Home / 2022 Advisories Archive

2022 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	20 Dec 2022	20 Dec 2022	CPAI-2020-3624		CVE-2020-13782	D-Link DIR-865L Command Injection (CVE-2020-13782)
High	20 Dec 2022	20 Dec 2022	CPAI-2019-2705		CVE-2019-8312 CVE-2019-8313 CVE-2019-8314 CVE-2019-8316 CVE-2019-8317 CVE-2019-8318 CVE-2019-8319	D-Link DIR878 Command Injection (CVE-2019-8312; CVE-2019-8313; CVE-2019-8314; CVE-2019-8316; CVE-2019-8317; CVE-2019-8318; CVE-2019-8319)
High	20 Dec 2022	20 Dec 2022	CPAI-2020-3622		CVE-2020-13379	Grafana Server Side Request Forgery (CVE-2020-13379)
Critical	19 Dec 2022	19 Dec 2022	CPAI-2018-2216		CVE-2018-8057	Western Bridge Cobub Razor SQL Injection (CVE-2018-8057)
High	19 Dec 2022	19 Dec 2022	CPAI-2022-1096			GitList Remote Command Execution
Critical	19 Dec 2022	19 Dec 2022	CPAI-2018-2215		CVE-2018-15839	D-Link DIR-615 Authorization HTTP Header Buffer Overflow (CVE-2018-15839)
Critical	19 Dec 2022	19 Dec 2022	CPAI-2020-3633		CVE-2020-29597	IncomCMS Arbitrary File Upload (CVE-2020-29597)
Critical	19 Dec 2022	19 Dec 2022	CPAI-2021-1501		CVE-2021-3278	Local Service Search Engine Management System SQL Injection (CVE-2021-3278)
Critical	19 Dec 2022	19 Dec 2022	CPAI-2019-2710		CVE-2019-10720 CVE-2019-6714	BlogEngine.NET Directory Traversal (CVE-2019-10720; CVE-2019-6714)
Critical	19 Dec 2022	19 Dec 2022	CPAI-2019-2709		CVE-2019-13086	CSZ CMS SQL Injection (CVE-2019-13086)
Critical	19 Dec 2022	19 Dec 2022	CPAI-2017-1563		CVE-2017-8303	Accellion FTA Command Injection (CVE-2017-8303)
Critical	19 Dec 2022	19 Dec 2022	CPAI-2022-1080		CVE-2022-36450	Obsidian Remote Code Execution (CVE-2022-36450)
Critical	19 Dec 2022	19 Dec 2022	CPAI-2022-1077		CVE-2022-24136 CVE-2022-30448	Hospital Management System Arbitrary File Upload (CVE-2022-24136; CVE-2022-30448)
Critical	19 Dec 2022	19 Dec 2022	CPAI-2018-2193		CVE-2018-7739	Antsle AntMan Authentication Bypass (CVE-2018-7739)
Critical	19 Dec 2022	19 Dec 2022	CPAI-2022-1024		CVE-2022-31794 CVE-2022-31795	Fujitsu Eternus CS8000 Command Injection (CVE-2022-31794; CVE-2022-31795)
Critical	4 Dec 2022	19 Dec 2022	CPAI-2022-0909		CVE-2022-38826 CVE-2022-38828	TOTOLINK T6 Command Injection (CVE-2022-38826; CVE-2022-38828)
Critical	17 Nov 2022	19 Dec 2022	CPAI-2022-0848		CVE-2021-30175 CVE-2022-25322	ZEROF Web Server SQL Injection (CVE-2021-30175; CVE-2022-25322)
Critical	29 May 2022	19 Dec 2022	CPAI-2022-0278		CVE-2022-22972	VMware Authentication Bypass (CVE-2022-22972)
Critical	2 Mar 2022	19 Dec 2022	CPAI-2022-0052		CVE-2022-23131	Zabbix Web Frontend Authentication Bypass (CVE-2022-23131)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2018-2212		CVE-2018-20526	Roxy Fileman Arbitrary File Upload (CVE-2018-20526)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2017-1566		CVE-2017-17733	Maccms Remote Code Execution (CVE-2017-17733)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2020-3631		CVE-2020-28070	SourceCodester Alumni Management System SQL Injection (CVE-2020-28070)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2021-1502		CVE-2021-3817	WBCE CMS SQL Injection (CVE-2021-3817)
