# 2016 Advisories Archive

| Severity | Date Published | Date Updated | Check Point Reference | Source | Industry Reference | Description |
| --- | --- | --- | --- | --- | --- | --- |
| **Critical** | 6 Jan 2016 | 29 Jun 2026 | [CPAI-2025-17276](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-17276.html) |  | [CVE-2020-13118](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13118)<br>[CVE-2020-5510](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5510)<br>[CVE-2021-36748](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36748)<br>[CVE-2021-43140](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43140)<br>[CVE-2022-24219](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24219)<br>[CVE-2022-24220](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24220)<br>[CVE-2022-24221](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24221)<br>[CVE-2022-24222](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24222)<br>[CVE-2022-27412](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27412)<br>[CVE-2022-34265](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34265)<br>[CVE-2022-35121](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35121)<br>[CVE-2022-36669](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36669)<br>[CVE-2022-47862](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47862)<br>[CVE-2025-67644](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67644) | [SQL Injection Scanning Attempt (CVE-2020-13118; CVE-2020-5510; CVE-2021-36748; CVE-2021-43140; CVE-2022-24219; CVE-2022-24220; CVE-2022-24221; CVE-2022-24222; CVE-2022-27412; CVE-2022-34265; CVE-2022-35121; CVE-2022-36669; CVE-2022-47862; CVE-2025-67644)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-17276.html) |
| **Critical** | 6 Jan 2016 | 28 Jun 2026 | [CPAI-2025-17218](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-17218.html) |  | [CVE-2020-13118](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13118)<br>[CVE-2020-5510](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5510)<br>[CVE-2021-36748](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36748)<br>[CVE-2021-43140](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43140)<br>[CVE-2022-24219](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24219)<br>[CVE-2022-24220](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24220)<br>[CVE-2022-24221](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24221)<br>[CVE-2022-24222](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24222)<br>[CVE-2022-27412](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27412)<br>[CVE-2022-34265](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34265)<br>[CVE-2022-35121](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35121)<br>[CVE-2022-36669](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36669)<br>[CVE-2022-47862](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47862)<br>[CVE-2025-67644](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67644) | [SQL Injection Scanning Attempt (CVE-2020-13118; CVE-2020-5510; CVE-2021-36748; CVE-2021-43140; CVE-2022-24219; CVE-2022-24220; CVE-2022-24221; CVE-2022-24222; CVE-2022-27412; CVE-2022-34265; CVE-2022-35121; CVE-2022-36669; CVE-2022-47862; CVE-2025-67644)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-17218.html) |
| **Critical** | 26 Jul 2016 | 23 Jun 2026 | [CPAI-2025-17115](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-17115.html) |  | [CVE-2022-1813](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1813)<br>[CVE-2022-24086](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24086)<br>[CVE-2022-24193](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24193)<br>[CVE-2022-26536](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26536)<br>[CVE-2022-31499](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31499)<br>[CVE-2022-32092](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32092)<br>[CVE-2022-34538](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34538)<br>[CVE-2022-37810](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37810)<br>[CVE-2022-40048](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40048)<br>[CVE-2022-40475](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40475)<br>[CVE-2023-25717](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25717)<br>[CVE-2024-50603](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50603)<br>[CVE-2025-36604](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-36604) | [Command Injection Over HTTP (CVE-2022-1813; CVE-2022-24086; CVE-2022-24193; CVE-2022-26536; CVE-2022-31499; CVE-2022-32092; CVE-2022-34538; CVE-2022-37810; CVE-2022-40048; CVE-2022-40475; CVE-2023-25717; CVE-2024-50603; CVE-2025-36604)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-17115.html) |
| **Critical** | 22 Mar 2016 | 9 Jun 2026 | [CPAI-2026-6509](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2026-6509.html) |  | [CVE-2022-28102](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28102)<br>[CVE-2022-28363](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28363)<br>[CVE-2022-29548](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29548)<br>[CVE-2022-30776](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30776)<br>[CVE-2022-30777](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30777)<br>[CVE-2022-31798](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31798)<br>[CVE-2022-3960](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3960)<br>[CVE-2022-46381](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46381)<br>[CVE-2022-48311](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48311)<br>[CVE-2023-23383](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23383)<br>[CVE-2023-43770](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43770)<br>[CVE-2024-30268](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30268)<br>[CVE-2025-27915](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27915)<br>[CVE-2026-47933](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47933) | [Cross-Site Scripting Scanning Attempt (CVE-2022-28102; CVE-2022-28363; CVE-2022-29548; CVE-2022-30776; CVE-2022-30777; CVE-2022-31798; CVE-2022-3960; CVE-2022-46381; CVE-2022-48311; CVE-2023-23383; CVE-2023-43770; CVE-2024-30268; CVE-2025-27915; CVE-2026-47933)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2026-6509.html) |
