Home / 2024 Advisories Archive

2024 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
Medium	6 Oct 2024	6 Oct 2024	CPAI-2020-4201	CVE-2020-11547	Paessler PRTG Network Monitor Information Disclosure (CVE-2020-11547)
Critical	6 Oct 2024	6 Oct 2024	CPAI-2024-0894	CVE-2024-24809 CVE-2024-31214	Traccar Arbitrary File Upload (CVE-2024-24809; CVE-2024-31214)
High	6 Oct 2024	6 Oct 2024	CPAI-2021-2214	CVE-2021-33004	Advantech WebAccess HMI Designer Memory Corruption (CVE-2021-33004)
High	6 Oct 2024	6 Oct 2024	CPAI-2024-0893		Kia Privilege Escalation
High	6 Oct 2024	6 Oct 2024	CPAI-2024-0883	CVE-2024-8752	Smart-Hmi WebIQ Directory Traversal (CVE-2024-8752)
Medium	6 Oct 2024	6 Oct 2024	CPAI-2024-0881	CVE-2024-5040	LAquis SCADA Arbitrary File Write (CVE-2024-5040)
Critical	6 Oct 2024	6 Oct 2024	CPAI-2024-0862	CVE-2024-42813	TRENDnet TEW-752DRU Buffer Overflow (CVE-2024-42813)
Critical	6 Oct 2024	6 Oct 2024	CPAI-2024-0860	CVE-2024-7333 CVE-2024-7462	TOTOLINK N350RT Buffer Overflow (CVE-2024-7333; CVE-2024-7462)
Critical	27 Aug 2024	6 Oct 2024	CPAI-2024-0725	CVE-2024-5932 CVE-2024-8353	WordPress GiveWP Plugin PHP Object Injection (CVE-2024-5932; CVE-2024-8353)
Critical	17 Jun 2024	6 Oct 2024	CPAI-2024-0406	CVE-2024-29824	Ivanti Endpoint Manager SQL Injection (CVE-2024-29824)
Critical	26 Mar 2024	6 Oct 2024	CPAI-2024-0095		Python Functions Remote Code Execution
High	1 Oct 2024	1 Oct 2024	CPAI-2021-2213	CVE-2021-41987	MikroTik RouterOS Buffer Overflow (CVE-2021-41987)
High	1 Oct 2024	1 Oct 2024	CPAI-2024-0854		Dockwatch Command Injection
High	1 Oct 2024	1 Oct 2024	CPAI-2024-0850	CVE-2024-6646	Netgear WN604 Information Disclosure (CVE-2024-6646)
Medium	1 Oct 2024	1 Oct 2024	CPAI-2023-1905	CVE-2023-23074	Zoho ManageEngine ServiceDesk Plus Cross-Site Scripting (CVE-2023-23074)
High	1 Oct 2024	1 Oct 2024	CPAI-2024-0861	CVE-2024-37399	Ivanti Avalanche Denial of Service (CVE-2024-37399)
High	17 Sep 2024	1 Oct 2024	CPAI-2024-0817		Yonyou U8 SQL Injection
Critical	1 Oct 2024	1 Oct 2024	CPAI-2016-1255	CVE-2016-0857	Advantech WebAccess Buffer Overflow (CVE-2016-0857)
High	30 Sep 2024	30 Sep 2024	CPAI-2023-1902	CVE-2023-6112	Google Chrome Use After Free (CVE-2023-6112)
Critical	26 Sep 2024	30 Sep 2024	CPAI-2024-0852	CVE-2024-20439	Cisco Smart Licensing Utility Use of Hard-coded Credentials (CVE-2024-20439)
High	29 Sep 2024	29 Sep 2024	CPAI-2024-0859	CVE-2024-7965	Google Chrome V8 Heap Corruption (CVE-2024-7965)
Critical	29 Sep 2024	29 Sep 2024	CPAI-2024-0841	CVE-2024-46986	Camaleon CMS Directory Traversal (CVE-2024-46986)
High	29 Sep 2024	29 Sep 2024	CPAI-2024-0809		Offensity Security Scanner
Medium	29 Sep 2024	29 Sep 2024	CPAI-2021-2179	CVE-2021-2389 CVE-2021-2390	Oracle MySQL Server Integer Underflow (CVE-2021-2389; CVE-2021-2390)
Critical	21 Apr 2024	29 Sep 2024	CPAI-2023-1660	CVE-2020-36666 CVE-2023-3460 CVE-2024-8253	WordPress Privilege Escalation (CVE-2020-36666; CVE-2023-3460; CVE-2024-8253)
Medium	29 Sep 2024	29 Sep 2024	CPAI-2021-1779	CVE-2021-35592 CVE-2021-35594 CVE-2021-35598	Oracle MySQL Cluster Remote Code Execution (CVE-2021-35592; CVE-2021-35594; CVE-2021-35598)
