Security Bulletin

RISK: Medium Risk

Adobe Monthly Security Update (Jan 2017)

Adobe has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Acrobat and Reader Moderately Critical Remote Code ExecutionSecurity Restriction Bypass APSB17-01 Flash Player Moderately Critical Information DisclosureRemote Code...

Last Update Date: 11 Jan 2017 09:56 Release Date: 11 Jan 2017 6238 Views

RISK: Medium Risk

Kaspersky Anti-Virus Product Multiple Vulnerabilities

Multiple vulnerabilities were identified in Kaspersky Anti-Virus and Internet Security. A remote user can bypass certificate validation. A local user can obtain an SSL private key.

Last Update Date: 4 Jan 2017 09:15 Release Date: 4 Jan 2017 6192 Views

RISK: High Risk

Apple iOS Messages App VCF Processing Vulnerability

A vulnerability was identified in Apple IOS, exploit of this vulnerability could cause the target application to crash. Note: No patch is currently available.

Last Update Date: 3 Jan 2017 09:23 Release Date: 3 Jan 2017 7045 Views

RISK: Medium Risk

Mozilla Thunderbird Multiple Vulnerabilities

Multiple vulnerabilities were identified in Thunderbird, a remote attacker can exploit these vulnerabilities to take control of an affected system.

Last Update Date: 30 Dec 2016 09:55 Release Date: 30 Dec 2016 6016 Views

RISK: Medium Risk

cURL Security Restriction Bypass vulnerability

A vulnerability was identified in cURL, a remote attacker can explot this vulnerability to bypass security controls on the targeted system.

Last Update Date: 28 Dec 2016 10:22 Release Date: 28 Dec 2016 6089 Views

RISK: Medium Risk

Cisco Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in Cisco IOS/ IOS XE and ASR 5000 Series Switch. An unauthenticated, remote attacker can respectively bypass authentication and cause denial of service on an affected system.

Last Update Date: 22 Dec 2016 Release Date: 21 Dec 2016 6053 Views

RISK: Medium Risk

VMware Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in VMware ESXi and vSphere Data Protection. Exploitation of this vulnerability could allow a remote attacker to take control of an affected system.

Last Update Date: 22 Dec 2016 Release Date: 21 Dec 2016 6048 Views

RISK: Medium Risk

Samba Multiple Vulnerabilities

Multiple vulnerabilities were identified in Samba, a remote authenticated user can cause denial of service, elevation of privilege and arbitrary code execution on the target system.

Last Update Date: 22 Dec 2016 Release Date: 21 Dec 2016 5885 Views

RISK: Medium Risk

Apache HTTPD Multiple Vulnerabilities

Multiple vulnerabilities were identified in Apache HTTPD. A remote user can access or modify session data. A remote user can cause the target service to crash. A remote user can conduct HTTP response splitting attacks.

Last Update Date: 22 Dec 2016 09:16 Release Date: 22 Dec 2016 6093 Views

RISK: Medium Risk

OpenSSH Multiple Vulnerabilities

Multiple vulnerabilities were identified in OpenSSH. A remote authenticated user can gain elevated privileges or write files on the target system. A local user can obtain private keys on the target system.

Last Update Date: 20 Dec 2016 09:29 Release Date: 20 Dec 2016 6373 Views

RISK: Medium Risk

Red Hat JBoss Core Services Apache httpd multiple Vulnerabilities

Multiple vulnerabilities were identified in Red Hat JBoss Core Services httpd, which can be exploited by malicious people to cause Denial of Service, Elevation Of Privilege, Remote Code Execution and Sensitive Information Disclosure.

Last Update Date: 19 Dec 2016 09:42 Release Date: 19 Dec 2016 6103 Views

RISK: Medium Risk

Apple Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in Apple products, a remote attacker may exploit these vulnerabilities to take control of an affected system.

Last Update Date: 15 Dec 2016 Release Date: 13 Dec 2016 6247 Views

RISK: Medium Risk

Joomla CMS Multiple Vulnerabilities

Multiple vulnerabilities were identified in Joomla, which could allow a remote attracker to take control of an affected website.

