Home / 2021 Advisories Archive

2021 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	29 Sep 2021	29 Sep 2021	CPAI-2021-0708		CVE-2021-21513	Dell EMC OpenManage Server Administrator Authentication Bypass (CVE-2021-21513)
Critical	29 Sep 2021	29 Sep 2021	CPAI-2021-0718		CVE-2021-28890	J2eeFAST SQL Injection (CVE-2021-28890)
High	29 Sep 2021	29 Sep 2021	CPAI-2021-0707		CVE-2021-39279	Moxa Multiple Products Command Injection (CVE-2021-39279)
Critical	29 Sep 2021	29 Sep 2021	CPAI-2021-0716		CVE-2021-37599	Nuance Winscribe Dictation SQL Injection (CVE-2021-37599)
High	29 Sep 2021	29 Sep 2021	CPAI-2021-0529		CVE-2021-21225	Google Chrome Heap Corruption (CVE-2021-21225)
Critical	29 Sep 2021	29 Sep 2021	CPAI-2021-0543		CVE-2021-37358	Seacms Remote Code Execution (CVE-2021-37358)
Critical	29 Sep 2021	29 Sep 2021	CPAI-2021-0703		CVE-2021-36623	Sourcecodester Sales Management System Arbitrary File Upload (CVE-2021-36623)
High	29 Sep 2021	29 Sep 2021	CPAI-2021-0714		CVE-2021-38556	RaspAP Command Injection (CVE-2021-38556)
Critical	29 Sep 2021	29 Sep 2021	CPAI-2021-0731			Web Servers Directory Traversal Evasion Attempt
High	29 Sep 2021	29 Sep 2021	CPAI-2021-0689		CVE-2021-36380	Sunhillo SureLine Command Injection (CVE-2021-36380)
High	29 Sep 2021	29 Sep 2021	CPAI-2021-0706		CVE-2021-40378	Compro Technology IP Camera Denial Of Service (CVE-2021-40378)
High	27 Sep 2021	27 Sep 2021	CPAI-2021-0726			NanoMQ MQTT Broker Denial Of Service
Critical	27 Sep 2021	27 Sep 2021	CPAI-2021-0728		CVE-2021-22005	VMWare vCenter Server Arbitrary File Upload (CVE-2021-22005)
Critical	26 Sep 2021	26 Sep 2021	CPAI-2021-0711		CVE-2021-39510	D-Link DIR-816 Command Injection (CVE-2021-39510)
High	26 Sep 2021	26 Sep 2021	CPAI-2021-0690		CVE-2021-21800	Advantech R-SeeNet ssh_form.php Cross-Site Scripting (CVE-2021-21800)
High	26 Sep 2021	26 Sep 2021	CPAI-2021-0687		CVE-2021-39503	PHPMyWind Remote Code Execution (CVE-2021-39503)
High	26 Sep 2021	26 Sep 2021	CPAI-2020-3402		CVE-2020-18757	Dut Computer Control Engineering PLC Denial Of Service (CVE-2020-18757)
High	26 Sep 2021	26 Sep 2021	CPAI-2021-0725		CVE-2021-22656	Advantech iView CommandServlet Directory Traversal (CVE-2021-22656)
High	26 Sep 2021	26 Sep 2021	CPAI-2021-0688		CVE-2021-24551	WordPress Edit Comments Plugin SQL injection (CVE-2021-24551)
High	26 Sep 2021	26 Sep 2021	CPAI-2018-1765		CVE-2018-13038	Unrestricted PHP File Upload Over Body (CVE-2018-13038)
High	26 Sep 2021	26 Sep 2021	CPAI-2021-0724			Voting System Project Arbitrary File Upload
High	26 Sep 2021	26 Sep 2021	CPAI-2021-0713		CVE-2021-39500	Eyoucms Directory Traversal (CVE-2021-39500)
High	24 Sep 2021	24 Sep 2021	CPAI-2021-0717			Apple MacOS Finder Remote Code Execution
High	24 Sep 2021	24 Sep 2021	CPAI-2021-0709		CVE-2021-33544	UDP Technology IP Camera Command Injection (CVE-2021-33544)
High	22 Sep 2021	22 Sep 2021	CPAI-2021-0679		CVE-2021-36622	Sourcecodester Online Covid Vaccination Scheduler Arbitrary File Upload (CVE-2021-36622)
High	22 Sep 2021	22 Sep 2021	CPAI-2020-3391		CVE-2020-36287	Atlassian Jira Gadgets Plugin Authentication Bypass (CVE-2020-36287)
High	22 Sep 2021	22 Sep 2021	CPAI-2021-0680		CVE-2021-38145	Form Tools SQL Injection (CVE-2021-38145)
