Home / 2020 Advisories Archive

2020 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	10 Jun 2020	7 Jul 2022	CPAI-2020-0482		CVE-2021-41487	NOKIA VitalSuite SPM SQL Injection (CVE-2021-41487)
Medium	20 Dec 2020	4 Jul 2022	CPAI-2020-1344		CVE-2020-3153	Cisco AnyConnect Secure Mobility Client Privilege Escalation (CVE-2020-3153)
Medium	25 Jun 2020	12 May 2022	CPAI-2018-1515		CVE-2018-19246	PHP-Proxy Information Disclosure (CVE-2018-19246)
Medium	29 Jul 2020	18 Apr 2022	CPAI-2019-2207		CVE-2019-5418	Rails Action View Information Disclosure (CVE-2019-5418)
Medium	5 Jun 2020	27 Mar 2022	CPAI-2018-1406		CVE-2018-12387	Mozilla Firefox JIT Compiler Memory Leak (CVE-2018-12387)
High	2 Aug 2020	21 Mar 2022	CPAI-2019-2204		CVE-2019-19330	HAProxy HTTP2 CRLF Injection (CVE-2019-19330)
High	27 Apr 2020	7 Mar 2022	CPAI-2020-0277			Advantech WebAccess SCADA Heap-based Buffer Overflow
Critical	3 Jun 2020	3 Mar 2022	CPAI-2020-0139		CVE-2020-10826 CVE-2020-10827 CVE-2020-10828 CVE-2020-13756 CVE-2021-1472 CVE-2021-1473	HTTP Headers Remote Code Execution (CVE-2020-10826; CVE-2020-10827; CVE-2020-10828; CVE-2020-13756; CVE-2021-1472; CVE-2021-1473)
High	26 Feb 2020	17 Feb 2022	CPAI-2020-0088		CVE-2020-9054	ZyXEL NAS Command Injection (CVE-2020-9054)
High	21 Jun 2020	10 Feb 2022	CPAI-2020-0416		CVE-2020-28269 CVE-2020-28272 CVE-2020-28273 CVE-2020-28442 CVE-2020-28458 CVE-2020-28472 CVE-2020-7778 CVE-2020-8158 CVE-2020-8203 CVE-2021-25912	JavaScript Prototype Pollution (CVE-2020-28269; CVE-2020-28272; CVE-2020-28273; CVE-2020-28442; CVE-2020-28458; CVE-2020-28472; CVE-2020-7778; CVE-2020-8158; CVE-2020-8203; CVE-2021-25912)
High	25 Feb 2020	10 Feb 2022	CPAI-2019-1816		CVE-2019-7232	ABB IDAL HTTP Server Stack Buffer Overflow (CVE-2019-7232)
High	31 May 2020	11 Jan 2022	CPAI-2018-1391		CVE-2018-7669	Sitecore.NET Directory Traversal (CVE-2018-7669)
Medium	25 Feb 2020	10 Jan 2022	CPAI-2019-1864		CVE-2019-10352	Jenkins Core Directory Traversal (CVE-2019-10352)
High	5 Jun 2020	9 Jan 2022	CPAI-2018-1411		CVE-2018-4441	Apple Safari Browser Memory Corruption (CVE-2018-4441)
Critical	1 Mar 2020	5 Jan 2022	CPAI-2019-1888		CVE-2019-12526	Squid Proxy Heap Buffer Overflow (CVE-2019-12526)
Critical	8 Jul 2020	3 Jan 2022	CPAI-2020-0566		CVE-2020-6061	CoTURN Heap Overflow (CVE-2020-6061)
Critical	4 May 2020	28 Nov 2021	CPAI-2020-0332		CVE-2020-2546 CVE-2020-2798 CVE-2020-2801 CVE-2020-2883 CVE-2020-2884	Oracle Fusion Middleware WebLogic Server Insecure Deserialization (CVE-2020-2883; CVE-2020-2546; CVE-2020-2798; CVE-2020-2801; CVE-2020-2884)
Critical	25 Mar 2020	28 Nov 2021	CPAI-2018-1792		CVE-2018-13330 CVE-2018-13336 CVE-2018-13338	Terramaster Remote Command Execution (CVE-2018-13338; CVE-2018-13330; CVE-2018-13336)
Medium	25 Jun 2020	22 Nov 2021	CPAI-2018-1513		CVE-2018-2636	Oracle Hospitality Simphony Remote Code Execution (CVE-2018-2636)
High	16 Jun 2020	10 Nov 2021	CPAI-2018-1417		CVE-2018-5955	GitStack Authentication Bypass (CVE-2018-5955)
Critical	27 Feb 2020	31 Oct 2021	CPAI-2019-1770		CVE-2019-1448	Microsoft Excel Remote Code Execution (CVE-2019-1448)
High	23 Jan 2020	31 Oct 2021	CPAI-2019-0266	Microsoft	CVE-2018-8392	Microsoft JET Database Engine Heap-based Buffer Overflow (CVE-2018-8392)
Medium	23 Apr 2020	31 Oct 2021	CPAI-2020-0180			WECON LeviStudio ShortMessage Module SMtext Stack Buffer Overflow
