# 2018 Advisories Archive
| Severity | Date Published | Date Updated | Check Point Reference | Source | Industry Reference | Description |
| --- | --- | --- | --- | --- | --- | --- |
| **Critical** | 3 Jul 2018 | 3 Jun 2026 | [CPAI-2023-3948](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2023-3948.html) | | [CVE-2013-6720](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6720)
[CVE-2018-12809](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12809)
[CVE-2019-25065](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25065)
[CVE-2020-15320](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15320)
[CVE-2020-26728](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26728)
[CVE-2020-8958](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8958)
[CVE-2022-2487](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2487)
[CVE-2022-30105](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30105)
[CVE-2022-43973](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43973)
[CVE-2022-45699](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45699)
[CVE-2023-2573](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2573)
[CVE-2023-2574](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2574)
[CVE-2023-31729](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31729)
[CVE-2023-47565](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47565) | [Command Injection Over HTTP Payload (CVE-2013-6720; CVE-2018-12809; CVE-2019-25065; CVE-2020-15320; CVE-2020-26728; CVE-2020-8958; CVE-2022-2487; CVE-2022-30105; CVE-2022-43973; CVE-2022-45699; CVE-2023-2573; CVE-2023-2574; CVE-2023-47565)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2023-3948.html) |
| **High** | 1 Jul 2018 | 5 Apr 2026 | [CPAI-2025-13025](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2025-13025.html) | | [CVE-2018-0296](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0296)
[CVE-2025-20362](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20362) | [Cisco Multiple Products Authentication Bypass (CVE-2018-0296; CVE-2025-20362)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2025-13025.html) |
| **Critical** | 29 Mar 2018 | 26 Feb 2026 | [CPAI-2026-1030](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2026-1030.html) | | | [Suspicious Exploit Kit Website Redirection](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2026-1030.html) |
| **Critical** | 29 Mar 2018 | 9 Feb 2026 | [CPAI-2018-0188](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0188.html) | | | [Suspicious Exploit Kit Website Redirection](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0188.html) |
| **High** | 2 Oct 2018 | 9 Feb 2026 | [CPAI-2018-0985](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0985.html) | | [CVE-2018-16946](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16946) | [LG Smart IP Camera Authentication Bypass (CVE-2018-16946)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0985.html) |
| **Medium** | 5 Jul 2018 | 9 Feb 2026 | [CPAI-2018-0571](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0571.html) | | | [Multiple Browsers Download Bomb Trick](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0571.html) |
| **Medium** | 8 Jan 2018 | 9 Feb 2026 | [CPAI-2018-0020](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0020.html) | [Metasploit](https://www.rapid7.com/db/modules/exploit/multi/http/orientdb_exec) | | [OrientDB Server Remote Code Execution](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0020.html) |
| **Critical** | 1 Jul 2018 | 26 Jan 2026 | [CPAI-2025-2374](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2025-2374.html) | | [CVE-2018-0296](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0296)
[CVE-2025-20362](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20362) | [Cisco Multiple Products Authentication Bypass (CVE-2018-0296; CVE-2025-20362)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2025-2374.html) |
| **High** | 31 Dec 2018 | 20 Jan 2026 | [CPAI-2019-0017](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2019-0017.html) | | [CVE-2018-4233](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4233) | [Apple WebKit Memory Corruption (CVE-2018-4233)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2019-0017.html) |
| **High** | 7 Oct 2018 | 20 Jan 2026 | [CPAI-2018-1009](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-1009.html) | | [CVE-2018-16076](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16076) | [Google PDFium Out-of-bounds read (CVE-2018-16076)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-1009.html) |
| **High** | 30 Jul 2018 | 20 Jan 2026 | [CPAI-2018-0768](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0768.html) | [Project zero](https://bugs.chromium.org/p/project-zero/issues/detail?id=1545) | [CVE-2018-4222](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4222) | [Apple WebKit Out Of Bounds Read (CVE-2018-4222)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0768.html) |
| **High** | 25 Jul 2018 | 20 Jan 2026 | [CPAI-2018-0767](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0767.html) | [Project zero](https://bugs.chromium.org/p/project-zero/issues/detail?id=1553) | [CVE-2018-4218](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4218) | [Apple WebKit Use-after-free (CVE-2018-4218)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0767.html) |
