Home / 2020 Advisories Archive

2020 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	17 Nov 2020	17 Nov 2020	CPAI-2020-1208		CVE-2020-8271	Citrix SD-WAN Center Remote Code Execution (CVE-2020-8271)
Critical	16 Nov 2020	16 Nov 2020	CPAI-2020-1097			JBoss JexBoss Security Scanner
High	16 Nov 2020	16 Nov 2020	CPAI-2020-1119		CVE-2020-5738	Grandstream GXP1600 Remote Code Execution (CVE-2020-5738)
High	16 Nov 2020	16 Nov 2020	CPAI-2020-1140		CVE-2020-11497	WordPress WooCommerce Plugin Authentication Bypass (CVE-2020-11497)
High	16 Nov 2020	16 Nov 2020	CPAI-2020-1145		CVE-2020-10204	Sonatype Nexus Repository Remote Code Execution (CVE-2020-10204)
Critical	16 Nov 2020	16 Nov 2020	CPAI-2019-2388		CVE-2019-19740	Octeth Oempro SQL injection (CVE-2019-19740)
Medium	16 Nov 2020	16 Nov 2020	CPAI-2020-1150		CVE-2020-11890	Joomla Remote Code Execution (CVE-2020-11890)
Critical	16 Nov 2020	16 Nov 2020	CPAI-2019-2391		CVE-2019-19245	NAPC Xinet Elegant 6 Asset Library SQL injection (CVE-2019-19245)
Critical	16 Nov 2020	16 Nov 2020	CPAI-2020-1172		CVE-2020-7356	CAYIN xPost Remote Code Execution (CVE-2020-7356)
Medium	16 Nov 2020	16 Nov 2020	CPAI-2020-1183		CVE-2020-11022 CVE-2020-11023	jQuery Cross Site Scripting (CVE-2020-11022; CVE-2020-11023)
High	16 Nov 2020	16 Nov 2020	CPAI-2020-1188		CVE-2020-17047	Microsoft Windows Network File System Denial of Service (CVE-2020-17047)
Medium	15 Nov 2020	15 Nov 2020	CPAI-2010-0652		CVE-2010-4111	HP Insight Diagnostics Online Edition Cross-Site Scripting (CVE-2010-4111)
High	15 Nov 2020	15 Nov 2020	CPAI-2010-0653		CVE-2010-2315	SmartISoft phpBazar Remote Code Execution (CVE-2010-2315)
Medium	15 Nov 2020	15 Nov 2020	CPAI-2010-0654		CVE-2010-3581	Oracle Fusion Middleware Cross-Site Scripting (CVE-2010-3581)
Medium	11 Nov 2020	11 Nov 2020	CPAI-2020-1154		CVE-2020-16206	Red Lion N-Tron Cross Site Scripting (CVE-2020-16206)
Critical	11 Nov 2020	11 Nov 2020	CPAI-2020-1173		CVE-2020-14871	Oracle Solaris Buffer Overflow (CVE-2020-14871)
Critical	11 Nov 2020	11 Nov 2020	CPAI-2020-1185			NAT Slipstream Bypass Attempt
High	11 Nov 2020	11 Nov 2020	CPAI-2020-1062		CVE-2020-24217	Szuray Video Encoder Firmware Command Injection (CVE-2020-24217)
Critical	11 Nov 2020	11 Nov 2020	CPAI-2020-1153		CVE-2020-9297	Netflix Titus Remote Code Execution (CVE-2020-9297)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1163	Microsoft CVE-2020-17038	CVE-2020-17038	Microsoft Win32k Elevation of Privilege (CVE-2020-17038)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1161	Microsoft CVE-2020-16998	CVE-2020-16998	Microsoft DirectX Elevation of Privilege (CVE-2020-16998)
Critical	10 Nov 2020	10 Nov 2020	CPAI-2020-1158	Microsoft CVE-2020-17052	CVE-2020-17052	Microsoft Browser Scripting Engine Memory Corruption (CVE-2020-17052)
Critical	10 Nov 2020	10 Nov 2020	CPAI-2020-1159	Microsoft CVE-2020-17053	CVE-2020-17053	Microsoft Internet Explorer Memory Corruption (CVE-2020-17053)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1162	Microsoft CVE-2020-17057	CVE-2020-17057	Microsoft Windows Win32k Elevation of Privilege (CVE-2020-17057)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1164	Microsoft CVE-2020-17010	CVE-2020-17010	Microsoft Win32k Elevation of Privilege (CVE-2020-17010)
