Home / 2023 Advisories Archive

2023 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	5 Sep 2023	22 May 2025	CPAI-2016-1233		CVE-2016-5360	HAProxy Denial of Service (CVE-2016-5360)
Critical	2 Oct 2023	19 May 2025	CPAI-2018-2604		CVE-2018-14364	GitLab Arbitrary File Write (CVE-2018-14364)
High	28 Aug 2023	19 May 2025	CPAI-2014-2508		CVE-2014-1512	Mozilla Multiple Products Use After Free (CVE-2014-1512)
Critical	29 Aug 2023	12 May 2025	CPAI-2023-0686		CVE-2022-28491 CVE-2022-28495 CVE-2022-40847 CVE-2023-1457 CVE-2023-1458 CVE-2023-24154 CVE-2023-24159 CVE-2023-31569 CVE-2023-31856 CVE-2023-33486 CVE-2023-36457 CVE-2023-38862 CVE-2023-38863 CVE-2023-38864	Generic HTTP Command Injection (CVE-2022-28491; CVE-2022-28495; CVE-2022-40847; CVE-2023-1457; CVE-2023-1458; CVE-2023-24154; CVE-2023-24159; CVE-2023-31569; CVE-2023-31856; CVE-2023-33486; CVE-2023-36457; CVE-2023-38862; CVE-2023-38863; CVE-2023-38864)
Critical	6 Sep 2023	6 May 2025	CPAI-2023-0664		CVE-2018-20676 CVE-2018-20677 CVE-2019-8331 CVE-2020-11110 CVE-2020-35946 CVE-2022-0963 CVE-2022-42141 CVE-2022-44957 CVE-2023-27008 CVE-2023-33408 CVE-2023-36287 CVE-2023-4636 CVE-2024-30989 CVE-2024-3378	Cross-Site Scripting Over HTTP (CVE-2018-20676; CVE-2018-20677; CVE-2019-8331; CVE-2020-11110; CVE-2020-35946; CVE-2022-0963; CVE-2022-42141; CVE-2022-44957; CVE-2023-27008; CVE-2023-33408; CVE-2023-36287; CVE-2023-4636; CVE-2024-30989; CVE-2024-3378)
Critical	3 Jan 2023	28 Apr 2025	CPAI-2023-0012		CVE-2018-10942	XAttacker Tool Arbitrary File Upload (CVE-2018-10942)
Critical	16 Jan 2023	21 Apr 2025	CPAI-2023-0035		CVE-2020-11930 CVE-2021-26475 CVE-2021-26702 CVE-2021-26723 CVE-2021-39496 CVE-2022-46888 CVE-2023-23491 CVE-2023-24488 CVE-2023-26046 CVE-2023-28664 CVE-2023-28665 CVE-2023-28666 CVE-2023-4117	Cross-Site Scripting Obfuscation Techniques (CVE-2020-11930; CVE-2021-26475; CVE-2021-26702; CVE-2021-26723; CVE-2021-39496; CVE-2022-46888; CVE-2023-23491; CVE-2023-24488; CVE-2023-26046; CVE-2023-28664; CVE-2023-28665; CVE-2023-28666; CVE-2023-4117)
Critical	5 Jan 2023	21 Apr 2025	CPAI-2019-2738		CVE-2019-9874 CVE-2019-9875	Sitecore CMS Insecure Deserialization (CVE-2019-9874; CVE-2019-9875)
High	21 May 2023	20 Apr 2025	CPAI-2023-0318		CVE-2023-21932	Oracle Hospitality OPERA Arbitrary File Upload (CVE-2023-21932)
Critical	16 May 2023	20 Apr 2025	CPAI-2023-0310		CVE-2023-24749 CVE-2023-50089	NETGEAR Routers Command Injection (CVE-2023-24749; CVE-2023-50089)
Critical	22 Feb 2023	17 Apr 2025	CPAI-2020-3423		CVE-2020-25223	Sophos SG UTM Command Injection (CVE-2020-25223)
Critical	16 Aug 2023	10 Apr 2025	CPAI-2023-0537		CVE-2023-6887	Common Arbitrary Files Upload Techniques (CVE-2023-6887)
