Home / 2021 Advisories Archive

2021 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	30 Dec 2021	28 May 2023	CPAI-2021-0961		CVE-2021-33357	RaspAP Command Injection (CVE-2021-33357)
Critical	26 Aug 2021	14 May 2023	CPAI-2021-0536		CVE-2021-21805	Advantech R-SeeNet ping.php Command Injection (CVE-2021-21805)
Critical	20 Jun 2021	14 May 2023	CPAI-2021-0416		CVE-2021-1497 CVE-2021-1498	Cisco HyperFlex HX Command Injection (CVE-2021-1497; CVE-2021-1498)
High	9 Mar 2021	14 May 2023	CPAI-2021-0108	Microsoft CVE-2021-26411	CVE-2021-26411	Microsoft Internet Explorer Memory Corruption (CVE-2021-26411)
High	24 Sep 2021	10 May 2023	CPAI-2021-0709		CVE-2021-33544	UDP Technology IP Camera Command Injection (CVE-2021-33544)
Critical	11 Apr 2021	4 May 2023	CPAI-2021-0211		CVE-2018-14485 CVE-2019-1010268 CVE-2020-11991 CVE-2021-23792 CVE-2021-26703 CVE-2021-37425 CVE-2021-43142 CVE-2022-0265 CVE-2022-24449 CVE-2022-38389 CVE-2022-39135 CVE-2022-43941 CVE-2022-47514 CVE-2023-23595	XML External Entity Over HTTP Request (CVE-2018-14485; CVE-2019-1010268; CVE-2020-11991; CVE-2021-23792; CVE-2021-26703; CVE-2021-37425; CVE-2021-43142; CVE-2022-0265; CVE-2022-24449; CVE-2022-38389; CVE-2022-39135; CVE-2022-43941; CVE-2022-47514; CVE-2023-23595)
Critical	30 Nov 2021	1 May 2023	CPAI-2020-3445		CVE-2020-15616 CVE-2020-18662 CVE-2020-21012 CVE-2020-5847 CVE-2020-5849	Unraid Remote Code Execution (CVE-2020-5847; CVE-2020-15616; CVE-2020-18662; CVE-2020-21012; CVE-2020-5849)
High	30 Jun 2021	1 May 2023	CPAI-2021-0419		CVE-2020-14972 CVE-2021-24321 CVE-2021-40617	SQL Injection Scanning Attempt Over HTTP (CVE-2020-14972; CVE-2021-24321; CVE-2021-40617)
Critical	22 Mar 2021	27 Apr 2023	CPAI-2021-0198		CVE-2021-22986 CVE-2021-22987 CVE-2022-1388	F5 BIG-IP Remote Code Execution (CVE-2021-22986; CVE-2021-22987; CVE-2022-1388)
High	15 Feb 2021	24 Apr 2023	CPAI-2021-0069		CVE-2021-25646 CVE-2021-26919	Apache Druid Remote Code Execution (CVE-2021-25646; CVE-2021-26919)
Critical	9 Sep 2021	23 Apr 2023	CPAI-2021-0554		CVE-2021-40444	Microsoft Internet Explorer MSHTML Remote Code Execution (CVE-2021-40444)
Critical	14 Mar 2021	23 Apr 2023	CPAI-2021-0100		CVE-2021-27101	Accellion FTA SQL injection (CVE-2021-27101)
High	7 Feb 2021	19 Apr 2023	CPAI-2020-3251		CVE-2020-9802	Apple Multiple Products Remote Code Execution (CVE-2020-9802)
High	16 Dec 2021	9 Apr 2023	CPAI-2018-1794		CVE-2018-15811 CVE-2018-18325	Dnnsoftware DotNetNuke Remote Code Execution (CVE-2018-15811; CVE-2018-18325)
Critical	20 Mar 2021	9 Apr 2023	CPAI-2020-1396		CVE-2022-23463 CVE-2022-43769	Java Server Pages Backdoor (CVE-2022-23463; CVE-2022-43769)
Critical	31 Aug 2021	28 Mar 2023	CPAI-2021-0537		CVE-2021-35394	Realtek Jungle SDK Command Injection (CVE-2021-35394)
Critical	31 Aug 2021	22 Mar 2023	CPAI-2021-0538		CVE-2021-35392 CVE-2021-35393 CVE-2021-35395	Realtek Jungle SDK Buffer Overflow (CVE-2021-35392; CVE-2021-35393; CVE-2021-35395)
Critical	25 Nov 2021	13 Mar 2023	CPAI-2021-0892		CVE-2021-42258	BQE BillQuick Web Suite SQL injection (CVE-2021-42258)
Critical	25 Apr 2021	13 Mar 2023	CPAI-2021-0253		CVE-2021-25282	SaltStack Salt Directory Traversal (CVE-2021-25282)
High	22 Dec 2021	8 Mar 2023	CPAI-2021-0930		CVE-2021-39226	Grafana Snapshot Feature Information Disclosure (CVE-2021-39226)
Critical	18 Oct 2021	28 Feb 2023	CPAI-2021-0772		CVE-2021-40438	Apache HTTP Server Server-Side Request Forgery (CVE-2021-40438)
Critical	8 Jul 2021	26 Feb 2023	CPAI-2021-0465		CVE-2021-34527	Windows Print Spooler Remote Code Execution (CVE-2021-34527)
Critical	14 Jul 2021	23 Feb 2023	CPAI-2021-0476	Microsoft CVE-2021-34473	CVE-2021-34473 CVE-2021-34523	Microsoft Exchange Server Remote Code Execution (CVE-2021-34473; CVE-2021-34523)
