Security Bulletin

RISK: High Risk

IBM Tivoli Endpoint Manager Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM Tivoli Endpoint Manager for Remote Control, which can be exploited by malicious, local users to disclose certain sensitive information and gain escalated privileges and by malicious people to disclose potentially sensitive information, conduct spoofing attacks, bypass certain security restrictions...

Last Update Date: 26 Jul 2013 10:17 Release Date: 26 Jul 2013 3869 Views

RISK: High Risk

Apache HTTP Server Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apache HTTP Server, which can be exploited by attackers to cause a DoS (Denial of Service).Sending a MERGE request against a URI handled by mod_dav_svn with the source href (sent as part of the request body as XML...

Last Update Date: 24 Jul 2013 12:43 Release Date: 24 Jul 2013 3449 Views

RISK: Medium Risk

IBM WebSphere Message Broker Java Multiple Vulnerabilities

IBM has acknowledged multiple vulnerabilities in IBM WebSphere Message Broker, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to disclose certain sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable...

Last Update Date: 24 Jul 2013 12:43 Release Date: 24 Jul 2013 3325 Views

RISK: Medium Risk

Symantec Encryption Management Server Email Attachments Script Insertion Vulnerability

A vulnerability has been identified in Symantec Encryption Management Server, which can be exploited by malicious users to conduct script insertion attacks. Certain unspecified input related to encrypted email attachments is not properly sanitised within the Web Email Protection component before being used. This can be exploited...

Last Update Date: 24 Jul 2013 12:43 Release Date: 24 Jul 2013 3389 Views

RISK: Medium Risk

HP System Management Homepage Multiple Vulnerabilities

Multiple vulnerabilities have been identified in HP System Management Homepage, which can be exploited by attackers to potentially gain escalated privileges, cause a DoS (Denial of Service), conduct cross-site scripting attacks, disclose certain sensitive information, hijack a user's session, ...

Last Update Date: 22 Jul 2013 10:54 Release Date: 22 Jul 2013 3589 Views

RISK: Medium Risk

Apache Struts DefaultActionMapper Redirection and OGNL Security Bypass Vulnerabilities

Multiple vulnerabilities have been identified in Apache Struts, which can be exploited by malicious people to conduct spoofing attacks and bypass certain security restrictions. Input passed via the "redirect:" and "redirectAction:" prefixing parameters is not properly verified in the DefaultActionMapper class (org....

Last Update Date: 19 Jul 2013 10:33 Release Date: 19 Jul 2013 3911 Views

RISK: Medium Risk

IBM Java Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM Java, which can be exploited by attackers to disclose certain sensitive information, manipulate certain data, gain escalated privileges, spoofing attacks, cause a DoS (Denial of Service), bypass certain security restrictions, and compromise a vulnerable...

Last Update Date: 19 Jul 2013 Release Date: 18 Jul 2013 3413 Views

RISK: High Risk

Cisco Intrusion Prevention System Multiple Vulnerabilities

A vulnerability has been identified in Cisco Intrusion Prevention System, which can be exploited by malicious people to cause a DoS (Denial of Service).

Last Update Date: 19 Jul 2013 10:11 Release Date: 19 Jul 2013 3389 Views

RISK: High Risk

Oracle Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Oracle products, which can be exploited by attackers to conduct denial of service, disclose sensitive information, manipulate information.

Last Update Date: 18 Jul 2013 11:53 Release Date: 18 Jul 2013 3416 Views

RISK: High Risk

Oracle Database Multiple Vulnerabilities

Several vulnerabilities were identified in Oracle Database. A remote or remote authenticated user can execute arbitrary code on the target system. A remote authenticated user can partially access and modify data on the target system, and cause partial denial of service conditions. A local user can...

Last Update Date: 17 Jul 2013 12:59 Release Date: 17 Jul 2013 3373 Views