Home / 2023 Advisories Archive

2023 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	20 Jun 2023	20 Jun 2023	CPAI-2023-0409		CVE-2023-34229	JetBrains TeamCity Cross-Site Scripting (CVE-2023-34229)
High	20 Jun 2023	20 Jun 2023	CPAI-2022-1624		CVE-2022-44635	Apache Fineract Directory Traversal (CVE-2022-44635)
Critical	20 Jun 2023	20 Jun 2023	CPAI-2022-1593		CVE-2022-36098	XWiki Remote Code Execution (CVE-2022-36098)
High	20 Jun 2023	20 Jun 2023	CPAI-2022-1591		CVE-2022-37961	Microsoft SharePoint Remote Code Execution (CVE-2022-37961)
Critical	20 Jun 2023	20 Jun 2023	CPAI-2021-1781		CVE-2021-37350	Nagios NagiosXI SQL Injection (CVE-2021-37350)
High	20 Jun 2023	20 Jun 2023	CPAI-2022-1581		CVE-2022-36958	SolarWinds Orion Platform Insecure Deserialization (CVE-2022-36958)
High	20 Jun 2023	20 Jun 2023	CPAI-2022-1580		CVE-2022-35823	Microsoft SharePoint Remote Code Execution (CVE-2022-35823)
Critical	20 Jun 2023	20 Jun 2023	CPAI-2021-1771		CVE-2021-37344	Nagios XI Switch Wizard Remote Code Execution (CVE-2021-37344)
Critical	20 Jun 2023	20 Jun 2023	CPAI-2020-3839		CVE-2020-26935	PhpMyAdmin SQL Injection (CVE-2020-26935)
High	20 Jun 2023	20 Jun 2023	CPAI-2020-3831		CVE-2020-13568	OpenEMR SQL Injection (CVE-2020-13568)
Medium	20 Jun 2023	20 Jun 2023	CPAI-2018-2405		CVE-2018-12998	Zoho Multiple Products Cross-Site Scripting (CVE-2018-12998)
High	20 Jun 2023	20 Jun 2023	CPAI-2005-0372		CVE-2005-1256	Ipswitch Multiple Products Buffer Overflow (CVE-2005-1256)
Critical	30 May 2023	20 Jun 2023	CPAI-2021-1756		CVE-2021-45456	Apache Kylin Command Injection (CVE-2021-45456)
High	15 Mar 2023	20 Jun 2023	CPAI-2022-1322		CVE-2022-40127	Apache Airflow Command Injection (CVE-2022-40127)
High	19 Jun 2023	19 Jun 2023	CPAI-2022-1658		CVE-2022-37024	Zoho Manageengine Remote Code Execution (CVE-2022-37024)
Medium	19 Jun 2023	19 Jun 2023	CPAI-2019-2925		CVE-2019-17120	WiKID Systems 2FA Enterprise Server Cross-Site Scripting (CVE-2019-17120)
Medium	19 Jun 2023	19 Jun 2023	CPAI-2022-1657		CVE-2022-4830	WordPress Paid Memberships Pro Plugin Cross-Site Scripting (CVE-2022-4830)
High	19 Jun 2023	19 Jun 2023	CPAI-2022-1656		CVE-2022-36099	XWiki Remote Code Execution (CVE-2022-36099)
Medium	19 Jun 2023	19 Jun 2023	CPAI-2020-3860		CVE-2020-5810	Umbraco CMS Cross-Site Scripting (CVE-2020-5810)
Critical	19 Jun 2023	19 Jun 2023	CPAI-2018-2421		CVE-2018-7512 CVE-2018-7516 CVE-2018-7520 CVE-2018-7524 CVE-2018-7528 CVE-2018-7532	Geutebruck IP Cameras Command Injection (CVE-2018-7512; CVE-2018-7516; CVE-2018-7520; CVE-2018-7524; CVE-2018-7528; CVE-2018-7532)
High	13 Jun 2023	19 Jun 2023	CPAI-2023-0395		CVE-2023-2114	WordPress NEX-Forms Plugin SQL Injection (CVE-2023-2114)
High	19 Jun 2023	19 Jun 2023	CPAI-2021-1783		CVE-2021-46378	D-Link DIR-850 Information Disclosure (CVE-2021-46378)
High	8 Jun 2023	19 Jun 2023	CPAI-2023-0346		CVE-2023-21547	Microsoft Windows Denial of Service (CVE-2023-21547)
High	8 Jun 2023	19 Jun 2023	CPAI-2023-0321		CVE-2023-31133	Ghost Foundation Ghost Remote Code Execution (CVE-2023-31133)
Medium	11 Jun 2023	19 Jun 2023	CPAI-2022-1525		CVE-2022-3562	LibreNMS Cross-Site Scripting (CVE-2022-3562)
High	15 May 2023	19 Jun 2023	CPAI-2023-0292		CVE-2023-29525	XWiki Privilege Escalation (CVE-2023-29525)
