Home / 2022 Advisories Archive

2022 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	29 Dec 2022	29 Dec 2022	CPAI-2020-3642		CVE-2020-13167	Netsweeper Remote Code Execution (CVE-2020-13167)
Critical	29 Dec 2022	29 Dec 2022	CPAI-2019-2723		CVE-2019-12314	Deltek Maconomy Path Traversal (CVE-2019-12314)
High	29 Dec 2022	29 Dec 2022	CPAI-2018-2226		CVE-2018-16117	Sophos XG Firewall Command Injection (CVE-2018-16117)
Critical	29 Dec 2022	29 Dec 2022	CPAI-2018-2224		CVE-2018-5972	Quickad Classified Ads CMS SQL Injection (CVE-2018-5972)
Critical	29 Dec 2022	29 Dec 2022	CPAI-2020-3640		CVE-2020-10879	rConfig Command Injection (CVE-2020-10879)
High	13 Dec 2022	29 Dec 2022	CPAI-2022-1037	Microsoft CVE-2022-44683	CVE-2022-44683	Microsoft Windows Kernel Elevation of Privilege (CVE-2022-44683)
High	7 Dec 2022	29 Dec 2022	CPAI-2019-2695		CVE-2019-0233	Apache Struts Denial of Service (CVE-2019-0233)
High	3 Oct 2022	29 Dec 2022	CPAI-2020-3581		CVE-2020-5398	VMware Spring Framework Remote Code Execution (CVE-2020-5398)
High	28 Dec 2022	28 Dec 2022	CPAI-2021-1524		CVE-2021-43778	GLPI Barcode Plugin Path Traversal (CVE-2021-43778)
Critical	28 Dec 2022	28 Dec 2022	CPAI-2018-2230		CVE-2018-1143	Belkin N750 Command Injection (CVE-2018-1143)
High	28 Dec 2022	28 Dec 2022	CPAI-2021-1519		CVE-2021-21193	Google Chrome Use After Free (CVE-2021-21193)
High	28 Dec 2022	28 Dec 2022	CPAI-2021-1515		CVE-2021-38003	Google Chrome Heap Corruption (CVE-2021-38003)
Critical	28 Dec 2022	28 Dec 2022	CPAI-2019-2715		CVE-2019-17181	IntraSrv Buffer Overflow (CVE-2019-17181)
Medium	28 Dec 2022	28 Dec 2022	CPAI-2022-1087		CVE-2022-22835	OverIT Geocall Remote Code Execution (CVE-2022-22835)
Critical	28 Dec 2022	28 Dec 2022	CPAI-2022-0992		CVE-2022-31188	Intel CVAT Server-Side Request Forgery (CVE-2022-31188)
High	27 Dec 2022	27 Dec 2022	CPAI-2017-1573		CVE-2017-5869	Nuxeo Directory Traversal (CVE-2017-5869)
High	27 Dec 2022	27 Dec 2022	CPAI-2018-2225		CVE-2018-16752	LINK-NET LW-N605R Command Injection (CVE-2018-16752)
Critical	27 Dec 2022	27 Dec 2022	CPAI-2018-2221		CVE-2018-16144	Opsview Monitor NetAudit Remote Code Execution (CVE-2018-16144)
Critical	27 Dec 2022	27 Dec 2022	CPAI-2021-1516		CVE-2021-27828	In4Velocity In4Suite ERP SQL Injection (CVE-2021-27828)
Critical	26 Dec 2022	26 Dec 2022	CPAI-2018-2227		CVE-2018-5999 CVE-2018-6000	Asus AsusWRT Authentication Bypass (CVE-2018-5999; CVE-2018-6000)
High	26 Dec 2022	26 Dec 2022	CPAI-2019-2722		CVE-2019-9757	LabKey Server XML External Entity Injection (CVE-2019-9757)
Critical	26 Dec 2022	26 Dec 2022	CPAI-2020-3636		CVE-2020-35313	WonderCMS Server-Side Request Forgery (CVE-2020-35313)
Critical	26 Dec 2022	26 Dec 2022	CPAI-2022-1078		CVE-2022-2564	Mongoose Prototype Pollution (CVE-2022-2564)
Critical	26 Dec 2022	26 Dec 2022	CPAI-2022-1060		CVE-2022-26635	PHP Memcached Command Injection (CVE-2022-26635)
Critical	20 Sep 2022	26 Dec 2022	CPAI-2018-2122		CVE-2018-8828	Kamailio Buffer Overflow (CVE-2018-8828)
Critical	25 Dec 2022	25 Dec 2022	CPAI-2017-1574		CVE-2017-8220	TP-Link C2 Command Injection (CVE-2017-8220)
High	25 Dec 2022	25 Dec 2022	CPAI-2020-3643		CVE-2020-6010	WordPress LearnPress Plugin SQL Injection (CVE-2020-6010)
