Home / 2023 Advisories Archive

2023 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	18 Jul 2023	18 Jul 2023	CPAI-2023-0524		CVE-2023-3388	WordPress Beautiful Cookie Consent Banner Plugin Cross-Site Scripting (CVE-2023-3388)
High	18 Jul 2023	18 Jul 2023	CPAI-2023-0523		CVE-2023-32152	D-Link DIR-2640 HNAP LoginPassword Authentication Bypass (CVE-2023-32152)
Critical	18 Jul 2023	18 Jul 2023	CPAI-2023-0516		CVE-2023-1650	WordPress AI ChatBot Plugin Insecure Deserialization (CVE-2023-1650)
High	18 Jul 2023	18 Jul 2023	CPAI-2023-0442		CVE-2023-21769	Microsoft Message Queuing Denial of Service (CVE-2023-21769)
High	17 Jul 2023	17 Jul 2023	CPAI-2023-0543			Spreecommerce Command Injection
High	17 Jul 2023	17 Jul 2023	CPAI-2020-3866		CVE-2020-13557	Foxit PDF Reader Use After Free (CVE-2020-13557)
High	17 Jul 2023	17 Jul 2023	CPAI-2021-1799		CVE-2021-35218	SolarWinds Orion Platform Insecure Deserialization (CVE-2021-35218)
High	16 Jul 2023	16 Jul 2023	CPAI-2009-0549		CVE-2009-0580 CVE-2009-0781	Apache Tomcat Command Injection (CVE-2009-0580; CVE-2009-0781)
High	16 Jul 2023	16 Jul 2023	CPAI-2021-1802		CVE-2021-34847	Foxit PDF Reader Remote Code Execution (CVE-2021-34847)
High	16 Jul 2023	16 Jul 2023	CPAI-2005-0377		CVE-2005-0595 CVE-2007-6377	BadBlue Buffer Overflow (CVE-2005-0595; CVE-2007-6377)
High	16 Jul 2023	16 Jul 2023	CPAI-2023-0513		CVE-2023-1669	WordPress SEOPress Plugin Insecure Deserialization (CVE-2023-1669)
Critical	16 Jul 2023	16 Jul 2023	CPAI-2021-1790		CVE-2021-44026	Roundcube Webmail SQL Injection (CVE-2021-44026)
Medium	13 Jul 2023	13 Jul 2023	CPAI-2023-0533		CVE-2023-24322	MojoPortal Cross-Site Scripting (CVE-2023-24322)
High	13 Jul 2023	13 Jul 2023	CPAI-2021-1795		CVE-2021-34995	Commvault Commcell Authentication Bypass (CVE-2021-34995)
High	13 Jul 2023	13 Jul 2023	CPAI-2022-1646		CVE-2022-45938	Xfinity Comcast Cross-Site Scripting (CVE-2022-45938)
Medium	31 May 2023	13 Jul 2023	CPAI-2023-0253		CVE-2023-25136	OpenSSH Memory Corruption (CVE-2023-25136)
High	11 Jul 2023	11 Jul 2023	CPAI-2023-0535	Microsoft CVE-2023-36874	CVE-2023-36874	Microsoft Windows Error Reporting Service Elevation of Privilege (CVE-2023-36874)
Critical	11 Jul 2023	11 Jul 2023	CPAI-2023-0531	Microsoft CVE-2023-33157	CVE-2023-33157	Microsoft SharePoint Remote Code Execution (CVE-2023-33157)
High	11 Jul 2023	11 Jul 2023	CPAI-2023-0528	Adobe APSB23-40	CVE-2023-29301	Adobe ColdFusion Authentication Bypass (CVE-2023-29301)
High	11 Jul 2023	11 Jul 2023	CPAI-2023-0527	Microsoft CVE-2023-35311	CVE-2023-35311	Microsoft Outlook Security Feature Bypass (CVE-2023-35311)
High	11 Jul 2023	11 Jul 2023	CPAI-2023-0464		CVE-2023-30403	Aigital Wireless-N Repeater Command Injection (CVE-2023-30403)
High	11 Jul 2023	11 Jul 2023	CPAI-2023-0446		CVE-2023-2522	Chengdu Command Injection (CVE-2023-2522)
High	10 Jul 2023	10 Jul 2023	CPAI-2023-0518			Schneider Electric American Power Conversion Remote Code Execution
High	10 Jul 2023	10 Jul 2023	CPAI-2023-0511		CVE-2023-29708	Wavlink WavRouter Command Injection (CVE-2023-29708)
Medium	10 Jul 2023	10 Jul 2023	CPAI-2021-1796		CVE-2021-30833	Apple MacOS Arbitrary File Upload (CVE-2021-30833)