Last Update Date: 15 Dec 2016 09:53 Release Date: 15 Dec 2016 5981 Views

RISK: Medium Risk

Mozilla Firefox Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox. A remote attacker can execute arbitrary code, obtain potentially sensitive information, bypass security controls and conduct cross-site scripting attacks on the target system.

Last Update Date: 15 Dec 2016 09:42 Release Date: 15 Dec 2016 5898 Views

RISK: High Risk

Microsoft Monthly Security Update (Dec 2016)

Microsoft has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Internet Explorer Highly Critical Remote Code ExecutionInformation DisclosureSecurity Restriction Bypass Scattered Exploits MS16-144 Edge Highly Critical Remote...

Last Update Date: 14 Dec 2016 10:57 Release Date: 14 Dec 2016 6282 Views

RISK: Extremely High Risk

Adobe Monthly Security Update (Dec 2016)

Adobe has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Flash Player Extremely Critical Remote Code ExecutionSecurity Restriction Bypass Exploits in the wild APSB16-39 Animate Moderately Critical ...

Last Update Date: 14 Dec 2016 10:57 Release Date: 14 Dec 2016 6402 Views

RISK: High Risk

Netgear Routers Remote Command Injection Vulnerability

A vulnerability was identified in Netgear R7000 and R6400 routers, A remote user can cause arbitrary command to be executed on the target user's system. Note: No official solution is currently available

Last Update Date: 12 Dec 2016 10:41 Release Date: 12 Dec 2016 6175 Views

RISK: Extremely High Risk

Microsoft Remote Desktop Client for Mac Remote Code Execution Vulnerability

A vulnerability was identified in Microsoft Remote Desktop Client for Mac. A remote user can cause arbitrary code to be executed on the target user's system. Note:A demonstration exploit video is available at:https://youtu.be/6HeSiXYRpNYNo official solution is...

Last Update Date: 9 Dec 2016 09:12 Release Date: 9 Dec 2016 6434 Views

RISK: Medium Risk

ImageMagick TIFF File Remote Code Execution Vulnerability

An remote code execution vulnerability on TIFF file has been identified in ImageMagick, which could be exploited by remoter attacker to execute arbitrary code on target system.

Last Update Date: 8 Dec 2016 09:34 Release Date: 8 Dec 2016 6249 Views

RISK: Medium Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities were identified in Google Chrome, if exploited, may allow an attacker to take control of an affected system.

Last Update Date: 5 Dec 2016 10:33 Release Date: 5 Dec 2016 5944 Views

RISK: High Risk

Mozilla Firefox SVG animation nsSMILTimeContainer use-after-free Vulnerability

A vulnerability was identified in Mozilla Firefox. A remote user can execute arbitrary code on the target system. Note: Exploit code is publicly available, which specifically targets Tor browser.

Last Update Date: 1 Dec 2016 16:39 Release Date: 1 Dec 2016 6072 Views

RISK: Medium Risk

Mozilla Firefox Security Restriction Bybass Vulnerability

A vulnerability was identified in Mozilla Firefox. A remote user can bypass security controls on the target system.

Last Update Date: 30 Nov 2016 09:39 Release Date: 30 Nov 2016 5888 Views

RISK: Medium Risk

phpMyAdmin multiple vulnerabilities

Multiple vulnerabilities were identified in phpMyAdmin, a remote attacker may exploit these vulnerabilities to cause Cross Site Scripting, Remote Code Execution, Security Restriction Bypass, Tampering and Denial Of Service on the targeted system.

Last Update Date: 29 Nov 2016 09:42 Release Date: 29 Nov 2016 5904 Views

RISK: Medium Risk

Apache Tomcat Multiple Vulnerabilities

Multiple vulnerabilities were identified in Apache Tomcat, exploitation of these vulnerabilities can cause execution of arbitrary code, denial of service and obtain sensitive information.

Last Update Date: 24 Nov 2016 09:25 Release Date: 24 Nov 2016 6146 Views

RISK: High Risk

Cisco Products Multiple Vulnerabilities

Multiple Vulnerabilities have been identified in Cisco Products, a remote attacker can exploit these vulnerabilities to trigger denial of service condition on the targeted system.

