Home / 2023 Advisories Archive

2023 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	25 Jul 2023	25 Jul 2023	CPAI-2023-0351		CVE-2023-26475	XWiki Remote Code Execution (CVE-2023-26475)
High	24 Jul 2023	24 Jul 2023	CPAI-2004-0221		CVE-2004-2086	Sambar Server Buffer Overflow (CVE-2004-2086)
High	24 Jul 2023	24 Jul 2023	CPAI-2002-0050		CVE-2002-1753	CsNewsPro Command Injection (CVE-2002-1753)
High	24 Jul 2023	24 Jul 2023	CPAI-2023-0542			Artemis Security Scanner
High	24 Jul 2023	24 Jul 2023	CPAI-2021-1805		CVE-2021-35216	SolarWinds Patch Manager Insecure Deserialization (CVE-2021-35216)
Critical	4 May 2023	24 Jul 2023	CPAI-2023-0269		CVE-2023-29017 CVE-2023-29199 CVE-2023-30547 CVE-2023-32313 CVE-2023-32314	vm2 Remote Code Execution (CVE-2023-29017; CVE-2023-29199; CVE-2023-30547; CVE-2023-32313; CVE-2023-32314)
High	23 Jul 2023	23 Jul 2023	CPAI-2023-0556		CVE-2023-2249	WordPress wpForo Forum Plugin Insecure Deserialization (CVE-2023-2249)
High	23 Jul 2023	23 Jul 2023	CPAI-2011-0657		CVE-2011-0266 CVE-2011-0267	HP OpenView Network Node Manager Buffer Overflow (CVE-2011-0266; CVE-2011-0267)
High	23 Jul 2023	23 Jul 2023	CPAI-2007-0441		CVE-2007-6312	Websense Web Security Cross-Site Scripting (CVE-2007-6312)
Critical	23 Jul 2023	23 Jul 2023	CPAI-2018-2428		CVE-2018-13050	Zoho ManageEngine Applications Manager SQL Injection (CVE-2018-13050)
High	23 Jul 2023	23 Jul 2023	CPAI-2023-0522		CVE-2023-21707	Microsoft Exchange Server Remote Code Execution (CVE-2023-21707)
High	20 Jul 2023	20 Jul 2023	CPAI-2023-0547		CVE-2023-3001	Schneider Electric IGSS Dashboard Insecure Deserialization (CVE-2023-3001)
High	20 Jul 2023	20 Jul 2023	CPAI-2020-3867		CVE-2020-6146	GoNitro Nitro Pro Buffer Overflow (CVE-2020-6146)
High	20 Jul 2023	20 Jul 2023	CPAI-2023-0538			Vulnspace Security Scanner
High	20 Jul 2023	20 Jul 2023	CPAI-2021-1801		CVE-2021-23157	WECON LeviStudioU Buffer Overflow (CVE-2021-23157)
High	20 Jul 2023	20 Jul 2023	CPAI-2022-1687		CVE-2022-1118	Rockwell Automation Multiple Products Remote Code Execution (CVE-2022-1118)
Medium	20 Jul 2023	20 Jul 2023	CPAI-2022-1682		CVE-2022-3265	GitLab Cross-Site Scripting (CVE-2022-3265)
High	23 Apr 2023	19 Jul 2023	CPAI-2022-1429		CVE-2022-3038	Google Chrome Use After Free (CVE-2022-3038)
Medium	18 Jul 2023	18 Jul 2023	CPAI-2022-1689		CVE-2022-44792	Net-SNMP Denial of Service (CVE-2022-44792)
High	18 Jul 2023	18 Jul 2023	CPAI-2020-3868		CVE-2020-16205	Geutebruck Devices Command Injection (CVE-2020-16205)
High	18 Jul 2023	18 Jul 2023	CPAI-2014-2505		CVE-2014-3791	Easy File Sharing Buffer Overflow (CVE-2014-3791)
High	18 Jul 2023	18 Jul 2023	CPAI-2021-1803		CVE-2021-29442	Alibaba Nacos Authentication Bypass (CVE-2021-29442)
High	18 Jul 2023	18 Jul 2023	CPAI-2004-0220		CVE-2004-2466	Easy Chat Server Buffer Overflow (CVE-2004-2466)
Medium	18 Jul 2023	18 Jul 2023	CPAI-2023-0524		CVE-2023-3388	WordPress Beautiful Cookie Consent Banner Plugin Cross-Site Scripting (CVE-2023-3388)
High	18 Jul 2023	18 Jul 2023	CPAI-2023-0523		CVE-2023-32152	D-Link DIR-2640 HNAP LoginPassword Authentication Bypass (CVE-2023-32152)
