Cisco Releases Multiple Security Advisories

Cisco has released nine security advisories to address multiple vulnerabilities affecting Cisco IOS software. These vulnerabilities may allow an attacker to execute arbitrary code, operate at elevated privileges, or cause a denial-of-service condition. US-CERT encourages users and administrators ...

IBM Report: Mobile Attacks, Phishing Attacks Mount in 2011

Spam volume is down, there are fewer unpatched software holes and oftware application developers did a better job of writing secure code over the last year. But IBM’s X-Force Trend and Risk Report still found plenty to worry about in 2011, according to a copy of the report released this week...

Microsoft Visual Studio Privilege Elevation Vulnerability (2651019)

This host is missing an important security update according to Microsoft Bulletin MS12-021. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Visual Studio Add-In Local Privilege Escalation Vulnerability

Description Microsoft Visual Studio is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Microsoft Visu...

Macro Toolworks 7.5 - Local Buffer Overflow

Macro Toolworks 7.5 - Local Buffer Overflow source: https://www.securityfocus.com/bid/52351/info Macro Toolworks is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Local attackers can exploit this issue to run arbitrary co...

Microsoft Releases March Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows, Visual Studio, and Express Design as part of the Microsoft Security Bulletin Summary for March 2012. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or opera...

GLSA-201203-03 : Puppet: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201203-03 Puppet: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Puppet. Please review the CVE identifiers referenced below for details. Impact : A local attacker could gain elevated privileges, or acces...

Puppet: Multiple vulnerabilities

Background Puppet is a system configuration management tool written in Ruby. Description Multiple vulnerabilities have been discovered in Puppet. Please review the CVE identifiers referenced below for details. Impact A local attacker could gain elevated privileges, or access and modify arbitrary...

Microsoft Releases February Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows, Internet Explorer, .Net Framework, Silverlight, Office, and Server Software as part of the Microsoft Security Bulletin Summary for February 2012. These vulnerabilities may allow an attacker to execute arbitrary code o...

Cisco IronPort Appliances Telnet Remote Code Execution Vulnerability

Cisco AsyncOS Software for Cisco Web Security Appliance WSA, Cisco Email Security Appliance ESA, and Cisco Content Security Management Appliance SMA contain a vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code with elevated privileges. Cisco has released...

Cisco Security Advisory: Cisco IP Video Phone E20 Default Root Account

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco IP Video Phone E20 Default Root Account Advisory ID: cisco-sa-20120118-te Revision 1.0 For Public Release 2012 January 18 16:00 UTC GMT +--------------------------------------------------------------------- Summary ======= Cisco TelePresence...

Microsoft Releases January Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows and Microsoft Developer Tools and Software as part of the Microsoft Security Bulletin Summary for January 2012. These vulnerabilities may allow an attacker to execute arbitrary code, operate with elevated privileges,...

MS11-097: Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2620712)

The Windows Client/Server Run-time Subsystem CSRSS on the remote host has a privilege escalation vulnerability. Permissions are not properly validated when a lower-integrity process communicates a device event to a higher-integrity process. A local attacker could exploit this vulnerability to gai...

SuSE 10 Security Update : Xen (ZYPP Patch Number 7547)

This collective June/2011 Update for Xen provides the following fixes : - Xen does not properly check the upper boundary of user-supplied data in the getfreeport function when getting a new event channel port. A local user on the guest operating system can exploit this flaw to cause denial of...

Ubuntu Update for mozvoikko USN-1277-2

Ubuntu Update for Linux kernel vulnerabilities USN-1277-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN12772.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for mozvoikko USN-1277-2 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Th...

Windows Kernel-Mode Drivers Remote Code Execution Vulnerability (2617657)

This host has moderate security update missing according to Microsoft Bulletin MS11-084. OpenVAS Vulnerability Test $Id: secpodms11-084.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Kernel-Mode Drivers Remote Code Execution Vulnerability 2617657 Authors: Antu Sanadi Copyright: Copyright c 2011...

Mozilla Thunderbird < 8.0 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 8.0 and thus, is potentially affected by the following security issues : - Certain invalid sequences are not handled properly in 'Shift-JIS' encoding and can allow cross-site scripting attacks. CVE-2011-3648 - The addition of the 'Azure' graphi...

Firefox < 8.0 Multiple Vulnerabilities

The installed version of Firefox is earlier than 8.0 and thus, is potentially affected by the following security issues : - Certain invalid sequences are not handled properly in 'Shift-JIS' encoding and can allow cross-site scripting attacks. CVE-2011-3648 - The addition of the 'Azure' graphics...

IBM DB2 'DT_RPATH' Insecure Library Loading Code Execution Vulnerabilities

The host is running IBM DB2 and is prone to insecure library loading vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2dtrpathinsecurelibloadvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ IBM DB2 'DTRPATH' Insecure Library Loading Code Execution Vulnerabilities Authors: Antu Sanadi...

Google Chrome Mozilla Network Security Services Privilege Escalation Vulnerability - Windows

Google Chrome is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...