Security Bulletin

RISK: Medium Risk

IBM WebSphere Application Server Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM WebSphere Application Server, which can be exploited by remote attackers to cause denial of service, cross site scripting and disclosure of sensitive information.

Last Update Date: 23 Aug 2012 10:09 Release Date: 23 Aug 2012 5207 Views

RISK: High Risk

Google Chrome Adobe Flash Player Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by malicious people to gain knowledge of potentially sensitive information or compromise a user's system. The vulnerabilities are caused due to the application bundling a vulnerable version of Adobe Flash Player. ...

Last Update Date: 23 Aug 2012 10:08 Release Date: 23 Aug 2012 5250 Views

RISK: High Risk

Adobe Flash Player Multiple Vulnerabilities

Multiple vulnerabilities have been identified in the Adobe Flash Player which could be exploited by attackers to cause a crash and potentially take control of the affected system.

Last Update Date: 22 Aug 2012 12:55 Release Date: 22 Aug 2012 5366 Views

RISK: Medium Risk

Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAP v2) Information Disclosure Vulnerability

Cryptographic weaknesses have been identified in the Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAP v2) which could be exploited by attackers to obtain user credentials. Those credentials could then be re-used to authenticate the attacker to network resources, and the attacker...

Last Update Date: 22 Aug 2012 12:53 Release Date: 22 Aug 2012 5548 Views

RISK: Medium Risk

Apache Web Server Multiple Vulnerabilities

Two vulnerabilities have been identified in Apache which allow a remote user to conduct cross-site scripting attacks or obtain potentially sensitive information. A remote user can access the target user's cookies (including authentication cookies), if any, associated with the site running the...

Last Update Date: 22 Aug 2012 12:24 Release Date: 22 Aug 2012 5198 Views

RISK: Medium Risk

Apple Remote Desktop Information Disclosure Vulnerability

A vulnerability has been identified in Apple Remote Desktop, which may disclose sensitive information to malicious people. The security issue is caused due to data being transmitted unencrypted without producing a warning when connecting to a third-party VNC server with "Encrypt all network data" ...

Last Update Date: 22 Aug 2012 12:21 Release Date: 22 Aug 2012 5218 Views

RISK: High Risk

IBM Lotus Domino HTTP Response Splitting and Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities have been identified in IBM Lotus Domino, which can be exploited by malicious people to conduct HTTP response splitting and cross-site scripting attacks. Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to insert arbitrary...

Last Update Date: 21 Aug 2012 13:26 Release Date: 21 Aug 2012 5570 Views

RISK: Medium Risk

McAfee Security for Microsoft SharePoint / Microsoft Exchange Outside In Vulnerabilities

Multiple vulnerabilities have been identified in McAfee Security for Microsoft SharePoint and McAfee Security for Microsoft Exchange, which can be exploited by malicious people to compromise a user's system. The vulnerabilities are caused due to the software bundling a vulnerable Outside In library. For more...

Last Update Date: 21 Aug 2012 10:09 Release Date: 21 Aug 2012 5191 Views

RISK: Medium Risk

HP Serviceguard Denial of Service Vulnerability

A vulnerability had been identified in HP Serviceguard. A remote user can cause denial of service conditions.

Last Update Date: 20 Aug 2012 10:57 Release Date: 20 Aug 2012 5337 Views

RISK: Medium Risk

PostgreSQL "xml_parse()" and "xslt_process()" Vulnerabilities

Two vulnerabilities have been identified in PostgreSQL, which can be exploited by malicious people to disclose certain sensitive information and compromise a user's system.An error within the "xml_parse()" function when parsing DTD data within XML documents can be exploited to read arbitrary files...

Last Update Date: 20 Aug 2012 10:56 Release Date: 20 Aug 2012 5434 Views