Security Bulletin

RISK: Extremely High Risk

Seagate NAS Remote Code Execution Vulnerability

A vulnerability was identified in Seagate Business Storage 2-Bay NAS. Products in this line were found to be vulnerable to a number of issues that allow for remote code execution under the context of the root user. These vulnerabilities are exploitable without requiring any form...

Last Update Date: 3 Mar 2015 09:56 Release Date: 3 Mar 2015 4541 Views

RISK: Medium Risk

TYPO3 Remote Users Bypass Authentication Vulnerability

A vulnerability was identified in TYPO3. A remote user can bypass authentication on the target system. A remote user can exploit a flaw in the rsaauth system extension to bypass authentication.

Last Update Date: 3 Mar 2015 09:45 Release Date: 3 Mar 2015 4186 Views

RISK: Medium Risk

Mozilla Firefox Multiple Vulnerabilities

Multiple vulnerabilities were identified in Mozilla Firefox, which could be exploited by remote attackers to cause arbitrary code execution, denial of service, bypass security restrictions and disclose potentially sensitive information.A remote user can create specially crafted content that, when loaded by the target user...

Last Update Date: 27 Feb 2015 Release Date: 25 Feb 2015 4002 Views

RISK: Medium Risk

Mozilla Thunderbird Multiple Vulnerabilities

Multiple vulnerabilities were identified in Mozilla Thunderbird, which could be exploited by remote attackers to cause arbitrary code execution, gain elevated privileges and disclose potentially sensitive information.A remote user can create specially crafted content that, when loaded by the target user, will execute arbitrary...

Last Update Date: 27 Feb 2015 Release Date: 25 Feb 2015 3964 Views

RISK: Medium Risk

Cisco IOS XR Denial of Service Vulnerability

A vulnerability has been identified in Cisco IOS XR, which can be exploited by malicious people to cause a DoS (Denial of Service).The vulnerability is caused due to an error when parsing IPv6 packets and can be exploited to cause a reload of a line card...

Last Update Date: 24 Feb 2015 14:29 Release Date: 24 Feb 2015 3883 Views

RISK: Medium Risk

Samba Remote Code Execution Vulnerability

A vulnerability was identified in Samba. A remote user can execute arbitrary code on the target system.A remote user can send specially crafted data followed by an anonymous netlogon packet to trigger an uninitialized memory error and execute arbitrary code on the target system. The code...

Last Update Date: 24 Feb 2015 14:28 Release Date: 24 Feb 2015 3885 Views

RISK: Medium Risk

Lenovo Superfish Adware HTTPS Spoofing Vulnerability

Superfish adware installed on some Lenovo PCs install a non-unique trusted root certification authority (CA) certificate, allowing an attacker to spoof HTTPS traffic. A machine with Superfish VisualDiscovery installed will be vulnerable to SSL spoofing attacks without a warning from the browser.

Last Update Date: 23 Feb 2015 11:12 Release Date: 23 Feb 2015 4380 Views

RISK: High Risk

Cisco ASR 5000 Series Software SNMP Processing Vulnerability

A vulnerability was identified in the Simple Network Management Protocol (SNMP) code of Cisco ASR 5500 System Architecture Evolution (SAE) Gateway could allow an unauthenticated, remote attacker to cause high CPU utilization and the SNMP process may stop responding. NOTE: ...

Last Update Date: 18 Feb 2015 09:27 Release Date: 18 Feb 2015 3997 Views

RISK: Medium Risk

IBM Websphere Application Server Multiple Vulnerabilities

Multiple vulnerabilities were identified in IBM Websphere Application Server, which could be exploited by remote attackers to cause arbitrary code execution, denial of service, cross site scripting, sensitive information disclosure and unauthorised access.

Last Update Date: 17 Feb 2015 10:11 Release Date: 17 Feb 2015 3848 Views

RISK: Medium Risk

Cisco ASA Deny of Service Vulnerability

A vulnerability was identified in Cisco ASA. A remote user can cause denial of service conditions. A remote user can send a large number of specially crafted HTTP requests to trigger a memory leak in the WebVPN service and cause the target device to stop accepting new SSL...

Last Update Date: 13 Feb 2015 09:28 Release Date: 13 Feb 2015 3884 Views