Last Update Date: 22 Nov 2016 10:40 Release Date: 22 Nov 2016 5969 Views

RISK: High Risk

Network Time Protocol Daemon (ntpd) Multiple Vulnerabilities

Multiple vulnerabilities were identified in ntpd. A remote attacker can exploit of some of these vulnerabilities to cause a denial-of-service condition on the targeted system.

Last Update Date: 22 Nov 2016 10:29 Release Date: 22 Nov 2016 6175 Views

RISK: Medium Risk

Wireshark Multiple Vulnerabilities

Multiple vulnerabilities were identified in Wireshark. A remote attacker can cause denial of service conditions on the targeted system.

Last Update Date: 22 Nov 2016 10:26 Release Date: 22 Nov 2016 6013 Views

RISK: Medium Risk

Norton and Symantec enterprise products Remote Code Execution Vulnerability

A vulnerability was identified in Norton and Symantec enterprise products, expliot of these vulnerabilities could allow take control of the targeted system.

Last Update Date: 21 Nov 2016 09:51 Release Date: 21 Nov 2016 6260 Views

RISK: Medium Risk

Drupal Multiple Vulnerabilities

Multiple vulnerabilities were identified in Drupal. A remote user could cause denial of service, redirect user to external URL and posion cache content.

Last Update Date: 18 Nov 2016 10:41 Release Date: 18 Nov 2016 5857 Views

RISK: Medium Risk

Cisco ASA Arbitrary Command Execution Vulnerability

A vulnerability was identified in Cisco ASA. A remote user can execute arbitrary XML commands on the target system.

Last Update Date: 18 Nov 2016 10:28 Release Date: 18 Nov 2016 5865 Views

RISK: Medium Risk

Cisco IOS XE Vulnerability

A vulnerability was identified in Cisco IOS XE. A local user can modify files on the target system. Note: No patch is currently available.

Last Update Date: 17 Nov 2016 10:04 Release Date: 17 Nov 2016 5883 Views

RISK: Medium Risk

Mozilla Firefox Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox. A remote attacker can execute arbitrary code, obtain potentially sensitive information, bypass security controls, spoof URLs on the target system. A local attacker can access data and modify files on the target system.

Last Update Date: 17 Nov 2016 09:47 Release Date: 17 Nov 2016 5801 Views

RISK: Medium Risk

VMware Products Remote Code Execution Vulnerability

A vulnerability was identified in VMware Workstation and Fusion. A remote attacker could exlpoit this vulnerability to take control on the affected system.

Last Update Date: 16 Nov 2016 Release Date: 15 Nov 2016 5769 Views

RISK: Medium Risk

PHP Multiple Vulnerabilities

Multiple vulnerabilities were identified in PHP. which could allow a attacker to cause denial of service or execute arbitrary code on the target system.

Last Update Date: 14 Nov 2016 10:48 Release Date: 14 Nov 2016 5853 Views

RISK: Medium Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities were identified in Google Chrome, if exploited, may allow an attacker to take control of an affected system.

Last Update Date: 11 Nov 2016 09:53 Release Date: 11 Nov 2016 5837 Views

RISK: Medium Risk

OpenSSL Multiple Vulnerabilities

Multiple vulnerabilities were identified in OpenSSL. A remote user can cause the target application to crash.

Last Update Date: 11 Nov 2016 09:47 Release Date: 11 Nov 2016 5779 Views

RISK: Medium Risk

BlackBerry (powered by Android) Multiple Vulnerabilities

Multiple vulnerabilities have been identified in BlackBerry Device(powered by Android), which could allow a remote attacker to obtain escalation of privilege, cause denial of service, access confidential data and execute arbitrary code.

Last Update Date: 10 Nov 2016 09:25 Release Date: 10 Nov 2016 5968 Views

RISK: Medium Risk

Adobe Monthly Security Update (Nov 2016)

Adobe has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Connect Moderately Critical Cross-site ScriptingInformation DisclosureData Manipulation APSB16-35 Flash Player Moderately Critical Remote Code Execution ...