| **Critical** | 19 Jun 2018 | 1 Jan 2026 | [CPAI-2018-0558](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0558.html) | | [CVE-2018-10658](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10658)
[CVE-2018-10659](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10659)
[CVE-2018-10660](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10660)
[CVE-2018-10661](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10661)
[CVE-2018-10662](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10662)
[CVE-2018-10663](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10663)
[CVE-2018-10664](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10664) | [VDOO Axis Camera Authentication Bypass (CVE-2018-10658; CVE-2018-10659; CVE-2018-10660; CVE-2018-10661; CVE-2018-10662; CVE-2018-10663; CVE-2018-10664)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0558.html) |
| **High** | 10 Oct 2018 | 25 Dec 2025 | [CPAI-2018-1025](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-1025.html) | [Project zero](https://bugs.chromium.org/p/project-zero/issues/detail?id=1606) | [CVE-2018-16083](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16083) | [WebRTC FEC Out Of Bounds Read (CVE-2018-16083)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-1025.html) |
| **High** | 10 Oct 2018 | 25 Dec 2025 | [CPAI-2018-1024](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-1024.html) | [Project zero](https://bugs.chromium.org/p/project-zero/issues/detail?id=1601) | [CVE-2018-16071](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16071) | [WebRTC Use After Free Code Execution (CVE-2018-16071)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-1024.html) |
| **High** | 9 Jul 2018 | 25 Dec 2025 | [CPAI-2018-0697](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0697.html) | | [CVE-2018-11311](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11311) | [mySCADA myPRO 7 Authentication Bypass (CVE-2018-11311)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0697.html) |
| **High** | 21 Jun 2018 | 25 Dec 2025 | [CPAI-2018-0552](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0552.html) | | [CVE-2018-8235](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8235) | [Multiple Web Browsers Security Feature Bypass Information Disclosure (CVE-2018-8235)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0552.html) |
| **Critical** | 25 Jan 2018 | 25 Dec 2025 | [CPAI-2018-0043](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0043.html) | | [CVE-2018-1000006](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000006) | [Electron Protocol Handler Remote Code Execution (CVE-2018-1000006)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0043.html) |
| **Critical** | 29 May 2018 | 14 Dec 2025 | [CPAI-2018-0496](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0496.html) | | [CVE-2016-20017](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-20017) | [D-Link DSL-2750B Command Injection (CVE-2016-20017)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0496.html) |
| **Critical** | 3 Oct 2018 | 11 Dec 2025 | [CPAI-2018-0988](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0988.html) | | [CVE-2015-2051](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2051)
[CVE-2019-10891](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10891)
[CVE-2022-37056](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37056)
[CVE-2024-33112](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33112) | [D-Link Multiple Products Remote Code Execution (CVE-2015-2051; CVE-2019-10891; CVE-2022-37056; CVE-2024-33112)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0988.html) |
| **Critical** | 12 Apr 2018 | 4 Dec 2025 | [CPAI-2018-3183](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-3183.html) | | [CVE-2018-1270](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1270)
[CVE-2018-1275](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1275) | [VMware Spring Framework Remote Code Execution (CVE-2018-1270; CVE-2018-1275)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-3183.html) |
| **Critical** | 29 Mar 2018 | 3 Dec 2025 | [CPAI-2018-0192](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0192.html) | | [CVE-2018-7600](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7600) | [Drupal Core Remote Code Execution (CVE-2018-7600)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0192.html) |
| **High** | 17 Dec 2018 | 16 Oct 2025 | [CPAI-2025-2711](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2025-2711.html) | | | [Magellan SQLite SQL Injection](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2025-2711.html) |
| **High** | 12 Jul 2018 | 8 Oct 2025 | [CPAI-2018-3004](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-3004.html) | [Project zero](https://bugs.chromium.org/p/project-zero/issues/detail?id=1563) | [CVE-2018-8145](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8145) | [Microsoft Multiple Products Buffer Overflow (CVE-2018-8145)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-3004.html) |
