Home / 2023 Advisories Archive

2023 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	21 Nov 2023	9 Jun 2024	CPAI-2018-2629		CVE-2018-8831	Kodi Cross-Site Scripting (CVE-2018-8831)
High	7 May 2023	9 Jun 2024	CPAI-2023-0295		CVE-2023-27253	Netgate pfSense Command Injection (CVE-2023-27253)
Critical	12 Mar 2023	9 Jun 2024	CPAI-2019-2839		CVE-2019-16119	WordPress 10Web Photo Gallery Plugin SQL Injection (CVE-2019-16119)
High	11 Dec 2023	6 Jun 2024	CPAI-2023-1367		CVE-2023-24955	Microsoft SharePoint Remote Code Execution (CVE-2023-24955)
Critical	5 Nov 2023	5 Jun 2024	CPAI-2023-1080		CVE-2023-46604	Apache ActiveMQ Remote Code Execution (CVE-2023-46604)
High	18 Apr 2023	5 Jun 2024	CPAI-2023-0168		CVE-2023-28432 CVE-2023-28434	MinIO Information Disclosure (CVE-2023-28432; CVE-2023-28434)
Critical	5 Feb 2023	5 Jun 2024	CPAI-2022-1155		CVE-2022-21587	Oracle E-Business Suite Arbitrary File Upload (CVE-2022-21587)
Critical	23 Feb 2023	4 Jun 2024	CPAI-2022-1233		CVE-2022-24697	Apache Kylin Command Injection (CVE-2022-24697)
Critical	29 Jan 2023	4 Jun 2024	CPAI-2022-1142		CVE-2021-39352 CVE-2022-3416 CVE-2022-3912 CVE-2022-3982 CVE-2022-3989 CVE-2022-4047 CVE-2022-4061 CVE-2023-2068 CVE-2023-3342 CVE-2023-4596 CVE-2023-48777 CVE-2023-5601 CVE-2024-5084	WordPress Multiple Plugins Arbitrary File Upload (CVE-2021-39352; CVE-2022-3416; CVE-2022-3912; CVE-2022-3982; CVE-2022-3989; CVE-2022-4047; CVE-2022-4061; CVE-2023-2068; CVE-2023-3342; CVE-2023-4596; CVE-2023-48777; CVE-2023-5601; CVE-2024-5084)
Critical	7 May 2023	3 Jun 2024	CPAI-2022-1498		CVE-2022-26013	Delta DIAEnergie SQL Injection (CVE-2022-26013)
Medium	4 May 2023	3 Jun 2024	CPAI-2022-1463		CVE-2022-27166	Apache JSPWiki Cross-Site Scripting (CVE-2022-27166)
Critical	13 Dec 2023	2 Jun 2024	CPAI-2023-1393		CVE-2023-50164	Apache Struts Directory Traversal (CVE-2023-50164)
Critical	16 Oct 2023	2 Jun 2024	CPAI-2023-0917		CVE-2023-22515	Atlassian Confluence Authentication Bypass (CVE-2023-22515)
High	6 Feb 2023	2 Jun 2024	CPAI-2023-0063		CVE-2023-22374	F5 BIG-IP Remote Code Execution (CVE-2023-22374)
Medium	7 May 2023	31 May 2024	CPAI-2022-1497		CVE-2022-30690	WWBN AVideo Cross-Site Scripting (CVE-2022-30690)
Medium	4 May 2023	30 May 2024	CPAI-2022-1466		CVE-2022-3387	Advantech R-SeeNet Directory Traversal (CVE-2022-3387)
High	30 Apr 2023	30 May 2024	CPAI-2022-1451		CVE-2022-30534	WWBN aVideo Command Injection (CVE-2022-30534)
Critical	13 Feb 2023	30 May 2024	CPAI-2022-1179		CVE-2022-31814 CVE-2022-40624	pfSense pfBlockerNG Command Injection (CVE-2022-31814; CVE-2022-40624)
Critical	19 Feb 2023	29 May 2024	CPAI-2022-1221		CVE-2022-46476 CVE-2023-26822	D-Link DIR-859 Command Injection (CVE-2022-46476; CVE-2023-26822)
Medium	26 Jun 2023	29 May 2024	CPAI-2022-1668		CVE-2022-34258	Adobe Commerce Cross-Site Scripting (CVE-2022-34258)
High	26 Jun 2023	29 May 2024	CPAI-2022-1665		CVE-2022-34253	Adobe Commerce Remote Code Execution (CVE-2022-34253)
Critical	8 May 2023	29 May 2024	CPAI-2022-1510		CVE-2022-36096	XWiki Remote Code Execution (CVE-2022-36096)
Critical	8 May 2023	29 May 2024	CPAI-2022-1507		CVE-2022-35628	In2code Living User Experience SQL Injection (CVE-2022-35628)
Critical	7 May 2023	29 May 2024	CPAI-2022-1494		CVE-2022-36094	XWiki Remote Code Execution (CVE-2022-36094)
Critical	26 Jun 2023	28 May 2024	CPAI-2022-1667		CVE-2022-38129	Keysight Sensor Management Server Directory Traversal (CVE-2022-38129)
High	26 Jun 2023	28 May 2024	CPAI-2022-2072		CVE-2022-36100	XWiki Remote Code Execution (CVE-2022-36100)
Medium	14 May 2023	28 May 2024	CPAI-2022-1527		CVE-2022-36801	Atlassian Jira Cross-Site Scripting (CVE-2022-36801)
