Security Bulletin

RISK: Medium Risk

Cisco Secure Access Control System Password Validation Vulnerability

A vulnerability has been identified in Cisco Secure Access Control System. A remote user can bypass TACACS+ authentication. The system does not properly validate user-supplied passwords when TACACS+ is the authentication protocol and the Cisco Secure Access Control System (ACS) is configured...

Last Update Date: 8 Nov 2012 11:24 Release Date: 8 Nov 2012 4937 Views

RISK: High Risk

Adobe Flash Player Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create specially crafted Flash content that, when loaded by the target user, will execute arbitrary code...

Last Update Date: 8 Nov 2012 10:23 Release Date: 8 Nov 2012 5822 Views

RISK: Medium Risk

VLC media player denial of service vulnerability

A vulnerability was identified in VLC media player, which can be exploited by malicious people to cause denial of service condition. When parsing an invalid PNG image file, a buffer overflow might occur. If successful, a malicious third party could trigger an invalid memory access...

Last Update Date: 7 Nov 2012 12:58 Release Date: 7 Nov 2012 5840 Views

RISK: Medium Risk

Opera Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Opera, where some have unknown impacts and other can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and compromise a user's system.An unspecified error when handling CORS (Cross...

Last Update Date: 7 Nov 2012 12:53 Release Date: 7 Nov 2012 5540 Views

RISK: Medium Risk

Symantec Antivirus products CAB files Vulnerability

A vulnerability has been identified in multiple Symantec Antivirus products, which can be exploited by a remote, unauthenticated attacker to execute arbitrary code with SYSTEM privileges. The CAB file decomposer component that is used by multiple Symantec Antivirus products fails to properly handle malformed CAB files, ...

Last Update Date: 6 Nov 2012 10:33 Release Date: 6 Nov 2012 5806 Views

RISK: High Risk

Apple iOS Multiple vulnerabilities

Multiple vulnerabilities have been identified in Apple iOS, which can be exploited by attacker to bypass the screen lock, access potentially sensitive information or compromise a user's system.A remote user can create specially crafted HTML that, when loaded by the target user, ...

Last Update Date: 5 Nov 2012 Release Date: 2 Nov 2012 5865 Views

RISK: High Risk

Apple Safari Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Safari, which can be exploited by malicious people to compromise a user's system. A race condition error exists within the webkit component when handling JavaScript arrays and can be exploited to execute arbitrary code. A use-after...

Last Update Date: 5 Nov 2012 09:38 Release Date: 5 Nov 2012 5616 Views

RISK: Medium Risk

Cisco Prime Data Center Network Manager JBoss RMI Services Vulnerability

A vulnerability has been identified in Cisco Prime Data Center Network Manager, which can be exploited by remote user to execute arbitrary commands on the target system. A remote user can send specially crafted data to JBoss Application Server Remote Method Invocation (RMI) services to execute...

Last Update Date: 1 Nov 2012 11:37 Release Date: 1 Nov 2012 5637 Views

RISK: Medium Risk

Cisco Unified MeetingPlace Web Conferencing Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Unified MeetingPlace Web Conferencing, which can be exploited by remote user to cause a DoS (Denial of Service) and disclose sensitive information. A remote user can send specially crafted HTTP POST data to trigger a buffer overflow and cause...

Last Update Date: 1 Nov 2012 11:34 Release Date: 1 Nov 2012 5633 Views

RISK: High Risk

Mozilla Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, Thunderbird and Seamonkey, which can be exploited by remote user to conduct cross-site scripting attacks or compromise a user's system. A remote user can exploit the valueOf() method of window.location to, ...

Last Update Date: 1 Nov 2012 Release Date: 29 Oct 2012 5250 Views