Home / 2023 Advisories Archive

2023 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1150	Adobe APSB23-54	CVE-2023-44358	Adobe Acrobat and Reader Out-of-bounds Read (APSB23-54: CVE-2023-44358)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1149	Adobe APSB23-54	CVE-2023-44359	Adobe Acrobat and Reader Use After Free (APSB23-54: CVE-2023-44359)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1148	Adobe APSB23-54	CVE-2023-44366	Adobe Acrobat and Reader Out-of-bounds Write (APSB23-54: CVE-2023-44366)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1145	Adobe APSB23-54	CVE-2023-44336	Adobe Acrobat and Reader Use After Free (APSB23-54: CVE-2023-44336)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1144	Adobe APSB23-54	CVE-2023-44367	Adobe Acrobat and Reader Use After Free (APSB23-54: CVE-2023-44367)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1143	Adobe APSB23-54	CVE-2023-44372	Adobe Acrobat and Reader Use After Free (APSB23-54: CVE-2023-44372)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1142	Adobe APSB23-54	CVE-2023-44365	Adobe Acrobat and Reader Access of Uninitialized Pointer (APSB23-54: CVE-2023-44365)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1141	Adobe APSB23-54	CVE-2023-44338	Adobe Acrobat and Reader Out-of-bounds Read (APSB23-54: CVE-2023-44338)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1140	Adobe APSB23-54	CVE-2023-44356	Adobe Acrobat and Reader Out-of-bounds Read (APSB23-54: CVE-2023-44356)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1134	Microsoft CVE-2023-36413	CVE-2023-36413	Microsoft Office Security Feature Bypass (CVE-2023-36413)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1136	Adobe APSB23-54	CVE-2023-44361	Adobe Acrobat and Reader Use After Free (APSB23-54: CVE-2023-44361)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1135	Adobe APSB23-54	CVE-2023-44340	Adobe Acrobat and Reader Out-of-bounds Read (APSB23-54: CVE-2023-44340)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1015	Microsoft CVE-2023-36394	CVE-2023-36394	Microsoft Windows Search Service Elevation of Privilege (CVE-2023-36394)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1013	Microsoft CVE-2023-36399	CVE-2023-36399	Microsoft Windows Storage Elevation of Privilege (CVE-2023-36399)
High	14 Nov 2023	14 Nov 2023	CPAI-2023-1011	Microsoft CVE-2023-36424	CVE-2023-36424	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2023-36424)
High	13 Nov 2023	13 Nov 2023	CPAI-2017-1718		CVE-2017-18048	Monstra CMS Arbitrary File Upload (CVE-2017-18048)
High	13 Nov 2023	13 Nov 2023	CPAI-2018-2620		CVE-2018-2392 CVE-2018-2393	SAP Internet Graphics Server XML External Entity (CVE-2018-2392; CVE-2018-2393)
High	13 Nov 2023	13 Nov 2023	CPAI-2018-2618		CVE-2018-4162	Apple Multiple Products Memory Corruption (CVE-2018-4162)
High	13 Nov 2023	13 Nov 2023	CPAI-2009-0554		CVE-2009-0927	Adobe Acrobat Reader Buffer Overflow (CVE-2009-0927)
High	12 Nov 2023	12 Nov 2023	CPAI-2017-1719		CVE-2017-7411	Enalean Tuleap Remote Code Execution (CVE-2017-7411)
Critical	12 Nov 2023	12 Nov 2023	CPAI-2019-3121		CVE-2019-11231	GetSimple CMS Remote Code Execution (CVE-2019-11231)
High	12 Nov 2023	12 Nov 2023	CPAI-2020-4073		CVE-2020-13383	OpenSIS Remote Code Execution (CVE-2020-13383)