High	30 Mar 2021	22 Sep 2021	CPAI-2021-0200		CVE-2020-17952 CVE-2021-26475 CVE-2021-26702 CVE-2021-26723 CVE-2021-39496 CVE-2021-39499	Cross Site Scripting Over HTTP Traffic (CVE-2020-17952; CVE-2021-26475; CVE-2021-26702; CVE-2021-26723; CVE-2021-39496; CVE-2021-39499)
Critical	22 Sep 2021	22 Sep 2021	CPAI-2018-1755		CVE-2018-12426	WordPress Live Chat Support Pro Plugin Remote Code Execution (CVE-2018-12426)
Critical	21 Sep 2021	21 Sep 2021	CPAI-2021-0684		CVE-2021-38647	Microsoft Open Management Infrastructure Remote Code Execution (CVE-2021-38647)
High	19 Sep 2021	19 Sep 2021	CPAI-2021-0685		CVE-2021-30632	Google Chrome V8 Out-of-Bounds Write (CVE-2021-30632)
High	20 Jun 2021	19 Sep 2021	CPAI-2020-3356		CVE-2020-15153 CVE-2020-35545	Unauthorized SQL Commands Over HTTP (CVE-2020-15153; CVE-2020-35545)
High	19 Sep 2021	19 Sep 2021	CPAI-2021-0686	Microsoft CVE-2021-36955	CVE-2021-36955	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-36955)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0576		CVE-2021-39843	Adobe Acrobat and Reader Out-of-bounds Write (APSB21-55: CVE-2021-39843)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0575		CVE-2021-39845	Adobe Acrobat and Reader Stack-based Buffer Overflow (APSB21-55: CVE-2021-39845)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0577		CVE-2021-39844	Adobe Acrobat and Reader Out-of-bounds Read (APSB21-55: CVE-2021-39844)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0583		CVE-2021-39836	Adobe Acrobat and Reader Use After Free (APSB21-55: CVE-2021-39836)
Critical	9 Sep 2021	14 Sep 2021	CPAI-2021-0554		CVE-2021-40444	Microsoft Internet Explorer MSHTML Remote Code Execution (CVE-2021-40444)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0545	Microsoft CVE-2021-36963	CVE-2021-36963	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-36963)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0579		CVE-2021-39838	Adobe Acrobat and Reader Use After Free (APSB21-55: CVE-2021-39838)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0574		CVE-2021-39840	Adobe Acrobat and Reader Use After Free (APSB21-55: CVE-2021-39840)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0580		CVE-2021-39846	Adobe Acrobat and Reader Stack-based Buffer Overflow (APSB21-55: CVE-2021-39846)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0578		CVE-2021-39837	Adobe Acrobat and Reader Use After Free (APSB21-55: CVE-2021-39837)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0587		CVE-2021-39841	Adobe Acrobat and Reader Type Confusion (APSB21-55: CVE-2021-39841)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0550	Microsoft CVE-2021-36975	CVE-2021-36975	Microsoft Win32k Elevation of Privilege (CVE-2021-36975)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0573		CVE-2021-39839	Adobe Acrobat and Reader Use After Free (APSB21-55: CVE-2021-39839)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0582		CVE-2021-39842	Adobe Acrobat and Reader Use After Free (APSB21-55: CVE-2021-39842)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0592	Microsoft CVE-2021-38639	CVE-2021-38639	Microsoft Win32k Elevation of Privilege (CVE-2021-38639)
High	14 Sep 2021	14 Sep 2021	CPAI-2021-0544	Microsoft CVE-2021-38633	CVE-2021-38633	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-38633)
High	26 Aug 2021	12 Sep 2021	CPAI-2020-3393		CVE-2020-27261	Omron CX-One Stack Buffer Overflow (CVE-2020-27261)