# 2017 Advisories Archive

| Severity | Date Published | Date Updated | Check Point Reference | Source | Industry Reference | Description |
| --- | --- | --- | --- | --- | --- | --- |
| **Critical** | 9 Jan 2017 | 28 Jun 2026 | [CPAI-2026-8063](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2026-8063.html) |  | [CVE-2018-5445](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5445)<br>[CVE-2021-37343](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37343)<br>[CVE-2021-42550](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42550)<br>[CVE-2022-26352](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26352)<br>[CVE-2022-29596](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29596)<br>[CVE-2023-1112](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1112)<br>[CVE-2023-20890](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20890)<br>[CVE-2023-38951](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38951)<br>[CVE-2023-42000](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42000)<br>[CVE-2026-21440](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21440)<br>[CVE-2026-5027](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5027)<br>[CVE-2026-6227](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6227) | [Web Servers Malicious Upload Directory Traversal (CVE-2018-5445; CVE-2021-37343; CVE-2021-42550; CVE-2022-26352; CVE-2022-29596; CVE-2023-1112; CVE-2023-20890; CVE-2023-38951; CVE-2023-42000; CVE-2026-21440; CVE-2026-5027; CVE-2026-6227)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2026-8063.html) |
| **Critical** | 9 Jan 2017 | 7 May 2026 | [CPAI-2026-4130](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2026-4130.html) |  | [CVE-2018-5445](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5445)<br>[CVE-2021-37343](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37343)<br>[CVE-2021-42550](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42550)<br>[CVE-2022-26352](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26352)<br>[CVE-2022-29596](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29596)<br>[CVE-2023-1112](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1112)<br>[CVE-2023-20890](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20890)<br>[CVE-2023-38951](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38951)<br>[CVE-2023-42000](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42000)<br>[CVE-2026-21440](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21440)<br>[CVE-2026-5027](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5027)<br>[CVE-2026-6227](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6227) | [Web Servers Malicious Upload Directory Traversal (CVE-2018-5445; CVE-2021-37343; CVE-2021-42550; CVE-2022-26352; CVE-2022-29596; CVE-2023-1112; CVE-2023-20890; CVE-2023-38951; CVE-2023-42000; CVE-2026-21440; CVE-2026-5027; CVE-2026-6227)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2026-4130.html) |
| **Critical** | 9 Jan 2017 | 16 Apr 2026 | [CPAI-2026-3132](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2026-3132.html) |  | [CVE-2018-5445](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5445)<br>[CVE-2021-37343](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37343)<br>[CVE-2021-42550](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42550)<br>[CVE-2022-26352](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26352)<br>[CVE-2022-29596](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29596)<br>[CVE-2023-1112](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1112)<br>[CVE-2023-20890](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20890)<br>[CVE-2023-38951](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38951)<br>[CVE-2023-42000](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42000)<br>[CVE-2026-21440](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21440)<br>[CVE-2026-5027](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5027) | [Web Servers Malicious Upload Directory Traversal (CVE-2018-5445; CVE-2021-37343; CVE-2021-42550; CVE-2022-26352; CVE-2022-29596; CVE-2023-1112; CVE-2023-20890; CVE-2023-38951; CVE-2023-42000; CVE-2026-21440; CVE-2026-5027)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2026-3132.html) |
| **High** | 17 Sep 2017 | 19 Feb 2026 | [CPAI-2017-2075](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-2075.html) | [HPE](https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03768en_us) | [CVE-2017-12521](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12521) | [HPE Intelligent Management Center Remote Code Execution (CVE-2017-12521)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-2075.html) |
