Security Bulletin

RISK: Medium Risk

Apache HTTPD Client Certificate Authentication Bypassing Vulnerability

A vulnerability was identified in Apache HTTPD web server. A remote user can bypass client certificate authentication. Systems using the mod_http2 module and with the h2 and h2c protocols activated in the configuration are affected.

Last Update Date: 14 Jul 2016 Release Date: 6 Jul 2016 3896 Views

RISK: High Risk

Adobe Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Acrobat, Flash Player, Reader, and XMP Tookit for Java. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.

Last Update Date: 13 Jul 2016 09:40 Release Date: 13 Jul 2016 4194 Views

RISK: Medium Risk

Samba Signing Security Protection Downgrade Vulnerability

A vulnerability was identified in Samba. A remote user can downgrade client signing security controls on the target system and impersonate the target server.

Last Update Date: 8 Jul 2016 09:17 Release Date: 8 Jul 2016 3825 Views

RISK: Medium Risk

GIMP XCF File Parsing Vulnerability

A vulnerability has been identified in GNU Image Manipulation Program (GIMP). A remote user can cause arbitrary code to be executed on the target user's system.

Last Update Date: 7 Jul 2016 10:13 Release Date: 7 Jul 2016 3964 Views

RISK: High Risk

Apple Airport Remote Code Execution Vulnerability

A vulnerability was identified in Apple Airport Base Station. A remote user can execute arbitrary code on the target system.

Last Update Date: 30 Jun 2016 Release Date: 22 Jun 2016 3975 Views

RISK: Medium Risk

Cisco IOS XE Denial of Service Vulnerability

A vulnerability was identified in Cisco IOS XE. A remote authenticated user can cause the target device to restart.

Last Update Date: 30 Jun 2016 Release Date: 22 Jun 2016 4031 Views

RISK: Medium Risk

Symantec Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Symantec products. Exploitation of some of these vulnerabilities may allow an attacker to take control of an affected system and cause a denial-of-service condition.

Last Update Date: 30 Jun 2016 09:01 Release Date: 30 Jun 2016 4168 Views

RISK: Medium Risk

Apache Tomcat Denial of Service Vulnerability

A vulnerability has been identified in Apache Tomcat, which can be exploited to cause denial of service in the target system.

Last Update Date: 24 Jun 2016 09:42 Release Date: 24 Jun 2016 4071 Views

RISK: Medium Risk

mDNSResponder Multiple Vulnerabilities

Multiple vulnerabilities were identified in mDNSResponder. A remote user can exploit these vulnerabilities to perform remote code execution and cause denial of service conditions on the target system.

Last Update Date: 21 Jun 2016 09:34 Release Date: 21 Jun 2016 4018 Views

RISK: Medium Risk

Apache Structs Multiple Vulnerabilities

Multiple vulnerabilities were identified in Apache Structs. A remote user can exploit these vulnerabilities to perform remote code execution and CSRF (Cross-site request forgery) attack on the target system.

Last Update Date: 21 Jun 2016 09:32 Release Date: 21 Jun 2016 4004 Views