Home / 2022 Advisories Archive

2022 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	13 Oct 2022	13 Oct 2022	CPAI-2022-0642	Adobe APSB22-44	CVE-2022-38422	Adobe ColdFusion Information Disclosure (APSB22-44: CVE-2022-38422)
High	13 Oct 2022	13 Oct 2022	CPAI-2021-1286		CVE-2021-39172	CachetHQ Cachet Remote Code Execution (CVE-2021-39172)
High	12 Oct 2022	12 Oct 2022	CPAI-2018-2126		CVE-2018-13358	TerraMaster Operating System Command Injection (CVE-2018-13358)
Medium	12 Oct 2022	12 Oct 2022	CPAI-2019-2670		CVE-2019-1252	Microsoft Graphics Device Interface Information Disclosure (CVE-2019-1252)
High	11 Oct 2022	11 Oct 2022	CPAI-2022-0640	Microsoft CVE-2022-37974	CVE-2022-37974	Microsoft Windows Mixed Reality Developer Tools Information Disclosure (CVE-2022-37974)
High	11 Oct 2022	11 Oct 2022	CPAI-2022-0626	Microsoft CVE-2022-37987	CVE-2022-37987	Microsoft Windows Client Server Run-time Subsystem Elevation of Privilege (CVE-2022-37987)
Critical	2 Oct 2022	2 Oct 2022	CPAI-2021-1279		CVE-2021-34746	Cisco NFVIS Improper Access Control (CVE-2021-34746)
High	10 Aug 2022	29 Sep 2022	CPAI-2022-0468			PowerShell Functions Remote Code Execution
High	20 Sep 2022	20 Sep 2022	CPAI-2019-2666		CVE-2019-0618	Microsoft Windows Server Remote Code Execution (CVE-2019-0618)
High	20 Sep 2022	20 Sep 2022	CPAI-2020-3593		CVE-2020-36228	OpenLDAP Integer Underflow (CVE-2020-36228)
Critical	20 Sep 2022	20 Sep 2022	CPAI-2022-0556		CVE-2022-33318	ICONICS GENESIS64 Remote Code Execution (CVE-2022-33318)
Medium	18 Sep 2022	18 Sep 2022	CPAI-2019-2667		CVE-2019-1439	Microsoft Graphics Device Interface Buffer Overflow (CVE-2019-1439)
Medium	18 Sep 2022	18 Sep 2022	CPAI-2021-1277		CVE-2021-30657	Apple MacOS Authentication Bypass (CVE-2021-30657)
High	18 Sep 2022	18 Sep 2022	CPAI-2018-2117		CVE-2018-1000035	InfoZip UnZip Buffer Overflow (CVE-2018-1000035)
Medium	18 Sep 2022	18 Sep 2022	CPAI-2018-2115		CVE-2018-16323	ImageMagick ReadXBMImage Information Disclosure (CVE-2018-16323)
High	18 Sep 2022	18 Sep 2022	CPAI-2018-2114		CVE-2018-8397	Microsoft Graphics Device Interface Remote Code Execution (CVE-2018-8397)
Medium	18 Sep 2022	18 Sep 2022	CPAI-2020-3592		CVE-2020-26567	D-Link Routers Authentication Bypass (CVE-2020-26567)
Critical	18 Sep 2022	18 Sep 2022	CPAI-2022-0600		CVE-2022-3180	WordPress WPGateway Plugin Privilege Escalation (CVE-2022-3180)
High	15 Sep 2022	15 Sep 2022	CPAI-2022-0512			SQL Injection Obfuscation Techniques
Medium	14 Sep 2022	14 Sep 2022	CPAI-2020-3591		CVE-2020-15299	WordPress KingComposer Plugin Cross-site Scripting (CVE-2020-15299)
Medium	14 Sep 2022	14 Sep 2022	CPAI-2018-2104		CVE-2018-15712	Nagios Xi Cross-site Scripting (CVE-2018-15712)
High	14 Sep 2022	14 Sep 2022	CPAI-2018-2097		CVE-2018-5006	Adobe Experience Manager Server Side Request Forgery (CVE-2018-5006)
High	12 Sep 2022	12 Sep 2022	CPAI-2022-0578		CVE-2022-31474	WordPress BackupBuddy Plugin Arbitrary File Read (CVE-2022-31474)
High	30 Aug 2022	30 Aug 2022	CPAI-2022-0522		CVE-2022-31659	VMWare Workspace One Access Remote Code Execution (CVE-2022-31659)