High	11 Jan 2023	7 Apr 2025	CPAI-2018-2274		CVE-2018-18809 CVE-2018-5430	Tibco Multiple Products Path Traversal (CVE-2018-18809; CVE-2018-5430)
Critical	14 May 2023	6 Apr 2025	CPAI-2023-0278		CVE-2023-27350 CVE-2023-27351	PaperCut MF/NG Authentication Bypass (CVE-2023-27350; CVE-2023-27351)
High	29 Aug 2023	31 Mar 2025	CPAI-2020-3895		CVE-2020-25681	Thekelleys Dnsmasq Buffer Overflow (CVE-2020-25681)
Medium	8 May 2023	31 Mar 2025	CPAI-2021-1739		CVE-2021-27907	Apache Superset Cross-Site Scripting (CVE-2021-27907)
Medium	21 Nov 2023	24 Mar 2025	CPAI-2023-1131		CVE-2023-41763	Microsoft Skype for Business Server-Side Request Forgery (CVE-2023-41763)
Medium	27 Jun 2023	24 Mar 2025	CPAI-2021-1789		CVE-2021-31806 CVE-2021-31807	Squid Denial of Service (CVE-2021-31806; CVE-2021-31807)
High	4 Apr 2023	20 Mar 2025	CPAI-2020-3794		CVE-2020-5741	Plex Media Server Remote Code Execution (CVE-2020-5741)
High	1 Jun 2023	10 Mar 2025	CPAI-2022-1548		CVE-2022-43769	Hitachi Vantara Pentaho Business Analytics Server Remote Code Execution (CVE-2022-43769)
Critical	13 Apr 2023	4 Mar 2025	CPAI-2022-1430		CVE-2022-43939	Hitachi Vantara Pentaho Business Analytics Server Authentication Bypass (CVE-2022-43939)
High	23 Nov 2023	3 Mar 2025	CPAI-2023-1239		CVE-2023-36025	Microsoft Windows SmartScreen Security Feature Bypass (CVE-2023-36025)
High	31 May 2023	26 Feb 2025	CPAI-2019-2903		CVE-2019-9122 CVE-2020-10213 CVE-2020-10215 CVE-2020-10216 CVE-2024-57595	D-Link DIR-825 Command Injection (CVE-2019-9122; CVE-2020-10213; CVE-2020-10215; CVE-2020-10216; CVE-2024-57595)
High	12 Dec 2023	23 Feb 2025	CPAI-2023-1277	Microsoft CVE-2023-35631	CVE-2023-35631	Microsoft Win32k Elevation of Privilege (CVE-2023-35631)
High	12 Dec 2023	23 Feb 2025	CPAI-2023-1275	Microsoft CVE-2023-35633	CVE-2023-35633	Microsoft Windows Kernel Elevation of Privilege (CVE-2023-35633)
High	14 Nov 2023	23 Feb 2025	CPAI-2023-1155	Adobe APSB23-54	CVE-2023-44337	Adobe Acrobat and Reader Out-of-bounds Read (APSB23-54: CVE-2023-44337)
High	14 Nov 2023	23 Feb 2025	CPAI-2023-1150	Adobe APSB23-54	CVE-2023-44358	Adobe Acrobat and Reader Out-of-bounds Read (APSB23-54: CVE-2023-44358)
High	14 Nov 2023	23 Feb 2025	CPAI-2023-1149	Adobe APSB23-54	CVE-2023-44359	Adobe Acrobat and Reader Use After Free (APSB23-54: CVE-2023-44359)
High	14 Nov 2023	23 Feb 2025	CPAI-2023-1151	Adobe APSB23-54	CVE-2023-44357	Adobe Acrobat and Reader Out-of-bounds Read (APSB23-54: CVE-2023-44357)
High	14 Nov 2023	23 Feb 2025	CPAI-2023-1144	Adobe APSB23-54	CVE-2023-44367	Adobe Acrobat and Reader Use After Free (APSB23-54: CVE-2023-44367)
High	14 Nov 2023	23 Feb 2025	CPAI-2023-1141	Adobe APSB23-54	CVE-2023-44338	Adobe Acrobat and Reader Out-of-bounds Read (APSB23-54: CVE-2023-44338)
