Home / 2022 Advisories Archive

2022 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	16 Mar 2022	16 Mar 2022	CPAI-2021-1110		CVE-2021-44515	Zoho ManageEngine Desktop Central Authentication Bypass (CVE-2021-44515)
High	14 Mar 2022	14 Mar 2022	CPAI-2021-1119		CVE-2021-44544	DIAEnergie Cross-Site Scripting (CVE-2021-44544)
Medium	14 Mar 2022	14 Mar 2022	CPAI-2021-1090		CVE-2021-41182 CVE-2021-41183	jQuery UI Datepicker Widget Cross Site Scripting (CVE-2021-41182; CVE-2021-41183)
High	14 Mar 2022	14 Mar 2022	CPAI-2022-0047		CVE-2022-23120	Trend Micro Deep Security Agent Code Injection (CVE-2022-23120)
High	13 Mar 2022	13 Mar 2022	CPAI-2022-0072		CVE-2022-25148	WordPress WP Statistics Plugin SQL Injection (CVE-2022-25148)
Critical	13 Mar 2022	13 Mar 2022	CPAI-2020-3451		CVE-2020-25765 CVE-2020-27158 CVE-2020-27159 CVE-2020-27160 CVE-2020-27744	Western Digital My Cloud NAS Remote Code Execution Multiple Vulnerabilities (CVE-2020-25765; CVE-2020-27158; CVE-2020-27159; CVE-2020-27160; CVE-2020-27744)
High	10 Mar 2022	10 Mar 2022	CPAI-2021-1104		CVE-2021-30625	Google Chrome Blink Use After Free (CVE-2021-30625)
Critical	10 Mar 2022	10 Mar 2022	CPAI-2021-1103		CVE-2021-44521	Apache Cassandra Remote Code Execution (CVE-2021-44521)
Critical	10 Mar 2022	10 Mar 2022	CPAI-2021-1070		CVE-2021-33266 CVE-2021-33267 CVE-2021-33268 CVE-2021-33269 CVE-2021-33270 CVE-2021-33271 CVE-2021-33274	D-Link DIR809 Buffer Overflow (CVE-2021-33266; CVE-2021-33267; CVE-2021-33268; CVE-2021-33269; CVE-2021-33270; CVE-2021-33271; CVE-2021-33274)
High	8 Mar 2022	8 Mar 2022	CPAI-2022-0057	Microsoft CVE-2022-24507	CVE-2022-24507	Microsoft Windows Ancillary Function Driver for WinSock Elevation of Privilege (CVE-2022-24507)
High	8 Mar 2022	8 Mar 2022	CPAI-2022-0058	Microsoft CVE-2022-23299	CVE-2022-23299	Microsoft Windows PDEV Elevation of Privilege (CVE-2022-23299)
High	8 Mar 2022	8 Mar 2022	CPAI-2022-0071		CVE-2022-21990	Microsoft Remote Desktop Client Remote Code Execution (CVE-2022-21990)
High	8 Mar 2022	8 Mar 2022	CPAI-2022-0053	Microsoft CVE-2022-23286	CVE-2022-23286	Microsoft Windows Cloud Files Mini Filter Driver Elevation of Privilege (CVE-2022-23286)
High	8 Mar 2022	8 Mar 2022	CPAI-2022-0061	Microsoft CVE-2022-23253	CVE-2022-23253	Microsoft Point-to-Point Tunneling Protocol Denial of Service (CVE-2022-23253)
High	8 Mar 2022	8 Mar 2022	CPAI-2022-0068	Microsoft CVE-2022-23285	CVE-2022-23285	Microsoft Remote Desktop Client Remote Code Execution (CVE-2022-23285)
High	8 Mar 2022	8 Mar 2022	CPAI-2022-0048	Microsoft CVE-2022-24502	CVE-2022-24502	Microsoft Internet Explorer Security Feature Bypass (CVE-2022-24502)
Medium	7 Mar 2022	7 Mar 2022	CPAI-2021-1092		CVE-2021-31589	BeyondTrust Secure Remote Access Base Software Cross Site Scripting (CVE-2021-31589)
Critical	7 Mar 2022	7 Mar 2022	CPAI-2020-3459		CVE-2020-7209	HP LinuxKI Command Injection (CVE-2020-7209)
High	7 Mar 2022	7 Mar 2022	CPAI-2021-1096		CVE-2021-42362	WordPress Popular Posts Plugin Arbitrary File Upload (CVE-2021-42362)
Medium	2 Mar 2022	2 Mar 2022	CPAI-2022-0056		CVE-2022-23134	Zabbix Web Frontend Authentication Bypass (CVE-2022-23134)
Critical	2 Mar 2022	2 Mar 2022	CPAI-2022-0052		CVE-2022-23131	Zabbix Web Frontend Authentication Bypass (CVE-2022-23131)
High	1 Mar 2022	1 Mar 2022	CPAI-2006-0387		CVE-2006-1547	Apache Struts Denial of Service (CVE-2006-1547)
Critical	28 Feb 2022	28 Feb 2022	CPAI-2021-1099		CVE-2021-40865	Apache Storm Remote Code Execution (CVE-2021-40865)
