Home / 2022 Advisories Archive

2022 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	19 Dec 2022	19 Dec 2022	CPAI-2022-1024		CVE-2022-31794 CVE-2022-31795	Fujitsu Eternus CS8000 Command Injection (CVE-2022-31794; CVE-2022-31795)
Critical	4 Dec 2022	19 Dec 2022	CPAI-2022-0909		CVE-2022-38826 CVE-2022-38828	TOTOLINK T6 Command Injection (CVE-2022-38826; CVE-2022-38828)
Critical	17 Nov 2022	19 Dec 2022	CPAI-2022-0848		CVE-2021-30175 CVE-2022-25322	ZEROF Web Server SQL Injection (CVE-2021-30175; CVE-2022-25322)
Critical	29 May 2022	19 Dec 2022	CPAI-2022-0278		CVE-2022-22972	VMware Authentication Bypass (CVE-2022-22972)
Critical	2 Mar 2022	19 Dec 2022	CPAI-2022-0052		CVE-2022-23131	Zabbix Web Frontend Authentication Bypass (CVE-2022-23131)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2018-2212		CVE-2018-20526	Roxy Fileman Arbitrary File Upload (CVE-2018-20526)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2017-1566		CVE-2017-17733	Maccms Remote Code Execution (CVE-2017-17733)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2020-3631		CVE-2020-28070	SourceCodester Alumni Management System SQL Injection (CVE-2020-28070)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2021-1502		CVE-2021-3817	WBCE CMS SQL Injection (CVE-2021-3817)
Medium	18 Dec 2022	18 Dec 2022	CPAI-2021-1500		CVE-2021-30538	Google Chrome Improper Access Control (CVE-2021-30538)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2022-1082		CVE-2022-29391 CVE-2022-29392 CVE-2022-29393 CVE-2022-29394 CVE-2022-29395 CVE-2022-29396 CVE-2022-29397 CVE-2022-29398 CVE-2022-29399	TOTOLINK N600R Stack Overflow (CVE-2022-29391; CVE-2022-29392; CVE-2022-29393; CVE-2022-29394; CVE-2022-29395; CVE-2022-29396; CVE-2022-29397; CVE-2022-29398; CVE-2022-29399)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2022-1081		CVE-2022-37134	D-Link DIR-816 Buffer Overflow (CVE-2022-37134)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2022-1074		CVE-2022-24144	Tenda AX3 Stack Overflow (CVE-2022-24144)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2022-1064		CVE-2022-38352	ThinkPHP Insecure Deserialization (CVE-2022-38352)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2022-1014		CVE-2022-31259	Beego Improper Access Control (CVE-2022-31259)
Critical	12 Oct 2022	18 Dec 2022	CPAI-2022-0581		CVE-2018-17063 CVE-2018-17064 CVE-2018-17066 CVE-2018-17068 CVE-2022-28915 CVE-2022-28958 CVE-2022-37123 CVE-2022-37125 CVE-2022-37129	D-Link DIR816L Command Injection (CVE-2018-17063; CVE-2018-17064; CVE-2018-17066; CVE-2018-17068; CVE-2022-28915; CVE-2022-28958; CVE-2022-37123; CVE-2022-37125; CVE-2022-37129)
Medium	15 Dec 2022	15 Dec 2022	CPAI-2021-1513		CVE-2021-33618	Dolibarr ERP and CRM Cross-Site Scripting (CVE-2021-33618)
Critical	15 Dec 2022	15 Dec 2022	CPAI-2021-1512		CVE-2021-32955	Delta Industrial Automation DIAEnergie Arbitrary File Upload (CVE-2021-32955)
High	15 Dec 2022	15 Dec 2022	CPAI-2021-1511		CVE-2021-33734	Siemens SINEC NMS SQL Injection (CVE-2021-33734)
High	15 Dec 2022	15 Dec 2022	CPAI-2021-1510		CVE-2021-33730	Siemens SINEC NMS SQL Injection (CVE-2021-33730)
High	15 Dec 2022	15 Dec 2022	CPAI-2021-1509		CVE-2021-33731	Siemens SINEC NMS SQL Injection (CVE-2021-33731)
Critical	15 Dec 2022	15 Dec 2022	CPAI-2020-3623		CVE-2020-25494	Xinuos OpenServer Command Injection (CVE-2020-25494)