Medium	18 Dec 2022	18 Dec 2022	CPAI-2021-1500		CVE-2021-30538	Google Chrome Improper Access Control (CVE-2021-30538)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2022-1082		CVE-2022-29391 CVE-2022-29392 CVE-2022-29393 CVE-2022-29394 CVE-2022-29395 CVE-2022-29396 CVE-2022-29397 CVE-2022-29398 CVE-2022-29399	TOTOLINK N600R Stack Overflow (CVE-2022-29391; CVE-2022-29392; CVE-2022-29393; CVE-2022-29394; CVE-2022-29395; CVE-2022-29396; CVE-2022-29397; CVE-2022-29398; CVE-2022-29399)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2022-1081		CVE-2022-37134	D-Link DIR-816 Buffer Overflow (CVE-2022-37134)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2022-1064		CVE-2022-38352	ThinkPHP Insecure Deserialization (CVE-2022-38352)
Critical	18 Dec 2022	18 Dec 2022	CPAI-2022-1014		CVE-2022-31259	Beego Improper Access Control (CVE-2022-31259)
Critical	12 Oct 2022	18 Dec 2022	CPAI-2022-0581		CVE-2018-17063 CVE-2018-17064 CVE-2018-17066 CVE-2018-17068 CVE-2022-28915 CVE-2022-28958 CVE-2022-37123 CVE-2022-37125 CVE-2022-37129	D-Link DIR816L Command Injection (CVE-2018-17063; CVE-2018-17064; CVE-2018-17066; CVE-2018-17068; CVE-2022-28915; CVE-2022-28958; CVE-2022-37123; CVE-2022-37125; CVE-2022-37129)
Medium	15 Dec 2022	15 Dec 2022	CPAI-2021-1513		CVE-2021-33618	Dolibarr ERP and CRM Cross-Site Scripting (CVE-2021-33618)
Critical	15 Dec 2022	15 Dec 2022	CPAI-2021-1512		CVE-2021-32955	Delta Industrial Automation DIAEnergie Arbitrary File Upload (CVE-2021-32955)
High	15 Dec 2022	15 Dec 2022	CPAI-2021-1511		CVE-2021-33734	Siemens SINEC NMS SQL Injection (CVE-2021-33734)
High	15 Dec 2022	15 Dec 2022	CPAI-2021-1510		CVE-2021-33730	Siemens SINEC NMS SQL Injection (CVE-2021-33730)
High	15 Dec 2022	15 Dec 2022	CPAI-2021-1509		CVE-2021-33731	Siemens SINEC NMS SQL Injection (CVE-2021-33731)
Critical	15 Dec 2022	15 Dec 2022	CPAI-2020-3623		CVE-2020-25494	Xinuos OpenServer Command Injection (CVE-2020-25494)
Critical	15 Dec 2022	15 Dec 2022	CPAI-2021-1467		CVE-2021-32671	Flarum Core Cross-Site Scripting (CVE-2021-32671)
Critical	15 Dec 2022	15 Dec 2022	CPAI-2022-1056		CVE-2022-31267	Gitblit Privilege Escalation (CVE-2022-31267)
Medium	15 Dec 2022	15 Dec 2022	CPAI-2018-2150		CVE-2018-10553	Nagios XI Directory Traversal (CVE-2018-10553)
High	14 Dec 2022	14 Dec 2022	CPAI-2017-1562		CVE-2017-8729	Microsoft Edge Memory Corruption (CVE-2017-8729)
High	14 Dec 2022	14 Dec 2022	CPAI-2022-1083			Axis SSI Remote Command Execution
Critical	14 Dec 2022	14 Dec 2022	CPAI-2022-1071		CVE-2022-32386	Tenda AC23 Buffer Overflow (CVE-2022-32386)
Critical	14 Dec 2022	14 Dec 2022	CPAI-2022-1052		CVE-2022-36572	Sinsiu Enterprise Website System Remote Code Execution (CVE-2022-36572)
Critical	14 Dec 2022	14 Dec 2022	CPAI-2022-1049		CVE-2022-28927	Subconverter Remote Code Execution (CVE-2022-28927)
Critical	14 Dec 2022	14 Dec 2022	CPAI-2022-0894		CVE-2022-29155	OpenLDAP SQL Injection (CVE-2022-29155)
High	17 Nov 2022	14 Dec 2022	CPAI-2022-0822		CVE-2022-21972	Windows PPTP Protocol Use After Free (CVE-2022-21972)
Critical	27 Jul 2022	14 Dec 2022	CPAI-2022-0454		CVE-2018-19595 CVE-2022-32417	PbootCMS Remote Code Execution (CVE-2018-19595; CVE-2022-32417)
High	13 Dec 2022	13 Dec 2022	CPAI-2022-1035	Microsoft CVE-2022-44675	CVE-2022-44675	Microsoft Windows Bluetooth Driver Elevation of Privilege (CVE-2022-44675)
High	13 Dec 2022	13 Dec 2022	CPAI-2022-1033	Microsoft CVE-2022-44673	CVE-2022-44673	Microsoft Windows Client Server Run-Time Subsystem Elevation of Privilege (CVE-2022-44673)
Critical	12 Dec 2022	12 Dec 2022	CPAI-2017-1560		CVE-2017-15367	Bacula-Web SQL Injection (CVE-2017-15367)
High	12 Dec 2022	12 Dec 2022	CPAI-2018-2198		CVE-2018-7123	HPE Intelligent Management Center Denial of Service (CVE-2018-7123)