Home / 2022 Advisories Archive

2022 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	17 Nov 2022	17 Nov 2022	CPAI-2022-0878			Microsoft Windows NTFS File System Denial of Service
High	17 Nov 2022	17 Nov 2022	CPAI-2022-0877			Microsoft WINS Multiple Replication Sessions Memory Corruption
High	17 Nov 2022	17 Nov 2022	CPAI-2022-0876			Joomla! Component EkRishta SQL Injection
High	17 Nov 2022	17 Nov 2022	CPAI-2018-2147		CVE-2018-19518	PHP IMAP imap_open Command Injection (CVE-2018-19518)
Critical	17 Nov 2022	17 Nov 2022	CPAI-2021-1367		CVE-2021-41288	Zoho ManageEngine SQL Injection (CVE-2021-41288)
Critical	17 Nov 2022	17 Nov 2022	CPAI-2021-1366		CVE-2021-41950	Montala Limited ResourceSpace Arbitrary File Deletion (CVE-2021-41950)
Medium	17 Nov 2022	17 Nov 2022	CPAI-2021-1365		CVE-2021-41951	Montala Limited ResourceSpace Cross-Site Scripting (CVE-2021-41951)
Critical	17 Nov 2022	17 Nov 2022	CPAI-2022-0857		CVE-2022-3218	Necta LLC WiFi Mouse Command Injection (CVE-2022-3218)
Critical	17 Nov 2022	17 Nov 2022	CPAI-2022-0856		CVE-2022-22916	O2OA Remote Code Execution (CVE-2022-22916)
High	17 Nov 2022	17 Nov 2022	CPAI-2022-0851		CVE-2022-2185	GitLab Community and Enterprise Edition Command Injection (CVE-2022-2185)
Critical	17 Nov 2022	17 Nov 2022	CPAI-2022-0850		CVE-2022-24977	ImpressCMS Directory Traversal (CVE-2022-24977)
Critical	17 Nov 2022	17 Nov 2022	CPAI-2022-0849		CVE-2022-26833	Open Automation Software Platform Authentication Bypass (CVE-2022-26833)
Medium	17 Nov 2022	17 Nov 2022	CPAI-2022-0821		CVE-2022-21662	WordPress Core Cross-Site Scripting (CVE-2022-21662)
Critical	17 Nov 2022	17 Nov 2022	CPAI-2022-0818		CVE-2022-27336	Seacms Remote Code Execution (CVE-2022-27336)
High	17 Nov 2022	17 Nov 2022	CPAI-2022-0812		CVE-2022-37190	CuppaCMS Remote Code Execution (CVE-2022-37190)
High	17 Nov 2022	17 Nov 2022	CPAI-2022-0808		CVE-2022-36216	DedeCMS Remote Code Execution (CVE-2022-36216)
Critical	17 Nov 2022	17 Nov 2022	CPAI-2022-0805		CVE-2022-35411	rpc.py Project Remote Code Execution (CVE-2022-35411)
Critical	10 Nov 2022	17 Nov 2022	CPAI-2022-0800		CVE-2022-26990 CVE-2022-26991 CVE-2022-26992 CVE-2022-26993 CVE-2022-26994 CVE-2022-26995 CVE-2022-26996 CVE-2022-26997 CVE-2022-26998 CVE-2022-26999 CVE-2022-27000 CVE-2022-27001 CVE-2022-27002	Arris Routers Command Injection (CVE-2022-26990; CVE-2022-26991; CVE-2022-26992; CVE-2022-26993; CVE-2022-26994; CVE-2022-26995; CVE-2022-26996; CVE-2022-26997; CVE-2022-26998; CVE-2022-26999; CVE-2022-27000; CVE-2022-27001; CVE-2022-27002)
Critical	3 Nov 2022	17 Nov 2022	CPAI-2022-0756		CVE-2022-26186 CVE-2022-26188 CVE-2022-26189 CVE-2022-27411 CVE-2022-28905 CVE-2022-28906 CVE-2022-28907 CVE-2022-28908 CVE-2022-28909 CVE-2022-28910 CVE-2022-28911 CVE-2022-28912 CVE-2022-28913	TOTOLINK N600R Router Command Injection (CVE-2022-26186; CVE-2022-26188; CVE-2022-26189; CVE-2022-27411; CVE-2022-28905; CVE-2022-28906; CVE-2022-28907; CVE-2022-28908; CVE-2022-28909; CVE-2022-28910; CVE-2022-28911; CVE-2022-28912; CVE-2022-28913)
Medium	17 Nov 2022	17 Nov 2022	CPAI-2021-1293		CVE-2021-21672	Jenkins Selenium HTML Report Plugin XML External Entity Injection (CVE-2021-21672)
Critical	15 Nov 2022	15 Nov 2022	CPAI-2021-1380		CVE-2021-42727	Adobe RoboHelp Server Directory Traversal (CVE-2021-42727)
Medium	14 Nov 2022	14 Nov 2022	CPAI-2019-2687		CVE-2019-13344	Wordpress Like Button Plugin Authentication Bypass (CVE-2019-13344)