Critical	28 Feb 2022	28 Feb 2022	CPAI-2021-1095		CVE-2021-43711	TOTOLINK EX200 Command Injection (CVE-2021-43711)
High	27 Feb 2022	27 Feb 2022	CPAI-2021-1101		CVE-2021-45466 CVE-2021-45467	CWP Panel Remote Code Execution (CVE-2021-45467; CVE-2021-45466)
Critical	23 Feb 2022	23 Feb 2022	CPAI-2021-1066		CVE-2021-21975	VMware vRealize Operations Manager API Server Side Request Forgery (CVE-2021-21975)
Medium	23 Feb 2022	23 Feb 2022	CPAI-2016-1171		CVE-2016-9563	SAP NetWeaver AS JAVA XML External Entity Injection (CVE-2016-9563)
High	22 Feb 2022	22 Feb 2022	CPAI-2020-3458		CVE-2020-0787	Microsoft Windows Background Intelligent Transfer Service Privilege Escalation (CVE-2020-0787)
Medium	22 Feb 2022	22 Feb 2022	CPAI-2021-1094		CVE-2021-21029	Adobe Magento Commerce Reflected Cross Site Scripting (CVE-2021-21029)
Critical	21 Feb 2022	21 Feb 2022	CPAI-2019-2522		CVE-2019-20082	Asus Rt-N53 Buffer Overflow (CVE-2019-20082)
High	21 Feb 2022	21 Feb 2022	CPAI-2019-2520		CVE-2019-17026	Mozilla Firefox IonMonkey JIT Compiler Type Confusion (CVE-2019-17026)
Critical	21 Feb 2022	21 Feb 2022	CPAI-2019-2519		CVE-2019-4716	IBM Planning Analytics Remote Code Execution (CVE-2019-4716)
High	21 Feb 2022	21 Feb 2022	CPAI-2021-1089		CVE-2021-30858	Apple iOS Use After Free (CVE-2021-30858)
High	21 Feb 2022	21 Feb 2022	CPAI-2022-0045		CVE-2022-21661	WordPress WP_Query SQL Injection (CVE-2022-21661)
Medium	20 Feb 2022	20 Feb 2022	CPAI-2021-1071		CVE-2021-21707	PHP XML Parser Remote Code Execution (CVE-2021-21707)
Critical	17 Feb 2022	17 Feb 2022	CPAI-2021-1087		CVE-2021-22991	F5 BIG-IP Buffer Overflow (CVE-2021-22991)
High	17 Feb 2022	17 Feb 2022	CPAI-2021-1088		CVE-2021-42561	MITRE Caldera Command Injection (CVE-2021-42561)
Medium	17 Feb 2022	17 Feb 2022	CPAI-2021-1085		CVE-2021-39237 CVE-2021-39238	HP Multi-Function Printers Information Disclosure (CVE-2021-39237; CVE-2021-39238)
Critical	17 Feb 2022	17 Feb 2022	CPAI-2022-0042		CVE-2022-22536	SAP NetWeaver Application Server Remote Code Execution (CVE-2022-22536)
High	15 Feb 2022	16 Feb 2022	CPAI-2021-1059		CVE-2021-20022	SonicWall Email Security Arbitrary File Upload (CVE-2021-20022)
Critical	16 Feb 2022	16 Feb 2022	CPAI-2021-1024		CVE-2021-37415	Zoho ManageEngine ServiceDesk Authentication Bypass (CVE-2021-37415)
Critical	16 Feb 2022	16 Feb 2022	CPAI-2022-0022		CVE-2020-6492	Google Chrome WebGL Use After Free (CVE-2020-6492)
High	9 Feb 2022	15 Feb 2022	CPAI-2022-0033			Emotet Maldoc Download Page
Critical	15 Feb 2022	15 Feb 2022	CPAI-2020-3455		CVE-2020-28018	Exim Use After Free (CVE-2020-28018)
Critical	9 Feb 2022	9 Feb 2022	CPAI-2020-3454		CVE-2020-13927	Apache Airflow Authentication Bypass (CVE-2020-13927)
High	8 Feb 2022	8 Feb 2022	CPAI-2022-0024	Microsoft CVE-2022-22715	CVE-2022-22715	Microsoft Named Pipe File System Elevation of Privilege (CVE-2022-22715)
High	8 Feb 2022	8 Feb 2022	CPAI-2022-0030	Microsoft CVE-2022-21996	CVE-2022-21996	Microsoft Win32k Elevation of Privilege (CVE-2022-21996)
High	8 Feb 2022	8 Feb 2022	CPAI-2022-0028	Microsoft CVE-2022-22000	CVE-2022-22000	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-22000)
High	8 Feb 2022	8 Feb 2022	CPAI-2022-0025	Microsoft CVE-2022-22718	CVE-2022-22718	Microsoft Windows Print Spooler Elevation of Privilege (CVE-2022-22718)
High	8 Feb 2022	8 Feb 2022	CPAI-2022-0029	Microsoft CVE-2022-21989	CVE-2022-21989	Microsoft Windows Kernel Elevation of Privilege (CVE-2022-21989)