Home / 2022 Advisories Archive

2022 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
Critical	2 May 2022	29 Nov 2022	CPAI-2022-0200	CVE-2022-25077 CVE-2022-29639	TOTOLINK A3100R Command Injection (CVE-2022-25077; CVE-2022-29639)
Critical	28 Nov 2022	28 Nov 2022	CPAI-2021-1431	CVE-2021-22823	Schneider Electric IGSS Arbitrary File Deletion (CVE-2021-22823)
Critical	28 Nov 2022	28 Nov 2022	CPAI-2021-1430	CVE-2021-22802	Schneider Electric IGSS Buffer Overflow (CVE-2021-22802)
Medium	28 Nov 2022	28 Nov 2022	CPAI-2021-1429	CVE-2021-22242	GitLab Community and Enterprise Edition Cross-Site Scripting (CVE-2021-22242)
High	28 Nov 2022	28 Nov 2022	CPAI-2021-1428	CVE-2021-2198	Oracle E-Business Cross-Site Scripting (CVE-2021-2198)
Critical	28 Nov 2022	28 Nov 2022	CPAI-2021-1427	CVE-2021-22658	Advantech iView UserServlet SQL Injection (CVE-2021-22658)
Medium	28 Nov 2022	28 Nov 2022	CPAI-2018-2169	CVE-2018-8716	WSO2 Identity Server Cross Site Scripting (CVE-2018-8716)
Critical	28 Nov 2022	28 Nov 2022	CPAI-2018-2168	CVE-2018-14767	Kamailio SIP Server Out of Bounds Read (CVE-2018-14767)
High	28 Nov 2022	28 Nov 2022	CPAI-2018-2167	CVE-2018-20556	WordPress Booking Calendar Plugin SQL Injection (CVE-2018-20556)
Critical	28 Nov 2022	28 Nov 2022	CPAI-2019-2697	CVE-2019-12780	Belkin Wemo UPnP API OS Command Injection (CVE-2019-12780)
Critical	28 Nov 2022	28 Nov 2022	CPAI-2022-0938	CVE-2022-32054	Tenda AC10 Command Injection (CVE-2022-32054)
High	28 Nov 2022	28 Nov 2022	CPAI-2022-0932	CVE-2022-37027	Ahsay Cloud Backup Solutions Command Injection (CVE-2022-37027)
Critical	28 Nov 2022	28 Nov 2022	CPAI-2022-0926	CVE-2022-26213	TOTOLINK X5000R Command Injection (CVE-2022-26213)
High	28 Nov 2022	28 Nov 2022	CPAI-2022-0917	CVE-2022-0863	WordPress SVG Icons Plugin Arbitrary File Upload (CVE-2022-0863)
Medium	28 Nov 2022	28 Nov 2022	CPAI-2022-0853	CVE-2022-21490	Oracle MySQL Cluster Remote Code Execution (CVE-2022-21490)
High	23 Nov 2022	28 Nov 2022	CPAI-2020-3583	CVE-2020-36193	PHP Archive_Tar Directory Traversal (CVE-2020-36193)
Critical	27 Nov 2022	27 Nov 2022	CPAI-2022-0950	CVE-2022-21186	Acrontum Filesystem-Template Package Command Injection (CVE-2022-21186)
Critical	27 Nov 2022	27 Nov 2022	CPAI-2022-0943	CVE-2022-37057	D-Link GO-RT-AC750 Command Injection (CVE-2022-37057)
Critical	27 Nov 2022	27 Nov 2022	CPAI-2022-0939	CVE-2022-34974	D-Link DIR810LA1 Command Injection (CVE-2022-34974)
Medium	27 Nov 2022	27 Nov 2022	CPAI-2022-0937	CVE-2022-36533	Super Flexible Software Syncovery Cross-site Scripting (CVE-2022-36533)
High	27 Nov 2022	27 Nov 2022	CPAI-2022-0905	CVE-2022-31097	Grafana Cross-Site Scripting (CVE-2022-31097)
High	27 Nov 2022	27 Nov 2022	CPAI-2022-0902	CVE-2022-0557	Packagist Microweber Arbitrary File Upload (CVE-2022-0557)
Medium	24 Nov 2022	24 Nov 2022	CPAI-2021-1402	CVE-2021-21667	Jenkins Scriptler Plugin Cross-Site Scripting (CVE-2021-21667)
High	24 Nov 2022	24 Nov 2022	CPAI-2021-1401	CVE-2021-2190	Oracle E-Business Suite Sales Offline Denial of Service (CVE-2021-2190)