High	10 Jul 2023	10 Jul 2023	CPAI-2023-0498			Infinity CGI Exploit Scanner Cross-Site Scripting
Medium	10 Jul 2023	10 Jul 2023	CPAI-2023-0495		CVE-2023-20052	Cisco Secure Endpoint XML External Entity Injection (; CVE-2023-20052)
High	10 Jul 2023	10 Jul 2023	CPAI-2017-1553		CVE-2017-2893	Cesanta Mongoose Denial of Service (CVE-2017-2893)
Medium	9 Jul 2023	9 Jul 2023	CPAI-2023-0512		CVE-2023-28651	Contec CONPROSYS HMI System Cross-Site Scripting (CVE-2023-28651)
Medium	9 Jul 2023	9 Jul 2023	CPAI-2023-0510		CVE-2023-35719	Zoho ManageEngine AdSelfService Plus Authentication Bypass (CVE-2023-35719)
High	9 Jul 2023	9 Jul 2023	CPAI-2003-0060		CVE-2003-0025	IMP SQL Injection (CVE-2003-0025)
High	9 Jul 2023	9 Jul 2023	CPAI-2014-2503		CVE-2014-8387	Advantech Command Injection (CVE-2014-8387)
High	9 Jul 2023	9 Jul 2023	CPAI-2023-0500		CVE-2023-36354 CVE-2023-36356 CVE-2023-36357 CVE-2023-36358 CVE-2023-36359	TP-Link Routers Command Injection (CVE-2023-36354; CVE-2023-36356; CVE-2023-36357; CVE-2023-36358; CVE-2023-36359)
High	9 Jul 2023	9 Jul 2023	CPAI-2023-0496		CVE-2023-32986	Jenkins File Parameters Plugin Directory Traversal (CVE-2023-32986)
Critical	9 Jul 2023	9 Jul 2023	CPAI-2023-0479		CVE-2023-24734	PMB Services PMB Arbitrary File Upload (CVE-2023-24734)
High	6 Jul 2023	6 Jul 2023	CPAI-2023-0497			TamronOS Command Injection
Critical	6 Jul 2023	6 Jul 2023	CPAI-2022-1679		CVE-2022-40022	Microchip SyncServer S650 Command Injection (CVE-2022-40022)
High	6 Jul 2023	6 Jul 2023	CPAI-2023-0490		CVE-2023-26258	Arcserve UDP Backup Software Authentication Bypass (CVE-2023-26258)
High	3 Jul 2023	6 Jul 2023	CPAI-2022-1643		CVE-2022-47878 CVE-2022-47879	Jedox Remote Code Execution (CVE-2022-47878; CVE-2022-47879)
High	6 Jul 2023	6 Jul 2023	CPAI-2023-0175		CVE-2019-3956 CVE-2019-3957	SolarWinds Dameware Remote Mini Control Information Disclosure (CVE-2019-3956; CVE-2019-3957)
High	5 Jul 2023	5 Jul 2023	CPAI-2023-0474			Easy MPEG to DVD Burner Buffer Overflow
Critical	4 Jul 2023	4 Jul 2023	CPAI-2023-0485		CVE-2023-33299	Fortinet FortiNAC Insecure Deserialization (CVE-2023-33299)
High	4 Jul 2023	4 Jul 2023	CPAI-2023-0484		CVE-2023-33300	Fortinet FortiNAC Remote Code Execution (CVE-2023-33300)
High	4 Jul 2023	4 Jul 2023	CPAI-2023-0480		CVE-2023-36355	TP-Link TL-WR940N Buffer Overflow (CVE-2023-36355)
Critical	4 Jul 2023	4 Jul 2023	CPAI-2020-3863		CVE-2020-2509	QNAP QTS Command Injection (CVE-2020-2509)
Critical	4 Jul 2023	4 Jul 2023	CPAI-2023-0472		CVE-2023-31983 CVE-2023-31985 CVE-2023-31986	Edimax Router Command Injection (CVE-2023-31983; CVE-2023-31985; CVE-2023-31986)
Critical	3 Jul 2023	3 Jul 2023	CPAI-2023-0489		CVE-2023-20864	VMware Aria Operations For Logs Insecure Deserialization (CVE-2023-20864)
Medium	3 Jul 2023	3 Jul 2023	CPAI-2020-3864		CVE-2020-35730	Roundcube Webmail Cross-Site Scripting (CVE-2020-35730)
Medium	3 Jul 2023	3 Jul 2023	CPAI-2022-1664		CVE-2022-47874	Jedox Improper Access Control (CVE-2022-47874)
Medium	2 Jul 2023	2 Jul 2023	CPAI-2022-1677		CVE-2022-28732	Apache JSPWiki Cross-Site Scripting (CVE-2022-28732)