| **Critical** | 6 Jan 2016 | 4 Jun 2026 | [CPAI-2025-16456](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-16456.html) |  | [CVE-2020-13118](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13118)<br>[CVE-2020-5510](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5510)<br>[CVE-2021-36748](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36748)<br>[CVE-2021-43140](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43140)<br>[CVE-2022-24219](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24219)<br>[CVE-2022-24220](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24220)<br>[CVE-2022-24221](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24221)<br>[CVE-2022-24222](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24222)<br>[CVE-2022-27412](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27412)<br>[CVE-2022-34265](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34265)<br>[CVE-2022-35121](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35121)<br>[CVE-2022-36669](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36669)<br>[CVE-2022-47862](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47862)<br>[CVE-2025-67644](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67644) | [SQL Injection Scanning Attempt (CVE-2020-13118; CVE-2020-5510; CVE-2021-36748; CVE-2021-43140; CVE-2022-24219; CVE-2022-24220; CVE-2022-24221; CVE-2022-24222; CVE-2022-27412; CVE-2022-34265; CVE-2022-35121; CVE-2022-36669; CVE-2022-47862; CVE-2025-67644)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-16456.html) |
| **Critical** | 6 Jan 2016 | 24 May 2026 | [CPAI-2023-3933](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2023-3933.html) |  | [CVE-2020-13118](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13118)<br>[CVE-2020-5510](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5510)<br>[CVE-2021-36748](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36748)<br>[CVE-2021-43140](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43140)<br>[CVE-2022-24219](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24219)<br>[CVE-2022-24220](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24220)<br>[CVE-2022-24221](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24221)<br>[CVE-2022-24222](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24222)<br>[CVE-2022-27412](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27412)<br>[CVE-2022-34265](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34265)<br>[CVE-2022-35121](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35121)<br>[CVE-2022-36669](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36669)<br>[CVE-2022-47862](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47862)<br>[CVE-2023-24780](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24780) | [SQL Injection Scanning Attempt (CVE-2020-13118; CVE-2020-5510; CVE-2021-36748; CVE-2021-43140; CVE-2022-24219; CVE-2022-24220; CVE-2022-24221; CVE-2022-24222; CVE-2022-27412; CVE-2022-34265; CVE-2022-35121; CVE-2022-36669; CVE-2022-47862; CVE-2023-24780)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2023-3933.html) |
| **Critical** | 26 Jul 2016 | 3 May 2026 | [CPAI-2025-15739](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-15739.html) |  | [CVE-2022-1813](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1813)<br>[CVE-2022-24086](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24086)<br>[CVE-2022-24193](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24193)<br>[CVE-2022-26536](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26536)<br>[CVE-2022-31499](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31499)<br>[CVE-2022-32092](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32092)<br>[CVE-2022-34538](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34538)<br>[CVE-2022-37810](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37810)<br>[CVE-2022-40048](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40048)<br>[CVE-2022-40475](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40475)<br>[CVE-2023-25717](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25717)<br>[CVE-2024-50603](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50603)<br>[CVE-2025-36604](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-36604) | [Command Injection Over HTTP (CVE-2022-1813; CVE-2022-24086; CVE-2022-24193; CVE-2022-26536; CVE-2022-31499; CVE-2022-32092; CVE-2022-34538; CVE-2022-37810; CVE-2022-40048; CVE-2022-40475; CVE-2023-25717; CVE-2024-50603; CVE-2025-36604)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-15739.html) |
