Security Bulletin

RISK: Medium Risk

FortiClient VPN Client Password Disclosure Vulnerability

A vulnerability has been identified in FortiClient VPN Client, which can be exploited by remote user to obtain the target user's VPN password. A remote user that can conduct a man-in-the-middle attack and cause the VPN client to connect to...

Last Update Date: 3 May 2013 12:17 Release Date: 3 May 2013 3802 Views

RISK: Medium Risk

Cisco Prime Central for Hosted Collaboration Solution Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Prime Central for Hosted Collaboration Solution, which can be exploited by remote user to conduct cross-site scripting attacks or view files on the target system.

Last Update Date: 3 May 2013 11:49 Release Date: 3 May 2013 3483 Views

RISK: Medium Risk

IBM Lotus Notes Mail Client Remote Code Execution Vulnerability

A vulnerability has been identified in IBM Lotus Notes, which can be exploited by remote user to cause Java applets to be executed on the target user's system. The mail client does not filter 'applet' and 'javascript' tags in HTML-based...

Last Update Date: 3 May 2013 11:37 Release Date: 3 May 2013 3697 Views

RISK: High Risk

Novell iPrint Client Unspecified Buffer Overflow Vulnerability

A vulnerability has been identified in Novell iPrint Client, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an unspecified error and can be exploited to cause a stack-based buffer overflow. Successful exploitation may...

Last Update Date: 3 May 2013 11:28 Release Date: 3 May 2013 3439 Views

RISK: High Risk

HP Service Manager Multiple Vulnerabilities

Multiple vulnerabilities have been identified in HP Service Manager, which can be exploited by attacker to gain escalated privileges, conduct cross-site scripting attacks, disclose certain sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system...

Last Update Date: 2 May 2013 11:28 Release Date: 2 May 2013 3585 Views

RISK: Medium Risk

Cisco IOS XR Deny Service Vulnerability

A vulnerability has been identified in Cisco IOS XR. A remote authenticated user can cause denial of service conditions. A remote authenticated user can send specially crafted SNMP packets to trigger a memory leak in the SNMP process and consume all memory allocated to the process. The...

Last Update Date: 30 Apr 2013 10:44 Release Date: 30 Apr 2013 3648 Views

RISK: High Risk

VMware vCenter Server Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in VMware vCenter Server products, which can be exploited by attacker to bypass certain security restrictions, disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and potentially compromise a vulnerable system.The authentication mechanism...

Last Update Date: 29 Apr 2013 18:29 Release Date: 29 Apr 2013 3698 Views

RISK: High Risk

Citrix NetScaler / Access Gateway Security Bypass Vulnerability

A vulnerability has been identified in Citrix NetScaler and Access Gateway, which can be exploited by malicious user to access internal network resources. Note: Firmware versions 10. through 10..74.4 are also affected when deployed in a double hop configuration only.

Last Update Date: 29 Apr 2013 11:29 Release Date: 29 Apr 2013 3723 Views

RISK: Medium Risk

F-Secure Products ActiveX Component Code Execution Vulnerability

A vulnerability has been identified in multiple F-Secure products, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an error within a bundled ActiveX control, which can be exploited to execute arbitrary SQL statements...

Last Update Date: 26 Apr 2013 17:19 Release Date: 26 Apr 2013 3666 Views

RISK: Medium Risk

WordPress WP Super Cache Plugin PHP Code Execution Vulnerability

A vulnerability has been identified in the WP Super Cache plugin for WordPress, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to the plugin not properly sanitising certain tags and can be exploited to insert and execute arbitrary PHP...

Last Update Date: 26 Apr 2013 14:46 Release Date: 26 Apr 2013 3840 Views