| **Critical** | 22 Mar 2017 | 15 Feb 2026 | [CPAI-2016-1563](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2016-1563.html) | [McAfee](https://support.mcafee.com/ServicePortal/faces/wcnav_defaultSelection?lang=en-SG) | [CVE-2016-8027](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8027) | [McAfee ePolicy Orchestrator SQL Injection (CVE-2016-8027)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2016-1563.html) |
| **High** | 24 Sep 2017 | 15 Feb 2026 | [CPAI-2017-2071](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-2071.html) |  | [CVE-2017-12615](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12615)<br>[CVE-2017-12617](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12617) | [Apache Tomcat Unrestricted File Upload (CVE-2017-12615; CVE-2017-12617)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-2071.html) |
| **Critical** | 30 Nov 2017 | 9 Feb 2026 | [CPAI-2017-1041](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1041.html) |  |  | [Netflix Phishing Campaign Login and Billing Information](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1041.html) |
| **Low** | 30 Aug 2017 | 9 Feb 2026 | [CPAI-2017-0727](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0727.html) | [Cacti](https://www.cacti.net/release_notes.php?version=1.1.18) | [CVE-2017-12927](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12927) | [Cacti spikekill.php Cross-Site Scripting (CVE-2017-12927)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0727.html) |
| **Medium** | 27 Feb 2017 | 9 Feb 2026 | [CPAI-2017-0147](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0147.html) | [Brocade](http://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2016-180.htm) | [CVE-2016-8206](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8206)<br>[CVE-2016-8207](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8207) | [Brocade Network Advisor Directory Traversal (CVE-2016-8206; CVE-2016-8207)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0147.html) |
| **Critical** | 17 Oct 2017 | 21 Jan 2026 | [CPAI-2025-11087](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2025-11087.html) |  | [CVE-2019-17506](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17506)<br>[CVE-2020-9376](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9376)<br>[CVE-2023-48842](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48842)<br>[CVE-2025-14528](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14528) | [D-Link Routers Information Disclosure (CVE-2019-17506; CVE-2020-9376; CVE-2023-48842; CVE-2025-14528)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2025-11087.html) |
| **Medium** | 19 Dec 2017 | 20 Jan 2026 | [CPAI-2018-0006](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2018-0006.html) | [Google Project Zero](https://bugs.chromium.org/p/project-zero/issues/detail?id=1347#c_ts1511364837) | [CVE-2017-13795](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13795) | [Apple WebKit Use After Free Code Execution (CVE-2017-13795)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2018-0006.html) |
| **Medium** | 19 Dec 2017 | 20 Jan 2026 | [CPAI-2017-1078](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1078.html) | [Google Project Zero](https://bugs.chromium.org/p/project-zero/issues/detail?id=1344#c_ts1511364779) | [CVE-2017-13796](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13796) | [Apple WebKit Use After Free Code Execution (CVE-2017-13796)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1078.html) |
| **Medium** | 17 Dec 2017 | 20 Jan 2026 | [CPAI-2017-1071](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1071.html) | [Project Zero](https://bugs.chromium.org/p/project-zero/issues/detail?id=1348#c_ts1511364851) | [CVE-2017-13785](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13785) | [Apple WebKit Out-of-bounds Read (CVE-2017-13785)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1071.html) |
| **Medium** | 12 Dec 2017 | 20 Jan 2026 | [CPAI-2017-1063](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1063.html) | [Project zero](https://bugs.chromium.org/p/project-zero/issues/detail?id=1349#c_ts1511364865) | [CVE-2017-13784](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13784) | [Apple WebKit out-of-bounds read (CVE-2017-13784)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1063.html) |
| **Medium** | 12 Dec 2017 | 20 Jan 2026 | [CPAI-2017-1062](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1062.html) | [Project zero](https://bugs.chromium.org/p/project-zero/issues/detail?id=1350#c_ts1511364880) | [CVE-2017-13783](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13783) | [Apple WebKit out-of-bounds read (CVE-2017-13783)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1062.html) |
