Security Bulletin

RISK: Medium Risk

WordPress Multiple Vulnerabilities

Multiple vulnerabilities have been identified in WordPress, a remote attacker can exploit these vulnerabilities to obtain sensitive information on the targeted system.

Last Update Date: 1 Nov 2017 09:35 Release Date: 1 Nov 2017 6215 Views

RISK: Medium Risk

Apple Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Products, a remote attacker can exploit these vulnerabilities to perform remote code execution on the targeted system.

Last Update Date: 1 Nov 2017 09:32 Release Date: 1 Nov 2017 6488 Views

RISK: Medium Risk

Node.js Data Validation Vulnerability

A vulnerability has been identified in Node.js, which can be exploited by remoter attacker to cause denial of service.

Last Update Date: 30 Oct 2017 09:03 Release Date: 30 Oct 2017 6443 Views

RISK: Medium Risk

FortiOS web GUI XSS vulnerability

A vulnerability has been identified in FortiOS, which could be exploited by remote attackers to conduct cross-site scripting attacks and bypass security restriction on the target system.

Last Update Date: 26 Oct 2017 12:35 Release Date: 26 Oct 2017 6208 Views

RISK: Medium Risk

NETGEAR Routers Command Injection Vulnerability

A vulnerability has been identified in NETGEAR routers, which can be exploited by a remote user to take control of an affected system.

Last Update Date: 26 Oct 2017 10:35 Release Date: 26 Oct 2017 6366 Views

RISK: Medium Risk

F-Secure KEY Multiple Vulnerabilities

Multiple vulnerabilities have been identified in F-Secure KEY for Desktop, which can be exploited by a remote attacker to obtain user's login credentials.

Last Update Date: 26 Oct 2017 10:34 Release Date: 26 Oct 2017 6293 Views

RISK: Medium Risk

libcurl Remote Code Execution Vulnerability

A vulnerability has been identified in libcurl, which can be exploited by a remote user to cause denial of service conditions and obtain sensitive information on the target system.

Last Update Date: 25 Oct 2017 09:09 Release Date: 25 Oct 2017 6769 Views

RISK: High Risk

CrySIS/Dharma-variant .arena Ransomware Encrypts Victim Data

HKCERT has received a number of infection reports of the Crysis/Dharma ransomware variant, mostly by taking total control of the server through the Remote Desktop Service (RDP) on Windows platform. Impacts The ransomware encrypts files on victims’ computers and adds an ID...

Last Update Date: 24 Oct 2017 11:52 Release Date: 24 Oct 2017 10027 Views

RISK: Medium Risk

Cisco Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Products, which could be exploited by attackers to conduct cross-site scripting attack, perform remote code execution, trigger denial of service conditions, obtain potentially sensitive information and bypass security restriction on the target system.

Last Update Date: 20 Oct 2017 09:40 Release Date: 20 Oct 2017 6721 Views

RISK: Medium Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by a remote attacker to take control of an affected system.

Last Update Date: 19 Oct 2017 10:23 Release Date: 19 Oct 2017 6541 Views

RISK: High Risk

WiFi Protected Access II (WPA2) Multiple Vulnerabilities (KRACK)

Multiple vulnerabilities were identified in WiFi Protected Access II (WPA2) which could allow an attacker to conduct a key reinstallation attack (KRACK) on targeted devices that use WiFi. An attacker could decrypt the data or even conduct data tampering in the wireless connection. ...

Last Update Date: 18 Oct 2017 Release Date: 17 Oct 2017 9701 Views

RISK: Medium Risk

Oracle Security Update (Oct 2017)

Oracle has released Oct 2017 security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Database Moderately Critical Security Restriction BypassInformation DisclosureRemote Code ExecutionData Manipulation DB (2017-10) Java SE Moderately Critical ...

Last Update Date: 18 Oct 2017 09:36 Release Date: 18 Oct 2017 7063 Views

RISK: High Risk

Adobe Flash Player Remote Code Execution Vulnerability

A vulnerability was identified in Adobe Flash Player. A remote attacker could execute arbitrary code on the target system.

