PT-2015-5750

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description A security feature bypass issue exists due to the kernel-mode driver's failure to properly validate and enforce impersonation levels. This allows local users to gain privileges...

MS15-089: Vulnerability in WebDAV could allow security feature bypass: August 11, 2015

None None...

IBM DB2 9.7 < Fix Pack 11 Multiple Vulnerabilities (Bar Mitzvah) (FREAK) (TLS POODLE)

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior to Fix Pack 11. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the monitoring and audit features that occurs when handling a specially crafte...

Security feature bypass

Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2015-2584...

PT-2015-5733

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2010 SP2 through 2013 SP1 Excel Viewer version 2007 SP3 Excel Services on SharePoint Server versions 2010 SP2 through 2013 SP1 Description A security feature bypass issue exists in Microsoft Excel, allowing remote...

Security feature bypass

PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass...

Microsoft Internet Explorer VBScript Memory Corruption (MS15-053: CVE-2015-1684)

A security feature bypass vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due an error while processing regular expressions which allows a user to disclose memory contents of the current process. A remote attacker can exploit this issue to bypass the ASLR...

Apache Tomcat 7.0.x < 7.0.60 Multiple Vulnerabilities (FREAK)

According to its self-reported version number, the Apache Tomcat service listening on the remote host is 7.0.x prior to 7.0.60. It is, therefore, affected by the following vulnerabilities : - A NULL pointer dereference flaw exists when the SSLv3 option isn't enabled and an SSLv3 ClientHello is...

Apache Tomcat 8.0.x < 8.0.21 Multiple Vulnerabilities (FREAK)

According to its self-reported version number, the Apache Tomcat server listening on the remote host is 8.0.x prior to 8.0.21. It is, therefore, affected by the following vulnerabilities : - A NULL pointer dereference flaw exists when the SSLv3 option isn't enabled and an SSLv3 ClientHello is...

Security feature bypass

Microsoft Internet Explorer 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass."...

PT-2015-5425

Name of the Vulnerable Software and Affected Versions Microsoft VBScript versions 5.6 through 5.8 Description A security feature bypass exists in the VBScript engine, allowing an attacker to bypass the Address Space Layout Randomization ASLR protection mechanism. This bypass does not allow...

PT-2015-5426

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 11 Description A security feature bypass issue exists due to the failure of Internet Explorer to use the Address Space Layout Randomization ASLR security feature. This allows an attacker to more reliably...

PT-2015-5427

Name of the Vulnerable Software and Affected Versions Microsoft VBScript versions 5.6 through 5.8 Microsoft JScript versions 5.6 through 5.8 Description A security feature bypass exists in the JScript and VBScript engines, allowing attackers to bypass the Address Space Layout Randomization ASLR...

Microsoft Releases May 2015 Security Bulletin

Microsoft has released 13 updates to address vulnerabilities in Microsoft Windows. Some of these vulnerabilities could allow elevation of privilege, denial of service, remote code execution, information disclosure, or security feature bypass. US-CERT encourages users and administrators to review...

PT-2015-5417

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8 through 8.1 Microsoft Windows Server versions 2012 Gold and R2 Microsoft Windows RT versions Gold and 8.1 Description A security feature bypass issue exists due to the Windows kernel's failure to properly validate ...

MS15-053: Vulnerabilities in JScript and VBScript Scripting Engines Could Allow Security Feature Bypass (3057263)

The JScript and/or VBScript scripting engines installed on the remote Windows host are affected by multiple ASLR security feature bypass vulnerabilities, which allow an attacker to more reliably predict the memory offsets of specific instructions in a given call stack. A remote attacker can explo...

Juniper NSM < 2012.2R11 Multiple OpenSSL Vulnerabilities (JSA10679) (FREAK)

The remote host is running a version of NSM Network and Security Manager Server that is prior to 2012.2R11. It is, therefore, affected by multiple vulnerabilities related to OpenSSL : - A NULL pointer dereference flaw exists when the SSLv3 option isn't enabled and an SSLv3 ClientHello is received...

Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10679) (FREAK)

According to its self-reported version number, the remote Juniper Junos device is affected by the following vulnerabilities related to OpenSSL : - A NULL pointer dereference flaw exists when the SSLv3 option isn't enabled and an SSLv3 ClientHello is received. This allows a remote attacker, using ...

Oracle JRockit R28.3.5 Multiple Vulnerabilities (April 2015 CPU) (FREAK)

The remote Windows host has a version of Oracle JRockit installed that is affected by multiple vulnerabilities : - A security feature bypass vulnerability, known as FREAK Factoring attack on RSA-EXPORT Keys, exists due to the support of weak EXPORTRSA cipher suites with keys less than or equal to...

Microsoft XML Core Services (MSXML) (MS15-039: CVE-2015-1646)

A security feature bypass vulnerability has been reported in Microsoft XML Core Services MSXML. The vulnerability is due to a flaw that allows external entities in XML documents to be expanded into different-origin web site contents or local file contents. A remote attacker can exploit this issue...