Skip to main content

Security Bulletin

Filter by:

RISK: Medium Risk

Medium Risk

Cisco IOS XR IPv6 Packets Processing Denial of Service Vulnerability

A vulnerability has been identified in Cisco IOS XR, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error when processing certain IP version 6 packets, which can be exploited to cause...
Last Update Date: 5 Sep 2014 11:25 Release Date: 5 Sep 2014 3212 Views

RISK: Medium Risk

Medium Risk

IBM Notes / Domino Multiple Vulnerabilities

Multiple vulnerabilities were identified in IBM Notes and IBM Domino, which can be exploited by malicious, local users to manipulate certain data and cause a DoS (Denial of Service), and by malicious people to disclose sensitive information, manipulate certain data, cause...
Last Update Date: 29 Aug 2014 10:40 Release Date: 29 Aug 2014 3166 Views

RISK: High Risk

High Risk

Microsoft Windows Media Center Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Windows Media Center, which could be exploited by convincing a user to open a specially crafted Microsoft Office file.
Last Update Date: 29 Aug 2014 Release Date: 13 Aug 2014 3045 Views

RISK: Medium Risk

Medium Risk

WinSCP Multiple Vulnerabilities

Multiple vulnerabilities have been identified in WinSCP, which can be exploited by malicious people to disclose potentially sensitive information, bypass certain security restrictions, cause a DoS (Denial of Service), and compromise a user's system.
Last Update Date: 28 Aug 2014 Release Date: 25 Aug 2014 3375 Views

RISK: High Risk

High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by malicious people to conduct spoofing attacks, bypass certain security restrictions, and compromise a user's system. Some errors within V8, IPC, sync, and extensions can be exploited to execute...
Last Update Date: 28 Aug 2014 17:17 Release Date: 28 Aug 2014 3164 Views

RISK: High Risk

High Risk

Microsoft Windows Kernel-Mode Drivers Elevation of Privilege Vulnerabilities

Win32k Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability exists when the Windows kernel-mode driver improperly handles window handle thread-owned objects. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, ...
Last Update Date: 28 Aug 2014 Release Date: 13 Aug 2014 3209 Views

RISK: Medium Risk

Medium Risk

Cisco Unified Communications Manager Multiple Vulnerabilities

Multiple vulnerabilities were identified in Cisco Unified Communications Manager. A remote authenticated user can cause denial of service conditions and execute arbitrary commands on the target system. A remote authenticated user on a registered endpoint can send specially crafted XML data via SIP to cause the target process...
Last Update Date: 27 Aug 2014 Release Date: 13 Aug 2014 3250 Views

RISK: Medium Risk

Medium Risk

Cisco IOS XR Software Packet Parsing Denial of Service Vulnerability

A vulnerability was identified in Cisco ASR 9000 Series Routers. A remote user can cause denial of service conditions. A remote user on the adjacent network can send a specially crafted packet with a multicast destination MAC address through a target device configured with NetFlow sampling to trigger...
Last Update Date: 27 Aug 2014 10:19 Release Date: 27 Aug 2014 3248 Views

RISK: Medium Risk

Medium Risk

IBM HTTP Server Multiple Vulnerabilities

Multiple vulnerabilities were identified in IBM HTTP Server, which could be exploited by malicious people to execute arbitrary code and cause denial of service (DoS).
Last Update Date: 26 Aug 2014 09:48 Release Date: 26 Aug 2014 3159 Views

RISK: Medium Risk

Medium Risk

Drupal Notify Module Information Disclosure Security Issue

 A security issue has been identified in the Notify module for Drupal, which can be exploited by malicious users to disclose potentially sensitive information. The security issue is caused due to the module not properly verifying permissions when handling notification emails and can be exploited...
Last Update Date: 19 Aug 2014 10:17 Release Date: 19 Aug 2014 3275 Views