Last Update Date: 17 Oct 2017 11:10 Release Date: 17 Oct 2017 6784 Views

RISK: Medium Risk

Mozilla Thunderbird Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Thunderbird, which could be exploited by attackers to conduct cross-site scripting attack, trigger denial of service conditions and spoofing on the target system.

Last Update Date: 12 Oct 2017 09:57 Release Date: 12 Oct 2017 6483 Views

RISK: Extremely High Risk

Microsoft Monthly Security Update (Oct 2017)

Microsoft has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Microsoft Office Extremely Critical Security Restriction Bypass Elevation of Privilege Information Disclosure Remote Code Execution Publicly Disclosed;Exploited in...

Last Update Date: 11 Oct 2017 09:41 Release Date: 11 Oct 2017 8078 Views

RISK: Medium Risk

Microsoft Windows WAV File Denial of Service Vulnerability

A vulnerability was identified in Microsoft Windows, which allows remote attackers to cause a denial-of-service condition by processing WAV audo files. Note: No patch is currently available.

Last Update Date: 10 Oct 2017 09:23 Release Date: 10 Oct 2017 6499 Views

RISK: Medium Risk

libcurl Response Parsing Vulnerability

A vulnerability has been identified in libcurl, which can be exploited by a remote user to cause denial of service conditions on the target system.

Last Update Date: 9 Oct 2017 09:17 Release Date: 9 Oct 2017 6472 Views

RISK: Medium Risk

Cisco Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Products, which could be exploited by attackers to conduct cross-site scripting attack, bypass security restriction, trigger denial of service conditions, obtain potentially sensitive information and elevation of privilege on the target system.

Last Update Date: 6 Oct 2017 09:38 Release Date: 6 Oct 2017 6334 Views

RISK: Medium Risk

Apple macOS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple macOS, a remote attacker can exploit these vulnerabilities to obtain potentially sensitive information on the targeted system.

Last Update Date: 6 Oct 2017 09:38 Release Date: 6 Oct 2017 6190 Views

RISK: Medium Risk

Apache Tomcat Remote Code Execution Vulnerability

A vulnerability has been identified in Apache Tomcat, a remote attacker can exploit this vulnerability to perform remote code execution on the targeted system.

Last Update Date: 4 Oct 2017 08:50 Release Date: 4 Oct 2017 6482 Views

RISK: Medium Risk

Apple IOS Remote Code Execution Vulnerability

A vulnerability has been identified in Apple IOS, a remote attacker can exploit this vulnerability to perform remote code execution on the targeted system.

Last Update Date: 4 Oct 2017 08:50 Release Date: 4 Oct 2017 6195 Views

RISK: Medium Risk

Dnsmasq Multiple Vulnerabilities

Multiple vulnerabilities were identified in Dnsmasq. A remote user can execute arbitrary code, obtain potentially sensitive information on the target system and cause the target service to crash.

Last Update Date: 3 Oct 2017 09:16 Release Date: 3 Oct 2017 6395 Views

RISK: Medium Risk

OpenVPN Remote Code Execution Vulnerability

A vulnerability was identified in OpenVPN. A remote user can execute arbitrary code on the target system.

Last Update Date: 3 Oct 2017 09:15 Release Date: 3 Oct 2017 6409 Views

RISK: Medium Risk

Mozilla Firefox Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, which could be exploited by remote attackers to conduct cross-site scripting, execute arbitrary code, bypass security restriction, obtain potentially sensitive information, trigger Denial Of Service condition and spoofing on the target system.

Last Update Date: 29 Sep 2017 09:25 Release Date: 29 Sep 2017 6321 Views

RISK: Medium Risk

Cisco IOS and IOS XE Software Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco IOS and IOS XE Software, which could be exploited by attackers to bypass access controls, remote code execution and denial of service on the targeted system.