Critical	18 Jul 2023	18 Jul 2023	CPAI-2023-0517		CVE-2023-32521	Trend Micro Mobile Security Directory Traversal (CVE-2023-32521)
Critical	18 Jul 2023	18 Jul 2023	CPAI-2023-0516		CVE-2023-1650	WordPress AI ChatBot Plugin Insecure Deserialization (CVE-2023-1650)
High	18 Jul 2023	18 Jul 2023	CPAI-2023-0442		CVE-2023-21769	Microsoft Message Queuing Denial of Service (CVE-2023-21769)
High	17 Jul 2023	17 Jul 2023	CPAI-2023-0543			Spreecommerce Command Injection
High	17 Jul 2023	17 Jul 2023	CPAI-2020-3866		CVE-2020-13557	Foxit PDF Reader Use After Free (CVE-2020-13557)
High	17 Jul 2023	17 Jul 2023	CPAI-2021-1799		CVE-2021-35218	SolarWinds Orion Platform Insecure Deserialization (CVE-2021-35218)
High	16 Jul 2023	16 Jul 2023	CPAI-2009-0549		CVE-2009-0580 CVE-2009-0781	Apache Tomcat Command Injection (CVE-2009-0580; CVE-2009-0781)
High	16 Jul 2023	16 Jul 2023	CPAI-2021-1802		CVE-2021-34847	Foxit PDF Reader Remote Code Execution (CVE-2021-34847)
High	16 Jul 2023	16 Jul 2023	CPAI-2005-0377		CVE-2005-0595 CVE-2007-6377	BadBlue Buffer Overflow (CVE-2005-0595; CVE-2007-6377)
High	16 Jul 2023	16 Jul 2023	CPAI-2023-0513		CVE-2023-1669	WordPress SEOPress Plugin Insecure Deserialization (CVE-2023-1669)
Critical	16 Jul 2023	16 Jul 2023	CPAI-2021-1790		CVE-2021-44026	Roundcube Webmail SQL Injection (CVE-2021-44026)
Medium	13 Jul 2023	13 Jul 2023	CPAI-2023-0533		CVE-2023-24322	MojoPortal Cross-Site Scripting (CVE-2023-24322)
High	13 Jul 2023	13 Jul 2023	CPAI-2021-1795		CVE-2021-34995	Commvault Commcell Authentication Bypass (CVE-2021-34995)
High	13 Jul 2023	13 Jul 2023	CPAI-2022-1646		CVE-2022-45938	Xfinity Comcast Cross-Site Scripting (CVE-2022-45938)
Medium	31 May 2023	13 Jul 2023	CPAI-2023-0253		CVE-2023-25136	OpenSSH Memory Corruption (CVE-2023-25136)
High	11 Jul 2023	11 Jul 2023	CPAI-2023-0535	Microsoft CVE-2023-36874	CVE-2023-36874	Microsoft Windows Error Reporting Service Elevation of Privilege (CVE-2023-36874)
Critical	11 Jul 2023	11 Jul 2023	CPAI-2023-0531	Microsoft CVE-2023-33157	CVE-2023-33157	Microsoft SharePoint Remote Code Execution (CVE-2023-33157)
High	11 Jul 2023	11 Jul 2023	CPAI-2023-0528	Adobe APSB23-40	CVE-2023-29301	Adobe ColdFusion Authentication Bypass (CVE-2023-29301)
High	11 Jul 2023	11 Jul 2023	CPAI-2023-0527	Microsoft CVE-2023-35311	CVE-2023-35311	Microsoft Outlook Security Feature Bypass (CVE-2023-35311)
High	11 Jul 2023	11 Jul 2023	CPAI-2023-0464		CVE-2023-30403	Aigital Wireless-N Repeater Command Injection (CVE-2023-30403)
High	11 Jul 2023	11 Jul 2023	CPAI-2023-0446		CVE-2023-2522	Chengdu Command Injection (CVE-2023-2522)
High	10 Jul 2023	10 Jul 2023	CPAI-2023-0518			Schneider Electric American Power Conversion Remote Code Execution
High	10 Jul 2023	10 Jul 2023	CPAI-2023-0511		CVE-2023-29708	Wavlink WavRouter Command Injection (CVE-2023-29708)
Medium	10 Jul 2023	10 Jul 2023	CPAI-2021-1796		CVE-2021-30833	Apple MacOS Arbitrary File Upload (CVE-2021-30833)
High	10 Jul 2023	10 Jul 2023	CPAI-2023-0498			Infinity CGI Exploit Scanner Cross-Site Scripting