Home / 2023 Advisories Archive

2023 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	16 Nov 2023	16 Nov 2023	CPAI-2023-1171		CVE-2023-36017	Windows Scripting Engine Memory Corruption (CVE-2023-36017)
Critical	16 Nov 2023	16 Nov 2023	CPAI-2020-4067		CVE-2020-35847	Agentejo Cockpit SQL Injection (CVE-2020-35847)
High	15 Nov 2023	15 Nov 2023	CPAI-2023-1157		CVE-2023-44412	D-Link D-View XML External Entity Injection (CVE-2023-44412)
High	15 Nov 2023	15 Nov 2023	CPAI-2021-2055		CVE-2021-24862	WordPress RegistrationMagic Plugin SQL Injection (CVE-2021-24862)
High	15 Nov 2023	15 Nov 2023	CPAI-2023-1133		CVE-2023-29552	Service Location Protocol Denial of Service (CVE-2023-29552)
Critical	15 Nov 2023	15 Nov 2023	CPAI-2021-2052		CVE-2021-42847	Zoho ManageEngine ADAudit Plus Directory Traversal (CVE-2021-42847)
Critical	15 Nov 2023	15 Nov 2023	CPAI-2020-4072		CVE-2020-13382	OpenSIS Authentication Bypass (CVE-2020-13382)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1166	Adobe APSB23-52	CVE-2023-44350	Adobe ColdFusion Deserialization of Untrusted Data (APSB23-52: CVE-2023-44350)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1164	Adobe APSB23-52	CVE-2023-44352	Adobe ColdFusion Cross-site Scripting (APSB23-52: CVE-2023-44352)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1163	Adobe APSB23-52	CVE-2023-44355	Adobe ColdFusion Improper Input Validation (APSB23-52: CVE-2023-44355)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1162	Adobe APSB23-52	CVE-2023-44351	Adobe ColdFusion Deserialization of Untrusted Data (APSB23-52: CVE-2023-44351)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1161	Adobe APSB23-52	CVE-2023-44354	Adobe ColdFusion Improper Authentication (APSB23-52: CVE-2023-44354)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1134	Microsoft CVE-2023-36413	CVE-2023-36413	Microsoft Office Security Feature Bypass (CVE-2023-36413)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1011	Microsoft CVE-2023-36424	CVE-2023-36424	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2023-36424)
High	13 Nov 2023	13 Nov 2023	CPAI-2017-1718		CVE-2017-18048	Monstra CMS Arbitrary File Upload (CVE-2017-18048)
High	13 Nov 2023	13 Nov 2023	CPAI-2018-2620		CVE-2018-2392 CVE-2018-2393	SAP Internet Graphics Server XML External Entity (CVE-2018-2392; CVE-2018-2393)
High	13 Nov 2023	13 Nov 2023	CPAI-2018-2618		CVE-2018-4162	Apple Multiple Products Memory Corruption (CVE-2018-4162)
High	13 Nov 2023	13 Nov 2023	CPAI-2009-0554		CVE-2009-0927	Adobe Acrobat Reader Buffer Overflow (CVE-2009-0927)
High	12 Nov 2023	12 Nov 2023	CPAI-2017-1719		CVE-2017-7411	Enalean Tuleap Remote Code Execution (CVE-2017-7411)
Critical	12 Nov 2023	12 Nov 2023	CPAI-2019-3121		CVE-2019-11231	GetSimple CMS Remote Code Execution (CVE-2019-11231)
High	12 Nov 2023	12 Nov 2023	CPAI-2020-4073		CVE-2020-13383	OpenSIS Remote Code Execution (CVE-2020-13383)
Critical	12 Nov 2023	12 Nov 2023	CPAI-2020-4071		CVE-2020-13381	OpenSIS SQL Injection (CVE-2020-13381)
Critical	12 Nov 2023	12 Nov 2023	CPAI-2017-1716		CVE-2017-8835	Peplink Balance Routers SQL Injection (CVE-2017-8835)
High	12 Nov 2023	12 Nov 2023	CPAI-2019-3120		CVE-2019-10867	Pimcore Remote Code Execution (CVE-2019-10867)