High	19 Sep 2024	29 Sep 2024	CPAI-2022-1600	CVE-2022-21489	Oracle MySQL Buffer Overflow (CVE-2022-21489)
High	19 Sep 2024	29 Sep 2024	CPAI-2022-1583	CVE-2022-21550	Oracle MySQL Cluster Integer Underflow (CVE-2022-21550)
Critical	26 Sep 2024	26 Sep 2024	CPAI-2024-0858	CVE-2024-9004	D-Link DAR-7000 Command Injection (CVE-2024-9004)
Medium	26 Sep 2024	26 Sep 2024	CPAI-2024-0857	CVE-2024-4901	GitLab Cross-Site Scripting (CVE-2024-4901)
Critical	26 Sep 2024	26 Sep 2024	CPAI-2020-4199	CVE-2020-10619	Advantech WebAccess/NMS Directory Traversal (CVE-2020-10619)
High	26 Sep 2024	26 Sep 2024	CPAI-2022-2132	CVE-2022-25369	DynamicWeb Authentication Bypass (CVE-2022-25369)
Critical	26 Sep 2024	26 Sep 2024	CPAI-2021-2212	CVE-2021-46419	TELESQUARE TLR-2855KS6 Authentication Bypass (CVE-2021-46419)
High	26 Sep 2024	26 Sep 2024	CPAI-2021-2211	CVE-2021-3297	Zyxel NBG2105 Authentication Bypass (CVE-2021-3297)
High	26 Sep 2024	26 Sep 2024	CPAI-2023-1901	CVE-2023-47211	Zoho Corp ManageEngine Directory Traversal (CVE-2023-47211)
High	26 Sep 2024	26 Sep 2024	CPAI-2016-1388	CVE-2016-4533	WECON LeviStudioU Buffer Overflow (CVE-2016-4533)
High	26 Sep 2024	26 Sep 2024	CPAI-2023-1900	CVE-2023-0669	Fortra Goanywhere Managed File Transfer Command Injection (CVE-2023-0669)
Medium	26 Sep 2024	26 Sep 2024	CPAI-2024-0833	CVE-2024-7264	Haxx Libcurl Buffer Overflow (CVE-2024-7264)
Critical	6 Aug 2024	26 Sep 2024	CPAI-2024-0661	CVE-2024-7593	Ivanti Virtual Traffic Manager Authentication Bypass (CVE-2024-7593)
Critical	26 Sep 2024	26 Sep 2024	CPAI-2020-4180	CVE-2020-11998	Apache ActiveMQ Remote Code Execution (CVE-2020-11998)
High	26 Sep 2024	26 Sep 2024	CPAI-2015-1609	CVE-2015-1923	IBM Tivoli Storage Manager FastBack Command Injection (CVE-2015-1923)
Critical	4 Sep 2024	26 Sep 2024	CPAI-2022-1608	CVE-2022-32523 CVE-2022-32524 CVE-2022-32525	Schneider Electric Interactive Graphical SCADA System Buffer Overflow (CVE-2022-32525; CVE-2022-32523; CVE-2022-32524)
Critical	24 Sep 2024	24 Sep 2024	CPAI-2024-0827	CVE-2024-8503	VICIdial SQL Injection (CVE-2024-8503)
Critical	24 Sep 2024	24 Sep 2024	CPAI-2023-1899	CVE-2023-49785	NextChat Server Side Request Forgery (CVE-2023-49785)
Critical	24 Sep 2024	24 Sep 2024	CPAI-2024-0786	CVE-2024-44400	D-Link DI-8400 Command Injection (CVE-2024-44400)
High	24 Sep 2024	24 Sep 2024	CPAI-2023-0784	CVE-2023-39473	Inductive Automation Ignition Insecure Deserialization (CVE-2023-39473)
High	23 Sep 2024	23 Sep 2024	CPAI-2024-0837	CVE-2024-5009	Progress WhatsUp Gold Improper Access Control (CVE-2024-5009)
Medium	23 Sep 2024	23 Sep 2024	CPAI-2024-0834	CVE-2024-5725	Centreon Project Centreon Web SQL Injection (CVE-2024-5725)
High	23 Sep 2024	23 Sep 2024	CPAI-2024-0829	CVE-2024-45388	Hoverfly Directory Traversal (CVE-2024-45388)
Critical	23 Sep 2024	23 Sep 2024	CPAI-2017-1935	CVE-2017-14463 CVE-2017-14464 CVE-2017-14465 CVE-2017-14466 CVE-2017-14467 CVE-2017-14468 CVE-2017-14469 CVE-2017-14470 CVE-2017-14471 CVE-2017-14472 CVE-2017-14473	Rockwell Automation MicroLogix 1400 B Information Disclosure (CVE-2017-14463; CVE-2017-14464; CVE-2017-14465; CVE-2017-14466; CVE-2017-14467; CVE-2017-14468; CVE-2017-14469; CVE-2017-14470; CVE-2017-14471; CVE-2017-14472; CVE-2017-14473)