Last Update Date: 28 Sep 2017 09:55 Release Date: 28 Sep 2017 6860 Views

RISK: Medium Risk

Apple Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Products, a remote attacker can exploit these vulnerabilities to perform Cross Site Scripting attack, remote code execution and bypass security restriction on the targeted system.

Last Update Date: 27 Sep 2017 09:18 Release Date: 27 Sep 2017 6411 Views

RISK: Medium Risk

Apple macOS/OS X Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple macOS/OS X, a remote attacker can exploit these vulnerabilities to perform remote code execution on the targeted system.

Last Update Date: 26 Sep 2017 10:16 Release Date: 26 Sep 2017 6233 Views

RISK: Medium Risk

Joomla! Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Joomla!. A remote attacker could exploit some of these vulnerabilities to disclose sensitive information on the targeted system.

Last Update Date: 25 Sep 2017 Release Date: 22 Sep 2017 5998 Views

RISK: Medium Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by a remote attacker to cause a denial of service condition.

Last Update Date: 25 Sep 2017 09:09 Release Date: 25 Sep 2017 6151 Views

RISK: Medium Risk

Cisco Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Products, which could be exploited by attackers to conduct cross-site scripting attacks, denial of service attacks, elevation of privilege and remote code execution on the target system.

Last Update Date: 21 Sep 2017 10:04 Release Date: 21 Sep 2017 6179 Views

RISK: Medium Risk

WordPress Multiple Vulnerabilities

Multiple vulnerabilities were reported in WordPress, a remote attacker could exploit these vulnerabilities to perform remote code execution on the targeted system.

Last Update Date: 21 Sep 2017 09:54 Release Date: 21 Sep 2017 5912 Views

RISK: Medium Risk

Apache Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apache Products, a remote attacker can exploit these vulnerabilities to obtain potentially sensitive information and perform remote code execution on the targeted system.

Last Update Date: 20 Sep 2017 14:25 Release Date: 20 Sep 2017 6347 Views

RISK: Medium Risk

Apple Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Products, a remote attacker can exploit these vulnerabilities to perform remote code execution on the targeted system.

Last Update Date: 20 Sep 2017 09:47 Release Date: 20 Sep 2017 6096 Views

RISK: Medium Risk

Compromised Piriform CCleaner leading to information leakage

Older versions of Piriform CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 had been compromised, which collects information about the affected systems. Users are strongly advised to update the tool to the latest version.

Last Update Date: 19 Sep 2017 10:33 Release Date: 19 Sep 2017 6616 Views

RISK: Medium Risk

QNAP NAS Remote Code Execution Vulnerability

A vulnerability was identified in QNAP NAS which could allow a remote user to execute commands without requiring any privileges.

Last Update Date: 19 Sep 2017 09:31 Release Date: 19 Sep 2017 6473 Views

RISK: High Risk

Bluetooth "BlueBorne" Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Bluetooth, known as BlueBorne, which could be exploited by attackers to conduct remote code execution on the unpatched mobile phones, computers, and Internet of Things (IoT) devices.

Last Update Date: 13 Sep 2017 10:34 Release Date: 13 Sep 2017 7506 Views

RISK: Medium Risk

Adobe Monthly Security Update (Sep 2017)

Adobe has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Adobe RoboHelp Moderately Critical Cross-site ScriptingSpoofing APSB17-25 Adobe Flash Player Moderately Critical Remote Code Execution ...

Last Update Date: 13 Sep 2017 09:42 Release Date: 13 Sep 2017 6230 Views

RISK: High Risk

Microsoft Monthly Security Update (Sep 2017)

Microsoft has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Developer Tools Highly Critical Remote Code Execution Exploited KB4040960KB4040977KB4038783KB4040972KB4040981KB4038782KB4040966KB4040973KB4038781KB4040957KB4038788KB4040964KB4040973KB4040972KB4040958KB4040980KB4040974KB4040959KB4040960KB4041086KB4040956KB4040955KB4040965KB4040979KB4040971KB4040957KB4040978KB4040967KB4040975 Microsoft Office Highly Critical Remote Code ExecutionElevation of PrivilegeInformation Disclosure...

