Security Bulletin

RISK: Medium Risk

IBM WebSphere Application Server Java Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM WebSphere Application Server, which can be exploited by malicious people to disclose potentially sensitive information, manipulate certain data, bypass certain security restrictions, cause a DoS (Denial of Service), and compromise a vulnerable system. The...

Last Update Date: 29 Jan 2014 Release Date: 28 Jan 2014 3210 Views

RISK: High Risk

Apple Pages Double Free Memory Vulnerability

A vulnerability was identified in Apple Pages. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create a specially crafted Microsoft Word file that, when loaded by the target user, will trigger a double...

Last Update Date: 29 Jan 2014 Release Date: 27 Jan 2014 3258 Views

RISK: High Risk

Apple iTunes Multiple vulnerabilities

Multiple vulnerabilities have been identified in Apple iTunes. A remote user can execute arbitrary code on the target system. A remote authenticated user can write files outside of the target SMB directory. A local user can bypass security restrictions.

Last Update Date: 24 Jan 2014 12:29 Release Date: 24 Jan 2014 3783 Views

RISK: Medium Risk

Drupal Multiple vulnerabilities

Multiple vulnerabilities have been identified in Drupal, which can be exploited by malicious users to bypass certain security restrictions and hijack another user's account.

Last Update Date: 23 Jan 2014 Release Date: 22 Jan 2014 3072 Views

RISK: Medium Risk

JBoss Web Framework Kit Information Disclosure Vulnerabilities

Multiple vulnerabilities have been identified in Red Hat JBoss Web Framework Kit, which can be exploited by malicious users to disclose potentially sensitive information. An error related to the InterfaceGenerator handler within JBoss Seam Remoting can be exploited to gain knowledge of all classes and methods within...

Last Update Date: 22 Jan 2014 17:51 Release Date: 22 Jan 2014 3164 Views

RISK: Medium Risk

VMware Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in various VMware products, which could be exploited by attackers to cause denial of service and cross site request forgery.

Last Update Date: 20 Jan 2014 11:01 Release Date: 20 Jan 2014 3178 Views

RISK: Medium Risk

Microsoft Dynamics AX Query Filter DoS Vulnerability

A denial of service vulnerability exists in Microsoft Dynamics AX that could allow an attacker to cause an AOS instance to become unresponsive.

Last Update Date: 15 Jan 2014 17:46 Release Date: 15 Jan 2014 3081 Views

RISK: Medium Risk

Microsoft Windows Win32k Window Handle Vulnerability

An elevation of privilege vulnerability exists when the Windows kernel-mode driver improperly uses window handle thread-owned objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code with elevated privileges.

Last Update Date: 15 Jan 2014 17:46 Release Date: 15 Jan 2014 3060 Views

RISK: Medium Risk

Microsoft Windows Kernel NDProxy Vulnerability

An elevation of privilege vulnerability exists in the NDProxy component of the Windows kernel due to improper validation of input passed from user mode to the kernel. The vulnerability could allow an attacker to run code in kernel mode. An attacker who successfully exploited this vulnerability could run...

Last Update Date: 15 Jan 2014 17:45 Release Date: 15 Jan 2014 3038 Views

RISK: Medium Risk

Microsoft Word Multiple Memory Corruption Vulnerabilities

Remote code execution vulnerabilities exist in the way that affected Microsoft Office software parses specially crafted files. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or...

Last Update Date: 15 Jan 2014 17:45 Release Date: 15 Jan 2014 3225 Views