High	23 Feb 2021	23 Feb 2023	CPAI-2020-3235		CVE-2020-9315	Oracle iPlanet Web Server Authentication Bypass (CVE-2020-9315)
Critical	14 Nov 2021	19 Feb 2023	CPAI-2021-0879		CVE-2021-40539	Zoho ManageEngine ADSelfService Plus Authentication Bypass (CVE-2021-40539)
Critical	19 Oct 2021	11 Jan 2023	CPAI-2021-0765		CVE-2017-9830 CVE-2018-15139 CVE-2018-19423 CVE-2018-6383 CVE-2020-29607 CVE-2021-24155 CVE-2021-24347	p0wny Shell Remote Code Execution (CVE-2017-9830; CVE-2018-15139; CVE-2018-19423; CVE-2018-6383; CVE-2020-29607; CVE-2021-24155; CVE-2021-24347)
Critical	15 Jul 2021	9 Jan 2023	CPAI-2021-0461		CVE-2021-35464	ForgeRock OpenAM Remote Code Execution (CVE-2021-35464)
High	16 Dec 2021	3 Jan 2023	CPAI-2021-0900		CVE-2021-31207	Microsoft Exchange Server Security Feature Authentication Bypass (CVE-2021-31207)
Critical	5 Sep 2021	3 Jan 2023	CPAI-2021-0548		CVE-2021-26084	Atlassian Confluence Remote Code Execution (CVE-2021-26084)
High	29 Apr 2021	3 Jan 2023	CPAI-2021-0270			Visual Studio Code Python Extension Remote Code Execution
High	2 Mar 2021	29 Dec 2022	CPAI-2021-0107	Microsoft CVE-2021-26857	CVE-2021-26857 CVE-2021-26858	Microsoft Exchange Server Remote Code Execution (CVE-2021-26857; CVE-2021-26858)
High	29 Sep 2021	28 Dec 2022	CPAI-2021-0529		CVE-2021-21225	Google Chrome Heap Corruption (CVE-2021-21225)
High	8 Dec 2021	22 Dec 2022	CPAI-2021-0931		CVE-2021-43798	Grafana Directory Traversal (CVE-2021-43798)
Critical	28 Nov 2021	19 Dec 2022	CPAI-2020-3442		CVE-2020-10148	SolarWinds Orion Platform Authentication Bypass (CVE-2020-10148)
Critical	16 Nov 2021	19 Dec 2022	CPAI-2020-3431		CVE-2020-16846	SaltStack Salt API SSH Client Command Injection (CVE-2020-16846)
Critical	8 Jun 2021	19 Dec 2022	CPAI-2021-0376		CVE-2021-21985	VMware vCenter Server Remote Code Execution (CVE-2021-21985)
Critical	20 Jun 2021	4 Dec 2022	CPAI-2021-0305		CVE-2021-29200	Apache OFBiz Insecure Deserialization (CVE-2021-29200)
Critical	29 Nov 2021	28 Nov 2022	CPAI-2021-0899		CVE-2020-4006	VMWare Workspace Command Injection (CVE-2020-4006)
Critical	14 Nov 2021	28 Nov 2022	CPAI-2021-0867		CVE-2021-22205	GitLab CE Remote Code Execution (CVE-2021-22205)
Critical	15 Mar 2021	28 Nov 2022	CPAI-2020-3297		CVE-2020-14756	Oracle Coherence Remote Code Execution (CVE-2020-14756)
Critical	14 Mar 2021	28 Nov 2022	CPAI-2021-0148		CVE-2021-21978	VMware View Planner Remote Code Execution (CVE-2021-21978)
Critical	2 Mar 2021	28 Nov 2022	CPAI-2021-0099	Microsoft CVE-2021-26855	CVE-2021-26855 CVE-2021-27065	Microsoft Exchange Server Remote Code Execution (CVE-2021-26855; CVE-2021-27065)
Critical	28 Nov 2021	23 Nov 2022	CPAI-2018-1796		CVE-2018-1000533	GitList Remote Code Execution (CVE-2018-1000533)
Critical	28 Nov 2021	23 Nov 2022	CPAI-2017-1215		CVE-2017-17419	Quest NetVault Backup Remote Code Execution (CVE-2017-17419)
Critical	28 Feb 2021	23 Nov 2022	CPAI-2021-0106		CVE-2021-21972 CVE-2021-21973	VMware vSphere Client Remote Code Execution (CVE-2021-21972; CVE-2021-21973)
Critical	25 Jan 2021	23 Nov 2022	CPAI-2019-2414		CVE-2019-16057	D-Link DNS-320 ShareCenter Command Injection (CVE-2019-16057)
Critical	7 Dec 2021	13 Nov 2022	CPAI-2021-0920		CVE-2021-44077	Zoho ManageEngine ServiceDesk Plus Remote Code Execution (CVE-2021-44077)
Critical	12 May 2021	13 Nov 2022	CPAI-2021-0292	Microsoft CVE-2021-31166	CVE-2021-31166	Microsoft HTTP Protocol Stack Remote Code Execution (CVE-2021-31166)
High	20 Jan 2021	8 Sep 2022	CPAI-2020-1389		CVE-2020-35606 CVE-2022-36446	Webmin Command Injection (CVE-2020-35606; CVE-2022-36446)
Critical	10 Dec 2021	21 Aug 2022	CPAI-2021-0936		CVE-2021-44228 CVE-2021-45046	Apache Log4j Remote Code Execution (CVE-2021-44228; CVE-2021-45046)