Security Bulletin

RISK: Medium Risk

Apple TV Kernel Memory Access Vulnerability

Multiple vulnerabilities have been identified in Apple TV, which can be exploited by malicious people to compromise a user's device.

Last Update Date: 30 Jan 2013 13:41 Release Date: 30 Jan 2013 3814 Views

RISK: High Risk

Apple iOS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple iOS, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and compromise a user's device.

Last Update Date: 30 Jan 2013 13:40 Release Date: 30 Jan 2013 4313 Views

RISK: Medium Risk

Ruby on Rails 3.0 and 2.3 JSON Parser vulnerability

A vulnerability has been identified in Ruby on Rails JSON Parser. The JSON code for Ruby on Rails which allows attackers to bypass authentication systems, inject arbitrary SQL, inject and execute arbitrary code, or perform a DoS attack on a Rails application. The JSON Parsing...

Last Update Date: 29 Jan 2013 17:04 Release Date: 29 Jan 2013 3995 Views

RISK: High Risk

Mass Scam Email Impersonating HKCERT Distributing Malware

HKCERT received an incident report related to a scam email on 25 Jan 2013. The scam email impersonated as HKCERT alert email sent to the public about an extremely critical vulnerability. The sender address of the scam email is "[email protected]", with the...

Last Update Date: 25 Jan 2013 20:00 Release Date: 25 Jan 2013 3961 Views

RISK: Medium Risk

Barracuda Products SSH backdoor vulnerability

A vulnerability has identified in multiple Barracuda products. A remote user can gain access to the target system.The system includes several undocumented SSH user accounts that cannot be disabled and can be accessed from certain whitelisted IP ranges. At least one account can be exploited to...

Last Update Date: 25 Jan 2013 12:33 Release Date: 25 Jan 2013 4017 Views

RISK: High Risk

Cisco Wireless LAN Controller Multipule Vulnerabilities

Multiple vulnerabilities were identified in Cisco Wireless LAN Controller. A remote authenticated user can execute arbitrary code and modify the configuration on the target system, and cause denial of service conditions.A remote user can send specially crafted IP packets to the target device configured with Wireless...

Last Update Date: 24 Jan 2013 12:17 Release Date: 24 Jan 2013 4027 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by malicious people to compromise a user's system. A use-after-free error exists when handling canvas font. An error exists when validating the URL when opening new windows. An...

Last Update Date: 24 Jan 2013 12:12 Release Date: 24 Jan 2013 3991 Views

RISK: High Risk

Schneider Electric Interactive Graphical SCADA System (IGSS) Buffer Overflow Vulnerability

A vulnerability has been identified in Schneider Electric IGSS application, which can be exploited by malicious people to execute code under administrator credentials on the target system.

Last Update Date: 23 Jan 2013 12:10 Release Date: 23 Jan 2013 4019 Views

RISK: High Risk

IBM WebSphere Application Server Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM WebSphere Application Server, which can be exploited by remote attackers to cause denial of service, cross site scripting or compromise a vulnerable system.

Last Update Date: 23 Jan 2013 12:01 Release Date: 23 Jan 2013 3870 Views

RISK: High Risk

F5 BIG-IP Input Validation Flaws Multiple Vulnerabilities

A vulnerability has been identified in F5 BIG-IP, which can be exploited by malicious people to inject SQL commands or allow an authenticated attacker to download arbitrary files from the file system on the target system. A remote authenticated user can supply a specially crafted XML...

Last Update Date: 23 Jan 2013 11:56 Release Date: 23 Jan 2013 3929 Views