Security Bulletin

RISK: Medium Risk

Mozilla Network Security Services (NSS) ASN.1 Verification Vulnerability

A vulnerability has been identified in Mozilla Network Security Services (NSS). A remote user can forge digital certificates. The library does not properly parse ASN.1 values in a digital signature. A user can conduct a Bleichenbacher attack variant against the RSA algorithm to create...

Last Update Date: 26 Sep 2014 Release Date: 25 Sep 2014 3441 Views

RISK: Medium Risk

Cisco IOS Software and Cisco IOS XE Software Multiple Denial of Service Vulnerabilities

Mulitple vulnerabilities were identified in Cisco IOS Software and Cisco IOS XE Software, which could be exploited by an unauthenticated, remote attacker to cause a denial of service (DoS) condition.

Last Update Date: 26 Sep 2014 11:10 Release Date: 26 Sep 2014 3683 Views

RISK: Medium Risk

Cisco IOS XR Multiple Denial of Service Vulnerabilities

Multiple vulnerabilities were reported in Cisco IOS XR. A remote user can cause denial of service conditions. A remote user can send a specially crafted RSVP packet to cause the target RSVP process to reload, a specially crafted SNMPv2 packet to cause the target snmpd process to...

Last Update Date: 23 Sep 2014 09:49 Release Date: 23 Sep 2014 3385 Views

RISK: Medium Risk

Apple Safari Security Issue and Multiple Vulnerabilities

A security issue and multiple vulnerabilities have been identified in Apple Safari, which can be exploited by malicious people to disclose sensitive information and compromise a user's system.The application does not properly restrict password autofill functionality for untrusted websites, which can...

Last Update Date: 19 Sep 2014 16:40 Release Date: 19 Sep 2014 3718 Views

RISK: High Risk

Apple iOS Security Issue and Multiple Vulnerabilities

A security issue and multiple vulnerabilities have been identified in Apple iOS, which can be exploited by malicious people with physical access to disclose potentially sensitive information and bypass certain security restrictions and by malicious people to disclose certain sensitive information and compromise a vulnerable device.An unspecified...

Last Update Date: 19 Sep 2014 16:38 Release Date: 19 Sep 2014 3703 Views

RISK: Medium Risk

Apple OS X Multiple Vulnerabilities

Apple has issued a security update for Mac OS X, which fixes a weakness, a security issue, and some vulnerabilities.The product bundles a vulnerable version of PHP.An unspecified error related to Bluetooth can be exploited to execute arbitrary code with escalated privileges....

Last Update Date: 19 Sep 2014 16:36 Release Date: 19 Sep 2014 3340 Views

RISK: High Risk

Google Android Browser Access Control Vulnerability

A vulnerability has been identified in Google Android Browser. A remote user can bypass same origin policy. A remote user can create specially crafted HTML that, when loaded by a target user, will cause arbitrary scripting code to be executed by the target user's...

Last Update Date: 19 Sep 2014 Release Date: 18 Sep 2014 3371 Views

RISK: High Risk

Adobe Acrobat/Reader Multiple Vulnerabilities

Multiple vulnerabilities were identified in Adobe Acrobat and Adobe Reader. A remote user can cause arbitrary code to be executed on the target user's system, cause denial of service conditions, and conduct cross-site scripting attacks.

Last Update Date: 17 Sep 2014 09:51 Release Date: 17 Sep 2014 3393 Views

RISK: Medium Risk

Apache Tomcat Arbitrary JSP Code Upload Vulnerability

A vulnerability has been identified in Apache Tomcat. A remote user can execute arbitrary code on the target system in certain cases. A remote user can upload arbitrary JSP code and then cause the code to be executed in certain limited cases.

Last Update Date: 17 Sep 2014 Release Date: 11 Sep 2014 3390 Views

RISK: High Risk

Microsoft Internet Explorer Cumulative Security Update

Internet Explorer Resource Information Disclosure VulnerabilityAn information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerability could allow an attacker to detect anti-malware applications in use on a target and use the information to avoid detection.Multiple Memory...

Last Update Date: 10 Sep 2014 14:56 Release Date: 10 Sep 2014 3264 Views