Critical	15 Dec 2022	15 Dec 2022	CPAI-2021-1467		CVE-2021-32671	Flarum Core Cross-Site Scripting (CVE-2021-32671)
Critical	15 Dec 2022	15 Dec 2022	CPAI-2022-1056		CVE-2022-31267	Gitblit Privilege Escalation (CVE-2022-31267)
Medium	15 Dec 2022	15 Dec 2022	CPAI-2018-2150		CVE-2018-10553	Nagios XI Directory Traversal (CVE-2018-10553)
High	14 Dec 2022	14 Dec 2022	CPAI-2017-1562		CVE-2017-8729	Microsoft Edge Memory Corruption (CVE-2017-8729)
High	14 Dec 2022	14 Dec 2022	CPAI-2022-1083			Axis SSI Remote Command Execution
Critical	14 Dec 2022	14 Dec 2022	CPAI-2022-1071		CVE-2022-32386	Tenda AC23 Buffer Overflow (CVE-2022-32386)
Critical	14 Dec 2022	14 Dec 2022	CPAI-2022-1052		CVE-2022-36572	Sinsiu Enterprise Website System Remote Code Execution (CVE-2022-36572)
Critical	14 Dec 2022	14 Dec 2022	CPAI-2022-1049		CVE-2022-28927	Subconverter Remote Code Execution (CVE-2022-28927)
High	14 Dec 2022	14 Dec 2022	CPAI-2022-1047		CVE-2022-30129	Microsoft Visual Studio Code Remote Code Execution (CVE-2022-30129)
Critical	14 Dec 2022	14 Dec 2022	CPAI-2022-0894		CVE-2022-29155	OpenLDAP SQL Injection (CVE-2022-29155)
High	17 Nov 2022	14 Dec 2022	CPAI-2022-0822		CVE-2022-21972	Windows PPTP Protocol Use After Free (CVE-2022-21972)
Critical	27 Jul 2022	14 Dec 2022	CPAI-2022-0454		CVE-2018-19595 CVE-2022-32417	PbootCMS Remote Code Execution (CVE-2018-19595; CVE-2022-32417)
High	13 Dec 2022	13 Dec 2022	CPAI-2022-1035	Microsoft CVE-2022-44675	CVE-2022-44675	Microsoft Windows Bluetooth Driver Elevation of Privilege (CVE-2022-44675)
High	13 Dec 2022	13 Dec 2022	CPAI-2022-1033	Microsoft CVE-2022-44673	CVE-2022-44673	Microsoft Windows Client Server Run-Time Subsystem Elevation of Privilege (CVE-2022-44673)
Critical	12 Dec 2022	12 Dec 2022	CPAI-2017-1560		CVE-2017-15367	Bacula-Web SQL Injection (CVE-2017-15367)
High	12 Dec 2022	12 Dec 2022	CPAI-2018-2198		CVE-2018-7123	HPE Intelligent Management Center Denial of Service (CVE-2018-7123)
Medium	12 Dec 2022	12 Dec 2022	CPAI-2018-2196		CVE-2018-19191	Webmin history Parameter Cross-Site-Scripting (CVE-2018-19191)
Critical	12 Dec 2022	12 Dec 2022	CPAI-2022-1043		CVE-2022-44088	ESPCMS Remote Code Execution (CVE-2022-44088)
High	12 Dec 2022	12 Dec 2022	CPAI-2022-1042		CVE-2022-41034	Microsoft Visual Studio Code Cross Site Scripting (CVE-2022-41034)
Critical	12 Dec 2022	12 Dec 2022	CPAI-2022-1032		CVE-2022-25074	TP-Link TL-WR902AC Stack Overflow (CVE-2022-25074)
Critical	12 Dec 2022	12 Dec 2022	CPAI-2022-1031		CVE-2022-25073	TP-Link TL-WR841N Stack Overflow (CVE-2022-25073)
Critical	23 Oct 2022	12 Dec 2022	CPAI-2022-0720		CVE-2022-40684	Fortinet Multiple Products Authentication Bypass (CVE-2022-40684)
High	12 Dec 2022	12 Dec 2022	CPAI-2018-2131		CVE-2018-4416	Apple ICloud Memory Corruption (CVE-2018-4416)
Critical	11 Dec 2022	11 Dec 2022	CPAI-2022-1063		CVE-2022-37128	D-Link DIR-816 Authentication Bypass (CVE-2022-37128)
Critical	11 Dec 2022	11 Dec 2022	CPAI-2022-1061		CVE-2022-38827	TOTOLINK T6 Buffer Overflow (CVE-2022-38827)
Critical	11 Dec 2022	11 Dec 2022	CPAI-2022-1036		CVE-2022-38545	Valine Cross Site Scripting (CVE-2022-38545)
Critical	11 Dec 2022	11 Dec 2022	CPAI-2022-1034		CVE-2022-30413 CVE-2022-30838	Covid-19 Travel Pass Management System SQL Injection (CVE-2022-30413; CVE-2022-30838)
Critical	11 Dec 2022	11 Dec 2022	CPAI-2022-1029		CVE-2022-25072	TP-Link Archer A54 Stack Overflow (CVE-2022-25072)