Home / 2023 Advisories Archive

2023 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	19 Jun 2023	20 May 2024	CPAI-2023-0355		CVE-2023-26801	LB-LINK Multiple Products Command Injection (CVE-2023-26801)
High	9 May 2023	15 May 2024	CPAI-2023-0303	Microsoft CVE-2023-24950	CVE-2023-24950	Microsoft SharePoint Server Spoofing Vulnerability (CVE-2023-24950)
Medium	7 May 2023	15 May 2024	CPAI-2022-1496		CVE-2022-45783	DotCMS Directory Traversal (CVE-2022-45783)
High	4 May 2023	15 May 2024	CPAI-2022-1467		CVE-2022-42425	Centreon Web Poller Broker enableCentreonBrokerInDB SQL Injection (CVE-2022-42425)
Critical	9 Feb 2023	15 May 2024	CPAI-2022-1178		CVE-2022-46560 CVE-2022-46561 CVE-2022-46562 CVE-2022-46563 CVE-2022-46566 CVE-2022-46568 CVE-2022-46569 CVE-2022-46570 CVE-2024-22751	D-Link DIR-882 Stack Overflow (CVE-2022-46560; CVE-2022-46561; CVE-2022-46562; CVE-2022-46563; CVE-2022-46566; CVE-2022-46568; CVE-2022-46569; CVE-2022-46570; CVE-2024-22751)
High	2 Feb 2023	15 May 2024	CPAI-2023-0051		CVE-2023-0315	Froxlor Remote Code Execution (CVE-2023-0315)
High	22 Jan 2023	15 May 2024	CPAI-2022-1141		CVE-2022-47966	Zoho ManageEngine Remote Code Execution (CVE-2022-47966)
Critical	18 Jan 2023	15 May 2024	CPAI-2022-1128		CVE-2022-46169	Cacti Command Injection (CVE-2022-46169)
Critical	19 Feb 2023	15 May 2024	CPAI-2022-1222		CVE-2022-46475 CVE-2024-22852 CVE-2024-22916	D-Link Routers Stack Overflow (CVE-2022-46475; CVE-2024-22852; CVE-2024-22916)
Critical	6 Sep 2023	12 May 2024	CPAI-2023-0633		CVE-2023-35150	XWiki Command Injection (CVE-2023-35150)
Critical	16 Aug 2023	12 May 2024	CPAI-2023-0537		CVE-2023-6887	Common Arbitrary Files Upload Techniques (CVE-2023-6887)
Medium	7 May 2023	12 May 2024	CPAI-2023-0293		CVE-2023-22458	Redis Denial of Service (CVE-2023-22458)
High	4 May 2023	12 May 2024	CPAI-2023-0272		CVE-2023-1389	TP-Link Archer AX21 Command Injection (CVE-2023-1389)
Critical	18 Dec 2023	8 May 2024	CPAI-2023-1400		CVE-2023-6553	WordPress Backup Migration Plugin Remote Code Execution (CVE-2023-6553)
High	13 Dec 2023	8 May 2024	CPAI-2023-1349		CVE-2023-46214	Splunk Multiple Products Remote Code Execution (CVE-2023-46214)
Critical	30 Apr 2023	5 May 2024	CPAI-2023-0195		CVE-2023-25690	Apache HTTP Server Request Smuggling (CVE-2023-25690)
High	13 Sep 2023	5 May 2024	CPAI-2021-1292		CVE-2021-29492	Envoy Proxy Path Traversal (CVE-2021-29492)
Critical	23 Jan 2023	18 Apr 2024	CPAI-2022-1114		CVE-2022-31126 CVE-2022-3113 CVE-2022-31137 CVE-2022-31161	Roxy-WI Command Injection (CVE-2022-31126; CVE-2022-3113; CVE-2022-31137; CVE-2022-31161)
Critical	17 Mar 2023	8 Apr 2024	CPAI-2023-0144	Microsoft CVE-2023-23397	CVE-2023-23397 CVE-2023-29324	Microsoft Outlook Privilege Escalation (CVE-2023-23397; CVE-2023-29324)
High	18 May 2023	4 Apr 2024	CPAI-2022-1532		CVE-2022-3800 CVE-2022-3801	IBAX Go-Ibax SQL Injection (CVE-2022-3800; CVE-2022-3801)
High	7 Nov 2023	27 Mar 2024	CPAI-2023-1060		CVE-2023-20889	VMware vRealize Network Insight Information Disclosure (CVE-2023-20889)
Critical	15 Jun 2023	19 Mar 2024	CPAI-2023-0404		CVE-2023-25233 CVE-2023-25234	Tenda AC500 Buffer Overflow (CVE-2023-25233; CVE-2023-25234)
High	12 Nov 2023	17 Mar 2024	CPAI-2020-4068		CVE-2020-14144	Gitea Remote Code Execution (CVE-2020-14144)
Critical	13 Jun 2023	17 Mar 2024	CPAI-2023-0419	Microsoft CVE-2023-29357	CVE-2023-29357	Microsoft SharePoint Server Authentication Bypass (CVE-2023-29357)
High	17 Dec 2023	7 Mar 2024	CPAI-2023-1398		CVE-2023-32781 CVE-2023-32782	Paessler PRTG Remote Code Execution (CVE-2023-32781; CVE-2023-32782)
