Collaborate Disseminate
ShoreTel Mobility Client for iOS,version 9.1.2.101 and earlier,fails to properly validate SSL certificates provided by HTTPS connections,which may enable an attacker to conduct man-in-the-middle(MITM)attacks. Continue reading VU#475907: Shoretel Mobility Client iOS application does not verify SSL certificates
McAfee VirusScan Enterprise for Windows scriptproxy COM object contains a memory corruption vulnerability. Continue reading VU#535111: McAfee VirusScan Enterprise for Windows scriptproxy COM object memory corruption vulnerability
EpubCheck 4.0.1 is vulnerable to external XML entity processing attacks. Continue reading VU#779243: EpubCheck 4.0.1 contains a XML external entity processing vulnerability
McAfee VirusScan for Linux contains multiple vulnerabilities. Continue reading VU#245327: McAfee VirusScan for Linux contains multiple vulnerabilities
Netgear R6250,R6400,R6700,R6900,R7000,R7100LG,R7300DST,R7900,R8000,D6220,and D6400 routers and possibly other models are vulnerable to arbitrary command injection. Continue reading VU#582384: Multiple Netgear routers are vulnerable to arbitrary command injection
On Windows endpoints,the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint by causing the SecureConnector agent to execute arbitrary code. Continue reading VU#768331: ForeScout CounterACT SecureConnector agent is vulnerable to privilege escalation
The BSD libc library’s link_ntoa()function may be vulnerable to a classic buffer overflow. It is currently unclear if this issue is exploitable. Continue reading VU#548487: BSD libc contains a buffer overflow vulnerability in link_ntoa()
According to the reporter,the Sungard eTRAKiT3 software version 3.2.1.17 may be vulnerable to SQL injection which may allow a remote unauthenticated attacker to run a subset of SQL commands against the back-end database. Continue reading VU#846103: Sungard eTRAKiT3 may be vulnerable to SQL injection
Mozilla Firefox contains a use-after-free vulnerability in the SVG animation functionality,which may allow a remote,unauthenticated attacker to execute arbitrary code on a vulnerable system. Continue reading VU#791496: Mozilla Firefox SVG animation nsSMILTimeContainer use-after-free vulnerability
NTP.org ntpd prior to 4.2.8p9 contains multiple denial of service vulnerabilities. Continue reading VU#633847: NTP.org ntpd contains multiple denial of service vulnerabilities