Last Update Date: 13 Sep 2017 09:32 Release Date: 13 Sep 2017 7496 Views

RISK: Medium Risk

QNAP NAS Remote Code Execution Vulnerability

A vulnerability was identified in QNAP NAS with the Media Streaming Add-On installed. A user may gain access to the NAS and execute a malicious code without requiring any privileges.

Last Update Date: 12 Sep 2017 09:44 Release Date: 12 Sep 2017 6359 Views

RISK: High Risk

Apache Struts 2 Remote Code Execution Vulnerability

A vulnerability was identified in Apache Struts 2, which could lead to remote code execution.

Last Update Date: 11 Sep 2017 09:39 Release Date: 11 Sep 2017 7052 Views

RISK: Medium Risk

Cisco Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Products, which could be exploited by attackers to conduct cross-site scripting attacks, bypass access controls, remote code execution and denial of service on the targeted system.

Last Update Date: 8 Sep 2017 09:21 Release Date: 8 Sep 2017 6303 Views

RISK: Medium Risk

Chrome Multiple Vulnerabilities

Multiple vulnerabilities were identified in Chrome, which could be exploited by a remote attacker to take control of an affected system.

Last Update Date: 7 Sep 2017 09:56 Release Date: 7 Sep 2017 6186 Views

RISK: High Risk

Apache Struts Multiple Vulnerabilities

Multiple Vulnerabilities have been identified in Apache Struts, a remote user can exploit these vulnerabilities to perform Remote Code Execution and Denial Of Service on the targeted system.

Last Update Date: 6 Sep 2017 09:04 Release Date: 6 Sep 2017 6597 Views

RISK: Medium Risk

Palo Alto PAN-OS Multiple Vulnerabilities

Multiple vulnerabilities were identified in Palo Alto PAN-OS, which can be exploited by remote attackers to conduct cross-site scripting (XSS) attacks or XML External Entity (XXE) attacks.

Last Update Date: 1 Sep 2017 09:36 Release Date: 1 Sep 2017 6174 Views

RISK: Medium Risk

Apache Struts 2 Denial of Service Vulnerability

A vulnerability was identified in Apache Struts 2, which could lead to a denial of service condition.

Last Update Date: 22 Aug 2017 09:07 Release Date: 22 Aug 2017 6261 Views

RISK: Medium Risk

Mozilla Thunderbird Multiple Vulnerabilities

Multiple vulnerabilities were identified in Mozilla Thunderbird, which could be exploited by a remote attacker to take control of an affected system.

Last Update Date: 22 Aug 2017 09:07 Release Date: 22 Aug 2017 5999 Views

RISK: High Risk

Foxit Reader Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Foxit Reader, which could be exploited by remote attackers to execute arbitrary code on the target system.

Last Update Date: 18 Aug 2017 10:11 Release Date: 18 Aug 2017 6065 Views

RISK: Medium Risk

Cisco Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Products, which could be exploited by attackers to conduct cross-site scripting attacks, bypass access controls, potentially sensitive information and elevated privileges on the target system.

Last Update Date: 18 Aug 2017 10:10 Release Date: 18 Aug 2017 6081 Views

RISK: Medium Risk

Drupal Core Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Drupal, which could be exploited by remote attackers to bypass access controls on the target system.

Last Update Date: 17 Aug 2017 10:22 Release Date: 17 Aug 2017 6568 Views

RISK: Medium Risk

Apache Tomcat Multiple Vulnerabilities

Multiple Vulnerabilities were identified in Apache Tomcat, a remote user can exploit these vulnerabilities to perform spoofing attack and bypass security restriction on the targeted system.

Last Update Date: 15 Aug 2017 09:35 Release Date: 15 Aug 2017 6320 Views

RISK: Medium Risk

Git URL Processing Vulnerability

A vulnerability has been identified in Git, which can be exploited by a remote user to execute arbitrary code on the target system.