Last Update Date: 9 Nov 2016 17:52 Release Date: 9 Nov 2016 5874 Views

RISK: Extremely High Risk

Microsoft Monthly Security Update (Nov 2016)

Microsoft has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Windows (Graphics Component) Extremely Critical Remote Code Execution Information Disclosure Exploits in the wild MS16-132 Edge ...

Last Update Date: 9 Nov 2016 17:45 Release Date: 9 Nov 2016 6182 Views

RISK: Extremely High Risk

Microsoft Windows Elevation of Privilege Vulnerability

A vulnerability was identified in Microsoft Windows kernel. A local user can obtain elevated privileges on the target system. Note:[Updated on 9/11/2016] Apple software update to Microsoft Windows and Adobe Flash Player.This vulnerability is being actively exploited in...

Last Update Date: 9 Nov 2016 Release Date: 2 Nov 2016 6129 Views

RISK: Medium Risk

Cisco Products Multiple Vulnerabilities

A vulnerability was identified in Cisco Application Policy Infrastructure Controller on Nexus 9000 Series Leaf Switches. A remote user can cause denial of service conditions on the target system. A vulnerability was identified in Cisco ASR 5500 Series Routers. A remote user can cause denial of service...

Last Update Date: 4 Nov 2016 09:44 Release Date: 4 Nov 2016 5683 Views

RISK: Medium Risk

Google Chrome Memory Access Vulnerability

A vulnerability was identified in Google Chrome. Exploitation of this vulnerability may allow a remote attacker to cause denial-of-service of an affected system.

Last Update Date: 3 Nov 2016 11:20 Release Date: 3 Nov 2016 5779 Views

RISK: Medium Risk

Cisco Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in multiple Cisco products. A remote user can cause the target system to remotely execute code in Cisco Cisco ASR 900 Series Aggregation Services Routers. A remote user can cause the target system to execute arbitrary code in Cisco Meeting Server.A...

Last Update Date: 3 Nov 2016 11:19 Release Date: 3 Nov 2016 5930 Views

RISK: Medium Risk

ISC BIND Denial of Service Vulnerability

A vulnerability was identified in ISC BIND. A remote user can cause the target service to crash.

Last Update Date: 3 Nov 2016 Release Date: 2 Nov 2016 5672 Views

RISK: Medium Risk

Palo Alto PAN-OS Multiple Vulnerabilities

Multiple vulnerabilities were identified in Palo Altos PAN-OS. A remote user can conduct cross-site scripting attacks. A remote user can gain access and perform calls to the target firewall API.

Last Update Date: 3 Nov 2016 Release Date: 2 Nov 2016 5807 Views

RISK: Medium Risk

Apple IOS multiple vulnerabilities

Multiple Vulnerabilities were identified in Apple IOS, expliot of these vulnerabilities could allow take control of the targeted system.

Last Update Date: 1 Nov 2016 09:12 Release Date: 1 Nov 2016 5728 Views

RISK: Medium Risk

Apache Tomcat Multiple Vulnerabilities

Multiple vulnerabilties were identified in Apache Tomcat, exploitation of these vulnerabilities may lead to several impacts.

Last Update Date: 28 Oct 2016 10:57 Release Date: 28 Oct 2016 5949 Views

RISK: Medium Risk

iTunes and iCloud for Windows Multiple Vulnerabilities

Multiple vulnerabilities were identified in iTunes and iCloud for Windows. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected system.

Last Update Date: 28 Oct 2016 09:55 Release Date: 28 Oct 2016 5762 Views

RISK: Extremely High Risk

Adobe Flash Player Use-After-Free Memory Vulnerability

A vulnerability has been identified in Adobe Flash Player, a remote attacker could exploit this vulnerability cause arbitrary code to be executed on the targeted system. Note: This vulnerability is being actively exploited against Windows 7, 8.1, and 10 systems.

Last Update Date: 28 Oct 2016 Release Date: 27 Oct 2016 6205 Views

RISK: Medium Risk

Joomla Multiple Vulnerabilities

Multiple vulnerabilities were identified in Joomla, which could allow remote account creation and elevation of privilege.