| **High** | 29 Nov 2017 | 20 Jan 2026 | [CPAI-2017-1026](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1026.html) |  | [CVE-2017-13792](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13792) | [Apple WebKit Use After Free Code Execution (CVE-2017-13792)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1026.html) |
| **Critical** | 9 Jan 2017 | 6 Jan 2026 | [CPAI-2026-0175](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2026-0175.html) |  | [CVE-2018-5445](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5445)<br>[CVE-2021-37343](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37343)<br>[CVE-2021-42550](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42550)<br>[CVE-2022-26352](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26352)<br>[CVE-2022-29596](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29596)<br>[CVE-2023-1112](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1112)<br>[CVE-2023-20890](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20890)<br>[CVE-2023-38951](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38951)<br>[CVE-2023-42000](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42000)<br>[CVE-2026-21440](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21440) | [Web Servers Malicious Upload Directory Traversal (CVE-2018-5445; CVE-2021-37343; CVE-2021-42550; CVE-2022-26352; CVE-2022-29596; CVE-2023-1112; CVE-2023-20890; CVE-2023-38951; CVE-2023-42000; CVE-2026-21440)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2026-0175.html) |
| **Critical** | 24 Dec 2017 | 25 Dec 2025 | [CPAI-2017-1084](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1084.html) |  | [CVE-2017-17562](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17562) | [GoAhead LD_PRELOAD Remote Code Execution (CVE-2017-17562)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1084.html) |
| **High** | 17 Oct 2017 | 25 Dec 2025 | [CPAI-2018-0023](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2018-0023.html) |  | [CVE-2017-9822](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9822) | [DNN Remote Code Execution (CVE-2017-9822)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2018-0023.html) |
| **Medium** | 23 Jul 2017 | 25 Dec 2025 | [CPAI-2017-0579](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0579.html) | [Metasploit](https://www.rapid7.com/db/modules/exploit/linux/http/ipfire_oinkcode_exec) | [CVE-2017-9757](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9757) | [IPFire ids.cgi OINKCODE Parameter Command Injection (CVE-2017-9757)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0579.html) |
| **High** | 3 Apr 2017 | 25 Dec 2025 | [CPAI-2017-0272](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0272.html) |  | [CVE-2017-5495](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5495) | [Quagga VTY Interface Denial of Service (CVE-2017-5495)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0272.html) |
| **Critical** | 17 Oct 2017 | 22 Oct 2025 | [CPAI-2017-2008](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-2008.html) | [DNSmasq](http://www.thekelleys.org.uk/dnsmasq/CHANGELOG) | [CVE-2017-14493](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14493) | [Thekelleys Dnsmasq Buffer Overflow (CVE-2017-14493)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-2008.html) |
| **Critical** | 13 Jun 2017 | 30 Sep 2025 | [CPAI-2017-1988](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1988.html) | Microsoft [CVE-2017-8543](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8543) | [CVE-2017-8543](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8543) | [Microsoft Windows Search Buffer Overflow (CVE-2017-8543)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1988.html) |
| **High** | 23 Apr 2017 | 28 Jul 2025 | [CPAI-2017-0307](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0307.html) | [OpenSSH](https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/013_ssh_kexinit.patch.sig) | [CVE-2016-8858](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8858) | [OpenBSD OpenSSH Denial of Service (CVE-2016-8858)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0307.html) |
| **Critical** | 28 Jun 2017 | 27 Jul 2025 | [CPAI-2017-0530](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0530.html) |  |  | [Petya Ransomware Lateral Movement Remote Code Execution](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0530.html) |
| **High** | 13 Dec 2017 | 27 Jun 2025 | [CPAI-2017-1067](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1067.html) |  | [CVE-2017-15908](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15908) | [Systemd Denial-of-Service (CVE-2017-15908)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1067.html) |