High	18 Jun 2023	18 Jun 2023	CPAI-2023-0418		CVE-2023-26976	Tenda AC6 Buffer Overflow (CVE-2023-26976)
Medium	18 Jun 2023	18 Jun 2023	CPAI-2023-0385			LokiBot Phishing Email Campaign
Medium	18 Jun 2023	18 Jun 2023	CPAI-2022-1460		CVE-2022-28730	Apache JSPWiki Cross-Site Scripting (CVE-2022-28730)
High	16 Jun 2023	16 Jun 2023	CPAI-2019-2922		CVE-2019-6279 CVE-2019-6282	China Mobile PLC Wireless Router Cross-Site Request Forgery (CVE-2019-6279; CVE-2019-6282)
High	17 May 2023	16 Jun 2023	CPAI-2023-0309		CVE-2023-26609	ABUS Security Camera Command Injection (CVE-2023-26609)
High	15 Jun 2023	15 Jun 2023	CPAI-2018-2419		CVE-2018-16119	TP-Link WR1043nd Buffer Overflow (CVE-2018-16119)
High	14 Jun 2023	14 Jun 2023	CPAI-2022-1651		CVE-2022-43452	Delta DIAEnergie SQL Injection (CVE-2022-43452)
High	14 Jun 2023	14 Jun 2023	CPAI-2020-3853		CVE-2020-24363	TP-Link TL-WA855RE Authentication Bypass (CVE-2020-24363)
High	14 Jun 2023	14 Jun 2023	CPAI-2013-3804		CVE-2013-7204	Conceptronic CIPCAMPTIWL Camera Cross-Site Request Forgery (CVE-2013-7204)
High	14 Jun 2023	14 Jun 2023	CPAI-2012-1385		CVE-2012-0155	Microsoft Internet Explorer Remote Code Execution (CVE-2012-0155)
Critical	13 Jun 2023	13 Jun 2023	CPAI-2020-3856		CVE-2020-3243	Cisco UCS Director Directory Traversal (CVE-2020-3243)
Medium	13 Jun 2023	13 Jun 2023	CPAI-2019-2921		CVE-2019-19516	Intelbras WRN 150 Cross-Site Request Forgery (CVE-2019-19516)
High	13 Jun 2023	13 Jun 2023	CPAI-2020-3829		CVE-2020-15643 CVE-2020-15644 CVE-2020-15645 CVE-2020-5803	Marvell QConvergeConsole Authentication Bypass (CVE-2020-15643; CVE-2020-15644; CVE-2020-15645; CVE-2020-5803)
Critical	2 Mar 2023	13 Jun 2023	CPAI-2023-0103		CVE-2023-23076	Zoho ManageEngine SupportCenter Plus Command Injection (CVE-2023-23076)
High	13 Jun 2023	13 Jun 2023	CPAI-2023-0412	Microsoft CVE-2023-28310	CVE-2023-28310	Microsoft Exchange Remote Code Execution (CVE-2023-28310)
High	13 Jun 2023	13 Jun 2023	CPAI-2023-0399	Microsoft CVE-2023-29361	CVE-2023-29361	Microsoft Windows Cloud Files Mini Filter Driver Elevation of Privilege (CVE-2023-29361)
High	13 Jun 2023	13 Jun 2023	CPAI-2023-0398	Microsoft CVE-2023-29371	CVE-2023-29371	Microsoft Windows Win32k Elevation of Privilege (CVE-2023-29371)
High	13 Jun 2023	13 Jun 2023	CPAI-2023-0397	Microsoft CVE-2023-29358	CVE-2023-29358	Microsoft Windows GDI Elevation of Privilege (CVE-2023-29358)
High	13 Jun 2023	13 Jun 2023	CPAI-2022-1640		CVE-2022-2414	Dogtag PKI XML External Entity Injection (CVE-2022-2414)
High	13 Jun 2023	13 Jun 2023	CPAI-2023-0390		CVE-2023-0603	WordPress Sloth Logo Customizer Plugin Cross-Site Scripting (CVE-2023-0603)
High	12 Jun 2023	12 Jun 2023	CPAI-2013-3803		CVE-2013-3690	Brickcom IP Cameras Cross-Site Request Forgery (CVE-2013-3690)
High	12 Jun 2023	12 Jun 2023	CPAI-2023-0389		CVE-2023-27639 CVE-2023-27640	Tshirtecommerce Directory Traversal (CVE-2023-27639; CVE-2023-27640)
Medium	12 Jun 2023	12 Jun 2023	CPAI-2018-2416		CVE-2018-17310 CVE-2018-17311 CVE-2018-17312 CVE-2018-17313 CVE-2018-17314 CVE-2018-17315 CVE-2018-17316	RICOH Printer Cross-Site Scripting (CVE-2018-17310; CVE-2018-17311; CVE-2018-17312; CVE-2018-17313; CVE-2018-17314; CVE-2018-17315; CVE-2018-17316)
Critical	12 Jun 2023	12 Jun 2023	CPAI-2019-2906		CVE-2019-1181	Microsoft Windows Heap Buffer Overflow (CVE-2019-1181)