Security Bulletin

RISK: Medium Risk

Opera Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Opera, which can be exploited to cause cross-site scripting and security bypass. Scripting code can manipulate framed content to bypass the same-origin policy controls. A remote user can cause arbitrary scripting code to be executed by the...

Last Update Date: 26 Jan 2012 11:13 Release Date: 26 Jan 2012 4868 Views

RISK: Medium Risk

OpenSSL DTLS Denial of Service Vulnerability

A vulnerability has been identified in OpenSSL. A remote user can cause denial of service conditions. The fix to correct the Datagram Transport Layer Security (DTLS) vulnerability referenced by CVE-2011-4108 (SA12010501) introduced a flaw. A remote user can send...

Last Update Date: 20 Jan 2012 09:59 Release Date: 20 Jan 2012 5032 Views

RISK: High Risk

McAfee GroupShield Lotus 123 v4 Parser Unspecified Vulnerability

A vulnerability has been identified in McAfee GroupShield, which can be exploited by malicious people to compromise a vulnerable system.The vulnerability is caused due to the software bundling a vulnerable Outside In library.

Last Update Date: 19 Jan 2012 13:30 Release Date: 19 Jan 2012 5085 Views

RISK: Medium Risk

Oracle Products Multiple Vulnerabilies

Multiple vulnerabilities have been identified in various Oracle products and components, which could be exploited by attackers to conduct cross-site scripting attacks, denial of service, elevation of privilege, disclose sensitive information, data manipulation or compromise a vulnerable system.

Last Update Date: 19 Jan 2012 13:26 Release Date: 19 Jan 2012 5068 Views

RISK: Medium Risk

Cisco Digital Media Manager Privilege Escalation Vulnerability

A vulnerability has identified in Cisco Digital Media Manager which could be exploited by a remote authenticated user to gain elevated privileges on the target system.The system does not properly validate unreferenced URLs. A remote authenticated user can send a specially crafted URL via TCP port 8443...

Last Update Date: 19 Jan 2012 13:26 Release Date: 19 Jan 2012 4915 Views

RISK: Medium Risk

IBM WebSphere Application Server Hash Collision Denial of Service Vulnerability

A vulnerability has been identified in IBM WebSphere Application Server, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error within a hash generation function when hashing form posts and updating a hash table. ...

Last Update Date: 18 Jan 2012 14:31 Release Date: 18 Jan 2012 5168 Views

RISK: Medium Risk

IBM HTTP Server Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM HTTP Server, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to bypass certain security restrictions and cause a DoS (Denial of Service).

Last Update Date: 18 Jan 2012 14:30 Release Date: 18 Jan 2012 5088 Views

RISK: Medium Risk

Apache Tomcat Request Object Recycle Security Bypass Vulnerability

A security issue has been identified in Apache Tomcat, which can be exploited by malicious people to bypass certain security restrictions. The security issue is caused due to the request object not being recycled before processing the next request when logging certain actions. This can lead to...

Last Update Date: 18 Jan 2012 14:30 Release Date: 18 Jan 2012 4912 Views

RISK: High Risk

ISC DHCP DHCPv6 Dynamic DNS Remote Denial of Service Vulnerability

A vulnerability has been identified in ISC DHCP, which can be exploited by malicious people to cause a segmentation fault in ISC DHCP servers using IPv6 and Dynamic DNS, resulting in denial of service to clients. Due to improper handling of a DHCPv6 lease structure, ISC...

Last Update Date: 18 Jan 2012 14:30 Release Date: 18 Jan 2012 5042 Views

RISK: High Risk

7-Technologies Interactive Graphical SCADA System Insecure Library Loading Vulnerability

A vulnerability has been identified in 7-Technologies Interactive Graphical SCADA System, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading certain libraries in an insecure manner, which can be exploited to...

Last Update Date: 18 Jan 2012 14:29 Release Date: 18 Jan 2012 4910 Views