Last Update Date: 26 Oct 2016 09:47 Release Date: 26 Oct 2016 5774 Views

RISK: High Risk

Apple products multiple vulnerabilities

Multiple Vulnerabilities were identified in Apple products, expliot of these vulnerabilities could allow take control of the targeted system.

Last Update Date: 25 Oct 2016 10:40 Release Date: 25 Oct 2016 5798 Views

RISK: Medium Risk

Cisco WebEx Meetings Player remote code execution vulnerability

A vulnerability was identified in Cisco WebEx Meetings Player, a remote attacker could exploit this vulnerability to perform remote code execution on the targeted system.

Last Update Date: 25 Oct 2016 09:47 Release Date: 25 Oct 2016 5791 Views

RISK: High Risk

OpenSSL denial of service Vulnerability

A vulnerability was identified in OpenSSL, a remote attacker can exploit this vulnerability to casue denial of service condition on the targeted system.

Last Update Date: 25 Oct 2016 09:46 Release Date: 25 Oct 2016 5886 Views

RISK: High Risk

BIND denial of service Vulnerability

A vulnerability was identified in BIND, a remote attacker can exploit this vulnerability to casue denial of service condition on the targeted system.

Last Update Date: 25 Oct 2016 09:46 Release Date: 25 Oct 2016 5820 Views

RISK: High Risk

Linux Kernel Elevation of Privilege Vulnerability

A vulnerability was identified in Linux Kernel. A physically local user can obtain root privileges or execute arbitrary code on the target system.

Last Update Date: 24 Oct 2016 14:43 Release Date: 24 Oct 2016 6433 Views

RISK: Medium Risk

Palo Alto PAN-OS JavaScript Execution and Input Validation Vulnerabilities

Two vulnerabilities were identified in Palo Alto PAN-OS. A remote user can conduct JavaScript execution attacks and cross-site scripting attacks on the target service.

Last Update Date: 24 Oct 2016 14:39 Release Date: 24 Oct 2016 5955 Views

RISK: Medium Risk

Mozilla Firefox Multiple Vulnerabilities

Two vulnerabilities have been identified in Mozilla Firefox. Exploitation of these vulnerabilities may allow a remote attacker to execute arbitrary code and obtain potentially sensitive information on the target system.

Last Update Date: 24 Oct 2016 14:35 Release Date: 24 Oct 2016 6091 Views

RISK: Medium Risk

OpenSSH Key Exchange Vulnerability

A vulnerability was identified in OpenSSH. A remote user can consume excessive memory and cause denial of service conditions on the target system.

Last Update Date: 20 Oct 2016 15:09 Release Date: 20 Oct 2016 5956 Views

RISK: Medium Risk

Apache Struts 2 Convention Plugin Vulnerability

A vulnerability has been identified in Apache Struts 2, which could be exploited by remote attacker to use for path traversal and execution of arbitrary code on server side.

Last Update Date: 20 Oct 2016 15:09 Release Date: 20 Oct 2016 6093 Views

RISK: Medium Risk

Cisco Meeting Server Multiple Vulnerabilities

Multiple vulnerabilities were identified on Cisco Meeting Server, which could allow a attacker cause exploit this vulnerability to obtain sensitive information, bypass authentication and conduct a cross-site request forgery (CSRF) attack on the target system.

Last Update Date: 20 Oct 2016 Release Date: 13 Oct 2016 6017 Views

RISK: Medium Risk

PHP Remote Code Execution Vulnerability

A vulnerability was identified in PHP. A remote user can cause arbitrary code to be executed on the target system.

Last Update Date: 19 Oct 2016 12:08 Release Date: 19 Oct 2016 5913 Views

RISK: Medium Risk

Oracle Security Update (Oct 2016)

Oracle has released Oct 2016 security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Database Moderately Critical Denial of Service Remote Code Execution Information Disclosure Data Manipulation DB (2016-10) ...

