Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Medium	8 May 2014	9 May 2017	CPAI-2014-1525	GnuTLS GNUTLS-SA-2014-2	CVE-2014-0092	GnuTLS Certificate Verification Policy Bypass (CVE-2014-0092)
Medium	8 Jun 2014	9 May 2017	CPAI-2014-1611	GnuTLS GNUTLS-SA-2014-3	CVE-2014-3466	GnuTLS Server Hello Session ID Heap Buffer Overflow (CVE-2014-3466)
Medium	11 May 2014	9 May 2017	CPAI-2014-1534	IPS Research		TLS Servers Cipher Suites Scanning Tools
Critical	29 May 2014	3 May 2017	CPAI-2014-1582	Symantec 20140512_00	CVE-2014-1649	Symantec Workspace Streaming XML-RPC Arbitrary File Upload (CVE-2014-1649)
Critical	9 Nov 2014	19 Apr 2017	CPAI-2014-1983	Adobe Security Bulletin APSB14-21	CVE-2014-0549	Adobe Flash Player Memory Corruption (APSB14-21: CVE-2014-0549)
Critical	11 Nov 2014	16 Apr 2017	CPAI-2014-1940	Microsoft Security Bulletin MS14-064	CVE-2014-6332	Microsoft Windows OLE Automation Array Remote Code Execution (MS14-064; CVE-2014-6332)
Critical	23 Jun 2014	9 Apr 2017	CPAI-2014-1658	IPS Research Team		RIG Exploit Kit Website Redirection
High	2 Jun 2014	9 Apr 2017	CPAI-2014-1587	IPS Research Team Rapid7		WinRAR Filename Spoofing
High	27 Mar 2014	4 Apr 2017	CPAI-2014-1187	IPS Research Team		Anonymous DoSer Denial of Service Tool
High	3 Dec 2014	2 Apr 2017	CPAI-2014-2232	IPS Research Team		Malformed PDF Version Header
High	30 Oct 2014	28 Mar 2017	CPAI-2014-1943	Microsoft Security Bulletin MS14-052	CVE-2013-7331	Microsoft Internet Explorer Resource Information Disclosure (MS14-052; CVE-2013-7331)
High	1 May 2014	28 Mar 2017	CPAI-2014-1508	IPS Research Team		SSH Over DNS Tunneling
Critical	16 Nov 2014	20 Mar 2017	CPAI-2014-2206	IPS Research Team		Web Servers Suspicious File Upload
Critical	29 Apr 2014	28 Feb 2017	CPAI-2014-1492	Adobe Security Bulletin APSB14-13	CVE-2014-0515	Adobe Flash Player Buffer Overflow Arbitrary Code Execution (CVE-2014-0515)
Critical	16 Apr 2014	13 Feb 2017	CPAI-2014-1425	Metasploit	CVE-2009-4265	PointDev IDEAL Migration and Administration Buffer Overflow - Ver2 (CVE-2009-4265)
Critical	17 Dec 2014	7 Feb 2017	CPAI-2014-2305	IPS Research Team	CVE-2014-9734 CVE-2015-1579	WordPress Slider Revolution Plugin Local File Inclusion (CVE-2014-9734; CVE-2015-1579)
Critical	25 Sep 2014	7 Feb 2017	CPAI-2014-1846	IPS Research Team	CVE-2014-6271 CVE-2014-7169 CVE-2014-6277 CVE-2014-6278 CVE-2014-7186 CVE-2014-7187	GNU Bash Remote Code Execution (CVE-2014-6271; CVE-2014-7169; CVE-2014-6277; CVE-2014-6278; CVE-2014-7186; CVE-2014-7187)
Critical	25 May 2014	2 Feb 2017	CPAI-2014-1563	IPS Research Team	CVE-2014-3704	SQL Servers Unauthorized Commands SQL Injection (CVE-2014-3704)
Critical	16 Apr 2014	11 Jan 2017	CPAI-2014-1401		CVE-2012-0151	Microsoft Windows Signature Validation Remote Code Execution (MS12-024) - Ver2 (CVE-2012-0151)
High	8 Jul 2014	10 Jan 2017	CPAI-2014-1679	Microsoft Security Bulletin MS14-037	CVE-2014-1765	Microsoft Internet Explorer Memory Corruption (MS14-037: CVE-2014-1765)
High	26 Feb 2014	4 Jan 2017	CPAI-2014-0949			Suspicious Non-Alphanumeric JavaScript Encoding
Critical	13 Jul 2014	3 Jan 2017	CPAI-2014-1596	Microsoft Security Bulletin MS14-035	CVE-2014-1775	Microsoft Internet Explorer Memory Corruption (MS14-035: CVE-2014-1775)
Medium	18 Dec 2014	2 Jan 2017	CPAI-2014-2312	Microsoft Security Bulletin MS14-085	CVE-2014-6355	Microsoft Graphics Component Information Disclosure (MS14-085) - ver 2 (CVE-2014-6355)
High	31 Mar 2014	28 Dec 2016	CPAI-2014-1263		CVE-2010-2862	Adobe Reader cooltype.dll Remote Code Execution (APSB10-17) - Ver2 (CVE-2010-2862)
Critical	10 Jun 2014	27 Dec 2016	CPAI-2014-1630	Mozilla mfsa2014-29	CVE-2014-1510 CVE-2014-1511	Mozilla Multiple Products WebIDL Remote Code Execution (CVE-2014-1510; CVE-2014-1511)
