Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	27 Sep 2017	27 Sep 2017	CPAI-2017-0801	Digium	CVE-2017-14098	Digium Asterisk non-SIP URIs Denial-of-Service (CVE-2017-14098)
Medium	17 Sep 2017	27 Sep 2017	CPAI-2017-0766	HPE	CVE-2017-12521	HPE Intelligent Management Center userSelectPagingContent Expression Language Injection (CVE-2017-12521)
Medium	7 Aug 2017	27 Sep 2017	CPAI-2017-0672	Microsoft	CVE-2017-0170	Microsoft Windows Performance Monitor XXE Injection Information Disclosure (CVE-2017-0170)
Medium	25 Sep 2017	27 Sep 2017	CPAI-2017-0787	Elastic ESA-2015-08	CVE-2015-5531	Elastic Elasticsearch Snapshot API Directory Traversal (CVE-2015-5531)
Critical	26 Sep 2017	26 Sep 2017	CPAI-2017-0790		CVE-2017-14596	Joomla LDAP Information Disclosure (CVE-2017-14596)
Critical	4 Jul 2017	26 Sep 2017	CPAI-2017-0550	Rapid7	CVE-2015-2843 CVE-2015-2845 CVE-2015-2844	GoAutoDial 3.3 Authentication Bypass Command Injection (CVE-2015-2843; CVE-2015-2845; CVE-2015-2844)
Critical	24 Sep 2017	25 Sep 2017	CPAI-2017-0783			Multiple Websites Mine Cryptocurrencies CPU Hijacking
Medium	24 Sep 2017	25 Sep 2017	CPAI-2017-0784		CVE-2017-10953	Foxit Reader and PhantonPDF XFA gotoURL Command Injection (CVE-2017-10953)
Medium	14 Mar 2017	24 Sep 2017	CPAI-2017-0087	Microsoft Security Bulletin MS17-006	CVE-2017-0033	Microsoft Browser Spoofing (MS17-006: CVE-2017-0033)
Critical	13 Jul 2017	24 Sep 2017	CPAI-2017-0565			Suspicious Executable Containing Ransomware
High	25 Jul 2017	24 Sep 2017	CPAI-2017-0586	Rapid7	CVE-2017-0372	MediaWiki SyntaxHighlight Option Injection (CVE-2017-0372)
High	7 Aug 2017	24 Sep 2017	CPAI-2017-0673	Rpcbind	CVE-2017-8779	Rpcbind XDR Parsing Memory Exhaustion Denial of Service (CVE-2017-8779)
Medium	29 Aug 2017	24 Sep 2017	CPAI-2017-0724		CVE-2015-0816 CVE-2015-0802	Firefox PDF.js Javascript Injection (CVE-2015-0816; CVE-2015-0802)
High	28 Aug 2017	24 Sep 2017	CPAI-2017-0710	Microsoft CVE-2017-8656	CVE-2017-8656	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8656)
High	19 Sep 2017	24 Sep 2017	CPAI-2017-0777	HPE	CVE-2017-8994	HPE Operations Orchestration central-remoting Insecure Deserialization (CVE-2017-8994)
Critical	8 Aug 2017	24 Sep 2017	CPAI-2017-0664	Adobe Security Bulletin APSB17-24	CVE-2017-11257	Adobe Acrobat and Reader Type Confusion (APSB17-24: CVE-2017-11257)
Medium	18 Sep 2017	19 Sep 2017	CPAI-2017-0769	ExploitDB	CVE-2017-14147	Multiple Routers Unauthenticated Router Factory Reset (CVE-2017-14147)
High	19 Sep 2017	19 Sep 2017	CPAI-2017-0776			WordPress Display Widgets Plugin Spammers Backdoor
Critical	17 Sep 2017	19 Sep 2017	CPAI-2017-0775			Repetitive IMAP Login Failures
Critical	17 Jul 2017	19 Sep 2017	CPAI-2017-0571			Suspicious Site Containing Tech Scams
Critical	18 Sep 2017	19 Sep 2017	CPAI-2017-0774		CVE-2017-9798	Apache HTTP Optionsbleed Memory Leak (CVE-2017-9798)
Critical	14 Sep 2017	18 Sep 2017	CPAI-2017-0759	EMC ESA-2017-062	CVE-2017-4997	EMC VMAX3 VASA Provider UploadConfigurator Directory Traversal (CVE-2017-4997)
Medium	10 Aug 2017	18 Sep 2017	CPAI-2017-0681	Nginx	CVE-2017-7529	Nginx ngx_http_range_filter_module Integer Overflow (CVE-2017-7529)
Critical	18 Sep 2017	18 Sep 2017	CPAI-2017-0767			Malicious Embedded Executable Downloader
High	29 Aug 2017	17 Sep 2017	CPAI-2017-0722	PostgreSQL Global Development Group	CVE-2017-7546	PostgreSQL Database Core Server non-libpq Client Policy Bypass (CVE-2017-7546)
Medium	17 Sep 2017	17 Sep 2017	CPAI-2017-0763	Rapid7		Disk Pulse Enterprise GET Buffer Overflow