| **Critical** | 6 Jan 2016 | 23 Apr 2026 | [CPAI-2023-3414](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2023-3414.html) |  | [CVE-2020-13118](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13118)<br>[CVE-2020-5510](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5510)<br>[CVE-2021-36748](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36748)<br>[CVE-2021-43140](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43140)<br>[CVE-2022-24219](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24219)<br>[CVE-2022-24220](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24220)<br>[CVE-2022-24221](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24221)<br>[CVE-2022-24222](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24222)<br>[CVE-2022-27412](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27412)<br>[CVE-2022-34265](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34265)<br>[CVE-2022-35121](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35121)<br>[CVE-2022-36669](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36669)<br>[CVE-2022-47862](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47862)<br>[CVE-2023-24780](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24780) | [SQL Injection Scanning Attempt (CVE-2020-13118; CVE-2020-5510; CVE-2021-36748; CVE-2021-43140; CVE-2022-24219; CVE-2022-24220; CVE-2022-24221; CVE-2022-24222; CVE-2022-27412; CVE-2022-34265; CVE-2022-35121; CVE-2022-36669; CVE-2022-47862; CVE-2023-24780)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2023-3414.html) |
| **High** | 23 Mar 2016 | 31 Mar 2026 | [CPAI-2014-2863](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2014-2863.html) |  | [CVE-2014-9735](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9735) | [WordPress Multiple Plugins Arbitrary File Upload (CVE-2014-9735)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2014-2863.html) |
| **Medium** | 18 Jul 2016 | 24 Feb 2026 | [CPAI-2016-1576](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1576.html) |  | [CVE-2016-4465](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4465) | [Apache Struts Denial of Service (CVE-2016-4465)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1576.html) |
| **Critical** | 31 Jul 2016 | 9 Feb 2026 | [CPAI-2016-0688](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0688.html) |  |  | [Centreon Web Useralias Remote Command Execution](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0688.html) |
| **Critical** | 17 Jul 2016 | 9 Feb 2026 | [CPAI-2025-12006](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-12006.html) |  | [CVE-2025-34111](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-34111) | [Tiki Wiki CMS Groupware Unauthenticated File Upload (CVE-2025-34111)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-12006.html) |
| **Critical** | 6 Jan 2016 | 21 Jan 2026 | [CPAI-2023-3186](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2023-3186.html) |  | [CVE-2020-13118](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13118)<br>[CVE-2020-5510](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5510)<br>[CVE-2021-36748](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36748)<br>[CVE-2021-43140](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43140)<br>[CVE-2022-24219](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24219)<br>[CVE-2022-24220](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24220)<br>[CVE-2022-24221](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24221)<br>[CVE-2022-24222](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24222)<br>[CVE-2022-27412](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27412)<br>[CVE-2022-34265](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34265)<br>[CVE-2022-35121](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35121)<br>[CVE-2022-36669](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36669)<br>[CVE-2022-47862](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47862)<br>[CVE-2023-24780](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24780) | [SQL Injection Scanning Attempt (CVE-2020-13118; CVE-2020-5510; CVE-2021-36748; CVE-2021-43140; CVE-2022-24219; CVE-2022-24220; CVE-2022-24221; CVE-2022-24222; CVE-2022-27412; CVE-2022-34265; CVE-2022-35121; CVE-2022-36669; CVE-2022-47862; CVE-2023-24780)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2023-3186.html) |
| **Critical** | 19 Dec 2016 | 25 Dec 2025 | [CPAI-2016-1118](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1118.html) |  | [CVE-2008-6976](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6976) | [MikroTik RouterOS SNMP Security Bypass (CVE-2008-6976)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1118.html) |
| **Critical** | 7 Dec 2016 | 25 Dec 2025 | [CPAI-2016-1091](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1091.html) | [Memcached](https://github.com/memcached/memcached/wiki/ReleaseNotes1433) | [CVE-2016-8704](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8704) | [Memcached process_bin_append_prepend Integer Overflow (CVE-2016-8704)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1091.html) |
| **Medium** | 28 Aug 2016 | 25 Dec 2025 | [CPAI-2016-0726](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0726.html) |  | [CVE-2014-8150](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8150) | [Web Server HTTP Request URL Injection (CVE-2014-8150)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0726.html) |
| **Medium** | 7 Jul 2016 | 25 Dec 2025 | [CPAI-2016-0582](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0582.html) |  |  | [WECON LeviStudio Stack Buffer Overflow](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0582.html) |
