Security Bulletin

RISK: High Risk

OpenSSL Alternative Certificate Chain Validation Vulnerability

A vulnerability was identified in OpenSSL. A remote user can bypass certificate validation on the target system. When the validation of a certificate chain fails, the system attempts to validate an alternate certificate chain but does not check the CA flag of untrusted certificates. As a...

Last Update Date: 10 Jul 2015 10:42 Release Date: 10 Jul 2015 4426 Views

RISK: Medium Risk

Joomla Multiple Vulnerabilities

Multiple vulnerabilities were identified in Joomla!. A remote user can redirect the target user's browser to an arbitrary site. A remote user can conduct cross-site request forgery attacks.

Last Update Date: 8 Jul 2015 10:26 Release Date: 8 Jul 2015 4118 Views

RISK: Medium Risk

ISC BIND DNSSEC Denial of Service Vulnerability

A vulnerability was identified in ISC BIND. A remote user can cause the target service to crash. A remote user can send a query to the target service for a DNS zone that contains specially crafted zone data to cause the target recursive resolver to crash. Recursive...

Last Update Date: 8 Jul 2015 10:25 Release Date: 8 Jul 2015 4194 Views

RISK: High Risk

Mozilla Firefox and Thunderbird Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox and Thunderbird, which can be exploited by remote attacker to gain elevated privileges, bypass security controls, obtain potentially sensitive information and cause arbitrary code to be executed on the target user's system.

Last Update Date: 7 Jul 2015 Release Date: 6 Jul 2015 4110 Views

RISK: Medium Risk

Cisco Unified Communications Domain Manager Default Static Privileged Account Credentials Vulnerability

A vulnerability has been identified in the Cisco Unified Communications Domain Manager Platform Software, which could allow an unauthenticated, remote attacker to login with the privileges of the root user and take full control of the affected system.

Last Update Date: 6 Jul 2015 Release Date: 2 Jul 2015 4017 Views

RISK: High Risk

Apple iTunes Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple iTunes, which can be exploited by remote attacker to conduct denial of service attack and remote code execution.

Last Update Date: 6 Jul 2015 Release Date: 2 Jul 2015 3867 Views

RISK: High Risk

Apple iOS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple iOS, which can be exploited by remote attacker to conduct cross site scripting, denial of service attack, security restriction bypass, sensitive information disclosure, spoofing and remote code execution.

Last Update Date: 6 Jul 2015 Release Date: 2 Jul 2015 4089 Views

RISK: High Risk

Apple Safari Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Safari, which can be exploited by remote attacker to conduct cross site scripting, denial of service attack, sensitive information disclosure and remote code execution.

Last Update Date: 6 Jul 2015 Release Date: 2 Jul 2015 3829 Views

RISK: High Risk

Apple QuickTime Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple QuickTime, which can be exploited by remote attacker to conduct denial of service attack and remote code execution.

Last Update Date: 6 Jul 2015 Release Date: 2 Jul 2015 3946 Views

RISK: High Risk

Apple OS X Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple OS X, which can be exploited by remote attacker to conduct denial of service attack, security restriction bypass, sensitive information disclosure and spoofing.

Last Update Date: 6 Jul 2015 Release Date: 2 Jul 2015 3921 Views