Security Bulletin

RISK: Medium Risk

Adobe ColdFusion Multiple Vulnerabilities

Multiple vulnerabilities have been reported in Adobe ColdFusion, which can be exploited by malicious people to conduct cross-site scripting attacks and bypass certain security restrictions. Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary...

Last Update Date: 13 Nov 2013 09:33 Release Date: 13 Nov 2013 6026 Views

RISK: High Risk

Adobe Flash Player / AIR Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player and Adobe AIR, which can be exploited by malicious people to compromise a user's system. Unspecified errors can be exploited to cause memory corruption.

Last Update Date: 13 Nov 2013 09:32 Release Date: 13 Nov 2013 6172 Views

RISK: Medium Risk

OpenSSH AES-GCM Memory Corruption Vulnerability

A vulnerability has been identified in OpenSSH. A remote authenticated user can bypass access control restrictions. A remote authenticated user can send specially crafted data to trigger a memory corruption flaw when an AES-GCM cipher is selected during key exchange to execute arbitrary code on...

Last Update Date: 12 Nov 2013 10:28 Release Date: 12 Nov 2013 6444 Views

RISK: Medium Risk

Cisco IOS SIP Processing Vulnerability

A vulnerability has been identified in Cisco IOS. A remote user can cause denial of service conditions. A remote user can send specially crafted, valid SIP messages via IPv4 or IPv6 to the target device to trigger a memory leak, causing the system to become unstable...

Last Update Date: 8 Nov 2013 10:25 Release Date: 8 Nov 2013 5875 Views

RISK: Medium Risk

ISC BIND Windows Netmask Processing Vulnerability

A vulnerability has been identified in BIND. A remote user on the local network can bypass access control restrictions. On Windows-based systems, an all zero netmask may cause a match on any IPv4 address. A remote user on the local network may be able...

Last Update Date: 8 Nov 2013 10:24 Release Date: 8 Nov 2013 5950 Views

RISK: Medium Risk

IBM Java Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM Java, which can be exploited by malicious people to disclose potentially sensitive information, manipulate certain data, bypass certain security restrictions, cause a DoS (Denial of Service), and compromise a vulnerable system. Unspecified errors can be exploited...

Last Update Date: 8 Nov 2013 10:24 Release Date: 8 Nov 2013 5918 Views

RISK: Extremely High Risk

Microsoft Graphics Component Remote Code Execution Vulnerability

A vulnerability was identified in Microsoft Office. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create a specially crafted TIFF image file that, when loaded by the target user, will trigger a memory...

Last Update Date: 6 Nov 2013 09:35 Release Date: 6 Nov 2013 6322 Views

RISK: Medium Risk

Wireshark Multiple Denial of Service Vulnerabilities

Multiple vulnerabilities have been reported in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service).An error within the IEEE 802.15.4 dissector can be exploited to cause a crash.An error within the NBAP dissector can...

Last Update Date: 5 Nov 2013 10:17 Release Date: 5 Nov 2013 5988 Views

RISK: High Risk

Mozilla Firefox / Thunderbird / SeaMonkey Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, Thunderbird, and SeaMonkey, which can be exploited by malicious people to conduct spoofing attacks and compromise a user's system. Some unspecified errors and an error when handling workers with direct proxies within the JavaScript engine can...

Last Update Date: 31 Oct 2013 15:28 Release Date: 31 Oct 2013 6079 Views

RISK: Medium Risk

Cisco IOS XE Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco IOS XE. A remote user can cause denial of service conditions. A remote user can send specially crafted ICMP error packets through the target device to trigger a flaw in the Zone-Based Firewall (ZBFW) TCP or UDP...

Last Update Date: 31 Oct 2013 15:27 Release Date: 31 Oct 2013 5847 Views