Critical	12 Nov 2023	12 Nov 2023	CPAI-2020-4071		CVE-2020-13381	OpenSIS SQL Injection (CVE-2020-13381)
Critical	12 Nov 2023	12 Nov 2023	CPAI-2017-1716		CVE-2017-8835	Peplink Balance Routers SQL Injection (CVE-2017-8835)
High	12 Nov 2023	12 Nov 2023	CPAI-2019-3120		CVE-2019-10867	Pimcore Remote Code Execution (CVE-2019-10867)
High	12 Nov 2023	12 Nov 2023	CPAI-2021-2050		CVE-2021-32706	Pi-hole Command Injection (CVE-2021-32706)
Critical	12 Nov 2023	12 Nov 2023	CPAI-2017-1715		CVE-2017-9080 CVE-2017-9101	PlaySMS Remote Code Execution (CVE-2017-9080; CVE-2017-9101)
Medium	12 Nov 2023	12 Nov 2023	CPAI-2023-1119			Zoho ManageEngine Applications Manager getAssociateMonitors SQL Injection
High	12 Nov 2023	12 Nov 2023	CPAI-2020-4070		CVE-2020-7351	NetFortris Trixbox Command Injection (CVE-2020-7351)
Critical	12 Nov 2023	12 Nov 2023	CPAI-2020-4069		CVE-2020-10915	Veeam ONE Remote Code Execution (CVE-2020-10915)
Medium	12 Nov 2023	12 Nov 2023	CPAI-2023-1114		CVE-2023-4137	WordPress AYS Popup Box Plugin Cross-Site Scripting (CVE-2023-4137)
Medium	12 Nov 2023	12 Nov 2023	CPAI-2023-1113		CVE-2023-40176	XWiki Cross-Site Scripting (CVE-2023-40176)
High	12 Nov 2023	12 Nov 2023	CPAI-2023-1085			Microsoft Windows wab32res.dll Insecure Library Loading
High	12 Nov 2023	12 Nov 2023	CPAI-2023-0874		CVE-2023-3486	PaperCut MF/NG Directory Traversal (CVE-2023-3486)
High	12 Nov 2023	12 Nov 2023	CPAI-2018-2446		CVE-2018-2992	Oracle Outside In Technology Out-Of-Bounds Read (CVE-2018-2992)
Critical	8 Nov 2023	8 Nov 2023	CPAI-2023-1022		CVE-2023-4548	SPA-Cart eCommerce CMS SQL Injection (CVE-2023-4548)
High	8 Nov 2023	8 Nov 2023	CPAI-2023-0975		CVE-2023-38836	BoidCMS Arbitrary File Upload (CVE-2023-38836)
Critical	7 Nov 2023	7 Nov 2023	CPAI-2023-1093		CVE-2023-28502	Rocket Software Buffer Overflow (CVE-2023-28502)
Medium	7 Nov 2023	7 Nov 2023	CPAI-2018-2617		CVE-2018-1189	Dell EMC Isilon Cross-Site Scripting (CVE-2018-1189)
Critical	7 Nov 2023	7 Nov 2023	CPAI-2019-3118		CVE-2019-7214	SmarterTools SmarterMail Remote Code Execution (CVE-2019-7214)
Medium	7 Nov 2023	7 Nov 2023	CPAI-2023-1061		CVE-2023-4547	SPA-Cart eCommerce CMS Cross-Site Scripting (CVE-2023-4547)
Medium	7 Nov 2023	7 Nov 2023	CPAI-2023-1029			FreePBX Framework remotemod Remote Command Execution
Critical	7 Nov 2023	7 Nov 2023	CPAI-2023-1021		CVE-2023-28503	Rocket Software Authentication Bypass (CVE-2023-28503)
Critical	7 Nov 2023	7 Nov 2023	CPAI-2019-3116		CVE-2019-9194	Studio42 elFinder Remote Code Execution (CVE-2019-9194)
High	7 Nov 2023	7 Nov 2023	CPAI-2023-1018			MailEnable IMAP Service APPEND Command Handling Buffer Overflow
Critical	7 Nov 2023	7 Nov 2023	CPAI-2023-1016		CVE-2023-27372	SPIP Remote Code Execution (CVE-2023-27372)
High	7 Nov 2023	7 Nov 2023	CPAI-2023-0998			Cisco Nexus Dashboard Fabric Controller AMF External Entity Injection
Critical	7 Nov 2023	7 Nov 2023	CPAI-2020-4066		CVE-2020-5723 CVE-2020-5724 CVE-2020-5725	Grandstream UCM6200 SQL Injection (CVE-2020-5723; CVE-2020-5724; CVE-2020-5725)
High	16 Oct 2023	7 Nov 2023	CPAI-2015-1538		CVE-2015-4068	Arcserve Unified Data Protection Directory Traversal (CVE-2015-4068)
High	16 Feb 2023	7 Nov 2023	CPAI-2022-1217		CVE-2021-45839 CVE-2021-45841 CVE-2021-45842 CVE-2022-24990	TerraMaster TOS Information Disclosure (CVE-2021-45839; CVE-2021-45841; CVE-2021-45842; CVE-2022-24990)