| **Critical** | 15 Feb 2018 | 5 Oct 2025 | [CPAI-2017-1991](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2017-1991.html) | | [CVE-2017-1000353](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000353) | [Jenkins CI Unauthenticated Remote Code Execution (CVE-2017-1000353)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2017-1991.html) |
| **Critical** | 15 Feb 2018 | 5 Oct 2025 | [CPAI-2017-1993](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2017-1993.html) | | [CVE-2017-1000353](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000353) | [Jenkins CI Unauthenticated Remote Code Execution (CVE-2017-1000353)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2017-1993.html) |
| **Critical** | 3 Jul 2018 | 17 Sep 2025 | [CPAI-2023-2287](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2023-2287.html) | | [CVE-2013-6720](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6720)
[CVE-2018-12809](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12809)
[CVE-2019-25065](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25065)
[CVE-2020-15320](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15320)
[CVE-2020-26728](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26728)
[CVE-2020-8958](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8958)
[CVE-2022-2487](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2487)
[CVE-2022-30105](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30105)
[CVE-2022-43973](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43973)
[CVE-2022-45699](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45699)
[CVE-2023-2573](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2573)
[CVE-2023-2574](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2574)
[CVE-2023-47565](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47565) | [Command Injection Over HTTP Payload (CVE-2013-6720; CVE-2018-12809; CVE-2019-25065; CVE-2020-15320; CVE-2020-26728; CVE-2020-8958; CVE-2022-2487; CVE-2022-30105; CVE-2022-43973; CVE-2022-45699; CVE-2023-2573; CVE-2023-2574; CVE-2023-47565)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2023-2287.html) |
| **Critical** | 3 Jul 2018 | 27 Aug 2025 | [CPAI-2004-0240](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2004-0240.html) | | [CVE-2004-0899](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0899)
[CVE-2004-0900](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0900) | [Microsoft Windows NT Denial of Service (CVE-2004-0899; CVE-2004-0900)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2004-0240.html) |
| **Critical** | 27 Sep 2018 | 14 Aug 2025 | [CPAI-2018-0983](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0983.html) | | [CVE-2018-9866](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9866) | [SonicWall Global Management System Remote Code Execution (CVE-2018-9866)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0983.html) |
| **High** | 23 Aug 2018 | 14 Aug 2025 | [CPAI-2018-0849](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0849.html) | | [CVE-2018-11776](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11776) | [Apache Struts Remote Code Execution (CVE-2018-11776)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0849.html) |
| **Critical** | 24 Jul 2018 | 14 Aug 2025 | [CPAI-2018-0769](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0769.html) | | [CVE-2018-2894](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2894) | [Oracle WebLogic WLS Server Component Arbitrary File Upload (CVE-2018-2894)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0769.html) |
| **High** | 25 Jun 2018 | 14 Aug 2025 | [CPAI-2018-0553](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0553.html) | | [CVE-2018-12254](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12254) | [Joomla Ek Rishta Component SQL Injection (CVE-2018-12254)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0553.html) |
| **Critical** | 26 Apr 2018 | 14 Aug 2025 | [CPAI-2018-0355](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0355.html) | | [CVE-2018-7602](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7602) | [Drupal Remote Code Execution (CVE-2018-7602)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0355.html) |
| **Critical** | 22 Apr 2018 | 14 Aug 2025 | [CPAI-2018-0337](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0337.html) | | [CVE-2018-2628](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2628)
[CVE-2018-2893](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2893) | [Oracle WebLogic WLS Core Component Remote Code Execution (CVE-2018-2628; CVE-2018-2893)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0337.html) |
| **Critical** | 29 Mar 2018 | 6 Aug 2025 | [CPAI-2018-0189](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0189.html) | | | [Cobalt Strike Beacon Suspicious Communication](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0189.html) |
| **Critical** | 23 Jan 2018 | 14 Jul 2025 | [CPAI-2018-0132](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0132.html) | | [CVE-2009-2765](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2765)
[CVE-2025-5441](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5441)
