Security Bulletin

RISK: High Risk

Adobe Flash Player / AIR Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player and Adobe AIR, which can be exploited by malicious people to compromise a user's system. A type confusion error exists. A use-after-free error when unloading the Flash Player module can be exploited...

Last Update Date: 11 Dec 2013 09:59 Release Date: 11 Dec 2013 3122 Views

RISK: High Risk

Microsoft Windows Includes An Invalid Certificate Vulnerability

A vulnerability was reported in Microsoft Windows. A remote user may be able to spoof SSL certificates. The operating system includes an invalid subordinate certificate issued by Directorate General of the Treasury (DG Tresor), subordinate to the Government of France CA (ANSSI). The invalid...

Last Update Date: 10 Dec 2013 10:11 Release Date: 10 Dec 2013 3661 Views

RISK: Medium Risk

HP-UX Java Multiple Vulnerabilities

Multiple vulnerabilities have been identified in HP-UX Java, which can be exploited by malicious people to disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.

Last Update Date: 9 Dec 2013 09:47 Release Date: 9 Dec 2013 2962 Views

RISK: Medium Risk

GIMP XWD Plugin "load_image()" Buffer Overflow Vulnerability

A vulnerability have been reported in GIMP, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error within the "load_image()" function (plug-ins/common/file-xwd....

Last Update Date: 6 Dec 2013 11:33 Release Date: 6 Dec 2013 2965 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been reported in Google Chrome, where some have an unknown impact and others can be exploited by malicious people to conduct spoofing and session fixation attacks and compromise a user's system.An error when handling the 302 HTTP status in sync can be...

Last Update Date: 6 Dec 2013 11:33 Release Date: 6 Dec 2013 3057 Views

RISK: Medium Risk

JBoss Enterprise Application Platform Multiple Vulnerbilities

Multiple vulnerabilities have been identified in JBoss Enterprise Application Platform. A remote authenticated user can bypass security controls. A local user can obtain elevated privileges on the target system. The HawtJNI Library class writes native libraries to a predictable file name in the '/tmp' directory...

Last Update Date: 5 Dec 2013 10:01 Release Date: 5 Dec 2013 3090 Views

RISK: Medium Risk

Ruby on Rails Multiple Vulnerability

Multiple vulnerabilities were identified in Ruby on Rails. A remote user can cause denial of service conditions, conduct cross-site scripting attacks, and generate unsafe queries. Several scripts do not properly filter HTML code from user-supplied input before displaying the input. A...

Last Update Date: 4 Dec 2013 09:30 Release Date: 4 Dec 2013 3129 Views

RISK: High Risk

D-Link Router Authentication Bypass Backdoor Vulnerability

A vulnerability was reported in D-Link Routers. A remote user can gain administrative access on the target device. A remote user can send a specially crafted HTTP request with the HTTP User-Agent set to 'xmlset_roodkcableoj28840ybtide' to bypass authentication and gain administrative access...

Last Update Date: 3 Dec 2013 Release Date: 15 Oct 2013 3503 Views

RISK: High Risk

Microsoft Windows NDProxy.sys Privilege Escalation Vulnerability

A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious, local users to gain escalated privileges. The vulnerability is caused due to an input validation error within the NDPROXY (NDProxy.sys) kernel component and can be exploited to execute arbitrary...

Last Update Date: 29 Nov 2013 10:39 Release Date: 29 Nov 2013 3180 Views

RISK: High Risk

Cisco IOS IPSec ICMP Vulnerability

A vulnerability has been identified in Cisco IOS. A remote user can cause denial of service conditions. A remote user can send specially crafted ICMP packets to the target device to modify the IPSec tunnel MTU or path MTU and potentially cause IPSec tunnels to drop...

Last Update Date: 26 Nov 2013 10:05 Release Date: 26 Nov 2013 3139 Views