Home / 2022 Advisories Archive

2022 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	12 Apr 2022	12 Apr 2022	CPAI-2022-0103	Microsoft CVE-2022-24546	CVE-2022-24546	Microsoft Windows DWM Core Library Elevation of Privilege (CVE-2022-24546)
High	12 Apr 2022	12 Apr 2022	CPAI-2022-0102	Microsoft CVE-2022-24542	CVE-2022-24542	Microsoft Windows Win32k Elevation of Privilege (CVE-2022-24542)
High	12 Apr 2022	12 Apr 2022	CPAI-2022-0101	Microsoft CVE-2022-24521	CVE-2022-24521	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-24521)
High	12 Apr 2022	12 Apr 2022	CPAI-2022-0100	Microsoft CVE-2022-24547	CVE-2022-24547	Microsoft Windows Digital Media Receiver Elevation of Privilege (CVE-2022-24547)
High	12 Apr 2022	12 Apr 2022	CPAI-2022-0099	Microsoft CVE-2022-24481	CVE-2022-24481	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-24481)
High	12 Apr 2022	12 Apr 2022	CPAI-2022-0098	Microsoft CVE-2022-24474	CVE-2022-24474	Microsoft Windows Win32k Elevation of Privilege (CVE-2022-24474)
Critical	10 Apr 2022	10 Apr 2022	CPAI-2021-1155		CVE-2021-28799	QNAP NAS Command Injection (CVE-2021-28799)
High	10 Apr 2022	10 Apr 2022	CPAI-2022-0087		CVE-2022-25546	Tenda AX1806 Router Denial of Service (CVE-2022-25546)
High	10 Apr 2022	10 Apr 2022	CPAI-2019-2523		CVE-2019-7481	SonicWall SMA100 SQL Injection (CVE-2019-7481)
Critical	6 Apr 2022	6 Apr 2022	CPAI-2021-1111		CVE-2021-20021	SonicWall Email Security Privilege Escalation (CVE-2021-20021)
High	5 Apr 2022	5 Apr 2022	CPAI-2013-3792		CVE-2013-5223	D-Link DSL-2760U Gateway Cross Site Scripting (CVE-2013-5223)
Critical	5 Apr 2022	5 Apr 2022	CPAI-2021-1149		CVE-2021-22941	Citrix ShareFile Storage Zones Controller Remote Code Execution (CVE-2021-22941)
Critical	4 Apr 2022	4 Apr 2022	CPAI-2021-1152		CVE-2021-44223	WordPress Remote Code Execution (CVE-2021-44223)
High	3 Apr 2022	3 Apr 2022	CPAI-2019-2525		CVE-2019-12991	Citrix SD-WAN Command Injection (CVE-2019-12991)
Critical	3 Apr 2022	3 Apr 2022	CPAI-2019-2524		CVE-2019-12989	Citrix SD-WAN SQL Injection (CVE-2019-12989)
High	3 Apr 2022	3 Apr 2022	CPAI-2022-0093		CVE-2022-25547	Tenda AX1806 Router Buffer Overflow (CVE-2022-25547)
High	3 Apr 2022	3 Apr 2022	CPAI-2022-0081		CVE-2022-22806	APC Smart-UPS Authentication Bypass (CVE-2022-22806)
Critical	3 Apr 2022	3 Apr 2022	CPAI-2021-0877		CVE-2021-22893	Pulse Connect Secure Authentication Bypass (CVE-2021-22893)
Critical	30 Mar 2022	30 Mar 2022	CPAI-2021-1148		CVE-2021-46393 CVE-2021-46394	Tenda AX3 Router Buffer Overflow (CVE-2021-46393; CVE-2021-46394)
Critical	30 Mar 2022	30 Mar 2022	CPAI-2021-1116		CVE-2021-37973	Google Chrome Browser Use-After-Free (CVE-2021-37973)
High	30 Mar 2022	30 Mar 2022	CPAI-2021-1112		CVE-2021-27860	FatPipe Multiple Products Unrestricted File Upload (CVE-2021-27860)
Medium	30 Mar 2022	30 Mar 2022	CPAI-2021-1102		CVE-2021-44864	TP-Link WR886N Buffer Overflow (CVE-2021-44864)
Critical	30 Mar 2022	30 Mar 2022	CPAI-2021-1072		CVE-2021-44352	Tenda AC15 Buffer Overflow (CVE-2021-44352)
High	29 Mar 2022	29 Mar 2022	CPAI-2021-1146		CVE-2021-41277	Metabase GeoJSON Map Information Disclosure (CVE-2021-41277)
Critical	29 Mar 2022	29 Mar 2022	CPAI-2022-0084		CVE-2022-24086	Adobe Commerce Command Injection (CVE-2022-24086)
Medium	28 Mar 2022	28 Mar 2022	CPAI-2013-3790		CVE-2013-0631	Adobe ColdFusion Information Disclosure (CVE-2013-0631)
Critical	27 Mar 2022	27 Mar 2022	CPAI-2022-0094		CVE-2022-0609	Google Chrome Use After Free (CVE-2022-0609)
