Security Bulletin

RISK: High Risk

Mozilla Firefox PDF Viewer Same-Origin Bypass Vulnerability

A vulnerability was identified in Mozilla Firefox. A remote user can obtain files from the target user's system. A remote user can create specially crafted content that, when loaded by the target user, will bypass same-origin policy and inject arbitrary JavaScript into...

Last Update Date: 10 Aug 2015 09:30 Release Date: 10 Aug 2015 3307 Views

RISK: Medium Risk

WordPress Multiple Vulnerabilities

Multiple vulnerabilities have been identified in WordPress, which can be exploited by remote attackers to conduct cross site script and SQL injection attack.

Last Update Date: 7 Aug 2015 Release Date: 6 Aug 2015 3186 Views

RISK: Medium Risk

ISC BIND TKEY Query Processing Vulnerability

A vulnerability has been identified in ISC BIND, which can be exploited by remote attacker to cause denial of service condition.

Last Update Date: 7 Aug 2015 Release Date: 30 Jul 2015 3453 Views

RISK: High Risk

Android Denial of Service Vulnerability

A vulnerability was identified in the mediaserver service of Android devices that could potentially allow attackers to perform Denial of Service (DoS) attacks. This exploitation requires a user to be tricked to install a malicious app or visit a malicious website. Note: No patch is...

Last Update Date: 5 Aug 2015 11:12 Release Date: 5 Aug 2015 3501 Views

RISK: Medium Risk

VMware Product Privilege Escalation Vulnerability

A vulnerability has been identified in VMware Workstation, Player and Horizon View Client for Windows, which can allow an unauthenticated attacker to cause privilege escalation.

Last Update Date: 5 Aug 2015 Release Date: 13 Jul 2015 3295 Views

RISK: Extremely High Risk

Adobe Flash ActionScript 3 Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Note: A Proof of Concept exploit code is publicly available and the vulnerability has no patch available.

Last Update Date: 5 Aug 2015 Release Date: 13 Jul 2015 3694 Views

RISK: High Risk

ISC BIND Zone Data Validation Vulnerability

A vulnerability has been identified in ISC BIND, which may allow a remote attacker to cause a denial of service condition.

Last Update Date: 5 Aug 2015 Release Date: 9 Jul 2015 3318 Views

RISK: High Risk

Adobe Type Manager Privilege Escalation Vulnerability

A vulnerability has been identified in Adobe Type Manager module, which can allow an attacker to obtain SYSTEM privileges on an affected Windows system. Note: Vendor patch is currently unavailable.

Last Update Date: 5 Aug 2015 Release Date: 9 Jul 2015 3439 Views

RISK: Extremely High Risk

Adobe Flash Player Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player. A remote user can cause arbitrary code to be executed, bypass security controls, and obtain potentially sensitive information on the target system. Note: Vulnerability CVE-2015-5119 is being exploited in the wild.

Last Update Date: 5 Aug 2015 Release Date: 9 Jul 2015 3730 Views

RISK: High Risk

Microsoft Internet Explorer Cumulative Security Update

VBScript Memory Corruption VulnerabilityA remote code execution vulnerability exists in the way that the VBScript engine, when rendered in Internet Explorer, handles objects in memory. In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit this...

Last Update Date: 3 Aug 2015 Release Date: 15 Jul 2015 3441 Views