Security Bulletin

RISK: Medium Risk

Opera Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Opera, where some have unknown impacts and other can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and compromise a user's system.An unspecified error when handling CORS (Cross...

Last Update Date: 7 Nov 2012 12:53 Release Date: 7 Nov 2012 4803 Views

RISK: Medium Risk

Symantec Antivirus products CAB files Vulnerability

A vulnerability has been identified in multiple Symantec Antivirus products, which can be exploited by a remote, unauthenticated attacker to execute arbitrary code with SYSTEM privileges. The CAB file decomposer component that is used by multiple Symantec Antivirus products fails to properly handle malformed CAB files, ...

Last Update Date: 6 Nov 2012 10:33 Release Date: 6 Nov 2012 5037 Views

RISK: High Risk

Apple iOS Multiple vulnerabilities

Multiple vulnerabilities have been identified in Apple iOS, which can be exploited by attacker to bypass the screen lock, access potentially sensitive information or compromise a user's system.A remote user can create specially crafted HTML that, when loaded by the target user, ...

Last Update Date: 5 Nov 2012 Release Date: 2 Nov 2012 5115 Views

RISK: High Risk

Apple Safari Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Safari, which can be exploited by malicious people to compromise a user's system. A race condition error exists within the webkit component when handling JavaScript arrays and can be exploited to execute arbitrary code. A use-after...

Last Update Date: 5 Nov 2012 09:38 Release Date: 5 Nov 2012 4858 Views

RISK: Medium Risk

Cisco Prime Data Center Network Manager JBoss RMI Services Vulnerability

A vulnerability has been identified in Cisco Prime Data Center Network Manager, which can be exploited by remote user to execute arbitrary commands on the target system. A remote user can send specially crafted data to JBoss Application Server Remote Method Invocation (RMI) services to execute...

Last Update Date: 1 Nov 2012 11:37 Release Date: 1 Nov 2012 4894 Views

RISK: Medium Risk

Cisco Unified MeetingPlace Web Conferencing Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Unified MeetingPlace Web Conferencing, which can be exploited by remote user to cause a DoS (Denial of Service) and disclose sensitive information. A remote user can send specially crafted HTTP POST data to trigger a buffer overflow and cause...

Last Update Date: 1 Nov 2012 11:34 Release Date: 1 Nov 2012 4777 Views

RISK: High Risk

Mozilla Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, Thunderbird and Seamonkey, which can be exploited by remote user to conduct cross-site scripting attacks or compromise a user's system. A remote user can exploit the valueOf() method of window.location to, ...

Last Update Date: 1 Nov 2012 Release Date: 29 Oct 2012 4442 Views

RISK: Medium Risk

CA ARCserve Backup Multiple Vulnerabilities

Multiple vulnerabilities have been identified in CA ARCserve Backup. A remote user can execute arbitrary code on the target system and cause denial of service conditions. A remote user can send specially crafted RPC requests to execute arbitrary code on the target system. The code will run...

Last Update Date: 1 Nov 2012 Release Date: 22 Oct 2012 4156 Views

RISK: Medium Risk

3Com, HP, and H3C Routers and Switches SNMP Configuration Vulnerability

A vulnerability was identified in 3Com, HP, and H3C routers and switches. A remote user can take administrative actions on the target system. A remote user with knowledge of the SNMP public community string can access potentially sensitive data (e.g., user names...

Last Update Date: 25 Oct 2012 16:09 Release Date: 25 Oct 2012 4567 Views

RISK: High Risk

ISC BIND Record Handling Lockup Vulnerability

A vulnerability has been identified in ISC BIND, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error when handling queries for certain records and can be exploited to cause the named process to lockup...

Last Update Date: 25 Oct 2012 Release Date: 11 Oct 2012 4229 Views