Home / 2023 Advisories Archive

2023 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	6 Nov 2023	6 Nov 2023	CPAI-2023-1117	CVE-2023-36745	Microsoft Exchange Server Remote Code Execution (CVE-2023-36745)
High	5 Nov 2023	5 Nov 2023	CPAI-2023-1010	CVE-2023-27363	Foxit PDF Remote Code Execution (CVE-2023-27363)
High	5 Nov 2023	5 Nov 2023	CPAI-2023-1007		Advantech WebAccess SCADA IOCTL 10001 BwPSLink.exe Arbitrary File Deletion
High	5 Nov 2023	5 Nov 2023	CPAI-2023-1004		Nagios Log Server Mail Settings Stored Cross-Site Scripting
Medium	5 Nov 2023	5 Nov 2023	CPAI-2023-1001		OpenEMR Usergroup_admin.php Stored Cross-Site Scripting
Medium	5 Nov 2023	5 Nov 2023	CPAI-2023-1000		Zoho ManageEngine Applications Manager showMonitorGroupView SQL Injection
High	5 Nov 2023	5 Nov 2023	CPAI-2023-0997		Centreon graph-split.php chartId SQL Injection
High	5 Nov 2023	5 Nov 2023	CPAI-2023-0996	CVE-2023-40502	LG Simple Editor cropImage Directory Traversal (CVE-2023-40502)
High	5 Nov 2023	5 Nov 2023	CPAI-2023-0995	CVE-2023-43661	All-Three Cachet Remote Code Execution (CVE-2023-43661)
Medium	5 Nov 2023	5 Nov 2023	CPAI-2017-1714	CVE-2017-6973 CVE-2017-7241 CVE-2017-7309	MantisBT Cross-Site Scripting (CVE-2017-7309; CVE-2017-6973; CVE-2017-7241)
High	5 Nov 2023	5 Nov 2023	CPAI-2023-0978		vBulletin routestring Local File Inclusion
Medium	5 Nov 2023	5 Nov 2023	CPAI-2021-2044	CVE-2021-24891	WordPress Elementor Website Builder Plugin Cross-Site Scripting (CVE-2021-24891)
High	5 Nov 2023	5 Nov 2023	CPAI-2022-1936	CVE-2022-34876 CVE-2022-34877 CVE-2022-34878	VICIdial SQL Injection (CVE-2022-34876; CVE-2022-34877; CVE-2022-34878)
High	5 Nov 2023	5 Nov 2023	CPAI-2021-2042	CVE-2021-35401	Prolink PRC2402M Command Injection (CVE-2021-35401)
Medium	5 Nov 2023	5 Nov 2023	CPAI-2020-3988	CVE-2020-10821	Nagios XI Cross-Site Scripting (CVE-2020-10821)
High	2 Nov 2023	2 Nov 2023	CPAI-2023-0970	CVE-2023-43261	Milesight Multiple Products Information Disclosure (CVE-2023-43261)
High	2 Nov 2023	2 Nov 2023	CPAI-2023-0968	CVE-2023-32153	D-Link DIR-2640 HNAP EmailFrom Command Injection (CVE-2023-32153)
High	2 Nov 2023	2 Nov 2023	CPAI-2023-0964		Nagios XI utils-rrdexport.inc.php get_rrd_data Command Injection
High	2 Nov 2023	2 Nov 2023	CPAI-2023-0963		Cisco UCS Director AMF External Entity Injection
High	2 Nov 2023	2 Nov 2023	CPAI-2023-0962		Centreon hostGroupDependency.php dep_id SQL Injection
High	2 Nov 2023	2 Nov 2023	CPAI-2023-0961		Delta Industrial Automation DIAEnergie AM_Handler tp SQL Injection
Critical	2 Nov 2023	2 Nov 2023	CPAI-2022-1572	CVE-2022-26245	Open-Falcon Falcon-Plus SQL Injection (CVE-2022-26245)
High	2 Nov 2023	2 Nov 2023	CPAI-2023-0974	CVE-2023-46370	Tenda W18E Command Injection (CVE-2023-46370)
High	1 Nov 2023	1 Nov 2023	CPAI-2018-2615	CVE-2018-18982	NUUO CMS SQL Injection (CVE-2018-18982)
Critical	1 Nov 2023	1 Nov 2023	CPAI-2018-2614	CVE-2018-17934 CVE-2018-17936	NUUO CMS Information Disclosure (CVE-2018-17934; CVE-2018-17936)