Medium	8 May 2023	28 May 2024	CPAI-2022-1506		CVE-2022-36097	XWiki Remote Code Execution (CVE-2022-36097)
Critical	11 Dec 2023	28 May 2024	CPAI-2023-1355		CVE-2023-5399	Schneider Electric Spacelogic C-bus Toolkit Directory Traversal (CVE-2023-5399)
Critical	7 May 2023	28 May 2024	CPAI-2022-1484		CVE-2022-38130	Keysight Sensor Management Server Remote Code Execution (CVE-2022-38130)
Medium	4 May 2023	28 May 2024	CPAI-2022-1462		CVE-2022-39810	WSO2 Enterprise Integrator Cross-Site Scripting (CVE-2022-39810)
High	14 Nov 2023	27 May 2024	CPAI-2023-1132	Microsoft CVE-2023-36036	CVE-2023-36036	Microsoft Windows Cloud Files Mini Filter Driver Elevation of Privilege (CVE-2023-36036)
High	14 Nov 2023	27 May 2024	CPAI-2023-1012	Microsoft CVE-2023-36033	CVE-2023-36033	Microsoft Windows DWM Core Library Elevation of Privilege (CVE-2023-36033)
High	12 Sep 2023	27 May 2024	CPAI-2023-0787	Adobe APSB23-34	CVE-2023-26369	Adobe Acrobat and Reader Out-of-bounds Write (APSB23-34: CVE-2023-26369)
High	12 Sep 2023	27 May 2024	CPAI-2023-0755	Microsoft CVE-2023-36802	CVE-2023-36802	Microsoft Streaming Service Proxy Elevation of Privilege (CVE-2023-36802)
High	11 Jul 2023	27 May 2024	CPAI-2023-0529	Adobe APSB23-40	CVE-2023-29298	Adobe ColdFusion Improper Access Control (CVE-2023-29298)
High	7 May 2023	27 May 2024	CPAI-2022-1501		CVE-2022-40967	Delta DIAEnergie SQL Injection (CVE-2022-40967)
Medium	7 May 2023	27 May 2024	CPAI-2022-1487		CVE-2022-40965	Delta DIAEnergie Cross-Site Scripting (CVE-2022-40965)
Medium	14 May 2023	27 May 2024	CPAI-2023-0255		CVE-2023-28341	Zoho Corp ManageEngine Applications Cross-Site Scripting (CVE-2023-28341)
High	28 Mar 2023	27 May 2024	CPAI-2022-1387		CVE-2022-4223	PostgreSQL pgAdmin Command Injection (CVE-2022-4223)
Critical	17 Oct 2023	21 May 2024	CPAI-2023-0799		CVE-2005-2869 CVE-2006-4747 CVE-2010-4841 CVE-2016-6285 CVE-2020-20285 CVE-2020-25786 CVE-2020-26574 CVE-2020-35592 CVE-2020-9016 CVE-2021-37216 CVE-2022-35416 CVE-2023-1861 CVE-2023-41642 CVE-2024-1852	Cross-Site Scripting Over HTTP Headers (CVE-2005-2869; CVE-2006-4747; CVE-2010-4841; CVE-2016-6285; CVE-2020-20285; CVE-2020-25786; CVE-2020-26574; CVE-2020-35592; CVE-2020-9016; CVE-2021-37216; CVE-2022-35416; CVE-2023-1861; CVE-2023-41642; CVE-2024-1852)
Critical	19 Jun 2023	20 May 2024	CPAI-2023-0355		CVE-2023-26801	LB-LINK Multiple Products Command Injection (CVE-2023-26801)
High	9 May 2023	15 May 2024	CPAI-2023-0303	Microsoft CVE-2023-24950	CVE-2023-24950	Microsoft SharePoint Server Spoofing Vulnerability (CVE-2023-24950)
Medium	7 May 2023	15 May 2024	CPAI-2022-1496		CVE-2022-45783	DotCMS Directory Traversal (CVE-2022-45783)
High	4 May 2023	15 May 2024	CPAI-2022-1467		CVE-2022-42425	Centreon Web Poller Broker enableCentreonBrokerInDB SQL Injection (CVE-2022-42425)
Critical	9 Feb 2023	15 May 2024	CPAI-2022-1178		CVE-2022-46560 CVE-2022-46561 CVE-2022-46562 CVE-2022-46563 CVE-2022-46566 CVE-2022-46568 CVE-2022-46569 CVE-2022-46570 CVE-2024-22751	D-Link DIR-882 Stack Overflow (CVE-2022-46560; CVE-2022-46561; CVE-2022-46562; CVE-2022-46563; CVE-2022-46566; CVE-2022-46568; CVE-2022-46569; CVE-2022-46570; CVE-2024-22751)
High	2 Feb 2023	15 May 2024	CPAI-2023-0051		CVE-2023-0315	Froxlor Remote Code Execution (CVE-2023-0315)
High	22 Jan 2023	15 May 2024	CPAI-2022-1141		CVE-2022-47966	Zoho ManageEngine Remote Code Execution (CVE-2022-47966)
Critical	18 Jan 2023	15 May 2024	CPAI-2022-1128		CVE-2022-46169	Cacti Command Injection (CVE-2022-46169)
Critical	19 Feb 2023	15 May 2024	CPAI-2022-1222		CVE-2022-46475 CVE-2024-22852 CVE-2024-22916	D-Link Routers Stack Overflow (CVE-2022-46475; CVE-2024-22852; CVE-2024-22916)