Critical	13 Jun 2017	17 Sep 2017	CPAI-2017-0477	Microsoft CVE-2017-8464	CVE-2017-8464	Microsoft LNK Remote Code Execution (CVE-2017-8464)
Medium	17 Sep 2017	17 Sep 2017	CPAI-2017-0771		CVE-2017-5487	WordPress REST API Plugin Information Disclosure (CVE-2017-5487)
High	13 Sep 2017	17 Sep 2017	CPAI-2017-0754			Microsoft Windows RDP Brute Force Login Attempt
Critical	12 Jan 2017	17 Sep 2017	CPAI-2017-0025	Adobe Security Bulletin APSB17-02	CVE-2017-2927	Adobe Flash Player Heap Buffer Overflow (APSB17-02: CVE-2017-2927)
High	13 Sep 2017	14 Sep 2017	CPAI-2017-0755	TrendMicro 1117722	CVE-2017-11383	Trend Micro Control Manager cmdHandlerTVCSCommander SQL Injection (CVE-2017-11383)
Critical	20 Aug 2017	14 Sep 2017	CPAI-2017-0702	Microsoft	CVE-2017-8620	Microsoft Windows Search Type Confusion (CVE-2017-8620)
Medium	23 Jul 2017	14 Sep 2017	CPAI-2017-0579	Metasploit	CVE-2017-9757	IPFire ids.cgi OINKCODE Parameter Command Injection (CVE-2017-9757)
Critical	8 Aug 2017	14 Sep 2017	CPAI-2017-0625	Adobe Security Bulletin APSB17-24	CVE-2017-11223	Adobe Acrobat And Reader Use After Free (APSB17-24: CVE-2017-11223)
Medium	11 Sep 2017	13 Sep 2017	CPAI-2017-0752	HPE	CVE-2017-12491	HPE Intelligent Management Center saveSelectedDevices Expression Language Injection (CVE-2017-12491)
Critical	8 Aug 2017	13 Sep 2017	CPAI-2017-0610	Adobe Security Bulletin APSB17-24	CVE-2017-11220	Adobe Acrobat and Reader Heap Overflow (APSB17-24: CVE-2017-11220)
Critical	6 Sep 2017	13 Sep 2017	CPAI-2017-0742		CVE-2017-9805	Apache Struts REST Plugin XStream Deserialization Remote Code Execution (CVE-2017-9805)
Critical	14 Aug 2017	13 Sep 2017	CPAI-2017-0688	Metasploit		McAfee SaaS Remote Command Execution
Critical	11 Apr 2017	12 Sep 2017	CPAI-2017-0251	Microsoft CVE-2017-0199	CVE-2017-0199	Microsoft Outlook Remote Code Execution (CVE-2017-0199)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0738	Microsoft CVE-2017-8747	CVE-2017-8747	Microsoft Internet Explorer Memory Corruption (CVE-2017-8747)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0744	Microsoft CVE-2017-8731	CVE-2017-8731	Microsoft Edge Memory Corruption (CVE-2017-8731)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0733	Microsoft CVE-2017-8737	CVE-2017-8737	Microsoft Windows PDF Library Remote Code Execution (CVE-2017-8737)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0737	Microsoft CVE-2017-8734	CVE-2017-8734	Microsoft Edge Memory Corruption (CVE-2017-8734)
Medium	5 Jul 2017	12 Sep 2017	CPAI-2017-0553	GnuTLS	CVE-2017-7507	GnuTLS status_request Extension Null Pointer Dereference (CVE-2017-7507)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0732	Microsoft CVE-2017-8728	CVE-2017-8728	Microsoft Windows PDF Library Remote Code Execution (CVE-2017-8728)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0735	Microsoft CVE-2017-8757	CVE-2017-8757	Microsoft Edge Remote Code Execution (CVE-2017-8757)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0734	Microsoft CVE-2017-8738	CVE-2017-8738	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8738)
High	12 Sep 2017	12 Sep 2017	CPAI-2017-0749	Adobe Security Bulletin APSB17-28	CVE-2017-11281	Adobe Flash Player Memory Corruption (APSB17-28: CVE-2017-11281)
High	5 Sep 2017	12 Sep 2017	CPAI-2017-0730	Trend Micro	CVE-2017-11385	Trend Micro Control Manager cmdHandlerStatusMonitor SQL Injection (CVE-2017-11385)
Critical	12 Sep 2017	12 Sep 2017	CPAI-2017-0736	Microsoft CVE-2017-8749	CVE-2017-8749	Microsoft Internet Explorer Memory Corruption (CVE-2017-8749)