Critical	30 Oct 2023	30 Oct 2023	CPAI-2021-2040	CVE-2020-28653 CVE-2021-3287	Zoho Corp ManageEngine OpManager Remote Code Execution (CVE-2020-28653; CVE-2021-3287)
High	30 Oct 2023	30 Oct 2023	CPAI-2023-0905		WordPress Forminator Plugin Remote Code Execution
Critical	23 Aug 2023	30 Oct 2023	CPAI-2023-0697	CVE-2023-2868	Barracuda Email Security Gateway Command Injection (CVE-2023-2868)
Critical	29 Oct 2023	29 Oct 2023	CPAI-2020-4065	CVE-2020-11698	TitanHQ SpamTitan Remote Code Execution (CVE-2020-11698)
High	29 Oct 2023	29 Oct 2023	CPAI-2017-1706	CVE-2017-16806	Ulterius Server Directory Traversal (CVE-2017-16806)
High	29 Oct 2023	29 Oct 2023	CPAI-2021-2039	CVE-2021-24917	WordPress WPS Hide Login Plugin Authentication Bypass (CVE-2021-24917)
High	29 Oct 2023	29 Oct 2023	CPAI-2023-0944	CVE-2023-39362	Cacti Command Injection (CVE-2023-39362)
Critical	29 Oct 2023	29 Oct 2023	CPAI-2017-1705	CVE-2017-2741	HP Printers Path Traversal (CVE-2017-2741)
Critical	29 Oct 2023	29 Oct 2023	CPAI-2023-0915	CVE-2023-40497	LG Simple Editor saveXml Directory Traversal (CVE-2023-40497)
High	29 Oct 2023	29 Oct 2023	CPAI-2023-0813	CVE-2023-40496	LG Simple Editor copyStickerContent Directory Traversal (CVE-2023-40496)
Critical	25 Oct 2023	25 Oct 2023	CPAI-2022-1933	CVE-2022-39379	Fluentd Oj Parser Command Injection (CVE-2022-39379)
Critical	25 Oct 2023	25 Oct 2023	CPAI-2020-4060	CVE-2020-36239	Atlassian Jira Insecure Deserialization (CVE-2020-36239)
Critical	25 Oct 2023	25 Oct 2023	CPAI-2020-4059	CVE-2020-13957	Apache Solr Remote Code Execution (CVE-2020-13957)
High	25 Oct 2023	25 Oct 2023	CPAI-2020-4058	CVE-2020-27386	FlexDotnetCMS Unrestricted File Upload (CVE-2020-27386)
High	24 Oct 2023	24 Oct 2023	CPAI-2023-0943	CVE-2023-34051	VMware vRealize Log Insight Authentication Bypass (CVE-2023-34051)
High	24 Oct 2023	24 Oct 2023	CPAI-2016-1245	CVE-2016-6367	Cisco Adaptive Security Appliance Privilege Escalation (CVE-2016-6367)
Medium	24 Oct 2023	24 Oct 2023	CPAI-2023-0919		Nagios XI CCM admin_views.inc.php Arbitrary File Overwrite
Critical	24 Oct 2023	24 Oct 2023	CPAI-2017-1700	CVE-2017-18044	Commvault Remote Code Execution (CVE-2017-18044)
Critical	24 Oct 2023	24 Oct 2023	CPAI-2023-0904	CVE-2023-29689	PyroCMS Server-Side Template Injection (CVE-2023-29689)
High	24 Oct 2023	24 Oct 2023	CPAI-2023-0901	CVE-2023-28709	Apache Tomcat Denial of Service (CVE-2023-28709)
High	24 Oct 2023	24 Oct 2023	CPAI-2023-0900	CVE-2023-37569	ESDS Emagic Data Center Management Suite Command Injection (CVE-2023-37569)
High	23 Oct 2023	23 Oct 2023	CPAI-2017-1702	CVE-2017-5254	Cambium Networks ePMP Authentication Bypass (CVE-2017-5254)
High	23 Oct 2023	23 Oct 2023	CPAI-2017-1701	CVE-2017-5259	Cambium Networks cnPilot Command Injection (CVE-2017-5259)
Critical	23 Oct 2023	23 Oct 2023	CPAI-2023-0778		Metasploit Linux Reverse Shell Payloads
Critical	22 Oct 2023	22 Oct 2023	CPAI-2023-0928	CVE-2023-3710 CVE-2023-3712	Honeywell PM43 Printer Command Injection (CVE-2023-3710; CVE-2023-3712)