High	14 Nov 2023	23 Feb 2025	CPAI-2023-1140	Adobe APSB23-54	CVE-2023-44356	Adobe Acrobat and Reader Out-of-bounds Read (APSB23-54: CVE-2023-44356)
High	14 Nov 2023	23 Feb 2025	CPAI-2023-1136	Adobe APSB23-54	CVE-2023-44361	Adobe Acrobat and Reader Use After Free (APSB23-54: CVE-2023-44361)
High	14 Nov 2023	23 Feb 2025	CPAI-2023-1135	Adobe APSB23-54	CVE-2023-44340	Adobe Acrobat and Reader Out-of-bounds Read (APSB23-54: CVE-2023-44340)
High	14 Nov 2023	23 Feb 2025	CPAI-2023-1013	Microsoft CVE-2023-36399	CVE-2023-36399	Microsoft Windows Storage Elevation of Privilege (CVE-2023-36399)
High	10 Oct 2023	23 Feb 2025	CPAI-2023-0889	Microsoft CVE-2023-38159	CVE-2023-38159	Microsoft Windows Graphics Component Elevation of Privilege (CVE-2023-38159)
High	10 Oct 2023	23 Feb 2025	CPAI-2023-0888	Microsoft CVE-2023-41772	CVE-2023-41772	Microsoft Win32k Elevation of Privilege (CVE-2023-41772)
High	10 Oct 2023	23 Feb 2025	CPAI-2023-0887	Microsoft CVE-2023-36776	CVE-2023-36776	Microsoft Win32k Elevation of Privilege (CVE-2023-36776)
High	10 Oct 2023	23 Feb 2025	CPAI-2023-0885	Microsoft CVE-2023-36594	CVE-2023-36594	Microsoft Windows Graphics Component Elevation of Privilege (CVE-2023-36594)
High	10 Oct 2023	23 Feb 2025	CPAI-2023-0883	Microsoft CVE-2023-36731	CVE-2023-36731	Microsoft Win32k Elevation of Privilege (CVE-2023-36731)
High	12 Sep 2023	23 Feb 2025	CPAI-2023-0757	Microsoft CVE-2023-38144	CVE-2023-38144	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2023-38144)
High	12 Sep 2023	23 Feb 2025	CPAI-2023-0756	Microsoft CVE-2023-38143	CVE-2023-38143	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2023-38143)
High	11 Dec 2023	23 Feb 2025	CPAI-2022-1734		CVE-2022-44666	Microsoft Windows Remote Code Execution (CVE-2022-44666)
High	8 Aug 2023	23 Feb 2025	CPAI-2023-0663	Adobe APSB23-30	CVE-2023-38236	Adobe Acrobat and Reader Out-of-bounds Read (APSB23-30: CVE-2023-38236)
High	8 Aug 2023	23 Feb 2025	CPAI-2023-0660	Adobe APSB23-30	CVE-2023-38248	Adobe Acrobat and Reader Out-of-bounds Read (APSB23-30: CVE-2023-38248)
High	8 Aug 2023	23 Feb 2025	CPAI-2023-0658	Adobe APSB23-30	CVE-2023-38237	Adobe Acrobat and Reader Out-of-bounds Read (APSB23-30: CVE-2023-38237)
High	8 Aug 2023	23 Feb 2025	CPAI-2023-0655	Adobe APSB23-30	CVE-2023-38234	Adobe Acrobat and Reader Access of Uninitialized Pointer (APSB23-30: CVE-2023-38234)
High	8 Aug 2023	23 Feb 2025	CPAI-2023-0654	Adobe APSB23-30	CVE-2023-38231	Adobe Acrobat and Reader Out-of-bounds Write (APSB23-30: CVE-2023-38231)
High	8 Aug 2023	23 Feb 2025	CPAI-2023-0653	Adobe APSB23-30	CVE-2023-38235	Adobe Acrobat and Reader Out-of-bounds Read (APSB23-30: CVE-2023-38235)
High	8 Aug 2023	23 Feb 2025	CPAI-2023-0652	Adobe APSB23-30	CVE-2023-38223	Adobe Acrobat and Reader Access of Uninitialized Pointer (APSB23-30: CVE-2023-38223)