Medium	24 Nov 2022	24 Nov 2022	CPAI-2021-1400	CVE-2021-21649	Jenkins Dashboard View Plugin Cross-Site Scripting (CVE-2021-21649)
Medium	24 Nov 2022	24 Nov 2022	CPAI-2021-1399	CVE-2021-21616	Jenkins Active Choices Plugin Cross-Site Scripting (CVE-2021-21616)
High	24 Nov 2022	24 Nov 2022	CPAI-2022-0930	CVE-2022-30860	FUDforum Arbitrary File Upload (CVE-2022-30860)
Critical	24 Nov 2022	24 Nov 2022	CPAI-2022-0890	CVE-2022-30450	WaimairenCMS Remote Code Execution (CVE-2022-30450)
High	24 Nov 2022	24 Nov 2022	CPAI-2022-0884	CVE-2022-34120	Barangay Management System Arbitrary File Upload (CVE-2022-34120)
Critical	24 Nov 2022	24 Nov 2022	CPAI-2022-0881	CVE-2022-31885	Marval MSM Remote Code Execution (CVE-2022-31885)
Medium	24 Nov 2022	24 Nov 2022	CPAI-2022-0880	CVE-2022-31629	PHP Authentication Bypass (CVE-2022-31629)
Critical	24 Nov 2022	24 Nov 2022	CPAI-2021-1377	CVE-2021-21669	Jenkins Generic Webhook Trigger Plugin External Entity Injection (CVE-2021-21669)
High	24 Nov 2022	24 Nov 2022	CPAI-2018-2141	CVE-2018-10613	GE MDS PulseNET XML External Entity Expansion (CVE-2018-10613)
Medium	24 Nov 2022	24 Nov 2022	CPAI-2018-2140	CVE-2018-17686	Foxit Reader Out-of-Bounds Read (CVE-2018-17686)
High	23 Nov 2022	23 Nov 2022	CPAI-2022-0931	CVE-2022-25094	Home Owners Collection Management System Arbitrary File Upload (CVE-2022-25094)
Critical	23 Nov 2022	23 Nov 2022	CPAI-2022-0929	CVE-2022-37661	SmartRG Routers Command Injection (CVE-2022-37661)
High	23 Nov 2022	23 Nov 2022	CPAI-2022-0928	CVE-2022-41800	F5 Big-IP Command Injection (CVE-2022-41800)
High	23 Nov 2022	23 Nov 2022	CPAI-2022-0927	CVE-2022-41622	F5 Big-IP Cross-Site Request Forgery (CVE-2022-41622)
Critical	23 Nov 2022	23 Nov 2022	CPAI-2022-0925	CVE-2022-37130	D-Link DIR-816 Command Injection (CVE-2022-37130)
Critical	23 Nov 2022	23 Nov 2022	CPAI-2022-0924	CVE-2022-36267	Airspan AirSpot 5410 Command Injection (CVE-2022-36267)
High	23 Nov 2022	23 Nov 2022	CPAI-2022-0916	CVE-2022-40878	Exam Reviewer Management System Arbitrary File Upload (CVE-2022-40878)
Critical	23 Nov 2022	23 Nov 2022	CPAI-2022-0911	CVE-2022-1162	GitLab Hardcoded Credentials (CVE-2022-1162)
Critical	23 Nov 2022	23 Nov 2022	CPAI-2022-0906	CVE-2022-38621	Doufox Arbitrary File Upload (CVE-2022-38621)
Medium	23 Nov 2022	23 Nov 2022	CPAI-2022-0588	CVE-2022-0831 CVE-2022-0832	Pimcore Cross Site Scripting (CVE-2022-0831; CVE-2022-0832)
Critical	22 Nov 2022	22 Nov 2022	CPAI-2022-0903	CVE-2022-26272	IonizeCMS Remote Code Execution (CVE-2022-26272)
High	22 Nov 2022	22 Nov 2022	CPAI-2022-0896	CVE-2022-36532	Bolt CMS Arbitrary File Upload (CVE-2022-36532)
High	22 Nov 2022	22 Nov 2022	CPAI-2022-0895	CVE-2022-32420	College Management System Arbitrary File Upload (CVE-2022-32420)
Critical	22 Nov 2022	22 Nov 2022	CPAI-2022-0891	CVE-2022-25064	TP-Link TL-WR840N Command Injection (CVE-2022-25064)
Critical	22 Nov 2022	22 Nov 2022	CPAI-2022-0888	CVE-2022-25061	TP-Link TL-WR840N Command Injection (CVE-2022-25061)
Critical	22 Nov 2022	22 Nov 2022	CPAI-2022-0885	CVE-2022-29307	IonizeCMS Command Injection (CVE-2022-29307)