Security Bulletin

RISK: High Risk

Mozilla Firefox Multiple Vulnerabilities

Multiple weaknesses and vulnerabilities have been identified in Mozilla Firefox, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system.Some unspecified errors can be exploited to corrupt memory.An error in the implementation of the "window...

Last Update Date: 30 Sep 2011 18:12 Release Date: 30 Sep 2011 6149 Views

RISK: High Risk

Novell GroupWise Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Novell GroupWise, which can be exploited by malicious people to conduct cross-site scripting attacks, denial of service attack and compromise a user's system. The GroupWise Internet Agent (GWIA) is vulnerable to a DoS exploit whereby...

Last Update Date: 27 Sep 2011 12:26 Release Date: 27 Sep 2011 6090 Views

RISK: Medium Risk

Apache Tomcat HTTP DIGEST authentication Multiple Vulnerability

在 Apache Tomcat 發現多個漏洞，惡意使用者可利用漏洞繞過保安限制。HTTP DIGEST 核證被發有以下弱點：允許 replay 攻擊沒有檢查伺服...

Last Update Date: 27 Sep 2011 12:17 Release Date: 27 Sep 2011 6403 Views

RISK: High Risk

HP TCP/IP Services for OpenVMS Multiple Vunlerabilities

Multiple vulnerabilities have been identified with HP TCP/IP Services for OpenVMS Running NTP. The vulnerabilities could be remotely exploited to execute arbitrary code or create a Denial of Service (DoS).

Last Update Date: 23 Sep 2011 09:28 Release Date: 23 Sep 2011 5952 Views

RISK: High Risk

Google Chrome Flash Player Vulnerability

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by malicious people to conduct cross-site scripting attacks and compromise a user's system. The vulnerabilities are caused due to a bundled vulnerable version of Adobe Flash Player. Please refer to SA11092203...

Last Update Date: 22 Sep 2011 12:21 Release Date: 22 Sep 2011 6463 Views

RISK: High Risk

Adobe Flash Player Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player, which can be exploited by malicious people to conduct cross-site scripting attacks and compromise a user's system. Note: The vulnerability (CVE-2011-2444) is reportedly being exploited in...

Last Update Date: 22 Sep 2011 12:15 Release Date: 22 Sep 2011 6519 Views

RISK: Medium Risk

Cisco Identity Services Engine Database Default Credentials Vulnerability

A vulnerability has been identified in Cisco Identity Services Engine, which can be exploited by malicious people to bypass certain security restrictions. The security issue is caused due to the appliance including an undocumented database account with default credentials. This can be exploited to...

Last Update Date: 22 Sep 2011 10:41 Release Date: 22 Sep 2011 6248 Views

RISK: Medium Risk

Fraudulent SSL Digital Certificates affect multiple Internet Applications and Network devices

DigiNotar is a Dutch certification authority (CA) for issuing the SSL and EVSSL digital certificate, many internet application and network devices are preloaded the DigiNotar's root certificate in the trusted root certification authorities. The list of known fraudulent certificates issued by DigiNotarby contains some...

Last Update Date: 21 Sep 2011 Release Date: 16 Sep 2011 6770 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, where some have an unknown impact and others can be exploited by malicious people to conduct spoofing and cross-site scripting attacks, disclose sensitive information, bypass certain security restrictions, and compromise a user...

Last Update Date: 20 Sep 2011 11:48 Release Date: 20 Sep 2011 6330 Views

RISK: Medium Risk

Oracle Fusion Middleware & Application Server Vulnerability

A vulnerability have been identified in Oracle Fusion Middleware & Application Server, which can be exploited by remote attacker cause denial of service attack.

Last Update Date: 19 Sep 2011 12:18 Release Date: 19 Sep 2011 6598 Views