-0006)
High	6 Dec 2020	17 Dec 2020	CPAI-2019-2408		CVE-2019-8506	Apple iOS Remote Code Execution (CVE-2019-8506)
Medium	16 Dec 2020	16 Dec 2020	CPAI-2010-0651		CVE-2010-0641	Cisco Collaboration Server Cross-Site Scripting (CVE-2010-0641)
Critical	16 Dec 2020	16 Dec 2020	CPAI-2020-1258		CVE-2020-13151	Aerospike Community Remote Code Execution (CVE-2020-13151)
High	16 Dec 2020	16 Dec 2020	CPAI-2016-1028		CVE-2016-0051	Microsoft Windows WebDAV Client Privilege Escalation (CVE-2016-0051)
Medium	16 Dec 2020	16 Dec 2020	CPAI-2016-1030		CVE-2016-0175	Microsoft Windows Information Disclosure (CVE-2016-0175)
Critical	16 Dec 2020	16 Dec 2020	CPAI-2020-1305		CVE-2020-29390	Zeroshell Remote Code Execution (CVE-2020-29390)
High	15 Dec 2020	15 Dec 2020	CPAI-2020-1309			Sunburst Backdoor Suspicious Traffic
High	14 Dec 2020	14 Dec 2020	CPAI-2020-0699		CVE-2020-11749	Pandora FMS Cross-Site Scripting (CVE-2020-11749)
High	14 Dec 2020	14 Dec 2020	CPAI-2020-1270		CVE-2020-28183	SourceCodester Water Billing System SQL Injection (CVE-2020-28183)
High	9 Dec 2020	9 Dec 2020	CPAI-2020-1290			Microsoft Teams Remote Code Execution
High	8 Dec 2020	8 Dec 2020	CPAI-2020-1250	Microsoft CVE-2020-17096	CVE-2020-17096	Microsoft Windows SMB Remote Code Execution (CVE-2020-17096)
Critical	8 Dec 2020	8 Dec 2020	CPAI-2020-1251	Microsoft CVE-2020-17152	CVE-2020-17152	Microsoft Dynamics 365 Commerce Remote Code Execution (CVE-2020-17152)
High	8 Dec 2020	8 Dec 2020	CPAI-2020-1272		CVE-2020-17140	Microsoft Windows SMB Server Information Disclosure (CVE-2020-17140)
Critical	8 Dec 2020	8 Dec 2020	CPAI-2020-1273		CVE-2020-17158	Microsoft Dynamics 365 for Finance and Operations Remote Code Execution (CVE-2020-17158)
High	6 Dec 2020	6 Dec 2020	CPAI-2016-1023		CVE-2016-0099	Microsoft Windows Server Privilege Escalation (CVE-2016-0099)