Home / 2014 Advisories Archive

2014 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	16 Jun 2014	27 Apr 2022	CPAI-2014-1671		CVE-2018-10823 CVE-2018-3948	Linux System Files Information Disclosure (CVE-2018-10823; CVE-2018-3948)
High	14 Sep 2014	22 Mar 2022	CPAI-2014-1801			PhpMyAdmin REQUEST Superglobal Remote Variable Manipulation
Critical	26 May 2014	24 Feb 2022	CPAI-2014-1568			SQL Servers Oracle Vendor-specific SQL Injection
Critical	26 May 2014	17 Feb 2022	CPAI-2014-1570		CVE-2020-15311 CVE-2020-8657 CVE-2022-0332	SQL Servers UNION Query-based SQL Injection (CVE-2020-15311; CVE-2020-8657; CVE-2022-0332)
Critical	26 May 2014	16 Feb 2022	CPAI-2014-1569		CVE-2011-4710 CVE-2019-13978 CVE-2019-16065 CVE-2019-16119 CVE-2019-16383 CVE-2019-16692 CVE-2020-15468 CVE-2020-26518 CVE-2020-29284 CVE-2021-21915 CVE-2021-21916 CVE-2021-21917	SQL Servers Time-based SQL Injection (CVE-2011-4710; CVE-2019-13978; CVE-2019-16065; CVE-2019-16119; CVE-2019-16383; CVE-2019-16692; CVE-2020-15468; CVE-2020-26518; CVE-2020-29284; CVE-2021-21915; CVE-2021-21916; CVE-2021-21917)
High	18 Mar 2014	20 Jan 2022	CPAI-2014-1163			Nessus Security Scanner
Medium	31 Mar 2014	21 Dec 2021	CPAI-2014-1178			Nikto Security Scanner
Critical	25 May 2014	15 Nov 2021	CPAI-2014-1565		CVE-2021-27104	SQL Servers SQL Injection Evasion Technique (CVE-2021-27104)
High	19 Feb 2014	29 Sep 2021	CPAI-2014-0930			Google Chrome XSSAuditor Filter Security Policy Bypass
Critical	11 Nov 2014	4 Jul 2021	CPAI-2014-1971	Microsoft MS14-065	CVE-2014-6347	Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6347)
High	23 Nov 2014	4 Jul 2021	CPAI-2014-2219	Microsoft		Microsoft Internet Explorer CTitleElement Use After Free
Critical	10 Jun 2014	24 Jun 2021	CPAI-2014-1505	Microsoft MS14-035	CVE-2014-1804	Microsoft Internet Explorer Memory Corruption (MS14-035: CVE-2014-1804)
High	17 Mar 2014	27 May 2021	CPAI-2014-1160			Apache HTTP Server Format String Remote Code Execution
Critical	16 Nov 2014	18 Feb 2021	CPAI-2014-2206		CVE-2019-16113 CVE-2021-26918	Web Servers Suspicious File Upload (CVE-2019-16113; CVE-2021-26918)
Critical	26 May 2014	17 Aug 2020	CPAI-2014-1571			SQL Servers Stack Query SQL Injection
Critical	25 May 2014	29 Jun 2020	CPAI-2014-1567		CVE-2018-18755	SQL Servers MySQL Vendor-specific SQL Injection (CVE-2018-18755)
Medium	22 Jan 2014	22 Jun 2020	CPAI-2014-0757		CVE-2013-6933	VLC Media Player RTSP Plugin Stack Buffer Overflow (CVE-2013-6933)
Critical	12 Nov 2014	16 Jun 2020	CPAI-2014-2185			SunRPC Data Connection Evasion Technique
Medium	12 Jun 2014	10 Jun 2020	CPAI-2014-1628		CVE-2013-0232	ZoneMinder Video Server packageControl Command Execution (CVE-2013-0232)
High	14 May 2014	10 Jun 2020	CPAI-2014-1536	Linux Kernel	CVE-2014-2309	Linux Kernel IPv6 Router Advertisement Packets Processing Denial of Service (CVE-2014-2309)
High	13 Apr 2014	10 Jun 2020	CPAI-2014-1351	McAfee	CVE-2014-2536	McAfee Cloud Single Sign On ExtensionAccessServlet Directory Traversal (CVE-2014-2536)
Medium	16 Apr 2014	10 Jun 2020	CPAI-2014-1363		CVE-2012-2442	Nokia PC Suite Video Manager Buffer Overflow - Ver2 (CVE-2012-2442)
High	25 May 2014	10 Jun 2020	CPAI-2014-1562	Rapid7	CVE-2013-2751	NETGEAR ReadyNAS np_handler Code Execution (CVE-2013-2751)
Critical	23 Feb 2014	27 May 2020	CPAI-2014-0933			Multiple Routers HNAP Insecure Implementation Privilege Escalation
High	25 May 2014	14 May 2020	CPAI-2014-1563		CVE-2008-4466 CVE-2014-3704 CVE-2019-13978	SQL Servers Unauthorized Commands SQL Injection (CVE-2008-4466; CVE-2014-3704; CVE-2019-13978)