Last Update Date: 19 Oct 2016 12:08 Release Date: 19 Oct 2016 6316 Views

RISK: Medium Risk

Juniper Junos Multiple vulnerabilities

Multiple vulnerabilities were identified in Juniper JunOS. A remote unauthenticated user can perform cross site scripting in target device.A remote user can cause denial of service condition by sending specially crafted IPv6 traffic.A remote authenticated user can gain unauthorized access to the operating system...

Last Update Date: 14 Oct 2016 10:56 Release Date: 14 Oct 2016 5918 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities were identified in Google Chrome, which can be exploited by malicious people to perform cross site scripting, URL spoofing, bypass security restrictions, cause denial of service condition and potentially execute remote code.

Last Update Date: 14 Oct 2016 10:49 Release Date: 14 Oct 2016 5797 Views

RISK: Medium Risk

Palo Alto PAN-OS Denial of Service Vulnerability

A vulnerability was identified in Palo Alto PAN-OS. A remote user can cause the target service to crash.

Last Update Date: 14 Oct 2016 10:32 Release Date: 14 Oct 2016 5836 Views

RISK: Extremely High Risk

Microsoft Monthly Security Update (Oct 2016)

Microsoft has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Windows (Graphics Component) Extremely Critical Remote Code Execution Information Disclosure Elevation of Privilege Exploits in the wild MS16-...

Last Update Date: 12 Oct 2016 14:24 Release Date: 12 Oct 2016 5893 Views

RISK: High Risk

Adobe Monthly Security Update (Oct 2016)

Adobe has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Flash Player Highly Critical Remote Code ExecutionSecurity Restriction Bypass APSB16-32 Acrobat and Reader Moderately Critical Remote Code Execution...

Last Update Date: 12 Oct 2016 14:23 Release Date: 12 Oct 2016 5862 Views

RISK: High Risk

Drupal Data Manipulation vulnerability

A vulnerability was identified on Drupal, a remote attacker can exploit this vulnerability to upload file to the targeted system. The uploaded file will be publicly accessible.

Last Update Date: 12 Oct 2016 10:18 Release Date: 12 Oct 2016 5798 Views

RISK: High Risk

Cisco IOS, IOS XE and IOS XR IKEv1 Vulnerability

A vulnerability was identified in Cisco IOS, IOS XE and IOS XR, which could allow a remote attacker to obtain memory contents on the target system.

Last Update Date: 11 Oct 2016 Release Date: 19 Sep 2016 6668 Views

RISK: Medium Risk

VMware Horizon View Vulnerability

A vulnerability was identified on VMware Horizon View, a remote attacker can exploit this vulnerability to get sensitive information on the targeted system.

Last Update Date: 11 Oct 2016 09:59 Release Date: 11 Oct 2016 5777 Views

RISK: Medium Risk

Apache Tomcat Buffer Overflow Vulnerability

A vulnerability was identified in Apache Tomcat JK ISAPI Connector. A remote user can send a specially crafted URI to trigger a buffer overflow in the JK ISAPI connector and potentially execute arbitrary code on the target system.

Last Update Date: 7 Oct 2016 16:40 Release Date: 7 Oct 2016 6439 Views

RISK: Medium Risk

Cisco IOS Multiple Vulnerabilities

A vulnerability was identified in Cisco IOS XR. A local user can obtain root privileges on the target system.A vulnerability was identified in Cisco IOS and IOS XE. A remote user can cause the target system to reload.A vulnerability was identified in Cisco...

Last Update Date: 7 Oct 2016 16:39 Release Date: 7 Oct 2016 5710 Views

RISK: High Risk

Cisco NX-OS Multiple Vulnerabilities

Multiple vulnerabilities were identified in Cisco NX-OS.A remote user can execute arbitrary code on the target system.A remote authenticated user can bypass security restrictions.A remote user can cause the target service to crash.A remote user can cause the target...

Last Update Date: 7 Oct 2016 16:38 Release Date: 7 Oct 2016 5657 Views

RISK: Medium Risk

Palo Alto PAN-OS Sensitive Information Disclosure Vulnerability

A vulnerability was identified in Palo Alto PAN-OS. A remote user can obtain potentially sensitive information on the target system.

