Security Bulletin

RISK: Medium Risk

PHP Multiple Vulnerabilities

Multiple vulnerabilities were identified in PHP. A remote user can execute arbitrary code on the target system and cause denial of service conditions. A user can create a specially crafted PHP file that will trigger a use-after-free memory error in the PHP unserialize() ...

Last Update Date: 27 Jan 2015 09:32 Release Date: 27 Jan 2015 3251 Views

RISK: High Risk

Symantec Critical System Protection Multiple Vulnerabilities

Multiple vulnerabilities were identified in Symantec Critical System Protection. A remote authenticated user can execute arbitrary code on the target system, inject SQL commands, and obtain potentially sensitive information. A remote user can conduct cross-site scripting attacks. A local user can bypass security...

Last Update Date: 21 Jan 2015 10:45 Release Date: 21 Jan 2015 3202 Views

RISK: High Risk

MySQL Multiple Vulnerabilites

Multiple vulnerabilities were identified in MySQL. A remote user can cause partial denial of service conditions, partially access and modify data on the target system.

Last Update Date: 21 Jan 2015 10:42 Release Date: 21 Jan 2015 3279 Views

RISK: High Risk

Oracle Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in Oracle Products.Multiple vulnerabilities were identified in Oracle Fusion Middleware. A remote user can gain elevated privileges, partially access and modify data on the target system. A remote or local user can cause partial denial of service conditions.Several vulnerabilities...

Last Update Date: 21 Jan 2015 10:39 Release Date: 21 Jan 2015 3453 Views

RISK: Medium Risk

Moodle Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Moodle, which can be exploited by malicious users to bypass certain security restrictions, conduct script insertion attacks, conduct cross-site request forgery attacks and cause a DoS (Denial of Service).

Last Update Date: 20 Jan 2015 10:28 Release Date: 20 Jan 2015 3144 Views

RISK: High Risk

Mozilla Firefox / Thunderbird Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox and Thunderbird. A remote user can cause arbitrary code to be executed on the target user's system, conduct cross-site request forgery attacks, and obtain potentially sensitive information. A remote user can create specially crafted...

Last Update Date: 15 Jan 2015 11:53 Release Date: 15 Jan 2015 3136 Views

RISK: Medium Risk

Microsoft Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the WebDAV kernel-mode driver (mrxdav.sys) when it fails to properly validate and enforce impersonation levels. An attacker who successfully exploited this vulnerability could bypass impersonation-level security and gain elevated privileges on a targeted system...

Last Update Date: 15 Jan 2015 Release Date: 14 Jan 2015 3320 Views

RISK: Medium Risk

Network Policy Server Denial of Service Vulnerability

This is a denial of service vulnerability. An unauthenticated attacker who successfully exploited this vulnerability could send specially crafted username strings to an Internet Authentication Service (IAS) or Network Policy Server (NPS), causing a denial of service condition for RADIUS authentication on the IAS or...

Last Update Date: 15 Jan 2015 Release Date: 14 Jan 2015 3143 Views

RISK: Medium Risk

Microsoft Windows Error Reporting Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Windows Error Reporting (WER) that allows administrative users to view the memory contents of processes protected by "Protected Process Light." "Protected Process Light" inhibits debugging of critical system processes by arbitrary users on the system, even administrative...

Last Update Date: 15 Jan 2015 Release Date: 14 Jan 2015 3183 Views

RISK: Medium Risk

Network Location Awareness Service Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the Network Location Awareness (NLA) service that could unintentionally relax the firewall policy and/or configuration of certain services. This could increase the surface exposed to an attacker. The vulnerability is caused when the NLA service fails to...

Last Update Date: 15 Jan 2015 Release Date: 14 Jan 2015 3205 Views