Security Bulletin

RISK: Medium Risk

VMware Product Privilege Escalation Vulnerability

A vulnerability has been identified in VMware Workstation, Player and Horizon View Client for Windows, which can allow an unauthenticated attacker to cause privilege escalation.

Last Update Date: 5 Aug 2015 Release Date: 13 Jul 2015 6209 Views

RISK: Extremely High Risk

Adobe Flash ActionScript 3 Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Note: A Proof of Concept exploit code is publicly available and the vulnerability has no patch available.

Last Update Date: 5 Aug 2015 Release Date: 13 Jul 2015 6692 Views

RISK: High Risk

ISC BIND Zone Data Validation Vulnerability

A vulnerability has been identified in ISC BIND, which may allow a remote attacker to cause a denial of service condition.

Last Update Date: 5 Aug 2015 Release Date: 9 Jul 2015 6219 Views

RISK: High Risk

Adobe Type Manager Privilege Escalation Vulnerability

A vulnerability has been identified in Adobe Type Manager module, which can allow an attacker to obtain SYSTEM privileges on an affected Windows system. Note: Vendor patch is currently unavailable.

Last Update Date: 5 Aug 2015 Release Date: 9 Jul 2015 6366 Views

RISK: Extremely High Risk

Adobe Flash Player Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player. A remote user can cause arbitrary code to be executed, bypass security controls, and obtain potentially sensitive information on the target system. Note: Vulnerability CVE-2015-5119 is being exploited in the wild.

Last Update Date: 5 Aug 2015 Release Date: 9 Jul 2015 6924 Views

RISK: High Risk

Microsoft Internet Explorer Cumulative Security Update

VBScript Memory Corruption VulnerabilityA remote code execution vulnerability exists in the way that the VBScript engine, when rendered in Internet Explorer, handles objects in memory. In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit this...

Last Update Date: 3 Aug 2015 Release Date: 15 Jul 2015 6689 Views

RISK: Medium Risk

BIOS Implementations Multiple Vulnerabilities

Multiple BIOS implementations fail to properly set write protections after waking from sleep, leading to the possibility of an arbitrary BIOS image reflash.

Last Update Date: 31 Jul 2015 10:39 Release Date: 31 Jul 2015 6608 Views

RISK: High Risk

Microsoft Internet Explorer Mobile Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Internet Explorer Mobile. which can be exploited by remote attackers to execute arbitrary code on the target user's system. A remote user can create specially crafted content that, when loaded by the target user, will execute arbitrary code...

Last Update Date: 31 Jul 2015 Release Date: 27 Jul 2015 6324 Views

RISK: Medium Risk

Cisco ASR 1000 Series Routers Denial of Service Vulnerability

A vulnerability was identified in Cisco ASR 1000 series routers. A remote user can cause the target device to reload.

Last Update Date: 31 Jul 2015 10:34 Release Date: 31 Jul 2015 6341 Views

RISK: High Risk

Microsoft SQL Server Remote Code Execution Vulnerabilities

SQL Server Elevation of Privilege Vulnerability An elevation of privilege vulnerability exists in Microsoft SQL Server when it improperly casts pointers to an incorrect class. An attacker could exploit the vulnerability if their credentials allow access to an affected SQL server database. An attacker who successfully exploited...

Last Update Date: 31 Jul 2015 Release Date: 15 Jul 2015 11099 Views