Last Update Date: 14 Aug 2017 08:52 Release Date: 14 Aug 2017 6169 Views

RISK: Medium Risk

Juniper Junos Denial-of-Service Vulnerability

A vulnerability has been identified in Juniper Junos OS, which can be exploited by remote attackers to conduct Denial of Service attack.

Last Update Date: 11 Aug 2017 14:29 Release Date: 11 Aug 2017 6150 Views

RISK: Medium Risk

Mozilla Firefox Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, which could be exploited by remote attackers to conduct denial of service condition, obtain potentially sensitive information and execute arbitrary code on the target system.

Last Update Date: 9 Aug 2017 10:35 Release Date: 9 Aug 2017 6303 Views

RISK: Medium Risk

Adobe Monthly Security Update (Aug 2017)

Adobe has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Adobe Flash Player Moderately Critical Remote Code ExecutionInformation Disclosure APSB17-23 Adobe Acrobat and Reader Moderately Critical Remote Code...

Last Update Date: 9 Aug 2017 09:54 Release Date: 9 Aug 2017 6369 Views

RISK: High Risk

Microsoft Monthly Security Update (Aug 2017)

Microsoft has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Windows Highly Critical Information DisclosureRemote Code ExecutionElevation of PrivilegeDenial of Service Publicly Disclosed KB4034664KB4034674KB4034681KB4034665KB4034745KB4034666KB4034672KB4034681KB4034660KB4035055KB4035056KB4022750KB4034679KB4034775KB4035679KB4034744KB4034658KB4034668KB4034034 Browser Moderately Critical Security Restriction...

Last Update Date: 9 Aug 2017 08:55 Release Date: 9 Aug 2017 6841 Views

RISK: Medium Risk

Cisco Meeting Server Denial of Service Vulnerability

A vulnerability was identified in Cisco Meeting Server (CMS), which could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected system.

Last Update Date: 8 Aug 2017 09:23 Release Date: 8 Aug 2017 6125 Views

RISK: Medium Risk

Google Chrome Remote Code Execution Vulnerability

A vulnerability has been identified in Google Chrome, which can be exploited by malicious people to take control of an affected system.

Last Update Date: 4 Aug 2017 10:29 Release Date: 4 Aug 2017 6210 Views

RISK: Medium Risk

Fortinet FortiOS Input Validation Vulnerabilities

Multiple vulnerabilities have been identified in FortiOS, which could be exploited by remote attackers to conduct cross-site scripting attacks on the target system.

Last Update Date: 31 Jul 2017 09:57 Release Date: 31 Jul 2017 6220 Views

RISK: Medium Risk

Microsoft Office Outlook Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Microsoft Outlook, which could be exploited by remote attackers to conduct information disclosure and execute arbitrary code on the target system.

Last Update Date: 31 Jul 2017 09:52 Release Date: 31 Jul 2017 6105 Views

RISK: Medium Risk

VMware vCenter Server Remote Authentication Vulnerability

A vulnerability has been identified in VMware vCenter Server. A remote authenticated user can gain access to the target guest system.

Last Update Date: 28 Jul 2017 10:09 Release Date: 28 Jul 2017 6122 Views

RISK: High Risk

Cisco IOS/ IOS XE Multiple Vulnerabilities

Multiple vulnerabilities were identified in Cisco IOS/ IOS XE, which could be exploited by a remote attacker to cause denial of service, security feature bypass and information disclosure. Note: No patch is currently available.

Last Update Date: 27 Jul 2017 09:36 Release Date: 27 Jul 2017 6216 Views

RISK: Medium Risk

Google Chrome Multiple Vulnerabilities

Multiple Vulnerabilities were identified in Google Chrome, a remote user can exploit these vulnerabilities to take control of an affected system.

Last Update Date: 27 Jul 2017 09:35 Release Date: 27 Jul 2017 5955 Views

RISK: Medium Risk

Joomla! Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Joomla!. A remote attacker could exploit some of these vulnerabilities to take control of an affected website.