Critical	28 Aug 2023	3 Mar 2024	CPAI-2023-0673		CVE-2023-34124 CVE-2023-34127 CVE-2023-34132	SonicWall Multiple Products Command Injection (CVE-2023-34124; CVE-2023-34127; CVE-2023-34132)
High	13 Jun 2023	3 Mar 2024	CPAI-2023-0396	Microsoft CVE-2023-29360	CVE-2023-29360	Microsoft TPM Device Driver Information Disclosure (CVE-2023-29360)
High	3 Jan 2023	21 Feb 2024	CPAI-2018-2238		CVE-2018-1000130	Jolokia Webarchive Agent Remote Code Execution (CVE-2018-1000130)
Critical	26 Jun 2023	20 Feb 2024	CPAI-2023-0456		CVE-2023-2732	WordPress InspireUI MStore API Plugin Authentication Bypass (CVE-2023-2732)
Critical	1 Nov 2023	19 Feb 2024	CPAI-2023-0973		CVE-2023-46747	F5 BIG-IP Configuration Utility Authentication Bypass (CVE-2023-46747)
Medium	26 Mar 2023	19 Feb 2024	CPAI-2023-0142		CVE-2023-23752	Joomla! Authentication Bypass (CVE-2023-23752)
High	26 Jul 2023	15 Feb 2024	CPAI-2023-0352		CVE-2023-1578	Pimcore SQL Injection (CVE-2023-1578)
Critical	15 Nov 2023	14 Feb 2024	CPAI-2023-0941		CVE-2024-21413	Microsoft Outlook Malicious Moniker Link Remote Code Execution (CVE-2024-21413)
Critical	16 Jan 2023	13 Feb 2024	CPAI-2023-0035		CVE-2020-11930 CVE-2021-26475 CVE-2021-26702 CVE-2021-26723 CVE-2021-39496 CVE-2022-46888 CVE-2023-23491 CVE-2023-24488 CVE-2023-26046 CVE-2023-28664 CVE-2023-28665 CVE-2023-28666 CVE-2023-4117	Cross-Site Scripting Obfuscation Techniques (CVE-2020-11930; CVE-2021-26475; CVE-2021-26702; CVE-2021-26723; CVE-2021-39496; CVE-2022-46888; CVE-2023-23491; CVE-2023-24488; CVE-2023-26046; CVE-2023-28664; CVE-2023-28665; CVE-2023-28666; CVE-2023-4117)
Critical	6 Feb 2023	8 Feb 2024	CPAI-2023-0052		CVE-2023-0297	Pyload Project Command Injection (CVE-2023-0297)
High	8 Jan 2023	8 Feb 2024	CPAI-2017-1591		CVE-2017-10974	Yaws Directory Traversal (CVE-2017-10974)
Critical	17 Dec 2023	1 Feb 2024	CPAI-2023-1389		CVE-2023-34048	VMware vCenter Server Out of Bounds Write (CVE-2023-34048)
Critical	22 Oct 2023	30 Jan 2024	CPAI-2020-4056		CVE-2020-26948	Emby Server-Side Request Forgery (CVE-2020-26948)
High	11 Jan 2023	29 Jan 2024	CPAI-2018-2184		CVE-2018-11759	Apache Tomcat Information Disclosure (CVE-2018-11759)
High	2 Jul 2023	24 Jan 2024	CPAI-2022-1652		CVE-2022-30522	Apache HTTP Server Denial of Service (CVE-2022-30522)
Critical	13 Dec 2023	22 Jan 2024	CPAI-2023-1350		CVE-2023-27524	Apache Superset Remote Code Execution (CVE-2023-27524)
High	10 Sep 2023	18 Jan 2024	CPAI-2023-0751		CVE-2023-37462	XWiki Remote Code Execution (CVE-2023-37462)
High	31 Aug 2023	14 Jan 2024	CPAI-2023-0614		CVE-2023-32031 CVE-2023-36744 CVE-2023-36745 CVE-2023-36756 CVE-2023-36757 CVE-2023-36777 CVE-2023-36778 CVE-2023-38181	Microsoft Exchange Server Remote Code Execution (CVE-2023-32031; CVE-2023-36744; CVE-2023-36745; CVE-2023-36756; CVE-2023-36757; CVE-2023-36777; CVE-2023-36778; CVE-2023-38181)
High	15 Jun 2023	14 Jan 2024	CPAI-2023-0405		CVE-2022-31268	Java Server Files Information Disclosure (CVE-2022-31268)
Critical	19 Mar 2023	4 Jan 2024	CPAI-2022-1364		CVE-2022-39952	Fortinet FortiNAC Arbitrary File Write (CVE-2022-39952)
High	28 Dec 2023	1 Jan 2024	CPAI-2023-1358		CVE-2023-36606	Microsoft Windows Message Queuing Service Denial of Service (CVE-2023-36606)
High	28 Dec 2023	28 Dec 2023	CPAI-2022-1975		CVE-2022-0289	Google Chrome Use After Free (CVE-2022-0289)
High	28 Dec 2023	28 Dec 2023	CPAI-2022-1974		CVE-2022-2998	Google Chrome Use After Free (CVE-2022-2998)
High	28 Dec 2023	28 Dec 2023	CPAI-2017-1743		CVE-2017-5115	Google Chrome Type Confusion (CVE-2017-5115)
Medium	28 Dec 2023	28 Dec 2023	CPAI-2017-1740		CVE-2017-2361	Apple macOS Directory Traversal (CVE-2017-2361)