| **Critical** | 6 Nov 2017 | 27 Jun 2025 | [CPAI-2017-0863](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0863.html) |  | [CVE-2016-20016](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-20016) | [MVPower CCTV DVR Remote Code Execution (CVE-2016-20016)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0863.html) |
| **Critical** | 24 Oct 2017 | 27 Jun 2025 | [CPAI-2017-0869](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0869.html) | [DNSmasq](http://www.thekelleys.org.uk/dnsmasq/CHANGELOG) | [CVE-2017-13704](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13704) | [DNSmasq Denial Of Service (CVE-2017-13704)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0869.html) |
| **Critical** | 19 Jun 2017 | 27 Jun 2025 | [CPAI-2017-0513](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0513.html) | [IBM](http://www-01.ibm.com/support/docview.wss?uid=swg22002897) | [CVE-2017-1092](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1092) | [IBM Informix Dynamic Server index.php testconn Heap Buffer Overflow (CVE-2017-1092)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0513.html) |
| **Critical** | 9 May 2017 | 27 Jun 2025 | [CPAI-2017-0398](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0398.html) |  | [CVE-2017-7991](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7991) | [Exponent CMS SQL Injection (CVE-2017-7991)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0398.html) |
| **Critical** | 17 Oct 2017 | 26 Jun 2025 | [CPAI-2017-0843](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0843.html) | [DNSmasq](https://www.thekelleys.org.uk/dnsmasq/CHANGELOG) | [CVE-2017-14493](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14493) | [Dnsmasq DHCPv6 Stack Buffer Overflow Remote Code Execution (CVE-2017-14493)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0843.html) |
| **Critical** | 27 Nov 2017 | 26 Jun 2025 | [CPAI-2017-1016](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1016.html) |  | [CVE-2017-17215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17215) | [Huawei HG532 Router Remote Code Execution (CVE-2017-17215)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1016.html) |
| **Critical** | 19 Oct 2017 | 26 Jun 2025 | [CPAI-2017-0855](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0855.html) | [Dnsmasq](http://www.thekelleys.org.uk/dnsmasq/CHANGELOG) | [CVE-2017-14494](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14494) | [Dnsmasq DHCPv6 Remote Unauthenticated Information Disclosure (CVE-2017-14494)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0855.html) |
| **Critical** | 27 Sep 2017 | 26 Jun 2025 | [CPAI-2017-0799](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0799.html) |  | [CVE-2017-11610](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11610) | [Supervisor Supervisord XML-RPC Remote Code Execution (CVE-2017-11610)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0799.html) |
| **Medium** | 16 Jul 2017 | 26 Jun 2025 | [CPAI-2017-0568](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0568.html) | [Systemd](https://github.com/systemd/systemd/pull/6214) | [CVE-2017-9445](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445) | [Systemd resolved dns_packet_new Heap Buffer Overflow (CVE-2017-9445)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0568.html) |
| **Medium** | 11 Jun 2017 | 26 Jun 2025 | [CPAI-2017-0501](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0501.html) | [OpenVPN](http://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits) | [CVE-2017-7478](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7478) | [OpenVPN P_CONTROL Denial of Service (CVE-2017-7478)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0501.html) |
| **High** | 3 May 2017 | 26 Jun 2025 | [CPAI-2017-0377](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0377.html) | [Metasploit](https://www.rapid7.com/db/modules/exploit/windows/fileformat/allplayer_m3u_bof) | [CVE-2013-7409](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7409) | [ALLPlayer M3U File Stack Buffer Overflow (CVE-2013-7409)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0377.html) |
| **High** | 23 Apr 2017 | 26 Jun 2025 | [CPAI-2017-0309](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0309.html) |  | [CVE-2017-5177](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5177) | [VIPA Controls WinPLC7 recv Stack-based Buffer Overflow (CVE-2017-5177)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0309.html) |
| **Critical** | 27 Mar 2017 | 26 Jun 2025 | [CPAI-2017-0247](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0247.html) | [Metasploit](https://www.rapid7.com/db/modules/exploit/windows/fileformat/ht_mp3player_ht3_bof) | [CVE-2009-2485](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2485) | [HT-MP3Player 1.0 HT3 File Parsing Buffer Overflow (CVE-2009-2485)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0247.html) |