High	8 Jan 2020	14 Oct 2021	CPAI-2019-1605			Belkin Wemo UPnP Remote Code Execution
Critical	9 Mar 2020	19 Sep 2021	CPAI-2019-1914		CVE-2019-18935	Progress Telerik UI Remote Code Execution (CVE-2019-18935)
High	17 Jun 2020	1 Sep 2021	CPAI-2020-0529		CVE-2020-13252 CVE-2020-22345	Centreon RRDdatabase_status_path Command Injection (CVE-2020-13252; CVE-2020-22345)
Critical	27 Dec 2020	23 Aug 2021	CPAI-2020-1376		CVE-2020-1956	Apache Kylin Remote Code Execution (CVE-2020-1956)
High	11 Nov 2020	17 Aug 2021	CPAI-2020-1155		CVE-2020-6756	Rasilient PixelStor Remote Code Execution (CVE-2020-6756)
High	28 Dec 2020	11 Aug 2021	CPAI-2020-1388		CVE-2020-9483	Apache SkyWalking Storage SQL Injection (CVE-2020-9483)
Critical	9 Sep 2020	5 Aug 2021	CPAI-2019-2211		CVE-2019-12725	Zeroshell Remote Code Execution (CVE-2019-12725)
High	14 May 2020	15 Jul 2021	CPAI-2020-0251			HTTP Suspicious Linux Tilde Paths
High	26 May 2020	15 Jul 2021	CPAI-2020-0284			HTTP Suspicious Linux Usr Paths
High	14 May 2020	15 Jul 2021	CPAI-2020-0247		CVE-2020-13448	HTTP Suspicious Linux Etc Paths (CVE-2020-13448)
Medium	1 Sep 2020	31 May 2021	CPAI-2020-0817		CVE-2020-9496	Apache Ofbiz Cross Site Scripting (CVE-2020-9496)
High	24 May 2020	8 May 2021	CPAI-2016-1150		CVE-2016-4437	Apache Shiro Remote Code Execution (CVE-2016-4437)
Critical	14 Oct 2020	25 Apr 2021	CPAI-2020-0965		CVE-2018-14558 CVE-2020-10987	Tenda Routers Command Injection (CVE-2020-10987; CVE-2018-14558)
Medium	6 Jul 2020	20 Apr 2021	CPAI-2019-2174		CVE-2019-12276	GrandNode LetsEncryptController Directory Traversal (CVE-2019-12276)
High	10 May 2020	18 Apr 2021	CPAI-2020-0361		CVE-2020-7961	Liferay Portal Insecure Deserialization (CVE-2020-7961)
Critical	24 Aug 2020	8 Apr 2021	CPAI-2016-1144		CVE-2016-2555	ATutor SQL Injection (CVE-2016-2555)
High	11 Oct 2020	5 Apr 2021	CPAI-2020-0889		CVE-2020-28172	SQL Authentication Bypass (CVE-2020-28172)
Critical	8 Dec 2020	11 Mar 2021	CPAI-2020-1253	Microsoft CVE-2020-17121	CVE-2020-17121	Microsoft SharePoint Remote Code Execution (CVE-2020-17121)
High	21 Dec 2020	10 Mar 2021	CPAI-2020-1286		CVE-2020-10238 CVE-2020-10239 CVE-2021-23132	Joomla! Remote Code Execution (CVE-2020-10238; CVE-2020-10239; CVE-2021-23132)
High	24 Aug 2020	3 Mar 2021	CPAI-2020-0768		CVE-2020-17452	flatCore Unrestricted File Upload (CVE-2020-17452)
Critical	14 Jul 2020	16 Feb 2021	CPAI-2020-0663		CVE-2020-1147	Microsoft Windows Multiple Products Remote Code Execution (CVE-2020-1147)
High	19 Apr 2020	16 Feb 2021	CPAI-2020-0182		CVE-2020-9463	Centreon Command Injection (CVE-2020-9463)
High	3 Jun 2020	16 Feb 2021	CPAI-2020-0423		CVE-2020-8518	Horde Groupware Remote Code Execution (CVE-2020-8518)
High	13 Sep 2020	7 Feb 2021	CPAI-2020-0830		CVE-2020-17456	Seowon Intech Remote Code Execution (CVE-2020-17456)
Critical	21 Oct 2020	7 Feb 2021	CPAI-2020-1065		CVE-2020-15505	MobileIron Core And Connector Remote Code Execution (CVE-2020-15505)
Critical	27 Dec 2020	7 Feb 2021	CPAI-2020-1346		CVE-2020-14645 CVE-2020-24616 CVE-2020-8840	FasterXML jackson-databind Remote Code Execution (CVE-2020-14645; CVE-2020-24616; CVE-2020-8840)
High	21 Nov 2020	31 Jan 2021	CPAI-2020-1229		CVE-2020-26878	Ruckus IoT Controller Web UI Command Injection (CVE-2020-26878)