Last Update Date: 26 Jul 2017 09:28 Release Date: 26 Jul 2017 5938 Views

RISK: Medium Risk

Palo Alto PAN-OS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Palo Alto PAN-OS, which could be exploited by remote attackers to conduct cross-site scripting attacks and execute arbitrary code on the target system.

Last Update Date: 24 Jul 2017 10:20 Release Date: 24 Jul 2017 5940 Views

RISK: Medium Risk

IBM HTTP Server Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM HTTP Server, which could be exploited by remote attacker to cause denial of service condition and bypass security restrictions on the target system.

Last Update Date: 21 Jul 2017 08:58 Release Date: 21 Jul 2017 6145 Views

RISK: Medium Risk

Apple Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in Apple products, a remote attacker may exploit these vulnerabilities to take control of an affected system.

Last Update Date: 20 Jul 2017 09:34 Release Date: 20 Jul 2017 6188 Views

RISK: Medium Risk

Oracle Security Update (Jul 2017)

Oracle has released Jul 2017 security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Database Moderately Critical Remote Code Execution Elevation of Privilege DB (2017-07) Java SE Moderately Critical ...

Last Update Date: 19 Jul 2017 10:14 Release Date: 19 Jul 2017 6391 Views

RISK: Medium Risk

Dahua IP Cameras Stack Buffer Overflow Vulnerability

A vulnerability has been identified in Dahua IP cameras, which can be exploited by remote attackers to execute arbitrary code on the target system.

Last Update Date: 19 Jul 2017 10:10 Release Date: 19 Jul 2017 6461 Views

RISK: Medium Risk

FreeRADIUS Multiple vulnerabilities

Multiple vulnerabilities have been identified in FreeRADIUS, which can be exploited by remote attackers to cause denial of service condition and execute arbitrary code on the target system.

Last Update Date: 19 Jul 2017 10:08 Release Date: 19 Jul 2017 5975 Views

RISK: Medium Risk

Cisco WebEx Browser Extension Remote Code Execution Vulnerability

A vulnerability has been identified in Cisco WebEx Browser Extension , a remote user can exploit this vulnerability to perform Remote Code Execution on the targeted system.

Last Update Date: 18 Jul 2017 09:03 Release Date: 18 Jul 2017 6108 Views

RISK: Medium Risk

Apache mod_http2 and mod_auth_digest Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apache mod_http2 and mod_auth_digest, which can be exploited by remote attackers to cause denial of service condition and bypass security restrictions on target system.

Last Update Date: 14 Jul 2017 09:37 Release Date: 14 Jul 2017 6091 Views

RISK: Medium Risk

Juniper Junos Multiple vulnerabilities

Multiple vulnerabilities have been identified in Juniper Junos, which can be exploited by remote attackers to execute arbitrary code, cause denial of service condition and bypass security restrictions on target system.

Last Update Date: 14 Jul 2017 09:33 Release Date: 14 Jul 2017 6274 Views

RISK: Medium Risk

Samba Security Restriction Bypass Vulnerability

A vulnerability was identified in Samba. An attacker could bypass the authentication validation and gain elevated privilege on the target system.

Last Update Date: 13 Jul 2017 09:10 Release Date: 13 Jul 2017 6204 Views

RISK: Medium Risk

Adobe Monthly Security Update (July 2017)

Adobe has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Adobe Flash Player Moderately Critical Remote Code ExecutionInformation Disclosure APSB17-21 Adobe Connect Moderately Critical Cross-site ScriptingSpoofing...

Last Update Date: 12 Jul 2017 09:48 Release Date: 12 Jul 2017 6364 Views

RISK: Medium Risk

Microsoft Monthly Security Update (July 2017)

Microsoft has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Browser Moderately Critical Security Restriction BypassRemote Code ExecutionSpoofing Publicly Disclosed KB4025338KB4025342KB4025343KB4025344KB4025341KB4025339KB4025252KB4025337KB4025240KB4025331KB4025336KB4025336KB4025333 Developer Tools Moderately Critical Denial of Service ...