Critical	30 Aug 2022	30 Aug 2022	CPAI-2021-1233		CVE-2021-31932	Nokia BTS TRS Web Console Authentication Bypass (CVE-2021-31932)
High	21 Aug 2022	21 Aug 2022	CPAI-2021-1258		CVE-2021-1384	Cisco IOx Command Injection Command Injection (CVE-2021-1384)
Medium	21 Aug 2022	21 Aug 2022	CPAI-2018-1829		CVE-2018-13380	Fortinet FortiOS Cross Site Scripting (CVE-2018-13380)
Medium	21 Aug 2022	21 Aug 2022	CPAI-2021-1170		CVE-2021-35616	Oracle Transportation Management Privilege Escalation (CVE-2021-35616)
Critical	16 Aug 2022	16 Aug 2022	CPAI-2019-2649		CVE-2019-17602	Zoho ManageEngine OpManager SQL Injection (CVE-2019-17602)
High	15 Aug 2022	15 Aug 2022	CPAI-2022-0511		CVE-2022-35650	Moodle Directory Traversal (CVE-2022-35650)
Critical	15 Aug 2022	15 Aug 2022	CPAI-2022-0505		CVE-2022-25236	Expat XML Parser Remote Code Execution (CVE-2022-25236)
High	15 Aug 2022	15 Aug 2022	CPAI-2019-2646		CVE-2019-19597	D-Link DAP-1860 Command Injection (CVE-2019-19597)
Critical	11 Aug 2022	11 Aug 2022	CPAI-2018-2061		CVE-2018-19986	D-Link DIR-818LW Command Injection (CVE-2018-19986)
High	10 Aug 2022	10 Aug 2022	CPAI-2022-0472			PHP Zerodium Backdoor
Critical	8 Aug 2022	10 Aug 2022	CPAI-2022-0467		CVE-2022-26138	Atlassian Questions for Confluence App Hardcoded Credentials (CVE-2022-26138)
High	9 Aug 2022	9 Aug 2022	CPAI-2022-0501	Adobe APSB22-39	CVE-2022-35666	Adobe Acrobat and Reader Improper Input Validation (APSB22-39: CVE-2022-35666)
High	9 Aug 2022	9 Aug 2022	CPAI-2022-0480	Microsoft CVE-2022-35748	CVE-2022-35748	Microsoft HTTP.sys Denial of Service (CVE-2022-35748)
High	7 Aug 2022	7 Aug 2022	CPAI-2022-0426			BitTorrent Protocol
Critical	7 Aug 2022	7 Aug 2022	CPAI-2018-1804		CVE-2018-3991	WibuKey Network Server Management Heap Overflow (CVE-2018-3991)
Medium	20 Jul 2022	31 Jul 2022	CPAI-2022-0280		CVE-2022-21280	Oracle MySQL Cluster Stack Buffer Overflow (CVE-2022-21280)
High	28 Jul 2022	28 Jul 2022	CPAI-2022-0433			HTTP Payload Email Header Injection
High	28 Jul 2022	28 Jul 2022	CPAI-2022-0373			HTTP Payload CRLF Injection
High	26 Jul 2022	26 Jul 2022	CPAI-2020-3543		CVE-2020-4280	IBM QRadar SIEM Insecure Deserialization (CVE-2020-4280)
Critical	26 Jul 2022	26 Jul 2022	CPAI-2020-3466		CVE-2020-11117	Qualcomm Snapdragon Remote Code Execution (CVE-2020-11117)
Critical	25 Jul 2022	25 Jul 2022	CPAI-2021-1223		CVE-2021-41403	FlatCore CMS Server-Side Request Forgery (CVE-2021-41403)
High	20 Jul 2022	20 Jul 2022	CPAI-2017-1304		CVE-2017-5030	Google Chrome Browser V8 Memory Corruption (CVE-2017-5030)
Medium	20 Jul 2022	20 Jul 2022	CPAI-2016-1185		CVE-2016-2388	SAP NetWeaver Information Disclosure (CVE-2016-2388)
Medium	11 Jul 2022	11 Jul 2022	CPAI-2022-0358		CVE-2022-29036	Jenkins Credentials Plugin Cross-site Scripting (CVE-2022-29036)
Medium	10 Jul 2022	10 Jul 2022	CPAI-2021-1201		CVE-2021-30533	Google Chrome Authentication Bypass (CVE-2021-30533)
High	7 Jul 2022	7 Jul 2022	CPAI-2022-0336		CVE-2022-21993	Microsoft Windows NFS ONCRPC XDR Driver Information Disclosure (CVE-2022-21993)