High	27 Mar 2022	27 Mar 2022	CPAI-2022-0088		CVE-2022-0778	OpenSSL Denial of Service (CVE-2022-0778)
High	22 Mar 2022	22 Mar 2022	CPAI-2021-1145		CVE-2021-23174	WordPress Download Monitor Plugin Cross-Site Scripting (CVE-2021-23174)
High	21 Mar 2022	21 Mar 2022	CPAI-2022-0070		CVE-2022-24251 CVE-2022-24252 CVE-2022-24253 CVE-2022-24254	Extensis Portfolio Multiple Vulnerabilities (CVE-2022-24251; CVE-2022-24252; CVE-2022-24253; CVE-2022-24254)
Critical	16 Mar 2022	16 Mar 2022	CPAI-2021-1110		CVE-2021-44515	Zoho ManageEngine Desktop Central Authentication Bypass (CVE-2021-44515)
High	14 Mar 2022	14 Mar 2022	CPAI-2021-1119		CVE-2021-44544	DIAEnergie Cross-Site Scripting (CVE-2021-44544)
High	14 Mar 2022	14 Mar 2022	CPAI-2022-0047		CVE-2022-23120	Trend Micro Deep Security Agent Code Injection (CVE-2022-23120)
Medium	14 Mar 2022	14 Mar 2022	CPAI-2021-1090		CVE-2021-41182 CVE-2021-41183	jQuery UI Datepicker Widget Cross Site Scripting (CVE-2021-41182; CVE-2021-41183)
Critical	13 Mar 2022	13 Mar 2022	CPAI-2020-3451		CVE-2020-25765 CVE-2020-27158 CVE-2020-27159 CVE-2020-27160 CVE-2020-27744	Western Digital My Cloud NAS Remote Code Execution Multiple Vulnerabilities (CVE-2020-25765; CVE-2020-27158; CVE-2020-27159; CVE-2020-27160; CVE-2020-27744)
High	10 Mar 2022	10 Mar 2022	CPAI-2021-1104		CVE-2021-30625	Google Chrome Blink Use After Free (CVE-2021-30625)
Critical	10 Mar 2022	10 Mar 2022	CPAI-2021-1103		CVE-2021-44521	Apache Cassandra Remote Code Execution (CVE-2021-44521)
Critical	10 Mar 2022	10 Mar 2022	CPAI-2021-1070		CVE-2021-33266 CVE-2021-33267 CVE-2021-33268 CVE-2021-33269 CVE-2021-33270 CVE-2021-33271 CVE-2021-33274	D-Link DIR809 Buffer Overflow (CVE-2021-33266; CVE-2021-33267; CVE-2021-33268; CVE-2021-33269; CVE-2021-33270; CVE-2021-33271; CVE-2021-33274)
High	8 Mar 2022	8 Mar 2022	CPAI-2022-0071		CVE-2022-21990	Microsoft Remote Desktop Client Remote Code Execution (CVE-2022-21990)
High	8 Mar 2022	8 Mar 2022	CPAI-2022-0068	Microsoft CVE-2022-23285	CVE-2022-23285	Microsoft Remote Desktop Client Remote Code Execution (CVE-2022-23285)
High	8 Mar 2022	8 Mar 2022	CPAI-2022-0058	Microsoft CVE-2022-23299	CVE-2022-23299	Microsoft Windows PDEV Elevation of Privilege (CVE-2022-23299)
High	8 Mar 2022	8 Mar 2022	CPAI-2022-0057	Microsoft CVE-2022-24507	CVE-2022-24507	Microsoft Windows Ancillary Function Driver for WinSock Elevation of Privilege (CVE-2022-24507)
High	8 Mar 2022	8 Mar 2022	CPAI-2022-0061	Microsoft CVE-2022-23253	CVE-2022-23253	Microsoft Point-to-Point Tunneling Protocol Denial of Service (CVE-2022-23253)
High	8 Mar 2022	8 Mar 2022	CPAI-2022-0053	Microsoft CVE-2022-23286	CVE-2022-23286	Microsoft Windows Cloud Files Mini Filter Driver Elevation of Privilege (CVE-2022-23286)
High	8 Mar 2022	8 Mar 2022	CPAI-2022-0048	Microsoft CVE-2022-24502	CVE-2022-24502	Microsoft Internet Explorer Security Feature Bypass (CVE-2022-24502)
High	7 Mar 2022	7 Mar 2022	CPAI-2021-1096		CVE-2021-42362	WordPress Popular Posts Plugin Arbitrary File Upload (CVE-2021-42362)
Medium	7 Mar 2022	7 Mar 2022	CPAI-2021-1092		CVE-2021-31589	BeyondTrust Secure Remote Access Base Software Cross Site Scripting (CVE-2021-31589)
Critical	7 Mar 2022	7 Mar 2022	CPAI-2020-3459		CVE-2020-7209	HP LinuxKI Command Injection (CVE-2020-7209)
Medium	2 Mar 2022	2 Mar 2022	CPAI-2022-0056		CVE-2022-23134	Zabbix Web Frontend Authentication Bypass (CVE-2022-23134)
High	1 Mar 2022	1 Mar 2022	CPAI-2006-0387		CVE-2006-1547	Apache Struts Denial of Service (CVE-2006-1547)