Security Bulletin

RISK: High Risk

MySQL Multiple Vulnerabilities

Multiple vulnerabilities were identified in MySQL. A remote authenticated user can cause denial of service conditions. A remote user can cause partial denial of service conditions, and partially access and modify data on the target system.A remote authenticated user can exploit a flaw in the...

Last Update Date: 17 Jul 2013 12:58 Release Date: 17 Jul 2013 3463 Views

RISK: Medium Risk

FFmpeg Multiple Vulnerabilities

Multiple vulnerabilities have been identified in FFmpeg, where some have an unknown impact and others can be exploited by malicious people to cause a DoS (Denial of Service).A NULL pointer dereference error within the "decode_mb_info()" function (libavcodec/indeo4.c) can...

Last Update Date: 17 Jul 2013 12:57 Release Date: 17 Jul 2013 3334 Views

RISK: Medium Risk

McAfee ePolicy Orchestrator Multiple Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities have been identified in McAfee ePolicy Orchestrator, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed via multiple parameters and scripts is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary...

Last Update Date: 17 Jul 2013 12:57 Release Date: 17 Jul 2013 3259 Views

RISK: Medium Risk

F5 Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in multiple F5 products, which can be exploited by malicious people to cause a DoS (Denial of Service), and compromise a user's system. BIND Recursive Lookup Two Denial of Service VulnerabilitiesThe vulnerability is caused due to a bundled...

Last Update Date: 16 Jul 2013 10:52 Release Date: 16 Jul 2013 3338 Views

RISK: Medium Risk

Squid HTTP Header Port Number Handling Denial of Service Vulnerability

A vulnerability has been identified in Squid, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error when handling port number values within the "Host" header of HTTP requests and can be exploited...

Last Update Date: 16 Jul 2013 10:50 Release Date: 16 Jul 2013 3898 Views

RISK: Medium Risk

Linux Kernel fib6_add_rt2node() Router Advertisement Processing Denial of Service vulnerability

A vulnerability was identified in the Linux Kernel. A remote user can cause denial of service conditions. A remote router advertisement speaker can modify the advertised expiration in certain cases to trigger a flaw in fib6_add_rt2node() and cause the target system to crash.

Last Update Date: 16 Jul 2013 10:46 Release Date: 16 Jul 2013 3399 Views

RISK: Medium Risk

PHP xml_parse_into_struct() Heap Overflow Vulnerability

A vulnerability was reported in PHP. A remote user can execute arbitrary code on the target system. A remote user can send specially crafted nested XML to trigger a heap overflow in xml_parse_into_struct() and execute arbitrary code on the target system. The code will run with...

Last Update Date: 16 Jul 2013 10:46 Release Date: 16 Jul 2013 3311 Views

RISK: Medium Risk

Juniper JunOS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Juniper JUNOS. which can be exploited by remote user can obtain potentially sensitive information, cause denial of service conditions or execute arbitrary code.A remote user can send specially crafted PIM packets when PIM and NAT are enabled on SRX devices...

Last Update Date: 15 Jul 2013 10:39 Release Date: 15 Jul 2013 3618 Views

RISK: High Risk

Avant Browser Rendering Engines Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Avant Browser, which can be exploited by malicious people to conduct cross-site scripting and spoofing attacks, disclose potentially sensitive information, bypass certain security restrictions, and compromise a user's system. For more information, please refer...

Last Update Date: 12 Jul 2013 12:07 Release Date: 12 Jul 2013 3403 Views

RISK: Medium Risk

JBoss RichFaces Deserialization Vulnerability

A vulnerability has been identified in JBoss, which can be exploited by remote user to execute arbitrary code on the target system. A remote user can send specially crafted data to trigger a flaw in the way RichFaces ResourceBuilderImpl handles deserialization and potentially execute arbitrary code on the...

Last Update Date: 12 Jul 2013 11:52 Release Date: 12 Jul 2013 4052 Views