Security Bulletin

RISK: High Risk

Cisco Email Security Appliance Anti-Spam Scanner Bypass Vulnerability

A vulnerability was identitied in the anti-spam scanner of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the anti-spam functionality of the ESA. NOTE: There is no patch available for this vulnerability.

Last Update Date: 16 Jun 2015 10:30 Release Date: 16 Jun 2015 4195 Views

RISK: Medium Risk

Cisco IOS XR Denial of service Vulnerability

A vulnerability was identified in Cisco IOS XR Software, which could allow an unauthenticated, remote attacker to cause a denial of service condition.

Last Update Date: 16 Jun 2015 10:30 Release Date: 16 Jun 2015 4031 Views

RISK: Medium Risk

IBM WebSphere Application Server Multiple Vulnerabilities

Multiple vulnerabilities were identified in IBM WebSphere Application Server, which cause executing arbitrary code, accessing privileged data, and providing misleading information.

Last Update Date: 16 Jun 2015 10:30 Release Date: 16 Jun 2015 4168 Views

RISK: Medium Risk

OpenSSL Remote Users Deny Service and Execute Arbitrary Code Vulnerabilities

Multiple vulnerabilities were reported in OpenSSL. A remote user can cause denial of service conditions on the target system. A remote authenticated user may be able to execute arbitrary code on the target system. A remote authenticated user can send specially crafted application data to a connected...

Last Update Date: 12 Jun 2015 10:35 Release Date: 12 Jun 2015 4511 Views

RISK: High Risk

VMware Products Multiple Vulnerabilities

Multiple vulnerabilites were identitfied in VMware Workstation, Player, Fusion and Horizon View Client, which may cause code execution and Denial of Service.

Last Update Date: 11 Jun 2015 09:45 Release Date: 11 Jun 2015 4158 Views

RISK: Medium Risk

Cisco Catalyst 6500 Series Switches Denial of Service Vulnerability

A vulnerability was identified in Cisco Catalyst 6500 Series Switches, which could allow an authenticated, remote attacker to cause a denial of service condition. NOTE: There is no patch available for this vulnerability.

Last Update Date: 11 Jun 2015 09:45 Release Date: 11 Jun 2015 4110 Views

RISK: Medium Risk

IBM Notes and Domino Multiple vulnerabilities

Multiple vulnerabilities were identified in IBM SDK Java Technology Edition, Version 6 SR16FP3 IF1 that is used by IBM Notes and Domino. Remote attackers can exploit the vulnerabilities to execute arbitrary code, cause elevation of privilege and denial of service.

Last Update Date: 10 Jun 2015 09:58 Release Date: 10 Jun 2015 4083 Views

RISK: High Risk

Adobe Flash Player Multiple Vulnerabilities

Multiple vulnerabilities were reported in Adobe Flash Player. A remote user can execute arbitrary code, obtain potentially sensitive information, and bypass security controls on the target system.

Last Update Date: 10 Jun 2015 09:56 Release Date: 10 Jun 2015 4045 Views

RISK: Medium Risk

Microsoft Exchange Server Elevation of Privilege Vulnerabilities

An information disclosure vulnerability exists in Microsoft Exchange web applications when Exchange does not properly manage same-origin policy. An attacker could exploit this Server-Side Request Forgery (SSRF) vulnerability by using a specially crafted web application request.

Last Update Date: 10 Jun 2015 09:55 Release Date: 10 Jun 2015 4177 Views

RISK: Medium Risk

Microsoft Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft Windows LoadLibrary when it fails to properly validate user input. An authenticated attacker who successfully exploited this vulnerability could elevate privileges on a targeted system. An attacker could then install programs; view, change, or delete data; ...

Last Update Date: 10 Jun 2015 09:54 Release Date: 10 Jun 2015 4055 Views