Critical	10 Nov 2020	10 Nov 2020	CPAI-2020-1175	Microsoft CVE-2020-17051	CVE-2020-17051	Microsoft Windows Network File System Remote Code Execution (CVE-2020-17051)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1176	Microsoft CVE-2020-17088	CVE-2020-17088	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2020-17088)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1177	Microsoft CVE-2020-17056	CVE-2020-17056	Microsoft Windows Network File System Remote Code Execution (CVE-2020-17056)
Medium	10 Nov 2020	10 Nov 2020	CPAI-2020-1122		CVE-2020-24433	Adobe Acrobat and Reader Privilege Escalation (APSB20-67: CVE-2020-24433)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1123		CVE-2020-24427	Adobe Acrobat and Reader Memory Corruption (APSB20-67: CVE-2020-24427)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1127		CVE-2020-24432	Adobe Acrobat and Reader Improper Authorization (APSB20-67: CVE-2020-24432)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1128		CVE-2020-24430	Adobe Acrobat and Reader Use After Free (APSB20-67: CVE-2020-24430)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1130		CVE-2020-24434	Adobe Acrobat and Reader Out-of-bounds Read (APSB20-67: CVE-2020-24434)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1131		CVE-2020-24436	Adobe Acrobat and Reader Out-of-bounds Write (APSB20-67: CVE-2020-24436)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1132	Adobe APSB20-67	CVE-2020-24438	Adobe Acrobat and Reader Use After Free (APSB20-67: CVE-2020-24438)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1136		CVE-2020-24435	Adobe Acrobat and Reader Buffer Overflow (APSB20-67: CVE-2020-24435)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1126		CVE-2020-24426	Adobe Acrobat and Reader Out-Of-Bounds Read (APSB20-67: CVE-2020-24426)
High	10 Nov 2020	10 Nov 2020	CPAI-2020-1129		CVE-2020-24437	Adobe Acrobat and Reader Use After Free (APSB20-67: CVE-2020-24437)
Critical	5 Nov 2020	5 Nov 2020	CPAI-2020-1091		CVE-2020-9480	Apache Spark Remote Code Execution (CVE-2020-9480)
High	5 Nov 2020	5 Nov 2020	CPAI-2020-1120		CVE-2020-16139	Cisco Unified IP Conference Station 7937G Denial of Service (CVE-2020-16139)
Critical	5 Nov 2020	5 Nov 2020	CPAI-2020-1135		CVE-2020-16137	Cisco Unified IP Conference Station Privilege Escalation (CVE-2020-16137)
High	5 Nov 2020	5 Nov 2020	CPAI-2018-1697		CVE-2018-7600	Drupal Core Form Rendering Remote Code Execution (CVE-2018-7600)
High	5 Sep 2020	4 Nov 2020	CPAI-2020-0845		CVE-2020-14947	OCS Inventory NG CommandLine.php Command Injection (CVE-2020-14947)
High	4 Nov 2020	4 Nov 2020	CPAI-2020-1165		CVE-2020-17087	Microsoft Windows Kernel Local Elevation of Privilege (CVE-2020-17087)
Medium	4 Nov 2020	4 Nov 2020	CPAI-2020-1041		CVE-2020-8880	Foxit Studio Photo Remote Code Execution (CVE-2020-8880)
High	4 Nov 2020	4 Nov 2020	CPAI-2020-1050		CVE-2020-25273	SourceCodester Online Bus Booking System SQL Injection (CVE-2020-25273)
High	4 Nov 2020	4 Nov 2020	CPAI-2020-1057		CVE-2020-26582	D-Link DAP-1360U Command Injection (CVE-2020-26582)
High	28 Oct 2020	2 Nov 2020	CPAI-2020-1060		CVE-2020-8845	Foxit PhantomPDF Use After Free (CVE-2020-8845)
Critical	14 Jan 2020	29 Oct 2020	CPAI-2020-0002	Microsoft CVE-2020-0609	CVE-2020-0609	Microsoft Windows RDP Gateway Server Remote Code Execution (CVE-2020-0609)
Critical	14 Jan 2020	29 Oct 2020	CPAI-2020-0003	Microsoft CVE-2020-0610	CVE-2020-0610	Microsoft Windows RDP Gateway Server Remote Code Execution (CVE-2020-0610)