| **Medium** | 5 Jul 2016 | 25 Dec 2025 | [CPAI-2016-0565](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0565.html) | [Ntp.org](http://support.ntp.org/bin/view/Main/NtpBug3046) | [CVE-2016-4957](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4957) | [Network Time Protocol Daemon crypto-NAK Denial of Service (CVE-2016-4957)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0565.html) |
| **Critical** | 1 Jun 2016 | 25 Dec 2025 | [CPAI-2016-0425](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0425.html) |  | [CVE-2015-2794](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2794) | [DotNetNuke Administration Authentication Bypass (CVE-2015-2794)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0425.html) |
| **Critical** | 22 Mar 2016 | 24 Nov 2025 | [CPAI-2025-4905](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-4905.html) |  | [CVE-2022-27926](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27926)<br>[CVE-2022-28102](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28102)<br>[CVE-2022-28363](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28363)<br>[CVE-2022-29548](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29548)<br>[CVE-2022-30776](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30776)<br>[CVE-2022-30777](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30777)<br>[CVE-2022-31798](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31798)<br>[CVE-2022-3960](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3960)<br>[CVE-2022-46381](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46381)<br>[CVE-2022-48311](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48311)<br>[CVE-2023-23383](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23383)<br>[CVE-2023-43770](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43770)<br>[CVE-2024-30268](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30268)<br>[CVE-2025-27915](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27915) | [Cross-Site Scripting Scanning Attempt (CVE-2022-27926; CVE-2022-28102; CVE-2022-28363; CVE-2022-29548; CVE-2022-30776; CVE-2022-30777; CVE-2022-31798; CVE-2022-3960; CVE-2022-46381; CVE-2022-48311; CVE-2023-23383; CVE-2023-43770; CVE-2024-30268; CVE-2025-27915)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-4905.html) |
| **Critical** | 17 Feb 2016 | 15 Oct 2025 | [CPAI-2023-2398](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2023-2398.html) |  | [CVE-2014-1617](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1617)<br>[CVE-2016-4734](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4734)<br>[CVE-2017-5053](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5053)<br>[CVE-2017-5071](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5071)<br>[CVE-2019-8820](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8820)<br>[CVE-2019-8822](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8822)<br>[CVE-2022-2853](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2853)<br>[CVE-2023-4352](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4352) | [JavaScript Malicious Enumerator Obfuscation Technique (CVE-2014-1617; CVE-2016-4734; CVE-2017-5053; CVE-2017-5071; CVE-2019-8820; CVE-2019-8822; CVE-2022-2853; CVE-2023-4352)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2023-2398.html) |
| **Critical** | 26 Jul 2016 | 5 Oct 2025 | [CPAI-2025-2178](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-2178.html) |  | [CVE-2022-1813](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1813)<br>[CVE-2022-24086](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24086)<br>[CVE-2022-24193](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24193)<br>[CVE-2022-26536](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26536)<br>[CVE-2022-31499](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31499)<br>[CVE-2022-32092](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32092)<br>[CVE-2022-34538](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34538)<br>[CVE-2022-37810](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37810)<br>[CVE-2022-40048](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40048)<br>[CVE-2022-40475](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40475)<br>[CVE-2023-25717](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25717)<br>[CVE-2024-50603](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50603)<br>[CVE-2025-36604](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-36604) | [Command Injection Over HTTP (CVE-2022-1813; CVE-2022-24086; CVE-2022-24193; CVE-2022-26536; CVE-2022-31499; CVE-2022-32092; CVE-2022-34538; CVE-2022-37810; CVE-2022-40048; CVE-2022-40475; CVE-2023-25717; CVE-2024-50603; CVE-2025-36604)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2025-2178.html) |
| **High** | 18 Aug 2016 | 4 Sep 2025 | [CPAI-2016-1499](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1499.html) |  | [CVE-2016-6366](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6366) | [Cisco Adaptive Security Appliance Software Buffer Overflow (CVE-2016-6366)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1499.html) |
| **Critical** | 12 Jul 2016 | 14 Aug 2025 | [CPAI-2016-0594](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0594.html) |  | [CVE-2018-8734](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8734) | [Nagios XI SQL Injection (CVE-2018-8734)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0594.html) |
