Security Bulletin

RISK: High Risk

Adobe Flash Player / AIR Multiple Vulnerabilities

Two vulnerabilities have been identified in Adobe Flash Player and Adobe AIR, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system. An unspecified error can be exploited to bypass certain security restrictions. A use-...

Last Update Date: 13 Aug 2014 14:41 Release Date: 13 Aug 2014 3269 Views

RISK: Medium Risk

IBM Tivoli Endpoint Manager Multiple Vulnerabilities

Multiple vulnerabilities were identified in IBM Tivoli Endpoint Manager for Remote Control, which can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.

Last Update Date: 13 Aug 2014 Release Date: 12 Aug 2014 3453 Views

RISK: Medium Risk

IBM WebSphere Application Server Multiple vulnerabilities

Multiple vulnerabilities were identified in IBM WebSphere Application Server, which could be exploited by malicious people to execute arbitrary code, modify arbitrary file and disclose potentially sensitive information. The vulnerabilities are caused by a bundled vulnerable version of Java.

Last Update Date: 13 Aug 2014 Release Date: 12 Aug 2014 3469 Views

RISK: Medium Risk

WordPress Multiple Vulnerabilities

Multiple vulnerabilities have been identified in WordPress, which can be exploited by malicious users to disclose certain sensitive information or cause a DoS (Denial of Service) and potentially compromise a vulnerable system. 1) An error in the xmlrpc.php script when expanding entity references...

Last Update Date: 8 Aug 2014 12:13 Release Date: 8 Aug 2014 3487 Views

RISK: Medium Risk

Drupal Multiple Vulnerabilities

Two vulnerabilities have been identified in Drupal, which can be exploited by malicious people to cause a DoS (Denial of Service). 1) An error in xmlrpc.php when expanding entity references and can be exploited to consume large amounts of memory and cause an hang...

Last Update Date: 8 Aug 2014 12:12 Release Date: 8 Aug 2014 3420 Views

RISK: Medium Risk

Symantec Endpoint Protection Elevated Prilvilege Vulnerability

A vulnerability was identified in Symantec Endpoint Protection. A local user can obtain elevated privileges on the target system. A local user can execute arbitrary commands on the target system with system level privileges. [Updated on 7-Aug-2014] Note: Exploit code is...

Last Update Date: 7 Aug 2014 Release Date: 1 Aug 2014 3624 Views

RISK: Medium Risk

Cisco IOS and IOS XE Denial of Service Vulnerability

A vulnerability was reported in Cisco IOS and IOS XE. A remote user can cause denial of service conditions.A remote user can send a specially crafted EnergyWise packet to port 43440 on the target device to cause the target device to reload.Systems configured for EnergyWise...

Last Update Date: 7 Aug 2014 10:05 Release Date: 7 Aug 2014 3770 Views

RISK: High Risk

SynoLocker Ransomware Affecting Synology DiskStation

A recent ransomware called “SynoLocker”, which is currently affecting certain Synology NAS servers. Based on Synology current observations, this issue only affects Synology NAS servers running some older versions of DiskStation Manager (DSM 4.3-3810 or earlier), by exploiting a security...

Last Update Date: 6 Aug 2014 20:50 Release Date: 6 Aug 2014 6295 Views

RISK: Medium Risk

Ubisoft Rayman Legends Buffer Overflow Vulnerability

A vulnerability was identified in Ubisoft Rayman Legends, which can be exploited by malicious people to compromise a user's system.The vulnerability is caused due to a boundary error when processing certain TCP packets and can be exploited to cause a stack-based buffer overflow...

Last Update Date: 6 Aug 2014 Release Date: 4 Aug 2014 3597 Views

RISK: High Risk

Samba Heap Overflow Vulnerability

A vulnerability was identified in Samba, which can be exploited by remote user to execute arbitrary code on the target system.A remote user can send specially crafted packets to trigger a heap overflow in the target nmbd NetBIOS name services daemon and execute arbitrary code on the...

Last Update Date: 6 Aug 2014 Release Date: 4 Aug 2014 3618 Views