Home / 2025 Advisories Archive

2025 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	29 May 2025	29 May 2025	CPAI-2014-2660	CVE-2014-2994	Acunetix Web Vulnerability Scanner Buffer Overflow (CVE-2014-2994)
Medium	29 May 2025	29 May 2025	CPAI-2025-0340	CVE-2025-45867	TOTOLINK A3002R Buffer Overflow (CVE-2025-45867)
Low	29 May 2025	29 May 2025	CPAI-2025-0335	CVE-2025-3994	TOTOLINK N150RT Firmware Cross-Site Scripting (CVE-2025-3994)
Low	29 May 2025	29 May 2025	CPAI-2025-0326	CVE-2025-46618	JetBrains TeamCity Cross-Site Scripting (CVE-2025-46618)
High	29 May 2025	29 May 2025	CPAI-2025-0346	CVE-2025-26086	RSI Queue Management System SQL Injection (CVE-2025-26086)
Medium	29 May 2025	29 May 2025	CPAI-2025-0339	CVE-2025-4185	Wangshen SecGate 3600 Directory Traversal (CVE-2025-4185)
Medium	29 May 2025	29 May 2025	CPAI-2025-0347	CVE-2025-0133	Palo Alto Networks PAN-OS Cross-Site Scripting (CVE-2025-0133)
Medium	29 May 2025	29 May 2025	CPAI-2025-0329	CVE-2025-4544	Dlink DI-8100 Firmware Buffer Overflow (CVE-2025-4544)
High	29 May 2025	29 May 2025	CPAI-2025-0342	CVE-2025-3693	Tenda W12 Buffer Overflow (CVE-2025-3693)
Medium	29 May 2025	29 May 2025	CPAI-2025-0350	CVE-2025-45859	TOTOLINK A3002R Buffer Overflow (CVE-2025-45859)
Critical	29 May 2025	29 May 2025	CPAI-2025-0341	CVE-2025-45779	Tenda AC10 Buffer Overflow (CVE-2025-45779)
Medium	29 May 2025	29 May 2025	CPAI-2025-0343	CVE-2025-29513	NodeBB Cross-Site Scripting (CVE-2025-29513)
Critical	29 May 2025	29 May 2025	CPAI-2025-0328	CVE-2025-45858	Totolink A3002r Firmware Command Injection (CVE-2025-45858)
Critical	8 May 2025	29 May 2025	CPAI-2024-1640	CVE-2024-11120 CVE-2024-6047	GeoVision Devices Command Injection (CVE-2024-11120; CVE-2024-6047)
Critical	8 May 2025	29 May 2025	CPAI-2025-0269	CVE-2025-2775 CVE-2025-2776 CVE-2025-2777	SysAid On-Premise XML External Entity Injection (CVE-2025-2775; CVE-2025-2776; CVE-2025-2777)
High	23 Jan 2025	29 May 2025	CPAI-2025-0009	CVE-2025-0107	Palo Alto Networks Expedition Command Injection (CVE-2025-0107)
High	29 May 2025	29 May 2025	CPAI-2024-1670	CVE-2024-6235	Citrix NetScaler Console Information Disclosure (CVE-2024-6235)
Medium	29 May 2025	29 May 2025	CPAI-2025-0344	CVE-2025-45864	TOTOLINK A3002R Buffer Overflow (CVE-2025-45864)
High	29 May 2025	29 May 2025	CPAI-2025-0256	CVE-2025-2284	Sante PACS Server Denial of Service (CVE-2025-2284)
Medium	29 May 2025	29 May 2025	CPAI-2023-2059	CVE-2023-52163	Digiever DS-2105 Pro Command Injection (CVE-2023-52163)
High	29 May 2025	29 May 2025	CPAI-2025-0345	CVE-2025-2725	H3C Multiple Products Command Injection (CVE-2025-2725)
High	28 May 2025	28 May 2025	CPAI-2014-2699	CVE-2014-0221	OpenSSL Denial of Service (CVE-2014-0221)
High	18 May 2025	27 May 2025	CPAI-2025-0304	CVE-2025-4427 CVE-2025-4428	Ivanti EPMM Remote Code Execution (CVE-2025-4427; CVE-2025-4428)
Critical	7 May 2025	27 May 2025	CPAI-2024-1638	CVE-2024-7399 CVE-2025-4632	Samsung MagicINFO Remote Code Execution (CVE-2024-7399; CVE-2025-4632)
Critical	26 May 2025	26 May 2025	CPAI-2024-1668	CVE-2024-27781	Fortinet FortiSandbox Stored Cross-Site Scripting (CVE-2024-27781)