High	12 Nov 2023	12 Nov 2023	CPAI-2021-2050		CVE-2021-32706	Pi-hole Command Injection (CVE-2021-32706)
Critical	12 Nov 2023	12 Nov 2023	CPAI-2017-1715		CVE-2017-9080 CVE-2017-9101	PlaySMS Remote Code Execution (CVE-2017-9080; CVE-2017-9101)
Medium	12 Nov 2023	12 Nov 2023	CPAI-2023-1119			Zoho ManageEngine Applications Manager getAssociateMonitors SQL Injection
High	12 Nov 2023	12 Nov 2023	CPAI-2020-4070		CVE-2020-7351	NetFortris Trixbox Command Injection (CVE-2020-7351)
Critical	12 Nov 2023	12 Nov 2023	CPAI-2020-4069		CVE-2020-10915	Veeam ONE Remote Code Execution (CVE-2020-10915)
Medium	12 Nov 2023	12 Nov 2023	CPAI-2023-1114		CVE-2023-4137	WordPress AYS Popup Box Plugin Cross-Site Scripting (CVE-2023-4137)
Medium	12 Nov 2023	12 Nov 2023	CPAI-2023-1113		CVE-2023-40176	XWiki Cross-Site Scripting (CVE-2023-40176)
High	12 Nov 2023	12 Nov 2023	CPAI-2023-1085			Microsoft Windows wab32res.dll Insecure Library Loading
High	12 Nov 2023	12 Nov 2023	CPAI-2023-0874		CVE-2023-3486	PaperCut MF/NG Directory Traversal (CVE-2023-3486)
High	12 Nov 2023	12 Nov 2023	CPAI-2018-2446		CVE-2018-2992	Oracle Outside In Technology Out-Of-Bounds Read (CVE-2018-2992)
Critical	8 Nov 2023	8 Nov 2023	CPAI-2023-1022		CVE-2023-4548	SPA-Cart eCommerce CMS SQL Injection (CVE-2023-4548)
High	8 Nov 2023	8 Nov 2023	CPAI-2023-0975		CVE-2023-38836	BoidCMS Arbitrary File Upload (CVE-2023-38836)
Critical	7 Nov 2023	7 Nov 2023	CPAI-2023-1093		CVE-2023-28502	Rocket Software Buffer Overflow (CVE-2023-28502)
Medium	7 Nov 2023	7 Nov 2023	CPAI-2018-2617		CVE-2018-1189	Dell EMC Isilon Cross-Site Scripting (CVE-2018-1189)
Critical	7 Nov 2023	7 Nov 2023	CPAI-2019-3118		CVE-2019-7214	SmarterTools SmarterMail Remote Code Execution (CVE-2019-7214)
Medium	7 Nov 2023	7 Nov 2023	CPAI-2023-1061		CVE-2023-4547	SPA-Cart eCommerce CMS Cross-Site Scripting (CVE-2023-4547)
Medium	7 Nov 2023	7 Nov 2023	CPAI-2023-1029			FreePBX Framework remotemod Remote Command Execution
Critical	7 Nov 2023	7 Nov 2023	CPAI-2023-1021		CVE-2023-28503	Rocket Software Authentication Bypass (CVE-2023-28503)
Critical	7 Nov 2023	7 Nov 2023	CPAI-2019-3116		CVE-2019-9194	Studio42 elFinder Remote Code Execution (CVE-2019-9194)
High	7 Nov 2023	7 Nov 2023	CPAI-2023-1018			MailEnable IMAP Service APPEND Command Handling Buffer Overflow
Critical	7 Nov 2023	7 Nov 2023	CPAI-2023-1016		CVE-2023-27372	SPIP Remote Code Execution (CVE-2023-27372)
High	7 Nov 2023	7 Nov 2023	CPAI-2023-0998			Cisco Nexus Dashboard Fabric Controller AMF External Entity Injection
Critical	7 Nov 2023	7 Nov 2023	CPAI-2020-4066		CVE-2020-5723 CVE-2020-5724 CVE-2020-5725	Grandstream UCM6200 SQL Injection (CVE-2020-5723; CVE-2020-5724; CVE-2020-5725)
High	16 Oct 2023	7 Nov 2023	CPAI-2015-1538		CVE-2015-4068	Arcserve Unified Data Protection Directory Traversal (CVE-2015-4068)
High	16 Feb 2023	7 Nov 2023	CPAI-2022-1217		CVE-2021-45839 CVE-2021-45841 CVE-2021-45842 CVE-2022-24990	TerraMaster TOS Information Disclosure (CVE-2021-45839; CVE-2021-45841; CVE-2021-45842; CVE-2022-24990)
High	6 Nov 2023	6 Nov 2023	CPAI-2023-1117		CVE-2023-36745	Microsoft Exchange Server Remote Code Execution (CVE-2023-36745)