Critical	11 Feb 2014	27 Dec 2016	CPAI-2014-0876		CVE-2014-0283	Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0283)
Critical	10 Jun 2014	26 Dec 2016	CPAI-2014-1499	Microsoft Security Bulletin MS14-035	CVE-2014-1789	Microsoft Internet Explorer Memory Corruption (MS14-035: CVE-2014-1789)
Medium	8 May 2014	26 Dec 2016	CPAI-2014-1529		CVE-2013-4449	OpenLDAP rwm Overlay Denial of Service - ver 2 (CVE-2013-4449)
High	23 Nov 2014	26 Dec 2016	CPAI-2014-2219	Microsoft Microsoft		Microsoft Internet Explorer CTitleElement Use After Free
Critical	3 Sep 2014	25 Dec 2016	CPAI-2014-1789	Attachmate 2546	CVE-2014-0603	Attachmate Reflection FTP Client ActiveX GetGlobalSettings Memory Corruption (CVE-2014-0603)
Critical	11 Feb 2014	22 Dec 2016	CPAI-2014-0872	Microsoft Security Bulletin MS14-010	CVE-2014-0275	Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0275)
Critical	11 Sep 2014	21 Dec 2016	CPAI-2014-1804	Mozilla Foundation 2014-56	CVE-2014-1548	Mozilla Firefox SharedWorker MessagePort Use After Free (CVE-2014-1548)
Critical	1 Dec 2014	19 Dec 2016	CPAI-2014-2262	Microsoft Security Bulletin MS14-035	CVE-2014-2782	Microsoft Internet Explorer Use After Free (CVE-2014-2782)
Critical	12 Aug 2014	15 Dec 2016	CPAI-2014-1752	Microsoft Security Bulletin MS14-051	CVE-2014-2824	Microsoft Internet Explorer Memory Corruption (MS14-051: CVE-2014-2824)
High	5 Feb 2014	14 Dec 2016	CPAI-2014-0890		CVE-2013-3215 CVE-2013-3214	vTiger CRM SOAP AddEmailAttachment Arbitrary File Upload (CVE-2013-3215; CVE-2013-3214)
Critical	23 Oct 2014	28 Nov 2016	CPAI-2014-1925	Mitre.org CVE-2011-5165	CVE-2011-5165	Free MP3 CD Ripper WAV File Stack Buffer Overflow (CVE-2011-5165)
Critical	30 Apr 2014	24 Nov 2016	CPAI-2014-1334	IPS Research Team	CVE-2012-3993 CVE-2013-1710	Mozilla Firefox generateCRMFRequest Remote Code Execution (CVE-2012-3993; CVE-2013-1710)
Critical	3 Nov 2014	22 Nov 2016	CPAI-2014-1951	IPS Research Team		Nuclear Exploit Kit Landing Page
Critical	9 Apr 2014	22 Nov 2016	CPAI-2014-1336	OpenSSL	CVE-2014-0160 CVE-2014-0346	OpenSSL TLS DTLS Heartbeat Information Disclosure (CVE-2014-0160; CVE-2014-0346)
Critical	12 Apr 2014	22 Nov 2016	CPAI-2014-1346	OpenSSL	CVE-2014-0160 CVE-2014-0346	OpenSSL TLS DTLS Overly-long Heartbeat Response Information Disclosure (CVE-2014-0160; CVE-2014-0346)
Critical	4 May 2014	21 Nov 2016	CPAI-2014-1513	IPS Research team		JavaScript Malicious Obfuscation Techniques - ver 2
High	19 Jan 2014	20 Nov 2016	CPAI-2014-0750		CVE-2013-5211	NTP Servers Monlist Command Denial of Service (CVE-2013-5211)
High	13 Jan 2014	17 Nov 2016	CPAI-2014-0388		CVE-2013-6877	RealNetworks RealPlayer RMP File Heap Buffer Overflow (CVE-2013-6877)
Medium	9 Mar 2014	17 Nov 2016	CPAI-2014-1131		CVE-2014-1683	SkyBlueCanvas CMS Remote Command Execution (CVE-2014-1683)
Critical	25 May 2014	14 Nov 2016	CPAI-2014-1564	IPS Research Team		SQL Servers SQL Injection Evasion Techniques
Critical	6 Apr 2014	27 Oct 2016	CPAI-2014-1326	IPS Research Team		Sqlmap Automated SQL Injection tool
Critical	6 Aug 2014	26 Oct 2016	CPAI-2014-1755	HP c04373818	CVE-2013-2347 CVE-2014-2623	HP Data Protector Opcode 28 and 11 Command Execution (CVE-2013-2347; CVE-2014-2623)
Low	18 Mar 2014	25 Oct 2016	CPAI-2014-1127		CVE-2016-0800 CVE-2016-0703 CVE-2016-0704	Secure Sockets Layer (SSL) Version 2.0 (CVE-2016-0800; CVE-2016-0703; CVE-2016-0704)
Low	15 Oct 2014	20 Oct 2016	CPAI-2014-1909		CVE-2014-3566	Secure Socket Layer (SSL) Version 3.0 (CVE-2014-3566)
Medium	28 Dec 2014	20 Oct 2016	CPAI-2014-2345		CVE-2012-2414	Digium Asterisk Manager User Shell Command Execution - Ver2 (CVE-2012-2414)