| **Critical** | 17 Feb 2016 | 6 Aug 2025 | [CPAI-2016-0127](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0127.html) |  | [CVE-2016-4734](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4734)<br>[CVE-2017-5053](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5053)<br>[CVE-2017-5071](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5071)<br>[CVE-2019-8820](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8820)<br>[CVE-2019-8822](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8822)<br>[CVE-2022-2853](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2853)<br>[CVE-2023-4352](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4352) | [JavaScript Malicious Enumerator Obfuscation Technique (CVE-2016-4734; CVE-2017-5053; CVE-2017-5071; CVE-2019-8820; CVE-2019-8822; CVE-2022-2853; CVE-2023-4352)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0127.html) |
| **Critical** | 23 Feb 2016 | 6 Aug 2025 | [CPAI-2016-0135](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0135.html) |  | [CVE-2015-6098](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6098)<br>[CVE-2015-6102](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6102)<br>[CVE-2017-6331](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6331) | [Suspicious Executable Mail Attachment (CVE-2015-6098; CVE-2015-6102; CVE-2017-6331)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0135.html) |
| **High** | 22 May 2016 | 24 Jul 2025 | [CPAI-2016-0365](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0365.html) | Apache [S2-031](http://struts.apache.org/docs/s2-031.html) | [CVE-2016-3082](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3082) | [Apache Struts XSLTResult File Inclusion (CVE-2016-3082)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0365.html) |
| **Critical** | 26 Jul 2016 | 21 Jul 2025 | [CPAI-2016-0658](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0658.html) |  | [CVE-2021-43936](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43936)<br>[CVE-2022-1813](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1813)<br>[CVE-2022-24086](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24086)<br>[CVE-2022-24193](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24193)<br>[CVE-2022-26536](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26536)<br>[CVE-2022-31499](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31499)<br>[CVE-2022-32092](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32092)<br>[CVE-2022-34538](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34538)<br>[CVE-2022-37810](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37810)<br>[CVE-2022-40048](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40048)<br>[CVE-2022-40475](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40475)<br>[CVE-2023-25717](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25717)<br>[CVE-2024-50603](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50603) | [Command Injection Over HTTP (CVE-2021-43936; CVE-2022-1813; CVE-2022-24086; CVE-2022-24193; CVE-2022-26536; CVE-2022-31499; CVE-2022-32092; CVE-2022-34538; CVE-2022-37810; CVE-2022-40048; CVE-2022-40475; CVE-2023-25717; CVE-2024-50603)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0658.html) |
| **Critical** | 27 Dec 2016 | 14 Jul 2025 | [CPAI-2016-1129](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1129.html) |  | [CVE-2016-10033](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10033)<br>[CVE-2016-10045](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10045) | [PHPMailer Mail From Remote Code Execution (CVE-2016-10033; CVE-2016-10045)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1129.html) |
| **Critical** | 21 Nov 2016 | 27 Jun 2025 | [CPAI-2016-1039](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1039.html) |  | [CVE-2012-6664](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6664) | [Distinct TFTP Directory Traversal (CVE-2012-6664)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1039.html) |
| **Medium** | 3 Nov 2016 | 27 Jun 2025 | [CPAI-2016-0993](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0993.html) | [OpenJPEG](http://www.openjpeg.org/2016/09/28/OpenJPEG-2.1.2-released) | [CVE-2016-8332](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8332) | [OpenJPEG JPEG2000 Image Processing Out-of-Bounds Write (CVE-2016-8332)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0993.html) |
| **Medium** | 28 Dec 2016 | 26 Jun 2025 | [CPAI-2016-1132](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1132.html) | [Vim](https://github.com/vim/vim/releases/tag/v8.0.0056) | [CVE-2016-1248](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1248) | [Vim modelines Remote Command Execution (CVE-2016-1248)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1132.html) |
| **High** | 20 Dec 2016 | 26 Jun 2025 | [CPAI-2017-0002](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2017-0002.html) |  | [CVE-2015-2350](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2350) | [MikroTik RouterOS Admin Password Change (CVE-2015-2350)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2017-0002.html) |
| **Medium** | 8 Dec 2016 | 26 Jun 2025 | [CPAI-2016-1094](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1094.html) | [Memcached](https://github.com/memcached/memcached/wiki/ReleaseNotes1433) | [CVE-2016-8706](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8706) | [Memcached process_bin_sasl_auth Integer Underflow (CVE-2016-8706)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1094.html) |
| **High** | 6 Dec 2016 | 26 Jun 2025 | [CPAI-2016-1048](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1048.html) |  | [CVE-2013-0209](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0209) | [Movable Type Web Upgrade Remote Code Execution (CVE-2013-0209)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1048.html) |
