Security Bulletin

RISK: High Risk

Cisco Products Denial of Service Vulnerability

A vulnerability was identified in multiple Cisco products. A remote user can cause denial of service conditions. Affected products included: Cisco WebEx Meetings Server Cisco Jabber Cisco Unity Connection Cisco IP Phones Cisco Unified Communications Manager

Last Update Date: 22 Apr 2016 09:41 Release Date: 22 Apr 2016 3931 Views

RISK: High Risk

Oracle Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Oracle products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.

Last Update Date: 20 Apr 2016 09:03 Release Date: 20 Apr 2016 3677 Views

RISK: Extremely High Risk

QuickTime for Windows End of Support and Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple QuickTime for Windows. A remote user can cause arbitrary code to be executed on the target user's system. Note: Vendor patch will not be provided. Apple has announced that no future security updates on QuickTime for Windows...

Last Update Date: 18 Apr 2016 08:45 Release Date: 18 Apr 2016 4365 Views

RISK: Medium Risk

VMWare Products Session Hijack Vulnerability

A vulnerability was identified in multiple VMware products. A remote user can hijack the target user's session.Affected products include VMware vCenter Server, VMware vCloud Director and VMware vRealize Automation Identity Appliance.

Last Update Date: 15 Apr 2016 10:24 Release Date: 15 Apr 2016 3562 Views

RISK: Medium Risk

Juniper ScreenOS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Juniper ScreenOS, which can be exploited by malicious remote users to cause denial of service and obtain potentially sensitive information.

Last Update Date: 15 Apr 2016 10:24 Release Date: 15 Apr 2016 3509 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.

Last Update Date: 14 Apr 2016 09:11 Release Date: 14 Apr 2016 3256 Views

RISK: Medium Risk

Microsoft Windows HTTP.sys Denial of Service Vulnerability

A denial of service vulnerability exists in the HTTP 2. protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2. requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system...

Last Update Date: 13 Apr 2016 12:04 Release Date: 13 Apr 2016 3288 Views

RISK: Medium Risk

Microsoft Windows CSRSS Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Microsoft Windows when the Client-Server Run-time Subsystem (CSRSS) fails to properly manage process tokens in memory.

Last Update Date: 13 Apr 2016 12:04 Release Date: 13 Apr 2016 3258 Views

RISK: Medium Risk

Microsoft Windows SAM and LSAD Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) remote protocols when they accept authentication levels that do not protect them adequately. The vulnerability is caused by the way the SAM and LSAD remote...

Last Update Date: 13 Apr 2016 12:04 Release Date: 13 Apr 2016 3298 Views

RISK: Medium Risk

Microsoft Windows Secondary Logon Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft Windows when the Windows Secondary Logon Service fails to properly manage requests in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator. An attacker could then install programs; view, change, or...

Last Update Date: 13 Apr 2016 12:04 Release Date: 13 Apr 2016 4016 Views