Security Bulletin

RISK: Medium Risk

Apache HTTP Server Multiple Vulnerabilities

Two vulnerabilities have been reported in Apache HTTP Server, which can be exploited by malicious people to disclose potentially sensitive information and compromise a vulnerable system.

Last Update Date: 30 Jul 2013 14:05 Release Date: 30 Jul 2013 4134 Views

RISK: Medium Risk

Wireshark Multiple Denial of Service Vulnerabilities

Multiple vulnerabilities have been reported in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service). An error exists in the DCP ETSI dissector. An error in the P1 dissector can be exploited to cause a crash. Some errors in...

Last Update Date: 30 Jul 2013 12:41 Release Date: 30 Jul 2013 3984 Views

RISK: Medium Risk

phpMyAdmin Multiple Vulnerabilities

Multiple vulnerabilities have been identified in phpMyAdmin, which can be exploited by malicious users to conduct script insertion and SQL injection attacks. Input passed via the "User", "Host", "db", and "Command" parameters related to the Status Monitor view is not properly sanitised...

Last Update Date: 30 Jul 2013 12:39 Release Date: 30 Jul 2013 4129 Views

RISK: High Risk

IBM Tivoli Endpoint Manager Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM Tivoli Endpoint Manager for Remote Control, which can be exploited by malicious, local users to disclose certain sensitive information and gain escalated privileges and by malicious people to disclose potentially sensitive information, conduct spoofing attacks, bypass certain security restrictions...

Last Update Date: 26 Jul 2013 10:17 Release Date: 26 Jul 2013 4808 Views

RISK: High Risk

Apache HTTP Server Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apache HTTP Server, which can be exploited by attackers to cause a DoS (Denial of Service).Sending a MERGE request against a URI handled by mod_dav_svn with the source href (sent as part of the request body as XML...

Last Update Date: 24 Jul 2013 12:43 Release Date: 24 Jul 2013 4228 Views

RISK: Medium Risk

IBM WebSphere Message Broker Java Multiple Vulnerabilities

IBM has acknowledged multiple vulnerabilities in IBM WebSphere Message Broker, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to disclose certain sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable...

Last Update Date: 24 Jul 2013 12:43 Release Date: 24 Jul 2013 4100 Views

RISK: Medium Risk

Symantec Encryption Management Server Email Attachments Script Insertion Vulnerability

A vulnerability has been identified in Symantec Encryption Management Server, which can be exploited by malicious users to conduct script insertion attacks. Certain unspecified input related to encrypted email attachments is not properly sanitised within the Web Email Protection component before being used. This can be exploited...

Last Update Date: 24 Jul 2013 12:43 Release Date: 24 Jul 2013 4131 Views

RISK: Medium Risk

HP System Management Homepage Multiple Vulnerabilities

Multiple vulnerabilities have been identified in HP System Management Homepage, which can be exploited by attackers to potentially gain escalated privileges, cause a DoS (Denial of Service), conduct cross-site scripting attacks, disclose certain sensitive information, hijack a user's session, ...

Last Update Date: 22 Jul 2013 10:54 Release Date: 22 Jul 2013 4364 Views

RISK: Medium Risk

Apache Struts DefaultActionMapper Redirection and OGNL Security Bypass Vulnerabilities

Multiple vulnerabilities have been identified in Apache Struts, which can be exploited by malicious people to conduct spoofing attacks and bypass certain security restrictions. Input passed via the "redirect:" and "redirectAction:" prefixing parameters is not properly verified in the DefaultActionMapper class (org....

Last Update Date: 19 Jul 2013 10:33 Release Date: 19 Jul 2013 4680 Views

RISK: Medium Risk

IBM Java Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM Java, which can be exploited by attackers to disclose certain sensitive information, manipulate certain data, gain escalated privileges, spoofing attacks, cause a DoS (Denial of Service), bypass certain security restrictions, and compromise a vulnerable...

Last Update Date: 19 Jul 2013 Release Date: 18 Jul 2013 4155 Views