| **Medium** | 29 Nov 2016 | 26 Jun 2025 | [CPAI-2016-1052](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1052.html) | [Memcached](https://github.com/memcached/memcached/wiki/ReleaseNotes1433) | [CVE-2016-8705](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8705) | [Memcached process_bin_update body_len Integer Overflow (CVE-2016-8705)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-1052.html) |
| **Medium** | 1 Nov 2016 | 26 Jun 2025 | [CPAI-2016-0972](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0972.html) | [LibGD](https://libgd.github.io/release-2.2.3.html) | [CVE-2016-5766](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5766) | [GD Library LibGD Integer Overflow (CVE-2016-5766)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0972.html) |
| **Critical** | 26 Oct 2016 | 26 Jun 2025 | [CPAI-2016-0992](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0992.html) | [Metasploit](https://www.rapid7.com/db/modules/exploit/windows/ftp/trellian_client_pasv) | [CVE-2010-1465](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1465) | [Trellian FTP Client PASV Remote Buffer Overflow (CVE-2010-1465)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0992.html) |
| **High** | 9 Oct 2016 | 26 Jun 2025 | [CPAI-2016-0880](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0880.html) |  | [CVE-2014-5468](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5468) | [Railo Remote File Include (CVE-2014-5468)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0880.html) |
| **High** | 28 Sep 2016 | 26 Jun 2025 | [CPAI-2015-1194](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2015-1194.html) | [OpenSSH](http://www.openssh.com/txt/release-7.0) | [CVE-2015-5600](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5600) | [OpenSSH kbdint_next_device Policy Bypass (CVE-2015-5600)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2015-1194.html) |
| **High** | 22 Sep 2016 | 26 Jun 2025 | [CPAI-2016-0819](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0819.html) |  | [CVE-2015-6922](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6922) | [Kaseya Virtual System Administrator Multiple Vulnerabilities (CVE-2015-6922)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0819.html) |
| **Medium** | 18 Sep 2016 | 26 Jun 2025 | [CPAI-2016-0803](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0803.html) | [Mantis](https://mantisbt.org/bugs/view.php?id=21611) | [CVE-2016-6837](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6837) | [Mantis Bug Tracker Filter API view_type Cross Site Scripting (CVE-2016-6837)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0803.html) |
| **High** | 6 Jul 2016 | 26 Jun 2025 | [CPAI-2016-0590](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0590.html) |  | [CVE-2016-4324](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4324) | [LibreOffice RTF parser Use After Free (CVE-2016-4324)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0590.html) |
| **Medium** | 22 Feb 2016 | 26 Jun 2025 | [CPAI-2016-0130](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0130.html) | [Unitronics](http://www.unitronics.com/docs/technical-library/click-to-open-_9-8-2.pdf) | [CVE-2015-6478](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6478) | [Unitronics VisiLogic OPLC TeeChart ActiveX RemoveSeries Out of Bounds Array Indexing (CVE-2015-6478)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0130.html) |
| **High** | 11 Feb 2016 | 26 Jun 2025 | [CPAI-2016-0089](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0089.html) | [Unitronics](http://www.unitronics.com/CERT%20Compliance%20Notice.html) | [CVE-2015-7939](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7939) | [Unitronics VisiLogic OPLC IDE vlp File Parsing Heap Buffer Overflow (CVE-2015-7939)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0089.html) |
| **N/A** | 25 Sep 2016 | 24 Jun 2025 | [CPAI-2016-0822](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0822.html) |  | [CVE-2016-2183](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2183) | [Weak SSL 3DES Cipher Suites (CVE-2016-2183)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0822.html) |
| **Critical** | 25 Aug 2016 | 24 Jun 2025 | [CPAI-2016-0725](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0725.html) |  | [CVE-2016-6600](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6600) | [WebNMS Framework Server Arbitrary File Upload (CVE-2016-6600)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0725.html) |
| **Critical** | 17 Apr 2016 | 24 Jun 2025 | [CPAI-2016-0287](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0287.html) |  | [CVE-2014-2321](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2321) | [ZTE F460/F660 Backdoor Unauthorized Access (CVE-2014-2321)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0287.html) |
| **Critical** | 1 Feb 2016 | 24 Jun 2025 | [CPAI-2016-0056](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0056.html) |  | [CVE-2018-18084](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18084) | [jQuery Suspicious URL Redirection (CVE-2018-18084)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0056.html) |
| **Medium** | 29 Jun 2016 | 22 Jun 2025 | [CPAI-2016-0540](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0540.html) |  | [CVE-2016-3717](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3717) | [ImageMagick Arbitrary File Read (CVE-2016-3717)](https://advisories.checkpoint.com/defense/advisories/public/2016/cpai-2016-0540.html) |