High	26 May 2025	26 May 2025	CPAI-2024-1664	CVE-2024-8945	RISE Ultimate Project Manager SQL Injection (CVE-2024-8945)
High	22 May 2025	26 May 2025	CPAI-2025-0306	CVE-2025-29306	FoxCMS Remote Code Execution (CVE-2025-29306)
High	26 May 2025	26 May 2025	CPAI-2015-1695	CVE-2015-0969	SearchBlox Information Disclosure (CVE-2015-0969)
Critical	20 Feb 2025	26 May 2025	CPAI-2024-1410	CVE-2024-10811 CVE-2024-13159 CVE-2024-13160 CVE-2024-13161	Ivanti Endpoint Manager Path Traversal (CVE-2024-10811; CVE-2024-13159; CVE-2024-13160; CVE-2024-13161)
Critical	26 May 2025	26 May 2025	CPAI-2025-0320	CVE-2025-4322	WordPress Motors Theme Privilege Escalation (CVE-2025-4322)
Critical	25 May 2025	25 May 2025	CPAI-2025-0322	CVE-2025-34026 CVE-2025-34027	Versa Concerto Authentication Bypass (CVE-2025-34026; CVE-2025-34027)
Critical	25 May 2025	25 May 2025	CPAI-2020-4312	CVE-2020-28429	Python geojson2kml Package Command Injection (CVE-2020-28429)
High	25 May 2025	25 May 2025	CPAI-2014-2689	CVE-2014-1773	Microsoft Internet Explorer Memory Corruption (CVE-2014-1773)
Critical	25 May 2025	25 May 2025	CPAI-2025-0314	CVE-2025-45487	Linksys E5600 firmware Command Injection (CVE-2025-45487)
Critical	25 May 2025	25 May 2025	CPAI-2025-0313	CVE-2025-45488	Linksys E5600 firmware Command Injection (CVE-2025-45488)
Critical	25 May 2025	25 May 2025	CPAI-2025-0309	CVE-2025-32756	Fortinet Multiple Products Buffer Overflow (CVE-2025-32756)
High	25 May 2025	25 May 2025	CPAI-2024-1657	CVE-2024-33699	LevelOne WBR-6012 Authentication Bypass (CVE-2024-33699)
Critical	22 May 2025	22 May 2025	CPAI-2015-1716	CVE-2015-3087	Adobe Multiple Products Integer Overflow (CVE-2015-3087)
High	22 May 2025	22 May 2025	CPAI-2015-1708	CVE-2015-2790	Foxit Software Multiple Products Memory Corruption (CVE-2015-2790)
High	21 May 2025	21 May 2025	CPAI-2025-0319		Generic Shortcut File Remote Code Execution
Critical	21 May 2025	21 May 2025	CPAI-2024-1666	CVE-2024-27443	Zimbra Collaboration Cross-Site Scripting (CVE-2024-27443)
High	21 May 2025	21 May 2025	CPAI-2023-2058	CVE-2023-38950	ZKTeco BioTime Path Traversal (CVE-2023-38950)
High	20 May 2025	21 May 2025	CPAI-2025-0302		Adobe Flash Player Malicious Obfuscations
Critical	21 May 2025	21 May 2025	CPAI-2023-2051	CVE-2023-0562	PHPGurukul Bank Locker Management System SQL Injection (CVE-2023-0562)
Medium	19 May 2025	19 May 2025	CPAI-2014-2676	CVE-2014-7815	QEMU Denial of Service (CVE-2014-7815)
Critical	19 May 2025	19 May 2025	CPAI-2023-2057	CVE-2023-47253	Qualitor Command Injection (CVE-2023-47253)
High	19 May 2025	19 May 2025	CPAI-2025-0299		Microsoft Internet Explorer Null Pointer Dereference
High	19 May 2025	19 May 2025	CPAI-2024-1655	CVE-2024-11047 CVE-2024-11048	D-Link DI-8003 Buffer Overflow (CVE-2024-11047; CVE-2024-11048)
Critical	19 May 2025	19 May 2025	CPAI-2024-1651	CVE-2024-57222 CVE-2024-57223 CVE-2024-57224 CVE-2024-57225 CVE-2024-57226 CVE-2024-57227 CVE-2024-57228	Linksys E7350 Command Injection (CVE-2024-57222; CVE-2024-57223; CVE-2024-57224; CVE-2024-57225; CVE-2024-57226; CVE-2024-57227; CVE-2024-57228)
High	19 May 2025	19 May 2025	CPAI-2014-2667	CVE-2014-8500	ISC BIND Denial of Service (CVE-2014-8500)