Last Update Date: 7 Oct 2016 16:37 Release Date: 7 Oct 2016 5654 Views

RISK: Medium Risk

Wireshark Denial of Service Vulnerability

A vulnerability was identified in Wireshark. A remote user can cause the target service to crash.

Last Update Date: 6 Oct 2016 09:21 Release Date: 6 Oct 2016 5668 Views

RISK: High Risk

Cisco Email Security Appliance Internal Testing Interface Vulnerability

A vulnerability was identified in Cisco Email Security Appliance, which could allow a remote attacker to obtain elevation of privilege on the target system.

Last Update Date: 5 Oct 2016 Release Date: 23 Sep 2016 5918 Views

RISK: Medium Risk

OpenSSH Denial of Service Vulnerability

A vulnerability was identified in OpenSSH. A remote user can cause denial of service conditions on the target system.

Last Update Date: 5 Oct 2016 10:21 Release Date: 5 Oct 2016 5984 Views

RISK: Medium Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities were identified in Google Chrome. A remote user can exploit these vulnerabilities to take control on the targeted system.

Last Update Date: 4 Oct 2016 09:27 Release Date: 4 Oct 2016 5862 Views

RISK: Medium Risk

Cisco IOS and IOS XE Product Multiple Vulnerabilities

Multiple vulnerabilities were identified in Cisco IOS and IOS XE Product, which could allow a remote attacker to exploit some of these vulnerabilities to reload an affected system.

Last Update Date: 29 Sep 2016 17:17 Release Date: 29 Sep 2016 5770 Views

RISK: High Risk

Cisco IOS XR Vulnerability

A vulnerability was identified in Cisco IOS XR, a remote attacker can exploit this vulnerability to restart the target system.

Last Update Date: 29 Sep 2016 17:17 Release Date: 29 Sep 2016 5687 Views

RISK: Medium Risk

ISC BIND Denial-Of-Service Vulnerability

A vulnerability has been identified in ISC BIND. Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition.

Last Update Date: 28 Sep 2016 14:03 Release Date: 28 Sep 2016 5679 Views

RISK: High Risk

OpenSSL Multiple Vulnerabilities

Multiple vulnerabilities were identified in OpenSSL, which could allow a remote attacker to conduct denial of service attack on the target system.

Last Update Date: 27 Sep 2016 Release Date: 23 Sep 2016 6113 Views

RISK: High Risk

iTunes and iCloud for Windows Multiple Vulnerabilities

Multiple vulnerabilities were identified in iTunes and iCloud for Windows. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected system.

Last Update Date: 27 Sep 2016 Release Date: 22 Sep 2016 6411 Views

RISK: Medium Risk

Cisco IOS and IOS XE Product Multiple Vulnerabilities

Multiple vulnerabilities was identified in Cisco IOS and IOS XE Product, which could allow a remote attacker to exploit some of these vulnerabilities to take control of an affected system.

Last Update Date: 23 Sep 2016 11:10 Release Date: 23 Sep 2016 5936 Views

RISK: High Risk

Apple Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in Apple watchOS, Xcode and iOS, which could lead to remote code execution and information disclosure.

Last Update Date: 22 Sep 2016 Release Date: 14 Sep 2016 6005 Views

RISK: High Risk

Apple Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in macOS Server, macOS/ OS X, Safari and tvOS. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected system.

Last Update Date: 22 Sep 2016 Release Date: 21 Sep 2016 6248 Views

RISK: High Risk

Symantec Products Multiple Vulnerabilties

Multiple vulnerabilities were identified in Symantec Products. A remote user can cause denial of service conditions on the target application.

Last Update Date: 22 Sep 2016 Release Date: 21 Sep 2016 6198 Views

RISK: High Risk

Mozilla Firefox Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Firefox. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.

Last Update Date: 21 Sep 2016 15:17 Release Date: 21 Sep 2016 6188 Views

RISK: Medium Risk

PHP Multiple Vulnerabilities

Multiple vulnerabilities were identified in PHP, which could allow a remote attacker to execute arbitrary code on the target system.

