Security Bulletin

RISK: Medium Risk

Cisco Unified Communications Manager Multiple Vulnerabilities

Multiple vulnerabilities haave been identified in Cisco Unified Communications Manager, which can be exploited by malicious users to manipulate certain data, disclose potentially sensitive information, and conduct cross-site scripting attacks. Note: No official solution is currently available.

Last Update Date: 16 Jul 2014 Release Date: 15 Jul 2014 3072 Views

RISK: Medium Risk

Cisco ASA Denial of Service Vulnerability

A vulnerability was identified in Cisco ASA. A remote authenticated user can cause denial of service conditions. A remote authenticated user can exploit a bounds checking flaw in the WebVPN Common Internet File System (CIFS) access function to cause the target device to reload.

Last Update Date: 16 Jul 2014 Release Date: 15 Jul 2014 3128 Views

RISK: Medium Risk

MySQL Multiple Vulnerabilites

Multiple vulnerabilities were reported in MySQL. A remote authenticated or local user can partially access and modify data on the target system. A remote authenticated user can cause partial denial of service conditions.

Last Update Date: 16 Jul 2014 09:41 Release Date: 16 Jul 2014 3184 Views

RISK: Medium Risk

Oracle Database Core RDBMS Multiple Vulnerabilities

Multiple vulnerabilities were identified in Oracle Database. A remote authenticated user can partially access and modify data on the target system, and cause denial of service conditions.

Last Update Date: 16 Jul 2014 09:33 Release Date: 16 Jul 2014 3177 Views

RISK: High Risk

Oracle Java SE Multiple Vulnerabilities

Multiple vulnerabilities were identified in Oracle Java SE. A remote user can gain full control of the target system, access and modify data on the target system, and cause denial of service conditions.

Last Update Date: 16 Jul 2014 09:19 Release Date: 16 Jul 2014 3287 Views

RISK: Medium Risk

Improperly Issued Digital Certificates Spoofing Vulnerability

National Informatics Centre (NIC) improperly issued a subordinate CA certificate, and that this subordinate CA certificate has been misused to issue SSL certificates for multiple sites including Google web properties. These SSL certificates could be used to spoof content, perform phishing attacks, or perform...

Last Update Date: 14 Jul 2014 Release Date: 11 Jul 2014 3369 Views

RISK: Medium Risk

Cisco Products Remote Code Execution Vulnerability

A vulnerability has been identified in the Apache Struts 2 component of multiple Cisco products. The vulnerability is due to insufficient sanitization on user-supplied input in the XWorks component of the affected software. The component uses the ParameterInterceptors directive to parse the Object-Graph Navigation...

Last Update Date: 14 Jul 2014 Release Date: 11 Jul 2014 3222 Views

RISK: Medium Risk

Samba and Samba3x Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Samba and Samba3x, which could be exploited by malicious people to cause denial of service.

Last Update Date: 11 Jul 2014 Release Date: 10 Jul 2014 3117 Views

RISK: Medium Risk

Apache Tomcat6 Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apache Tomecat6, which could be exploited by attackers to cause denial of service conditions and circumvent security restrictions to disclose sensitive information.

Last Update Date: 11 Jul 2014 Release Date: 10 Jul 2014 3215 Views

RISK: Medium Risk

Microsoft Service Bus Denial of Service Vulnerability

A denial of service vulnerability exists in Microsoft Service Bus for Windows Server. An authenticated attacker who successfully exploited the vulnerability could cause the Service Bus to stop responding for incoming AMQP messages.

Last Update Date: 9 Jul 2014 17:19 Release Date: 9 Jul 2014 3190 Views