| **Critical** | 23 Mar 2017 | 26 Jun 2025 | [CPAI-2017-0240](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0240.html) | [Metasploit](https://www.rapid7.com/db/modules/exploit/windows/fileformat/djstudio_pls_bof) | [CVE-2009-4656](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4656) | [DJ Studio Pro PLS File Stack Buffer Overflow (CVE-2009-4656)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0240.html) |
| **Critical** | 15 Mar 2017 | 26 Jun 2025 | [CPAI-2017-0227](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0227.html) | [Brocade](https://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2016-012.pdf) | [CVE-2016-8204](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8204) | [Brocade Network Advisor FileReceiveServlet filename Directory Traversal (CVE-2016-8204)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0227.html) |
| **Critical** | 15 Mar 2017 | 26 Jun 2025 | [CPAI-2017-0226](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0226.html) |  | [CVE-2013-4980](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4980)<br>[CVE-2013-4981](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4981)<br>[CVE-2013-4982](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4982) | [AVTECH Devices Multiple Vulnerabilities (CVE-2013-4980; CVE-2013-4981; CVE-2013-4982)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0226.html) |
| **Critical** | 27 Feb 2017 | 26 Jun 2025 | [CPAI-2017-0148](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0148.html) | [Brocade](https://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2016-012.pdf) | [CVE-2016-8205](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8205) | [Brocade Network Advisor DashboardFileReceiveServlet filename Directory Traversal (CVE-2016-8205)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0148.html) |
| **Medium** | 26 Feb 2017 | 26 Jun 2025 | [CPAI-2017-0145](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0145.html) |  | [CVE-2016-8377](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8377) | [Fatek Automation PLC WinProladder Stack Buffer Overflow (CVE-2016-8377)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0145.html) |
| **High** | 8 Jan 2017 | 26 Jun 2025 | [CPAI-2017-0017](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0017.html) | [OpenSSH](https://github.com/openssh/openssh-portable/commit/fcd135c9df440bcd2d5870405ad3311743d78d97) | [CVE-2016-6515](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6515) | [OpenSSH sshd auth_passwd Denial of Service (CVE-2016-6515)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0017.html) |
| **Critical** | 4 Jan 2017 | 26 Jun 2025 | [CPAI-2017-0005](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0005.html) | Talos [TALOS-2016-0027](http://www.talosintelligence.com/reports/TALOS-2016-0027/) | [CVE-2015-2868](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2868) | [Trane comfort Link II DSS services handling remote code execution (CVE-2015-2868)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0005.html) |
| **Critical** | 8 Jan 2017 | 25 Jun 2025 | [CPAI-2017-0007](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0007.html) |  | [CVE-2016-5118](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5118) | [GraphicsMagick Remote Code Execution (CVE-2016-5118)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0007.html) |
| **Medium** | 2 Nov 2017 | 24 Jun 2025 | [CPAI-2017-0905](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0905.html) |  | [CVE-2017-13129](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13129) | [ZKTeco ZKTime Web Cross Site Request Forgery (CVE-2017-13129)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0905.html) |
| **Medium** | 16 Nov 2017 | 23 Jun 2025 | [CPAI-2017-1001](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1001.html) | [Cesanta](https://github.com/cesanta/mongoose/releases/tag/6.9) | [CVE-2017-2909](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2909) | [Cesanta Mongoose DNS Compressed Name Denial of Service (CVE-2017-2909)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1001.html) |
| **Critical** | 20 Dec 2017 | 19 Jun 2025 | [CPAI-2017-1082](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1082.html) |  | [CVE-2015-0899](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0899)<br>[CVE-2016-1182](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1182) | [Multiple Webservers Cross-Site Scripting Attempt (CVE-2015-0899; CVE-2016-1182)](https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-1082.html) |