Home / 2023 Advisories Archive

2023 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	10 Sep 2023	18 Jan 2024	CPAI-2023-0751		CVE-2023-37462	XWiki Remote Code Execution (CVE-2023-37462)
High	31 Aug 2023	14 Jan 2024	CPAI-2023-0614		CVE-2023-32031 CVE-2023-36744 CVE-2023-36745 CVE-2023-36756 CVE-2023-36757 CVE-2023-36777 CVE-2023-36778 CVE-2023-38181	Microsoft Exchange Server Remote Code Execution (CVE-2023-32031; CVE-2023-36744; CVE-2023-36745; CVE-2023-36756; CVE-2023-36757; CVE-2023-36777; CVE-2023-36778; CVE-2023-38181)
Critical	19 Mar 2023	4 Jan 2024	CPAI-2022-1364		CVE-2022-39952	Fortinet FortiNAC Arbitrary File Write (CVE-2022-39952)
High	28 Dec 2023	1 Jan 2024	CPAI-2023-1358		CVE-2023-36606	Microsoft Windows Message Queuing Service Denial of Service (CVE-2023-36606)
High	28 Dec 2023	28 Dec 2023	CPAI-2022-1975		CVE-2022-0289	Google Chrome Use After Free (CVE-2022-0289)
High	28 Dec 2023	28 Dec 2023	CPAI-2022-1974		CVE-2022-2998	Google Chrome Use After Free (CVE-2022-2998)
High	28 Dec 2023	28 Dec 2023	CPAI-2017-1743		CVE-2017-5115	Google Chrome Type Confusion (CVE-2017-5115)
Medium	28 Dec 2023	28 Dec 2023	CPAI-2017-1740		CVE-2017-2361	Apple macOS Directory Traversal (CVE-2017-2361)
High	28 Dec 2023	28 Dec 2023	CPAI-2017-1739		CVE-2017-8755	Microsoft Edge Memory Corruption (CVE-2017-8755)
High	15 Oct 2023	28 Dec 2023	CPAI-2022-1925		CVE-2022-36534	Syncovery Remote Code Execution (CVE-2022-36534)
Critical	6 Jul 2023	28 Dec 2023	CPAI-2023-0478		CVE-2023-33532 CVE-2023-33533	Netgear R6250 Command Injection (CVE-2023-33532; CVE-2023-33533)
High	2 Apr 2023	28 Dec 2023	CPAI-2022-1423		CVE-2022-24716	Icinga Web Information Disclosure (CVE-2022-24716)
Critical	3 Jan 2023	28 Dec 2023	CPAI-2022-0517		CVE-2022-36446	Webmin Remote Code Execution (CVE-2022-36446)
Critical	8 Jan 2023	28 Dec 2023	CPAI-2021-1143		CVE-2021-45392 CVE-2021-46408 CVE-2022-45979 CVE-2022-45995 CVE-2023-49044	Tenda AX Routers Buffer Overflow (CVE-2021-45392; CVE-2021-46408; CVE-2022-45979; CVE-2022-45995; CVE-2023-49044)
Critical	27 Dec 2023	27 Dec 2023	CPAI-2023-1414		CVE-2023-45480 CVE-2023-45484	Tenda AC10 Stack Overflow (CVE-2023-45480; CVE-2023-45484)
Critical	27 Dec 2023	27 Dec 2023	CPAI-2023-1413		CVE-2023-6579	osCommerce SQL Injection (CVE-2023-6579)
Critical	27 Dec 2023	27 Dec 2023	CPAI-2022-1929		CVE-2017-17932 CVE-2022-28381	ALLMediaServer Buffer Overflow (CVE-2017-17932; CVE-2022-28381)
High	26 Dec 2023	26 Dec 2023	CPAI-2023-1408		CVE-2023-33133	Microsoft Office Excel Out-of-Bounds Write (CVE-2023-33133)
High	26 Dec 2023	26 Dec 2023	CPAI-2023-1407		CVE-2023-32029	Microsoft Office Excel Memory Corruption (CVE-2023-32029)
High	24 Dec 2023	24 Dec 2023	CPAI-2022-1966		CVE-2022-30781	Gitea Remote Code Execution (CVE-2022-30781)
High	24 Dec 2023	24 Dec 2023	CPAI-2023-1401		CVE-2023-42326	Netgate pfSense Command Injection (CVE-2023-42326)
Critical	24 Dec 2023	24 Dec 2023	CPAI-2022-1931		CVE-2022-1471	SnakeYAML Insecure Deserialization (CVE-2022-1471)
Medium	21 Dec 2023	21 Dec 2023	CPAI-2021-2073		CVE-2021-4191	GitLab Authentication Bypass (CVE-2021-4191)
Critical	20 Dec 2023	20 Dec 2023	CPAI-2023-1405		CVE-2023-49043	Tenda AX1803 Buffer Overflow (CVE-2023-49043)
High	20 Dec 2023	20 Dec 2023	CPAI-2023-1387		CVE-2023-32707	Splunk Enterprise Privilege Escalation (CVE-2023-32707)