Critical	14 Nov 2022	14 Nov 2022	CPAI-2019-2686		CVE-2019-13373	D-Link Central WiFiManager CWM-100 SQL Injection (CVE-2019-13373)
Critical	14 Nov 2022	14 Nov 2022	CPAI-2022-0858		CVE-2022-38308	TOTOLink A700RU Command Injection (CVE-2022-38308)
High	14 Nov 2022	14 Nov 2022	CPAI-2022-0846		CVE-2022-23375	WikiDocs Arbitrary File Upload (CVE-2022-23375)
Medium	14 Nov 2022	14 Nov 2022	CPAI-2022-0813		CVE-2022-30956	Jenkins Rundeck Plugin Cross-Site Scripting (CVE-2022-30956)
Critical	13 Nov 2022	13 Nov 2022	CPAI-2020-3614		CVE-2020-26879	Ruckus IoT Controller Web UI Authentication Bypass (CVE-2020-26879)
High	13 Nov 2022	13 Nov 2022	CPAI-2017-1536		CVE-2017-13772	TP Link Wr940N Routers Buffer Overflow (CVE-2017-13772)
Critical	13 Nov 2022	13 Nov 2022	CPAI-2019-2685		CVE-2019-13372	D-Link Central WiFiManager CWM-100 Remote Code Execution (CVE-2019-13372)
High	13 Nov 2022	13 Nov 2022	CPAI-2022-0806		CVE-2022-38534 CVE-2022-38535	TOTOLink 720R Command Injection (CVE-2022-38534; CVE-2022-38535)
Critical	13 Nov 2022	13 Nov 2022	CPAI-2020-3607		CVE-2020-14841	Oracle WebLogic Server Remote Code Execution (CVE-2020-14841)
High	10 Nov 2022	10 Nov 2022	CPAI-2022-0803		CVE-2022-36215	DedeBIZ Remote Code Execution (CVE-2022-36215)
Critical	10 Nov 2022	10 Nov 2022	CPAI-2022-0801		CVE-2022-31446	Tenda AC18 Router Command Injection (CVE-2022-31446)
Critical	10 Nov 2022	10 Nov 2022	CPAI-2022-0798		CVE-2022-25487	AtomCMS Arbitrary File Upload (CVE-2022-25487)
High	10 Nov 2022	10 Nov 2022	CPAI-2019-2680		CVE-2019-7670	Prima Systems FlexAir Command Injection (CVE-2019-7670)
Medium	10 Nov 2022	10 Nov 2022	CPAI-2021-1328		CVE-2021-46065	Zoho ManageEngine ServiceDesk Cross-Site Scripting (CVE-2021-46065)
Critical	10 Nov 2022	10 Nov 2022	CPAI-2022-0633		CVE-2022-0848	Part-DB Project Unrestricted File Upload (CVE-2022-0848)
High	9 Nov 2022	9 Nov 2022	CPAI-2022-0819			Mako Server Remote Command Execution
High	9 Nov 2022	9 Nov 2022	CPAI-2021-1343		CVE-2021-21300	Git Source Code Management Code Execution (CVE-2021-21300)
High	9 Nov 2022	9 Nov 2022	CPAI-2022-0817			Docker Daemon API Remote Code Execution
High	9 Nov 2022	9 Nov 2022	CPAI-2022-0816			osCommerce Remote Code Execution
High	9 Nov 2022	9 Nov 2022	CPAI-2017-1534		CVE-2017-7455	Moxa MXView Information Disclosure (CVE-2017-7455)
Critical	9 Nov 2022	9 Nov 2022	CPAI-2019-2681		CVE-2019-9204	Nagios IM SQL Injection (CVE-2019-9204)
High	9 Nov 2022	9 Nov 2022	CPAI-2019-2677		CVE-2019-9202	Nagios IM Command Injection (CVE-2019-9202)
High	9 Nov 2022	9 Nov 2022	CPAI-2022-0764		CVE-2022-2550	GitHub Repository Hestiacp Command Injection (CVE-2022-2550)
High	8 Nov 2022	8 Nov 2022	CPAI-2022-0811	Microsoft CVE-2022-41125	CVE-2022-41125	Microsoft Windows CNG Key Isolation Service Elevation of Privilege (CVE-2022-41125)
Critical	8 Nov 2022	8 Nov 2022	CPAI-2022-0810	Microsoft CVE-2022-41118	CVE-2022-41118	Microsoft Windows Scripting Languages Remote Code Execution (CVE-2022-41118)
High	8 Nov 2022	8 Nov 2022	CPAI-2022-0789	Microsoft CVE-2022-41057	CVE-2022-41057	Microsoft Windows HTTP.sys Elevation of Privilege (CVE-2022-41057)
High	8 Nov 2022	8 Nov 2022	CPAI-2022-0770	Microsoft CVE-2022-41109	CVE-2022-41109	Microsoft Windows Win32k Elevation of Privilege (CVE-2022-41109)
High	8 Nov 2022	8 Nov 2022	CPAI-2022-0769	Microsoft CVE-2022-41113	CVE-2022-41113	Microsoft Windows Win32 Kernel Subsystem Elevation of Privilege (CVE-2022-41113)