Last Update Date: 19 Sep 2016 10:32 Release Date: 19 Sep 2016 5816 Views

RISK: Medium Risk

VMware Workstation Pro and Player Multiple Vulnerability

Multiple vulnerabilities were identified in VMware Workstation Pro and VMware Workstation Player. A local user on the guest system can gain elevated privileges on the host system. A local user on the host system can obtain elevated privileges on the host system.

Last Update Date: 15 Sep 2016 09:57 Release Date: 15 Sep 2016 6241 Views

RISK: Medium Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities were identified in Google Chrome. Exploitation of some of these vulnerabilities may allow an attacker to take control of an affected system.

Last Update Date: 15 Sep 2016 09:57 Release Date: 15 Sep 2016 5957 Views

RISK: High Risk

Adobe Monthly Security Update (Sep 2016)

Adobe has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Flash Player Highly Critical Remote Code ExecutionDenial of Service APSB16-29 Number of 'Extremely Critical' product(s): ...

Last Update Date: 14 Sep 2016 12:16 Release Date: 14 Sep 2016 6067 Views

RISK: Extremely High Risk

Microsoft Monthly Security Update (Sep 2016)

Microsoft has released monthly security update for their products: Vulnerable Product Severity Impacts Notes Details (including CVE) Internet Explorer Extremely Critical Remote Code ExecutionInformation DisclosureElevation of PrivilegeSecurity Restriction Bypass Scattered Exploits MS16-104 Edge Extremely Critical...

Last Update Date: 14 Sep 2016 12:16 Release Date: 14 Sep 2016 6428 Views

RISK: High Risk

MySQL Elevation Of Privilege Vulnerability

A vulnerability was identified in MySQL, a remote authenticated user can exploit this vulnerability to elevate privilege and perform remote code execution on the targeted system.Note: limited Proof Of Concept Exploit Code is available.

Last Update Date: 13 Sep 2016 10:00 Release Date: 13 Sep 2016 6473 Views

RISK: Medium Risk

Wireshark multiple vulnerabilities

Multiple vulnerabilities have been identified in Wireshark. A remote user can exploit these vulnerabilities to cause Denial Of Service condition in the targeted system.

Last Update Date: 12 Sep 2016 09:32 Release Date: 12 Sep 2016 6020 Views

RISK: Medium Risk

Wordpress Multiple Vulnerabilities

Two vulnerabilities were identified in WordPress. A remote user can conduct cross-site scripting attacks. A remote user can conduct path traversal attacks.

Last Update Date: 9 Sep 2016 09:21 Release Date: 9 Sep 2016 6060 Views

RISK: Extremely High Risk

Android "QuadRooter" Multiple Vulnerabilities

Multiple Vulnerabilities have been identified in Android, also known as "QuadRooter", which could be exploited by an attacker to cause elevation of privilege, security restriction bypass and sensitive information disclosure on the targeted system. Notes: The chipset manufacturer Qualcomm has fixed the vulnerabilities for...

Last Update Date: 8 Sep 2016 Release Date: 9 Aug 2016 10218 Views

RISK: Medium Risk

Cisco PPTP Server Information Disclosure Vulnerability

A vulnerability was identified in Cisco IOS, a remote attacker can exlpoit this vulnerability to access sensitive data in the targeted system.

Last Update Date: 6 Sep 2016 09:28 Release Date: 6 Sep 2016 6187 Views

RISK: Medium Risk

Adobe ColdFusion Information Disclosure Vulnerability

A vulnerability was identified in Adobe ColdFusion. Exploitation of this vulnerability may allow a remote attacker to obtain sensitive information from an affected system.

Last Update Date: 5 Sep 2016 Release Date: 31 Aug 2016 6121 Views

RISK: Medium Risk

Kaspersky Anti-Virus Product Vulnerabilities

Multiple vulnerabilities were identified in Kaspersky Anti-Virus, Internet Security and Total Security. A local user can cause denial of service conditions on the target system and obtain potentially sensitive information from system memory.

Last Update Date: 5 Sep 2016 Release Date: 31 Aug 2016 6218 Views