[CVE-2025-5442](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5442) | [Multiple IoT Command Injection (CVE-2009-2765; CVE-2025-5441; CVE-2025-5442)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0132.html) |
| **High** | 22 Nov 2018 | 27 Jun 2025 | [CPAI-2018-1299](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-1299.html) | | [CVE-2017-6343](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6343) | [Dahuasecurity Smartpss Firmware Authentication Bypass (CVE-2017-6343)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-1299.html) |
| **Critical** | 17 Apr 2018 | 27 Jun 2025 | [CPAI-2018-0323](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0323.html) | | [CVE-2018-1273](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1273) | [Pivotal Spring Commons Remote Code Execution (CVE-2018-1273)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0323.html) |
| **Critical** | 9 Dec 2018 | 26 Jun 2025 | [CPAI-2018-1274](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-1274.html) | | [CVE-2018-1002105](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1002105) | [Kubernetes API server Authentication Bypass (CVE-2018-1002105)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-1274.html) |
| **Critical** | 8 Oct 2018 | 26 Jun 2025 | [CPAI-2018-1017](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-1017.html) | | [CVE-2018-1156](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1156) | [MikroTik RouterOS Buffer Overflow (CVE-2018-1156)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-1017.html) |
| **High** | 2 Oct 2018 | 26 Jun 2025 | [CPAI-2018-2929](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-2929.html) | | [CVE-2018-12015](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12015) | [Perl Archive Tar Arbitrary File Overwrite (CVE-2018-12015)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-2929.html) |
| **High** | 15 Aug 2018 | 26 Jun 2025 | [CPAI-2018-0845](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0845.html) | | [CVE-2013-2618](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2618) | [Network Weathermap Persistent Cross-Site Scripting (CVE-2013-2618)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0845.html) |
| **Critical** | 31 Jul 2018 | 26 Jun 2025 | [CPAI-2018-0802](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0802.html) | | [CVE-2009-3364](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3364)
[CVE-2017-6465](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6465)
[CVE-2018-7573](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7573) | [FTPShell Client Buffer Overflow (CVE-2009-3364; CVE-2017-6465; CVE-2018-7573)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0802.html) |
| **High** | 9 Jul 2018 | 26 Jun 2025 | [CPAI-2018-0696](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0696.html) | | [CVE-2018-1000094](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000094) | [CMS Made Simple File Manager Remote Code Execution (CVE-2018-1000094)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0696.html) |
| **Critical** | 25 Jun 2018 | 26 Jun 2025 | [CPAI-2018-0738](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0738.html) | | [CVE-2012-5960](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5960) | [Portable SDK for UPnP Root Device Buffer Overflow - Ver2 (CVE-2012-5960)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0738.html) |
| **Medium** | 30 May 2018 | 26 Jun 2025 | [CPAI-2017-1964](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2017-1964.html) | [Quagga](https://git.savannah.gnu.org/cgit/quagga.git/commit/?id=7a42b78be9a4108d98833069a88e6fddb9285008) | [CVE-2017-16227](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16227) | [Quagga aspath_put BGP Session Drop Denial of Service (CVE-2017-16227)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2017-1964.html) |
| **Critical** | 27 May 2018 | 26 Jun 2025 | [CPAI-2018-0488](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0488.html) | | [CVE-2013-0143](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0143) | [QNAP QTS Remote Command Injection (CVE-2013-0143)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0488.html) |
| **Medium** | 14 May 2018 | 26 Jun 2025 | [CPAI-2018-0486](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0486.html) | | [CVE-2018-9846](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9846) | [Roundcube Webmail archive.php IMAP Command Injection (CVE-2018-9846)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0486.html) |
| **Medium** | 14 May 2018 | 26 Jun 2025 | [CPAI-2018-0502](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0502.html) | | [CVE-2017-14919](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14919) | [Node.js Foundation Node.js zlib windowBits Denial of Service (CVE-2017-14919)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0502.html) |
| **Critical** | 13 May 2018 | 26 Jun 2025 | [CPAI-2018-0458](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0458.html) | | [CVE-2018-10562](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10562) | [Dasan GPON Router Remote Command Injection (CVE-2018-10562)](https://advisories.checkpoint.com/defense/advisories/public/2018/cpai-2018-0458.html) |