High	19 Dec 2023	19 Dec 2023	CPAI-2023-1392		CVE-2023-38039	cURL libcurl Memory Corruption (CVE-2023-38039)
High	5 Dec 2023	19 Dec 2023	CPAI-2023-0541			Bug Bounty Scanner
Critical	18 Dec 2023	18 Dec 2023	CPAI-2023-1371		CVE-2023-30803	Sangfor Next-Gen Application Firewall Authentication Bypass (CVE-2023-30803)
High	17 Dec 2023	17 Dec 2023	CPAI-2022-1960		CVE-2022-21999	Microsoft Windows Privilege Escalation (CVE-2022-21999)
Medium	17 Dec 2023	17 Dec 2023	CPAI-2023-1372		CVE-2023-30804	Sangfor Next-Gen Application Firewall Information Disclosure (CVE-2023-30804)
Critical	8 Nov 2023	17 Dec 2023	CPAI-2023-1127		CVE-2023-22518	Atlassian Confluence Authentication Bypass (CVE-2023-22518)
Critical	27 Jul 2023	17 Dec 2023	CPAI-2023-0561		CVE-2023-28121	WordPress WooCommerce Payments Plugin Authentication Bypass (CVE-2023-28121)
Critical	14 Dec 2023	14 Dec 2023	CPAI-2023-1375		CVE-2023-41993	Apple Multiple Products Out of Bounds Write (CVE-2023-41993)
High	14 Dec 2023	14 Dec 2023	CPAI-2022-1958		CVE-2022-26485	Mozilla Multiple Products Use After Free (CVE-2022-26485)
High	14 Dec 2023	14 Dec 2023	CPAI-2021-2071		CVE-2021-21148	Google Chrome Buffer Overflow (CVE-2021-21148)
Critical	14 Dec 2023	14 Dec 2023	CPAI-2021-2070		CVE-2021-20028	SonicWall SMA SQL Injection (CVE-2021-20028)
High	14 Dec 2023	14 Dec 2023	CPAI-2022-1957		CVE-2022-4262	Google Chrome Type Confusion (CVE-2022-4262)
Critical	13 Dec 2023	13 Dec 2023	CPAI-2023-1368		CVE-2023-30805 CVE-2023-30806	Sangfor Next-Gen Application Firewall Command Injection (CVE-2023-30805; CVE-2023-30806)
High	12 Dec 2023	12 Dec 2023	CPAI-2023-1386	Microsoft CVE-2023-35632	CVE-2023-35632	Microsoft Windows Ancillary Function Driver for WinSock Elevation of Privilege (CVE-2023-35632)
High	12 Dec 2023	12 Dec 2023	CPAI-2023-1278	Microsoft CVE-2023-35644	CVE-2023-35644	Microsoft Windows Sysmain Service Elevation of Privilege (CVE-2023-35644)
High	12 Dec 2023	12 Dec 2023	CPAI-2023-1277	Microsoft CVE-2023-35631	CVE-2023-35631	Microsoft Win32k Elevation of Privilege (CVE-2023-35631)
High	12 Dec 2023	12 Dec 2023	CPAI-2023-1275	Microsoft CVE-2023-35633	CVE-2023-35633	Microsoft Windows Kernel Elevation of Privilege (CVE-2023-35633)
High	12 Dec 2023	12 Dec 2023	CPAI-2023-1274	Microsoft CVE-2023-36391	CVE-2023-36391	Microsoft Local Security Authority Subsystem Service Elevation of Privilege (CVE-2023-36391)
High	12 Dec 2023	12 Dec 2023	CPAI-2023-1272	Microsoft CVE-2023-36005	CVE-2023-36005	Microsoft Windows Telephony Server Elevation of Privilege (CVE-2023-36005)
Medium	10 Dec 2023	12 Dec 2023	CPAI-2023-0230			Rapid7 Nexpose Security Scanner
High	11 Dec 2023	11 Dec 2023	CPAI-2019-3126		CVE-2019-14927	Mitsubishi Electric ME-RTU Information Disclosure (CVE-2019-14927)
High	11 Dec 2023	11 Dec 2023	CPAI-2023-1268		CVE-2023-4068	Google Chrome Type Confusion (CVE-2023-4068)
Critical	11 Dec 2023	11 Dec 2023	CPAI-2023-0921		CVE-2023-42793	JetBrains TeamCity Authentication Bypass (CVE-2023-42793)
High	11 Dec 2023	11 Dec 2023	CPAI-2022-1734		CVE-2022-44666	Microsoft Windows Remote Code Execution (CVE-2022-44666)
Critical	11 Apr 2023	11 Dec 2023	CPAI-2023-0216	Microsoft CVE-2023-21554	CVE-2023-21554	Microsoft Message Queuing Remote Code Execution (CVE-2023-21554)