Last Update Date: 12 Jul 2017 09:29 Release Date: 12 Jul 2017 6935 Views

RISK: Medium Risk

Apache Struts Remote Code Execution Vulnerability

A vulnerability was identified in Apache Struts, a remote user can exploit this vulnerability to perform remote code execution on the targeted system.

Last Update Date: 11 Jul 2017 08:59 Release Date: 11 Jul 2017 6212 Views

RISK: Medium Risk

PHP Multiple Vulnerabilities

Multiple vulnerabilities have been identified in PHP, which can be exploited by remoter attackers to cause denial of service, execute arbitrary code and obtain potentially sensitive information on the target system.

Last Update Date: 10 Jul 2017 09:59 Release Date: 10 Jul 2017 6152 Views

RISK: Medium Risk

Blackberry Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Blackberry, which can be exploited by remoter attackers to execute arbitrary code, cause denial of service and modify arbitrary files on target system.

Last Update Date: 7 Jul 2017 09:48 Release Date: 7 Jul 2017 6136 Views

RISK: Medium Risk

Android Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Android, which can be exploited by remoter attackers to execute arbitrary code, cause denial of service and modify arbitrary files on target system.

Last Update Date: 7 Jul 2017 09:47 Release Date: 7 Jul 2017 6545 Views

RISK: Medium Risk

Joomla Multiple Vulnerabilities

Multiple vulnerabilities were identified in Joomla. A remote user can obtain potentially sensitive information and conduct cross-site scripting attacks on the target system.

Last Update Date: 6 Jul 2017 09:11 Release Date: 6 Jul 2017 6108 Views

RISK: Medium Risk

IBM WebSphere Application Server Multiple Vulnerabilities

Multiple Vulnerabilities were identified in IBM WebSphere Application Server, a remote user can exploit these vulnerabilities to perform Cross Site Scripting attack, access Sensitive Information and trigger Denial Of Service condition on the targeted system.

Last Update Date: 4 Jul 2017 09:46 Release Date: 4 Jul 2017 6208 Views

RISK: Medium Risk

Cisco IOS and IOS XE Multiple Vulnerabilities

Multiple vulnerabilities were identified in Cisco IOS/ IOS XE. A remote authenticated user can execute arbitrary code on the target system. Note: No patch is currently available but there exists a workaround.

Last Update Date: 30 Jun 2017 09:19 Release Date: 30 Jun 2017 7268 Views

RISK: Medium Risk

ISC BIND Multiple Vulnerabilities

Multiple vulnerabilities were identified in ISC BIND, which could lead to information disclosure and data tampering of zone contents.

Last Update Date: 30 Jun 2017 09:19 Release Date: 30 Jun 2017 6634 Views

RISK: Extremely High Risk

Petwrap / NotPetya Ransomware Encrypts Victim Data

A new variant of ransomware known as Petwrap / Petrwrap / Petya / NotPetya / Nyetya is spreading quickly. HKCERT was aware that it is widespread overseas. The different name indicate the industry is debating if the ransomware is directly related to another known ransomware Petya. It...

Last Update Date: 28 Jun 2017 18:41 Release Date: 28 Jun 2017 15018 Views

RISK: Medium Risk

Microsoft Malware Protection Engine Remote Code Execution Vulnerability

A vulnerability has been identified in Microsoft Malware Protection Engine (mpengine.dll). A remote user can cause arbitrary code to be executed on the target user's system.

Last Update Date: 26 Jun 2017 10:06 Release Date: 26 Jun 2017 7112 Views

RISK: Medium Risk

OpenVPN Multiple Vulnerabilities

Multiple vulnerabilities were identified in OpenVPN. A remote user could cause denial of service, execute arbitrary code and obtain potential sensitive information on the target system.