Critical	25 May 2014	14 May 2020	CPAI-2014-1564		CVE-2006-6177 CVE-2006-6577 CVE-2007-2492 CVE-2007-3526 CVE-2007-6656 CVE-2008-2855 CVE-2008-2856 CVE-2008-4463 CVE-2009-2341 CVE-2014-8682	SQL Servers SQL Injection Evasion Techniques (CVE-2006-6177; CVE-2006-6577; CVE-2007-2492; CVE-2007-3526; CVE-2007-6656; CVE-2008-2855; CVE-2008-2856; CVE-2008-4463; CVE-2009-2341; CVE-2014-8682)
Critical	2 Jul 2014	19 Jan 2020	CPAI-2014-1682			Multiple PHP Servers C99shell Backdoor Command Execution
Critical	7 May 2014	25 Dec 2019	CPAI-2014-1527			China Chopper Web Shell Remote Code Execution
High	14 Sep 2014	8 Dec 2019	CPAI-2014-1800			PhpMyAdmin GLOBALS Superglobal Remote Variable Manipulation
Critical	28 Dec 2014	14 Nov 2019	CPAI-2014-1141		CVE-2013-2348	HP Data Protector Opcode 45 and 46 Code Execution (CVE-2013-2348)
High	22 Jan 2014	9 Sep 2019	CPAI-2014-0756		CVE-2013-5487 CVE-2019-1621	Cisco Prime Data Center Network Manager DownloadServlet Information Disclosure (CVE-2013-5487; CVE-2019-1621)
Critical	25 Sep 2014	16 Jul 2019	CPAI-2014-1846		CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187	GNU Bash Remote Code Execution (CVE-2014-6271; CVE-2014-6277; CVE-2014-6278; CVE-2014-7169; CVE-2014-7186; CVE-2014-7187)
Critical	29 Apr 2014	10 Jul 2019	CPAI-2014-1492	Adobe APSB14-13	CVE-2014-0515	Adobe Flash Player Buffer Overflow Arbitrary Code Execution (CVE-2014-0515)
High	28 Dec 2014	7 Jul 2019	CPAI-2014-2364		CVE-2012-0507	Oracle Java AtomicReferenceArray Sandbox Breach Code Execution - Ver2 (CVE-2012-0507)
High	14 Sep 2014	19 Jun 2019	CPAI-2014-1799		CVE-2010-3065	PhpMyAdmin ENV Superglobal Remote Variable Manipulation (CVE-2010-3065)
Critical	25 Apr 2014	4 Jun 2019	CPAI-2014-1480	Apache Struts S2-020	CVE-2014-0094 CVE-2014-0112 CVE-2014-0113 CVE-2014-0114	Apache Struts ParametersInterceptor ClassLoader Security Bypass (CVE-2014-0094; CVE-2014-0112; CVE-2014-0113; CVE-2014-0114)
High	14 Sep 2014	4 Jun 2019	CPAI-2014-1803			PhpMyAdmin SERVER Superglobal Remote Variable Manipulation
High	10 Nov 2014	13 May 2019	CPAI-2014-2153		CVE-2008-2564 CVE-2010-4617	Joomla Component com_jotloader SQL Injection (CVE-2008-2564; CVE-2010-4617)
High	19 Jan 2014	13 May 2019	CPAI-2014-0750		CVE-2013-5211	NTP Servers Monlist Command Denial of Service (CVE-2013-5211)
Critical	14 Dec 2014	6 May 2019	CPAI-2014-2299			PHP Web Shell Generic Backdoor
Critical	4 May 2014	5 May 2019	CPAI-2014-1513			JavaScript Malicious Obfuscation Techniques - ver 2
Critical	6 Apr 2014	1 May 2019	CPAI-2014-1326			Sqlmap Automated SQL Injection tool
Critical	20 Jan 2014	23 Apr 2019	CPAI-2014-0753		CVE-2013-3900	Microsoft Windows WinVerifyTrust PE Validation Security Bypass (MS13-098; CVE-2013-3900)
High	29 Jul 2014	7 Apr 2019	CPAI-2014-1691	Microsoft MS14-031	CVE-2014-1811	Microsoft Windows TCP Denial of Service (MS14-031; CVE-2014-1811)
Critical	12 Mar 2014	1 Apr 2019	CPAI-2014-0879	Microsoft MS14-006	CVE-2014-0254	Microsoft Windows IPv6 Router Advertisements Denial of Service (MS14-006; CVE-2014-0254)
Critical	13 Nov 2014	31 Mar 2019	CPAI-2014-2188	Adobe APSB14-21	CVE-2014-0557	Adobe Flash Player Memory Leakage (APSB14-21: CVE-2014-0557)
High	10 Nov 2014	25 Mar 2019	CPAI-2014-2121			Joomla Component com_event Multiple
High	10 Nov 2014	25 Mar 2019	CPAI-2014-2130		CVE-2009-4599	Joomla Component com_jsjobs SQL Injection (CVE-2009-4599)
High	10 Nov 2014	25 Mar 2019	CPAI-2014-2042			Joomla Component com_phocagallery SQL Injection
High	10 Nov 2014	25 Mar 2019	CPAI-2014-2004		CVE-2008-2093	Joomla Community com_comprofiler SQL Injection (CVE-2008-2093)