Critical	25 Dec 2022	25 Dec 2022	CPAI-2019-2721		CVE-2019-9083	SQLiteManager SQL Injection (CVE-2019-9083)
Critical	25 Dec 2022	25 Dec 2022	CPAI-2017-1572		CVE-2017-6403	Veritas Multiple Products Hardcoded Credentials (CVE-2017-6403)
High	25 Dec 2022	25 Dec 2022	CPAI-2018-2217		CVE-2018-20323	MailCleaner Community Edition Command Injection (CVE-2018-20323)
High	25 Dec 2022	25 Dec 2022	CPAI-2019-2718		CVE-2019-15813	Sentrifugo Arbitrary File Upload (CVE-2019-15813)
High	25 Dec 2022	25 Dec 2022	CPAI-2019-2717		CVE-2019-10663	Grandstream UCM6204 SQL Injection (CVE-2019-10663)
Critical	8 Dec 2022	25 Dec 2022	CPAI-2022-1067		CVE-2022-3236	Sophos Firewall Remote Code Execution (CVE-2022-3236)
Critical	22 Dec 2022	22 Dec 2022	CPAI-2022-1099		CVE-2022-41080	Microsoft Exchange Server Server-Side Request Forgery (CVE-2022-41080)
High	22 Dec 2022	22 Dec 2022	CPAI-2022-1098			Flexense VX Search Buffer Overflow
Critical	22 Dec 2022	22 Dec 2022	CPAI-2018-2222		CVE-2018-7313	Joomla! CW Tags SQL Injection (CVE-2018-7313)
High	22 Dec 2022	22 Dec 2022	CPAI-2020-3634		CVE-2020-5786	Teltonika Networks Cross Site Scripting (CVE-2020-5786)
High	22 Dec 2022	22 Dec 2022	CPAI-2018-2208		CVE-2018-18852	Cerio DT-300N Command Injection (CVE-2018-18852)
Critical	22 Dec 2022	22 Dec 2022	CPAI-2018-2201		CVE-2018-20841	HooToo TripMate Titan HT-TM05 Command Injection (CVE-2018-20841)
High	22 Dec 2022	22 Dec 2022	CPAI-2018-2195		CVE-2018-13382	Fortinet FortiOS SSL VPN Authentication Bypass (CVE-2018-13382)
Critical	6 Dec 2022	22 Dec 2022	CPAI-2022-0988		CVE-2022-25450 CVE-2022-25451 CVE-2022-25454 CVE-2022-25455 CVE-2022-25457 CVE-2022-25459 CVE-2022-25460 CVE-2022-25461 CVE-2022-37798	Tenda AC6 Stack Overflow (CVE-2022-25450; CVE-2022-25451; CVE-2022-25454; CVE-2022-25455; CVE-2022-25457; CVE-2022-25459; CVE-2022-25460; CVE-2022-25461; CVE-2022-37798)
Critical	21 Dec 2022	21 Dec 2022	CPAI-2018-2220		CVE-2018-15551	Supervene RazDC Command Injection (CVE-2018-15551)
High	21 Dec 2022	21 Dec 2022	CPAI-2020-3639		CVE-2020-36243	OpenEMR Backup.php Command Injection (CVE-2020-36243)
Critical	21 Dec 2022	21 Dec 2022	CPAI-2018-2213		CVE-2018-5985	LiveCRM SaaS Cloud SQL Injection (CVE-2018-5985)
Critical	21 Dec 2022	21 Dec 2022	CPAI-2019-2708		CVE-2019-14348	WordPress JoomSport Plugin SQL Injection (CVE-2019-14348)
Critical	21 Dec 2022	21 Dec 2022	CPAI-2017-1561		CVE-2017-7997	Gespage SQL Injection (CVE-2017-7997)
Critical	20 Dec 2022	21 Dec 2022	CPAI-2022-1027		CVE-2022-25003 CVE-2022-25004 CVE-2022-32337 CVE-2022-32352	Hospital Patient Records Management System SQL Injection (CVE-2022-25003; CVE-2022-25004; CVE-2022-32337; CVE-2022-32352)
High	21 Dec 2022	21 Dec 2022	CPAI-2020-3602		CVE-2020-8450	Squid Proxy HTTP Request Processing Buffer Overflow (CVE-2020-8450)
High	20 Dec 2022	20 Dec 2022	CPAI-2021-1504		CVE-2021-24307	WordPress AIOSEO Plugin Remote Code Execution (CVE-2021-24307)
Critical	20 Dec 2022	20 Dec 2022	CPAI-2020-3626		CVE-2020-13449 CVE-2020-13450 CVE-2020-13451	TheCodingMachine Gotenberg Directory Traversal (CVE-2020-13449; CVE-2020-13450; CVE-2020-13451)