Last Update Date: 23 Jun 2017 09:01 Release Date: 23 Jun 2017 6484 Views

RISK: Medium Risk

Drupal Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Drupal. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

Last Update Date: 22 Jun 2017 09:42 Release Date: 22 Jun 2017 6205 Views

RISK: Medium Risk

Cisco WebEx Network Recording Player File Processing Vulnerability

A vulnerability has been identified in Cisco WebEx Network Recording Player. A remote user can cause arbitrary code to be executed on the target user's system.

Last Update Date: 22 Jun 2017 09:41 Release Date: 22 Jun 2017 6258 Views

RISK: Medium Risk

Apache HTTPD Multiple Vulnerabilities

Several vulnerabilities were identified in Apache HTTPD. A remote user can cause the target service to crash. A remote user can bypass authentication.

Last Update Date: 21 Jun 2017 09:15 Release Date: 21 Jun 2017 6454 Views

RISK: Medium Risk

Google Chrome Multiple Vulnerabilities

Multiple Vulnerabilities were identified in Google Chrome, a remote user can exploit these vulnerabilities to cause denial-of-service condition on the targeted system.

Last Update Date: 20 Jun 2017 09:47 Release Date: 20 Jun 2017 6282 Views

RISK: Medium Risk

Mozilla Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in Mozilla Products, a remote user can exploit these vulnerabilities to perform remote code execution on the targeted system.

Last Update Date: 20 Jun 2017 Release Date: 14 Jun 2017 6463 Views

RISK: Medium Risk

BIND RPZ Rule Processing Vulnerability

A vulnerability has been identified in BIND. A remote user can cause denial of service conditions on the target system.

Last Update Date: 16 Jun 2017 10:18 Release Date: 16 Jun 2017 6401 Views

RISK: Medium Risk

libcurl 'file' Protocol Buffer Overflow Vulnerability

A vulnerability has been identified in libcurl, A local user can obtain elevated privileges on the target system.

Last Update Date: 16 Jun 2017 10:18 Release Date: 16 Jun 2017 6418 Views

RISK: High Risk

Microsoft Monthly Security Update (Jun 2017)

Microsoft has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Browser Highly Critical Information Disclosure Remote Code Execution Security Restriction Bypass Disclosed KB4022715 KB4022725 KB4022726 KB4021558 ...

Last Update Date: 14 Jun 2017 10:06 Release Date: 14 Jun 2017 8948 Views

RISK: Medium Risk

Adobe Monthly Security Update (Jun 2017)

Adobe has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Flash Player Moderately Critical Remote Code Execution APSB17-17 Shockwave Player Moderately Critical Remote Code Execution APSB17-...

Last Update Date: 14 Jun 2017 09:44 Release Date: 14 Jun 2017 6470 Views

RISK: Medium Risk

Cisco NX-OS Denial Of Service Vulnerability

A Vulnerability was identified in Cisco NX-OS, a unauthenticated, adjacent user can exploit this vulnerability to cause Denial of Service condition in the targeted system.Note: No patch is available currently.

Last Update Date: 13 Jun 2017 09:32 Release Date: 13 Jun 2017 6229 Views

RISK: Medium Risk

VMware Horizon View Client for Mac Command Injection Vulnerability

A vulnerability has been identified in VMware Horizon View Client for Mac. A local user can obtain root privileges on the target system.

Last Update Date: 9 Jun 2017 10:09 Release Date: 9 Jun 2017 6222 Views

RISK: Medium Risk

Apache Tomcat Default Servlet Error Handling Vulnerability

A vulnerability has been identified in Apache Tomcat. A remote user can bypass security controls on the target system.

Last Update Date: 9 Jun 2017 10:09 Release Date: 9 Jun 2017 6450 Views

RISK: Medium Risk

VMware vSphere Data Protection Multiple Vulnerabilities

Multiple vulnerabilities were identified in VMware vSphere Data Protection, which could lead to remote code execution and sensitive data disclosure.

Last Update Date: 8 Jun 2017 10:04 Release Date: 8 Jun 2017 6246 Views

RISK: Medium Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by attackers to take control of an affected system.

Last Update Date: 7 Jun 2017 10:16 Release Date: 7 Jun 2017 6348 Views