Further Information

ESB-2013.0109 - [Win][UNIX/Linux] BIND: Denial of service - Remote/unauthenticated - (25/01/2013)

ASB-2013.0010 - [Win][UNIX/Linux] WordPress: Multiple vulnerabilities - A number of security vulnerabilities have been identified in WordPress prior to version 3.5.1. (25/01/2013)

ESB-2013.0108 - [Win][UNIX/Linux] GE Proficy Real-Time Information Portal: Access confidential data - Remote/unauthenticated - (24/01/2013)

ESB-2013.0099 - [Win][UNIX/Linux][Debian] movabletype-opensource: Execute arbitrary code/commands - Remote/unauthenticated - (22/01/2013)

ESB-2013.0096 - [Win][Linux][HP-UX][Solaris][AIX] IBM WebSphere Application Server: Multiple vulnerabilities - (22/01/2013)

ESB-2013.0092 - [Win][UNIX/Linux][Debian] ganglia: Execute arbitrary code/commands - Remote with user interaction - (22/01/2013)

ESB-2013.0091 - [UNIX/Linux] EMC Avamar: Increased privileges - Existing account - (22/01/2013)

ESB-2013.0089 - [Win][Linux][HP-UX][Solaris][AIX] IBM Tivoli Federated Identity Manager: Provide misleading information - Remote/unauthenticated - (21/01/2013)

ASB-2013.0008 - [Win][UNIX/Linux] Nagios Core : Execute arbitrary code/commands - Remote/unauthenticated - Multiple vulnerabilities have been fixed in the latest version of Nagios (17/01/2013)

ESB-2013.0087 - ALERT [Win][UNIX/Linux] Drupal: Cross-site scripting - Remote with user interaction - A critical cross-site scripting vulnerability and others have been fixed in Drupal core 6.28 & 7.19. (17/01/2013)

ESB-2013.0083 - ALERT [Win][UNIX/Linux] Adobe ColdFusion: Multiple vulnerabilities - Multiple vulnerabilities, including some being actively exploited, have been fixed in ColdFusion (16/01/2013)

ASB-2013.0007 - ALERT [Win][UNIX/Linux] Oracle Products: Multiple vulnerabilities - Oracle have released updates for multiple vulnerabilities, including two with a CVSS score of 10.0. (16/01/2013)

ESB-2013.0079 - [Win][UNIX/Linux][Debian] qemu and qemu-kvm: Execute arbitrary code/commands - Remote/unauthenticated - (16/01/2013)

ASB-2013.0006 - ALERT [Win][UNIX/Linux][Mobile] JDK and JRE 7 Update 10 and earlier: Execute arbitrary code/commands - Remote with user interaction - Oracle have released updates for multiple vulnerabilities, including two with a CVSS score of 10.0 (14/01/2013)

ESB-2013.0073 - [UNIX/Linux][Debian] proftpd-dfsg: Increased privileges - Existing account - (14/01/2013)

ESB-2013.0067.2 - UPDATED ALERT [Win][UNIX/Linux] Oracle Java: Execute arbitrary code/commands - Remote with user interaction - (14/01/2013)

ESB-2013.0070 - [Win][UNIX/Linux] Shibboleth Service Provider: Denial of service - Unknown/unspecified - (11/01/2013)

ESB-2013.0059 - ALERT [Win][UNIX/Linux][Debian] rails: Execute arbitrary code/commands - Remote/unauthenticated - Some of the multiple vulnerabilities discovered in Ruby on Rails have been publicly disclosed. (10/01/2013)

ESB-2013.0058 - [Win][UNIX/Linux][Debian] emacs23: Execute arbitrary code/commands - Existing account - (10/01/2013)

ESB-2013.0057 - [Win][Linux][HP-UX][Solaris][AIX] IBM Tivoli Federated Identity Manager: Administrator compromise - Existing account - (09/01/2013)

ESB-2013.0055 - [Win][Linux][HP-UX][Solaris][AIX] IBM Tivoli Federated Identity Manager: Access confidential data - Existing account - (09/01/2013)

ESB-2013.0051 - [Win][Linux][HP-UX][Solaris][AIX] IBM Tivoli Federated Identity Manager: Reduced security - Remote/unauthenticated - (09/01/2013)

ESB-2013.0050 - [Win][UNIX/Linux][Debian] zendframework: Access privileged data - Remote/unauthenticated - (09/01/2013)

ESB-2013.0049 - [Win][UNIX/Linux][RedHat] gtk2: Denial of service - Remote with user interaction - (09/01/2013)

ESB-2013.0048 - [Win][UNIX/Linux][RedHat] freeradius2: Unauthorised access - Existing account - (09/01/2013)

ESB-2013.0047 - [UNIX/Linux][RedHat] hplip3: Overwrite arbitrary files - Existing account - (09/01/2013)

ASB-2013.0003 - [Win][UNIX/Linux][Android] Mozilla Firefox, Thunderbird, & SeaMonkey: Multiple vulnerabilities - Multiple vulnerabilities have been fixed in the latest versions of Mozilla Firefox, Thunderbird and SeaMonkey. (09/01/2013)

ESB-2013.0043 - [Win][UNIX/Linux][RedHat] ruby: Multiple vulnerabilities - (09/01/2013)

ESB-2013.0034 - [UNIX/Linux][RedHat] quota: Unauthorised access - Remote/unauthenticated - (09/01/2013)

ESB-2013.0032 - [Win][UNIX/Linux] EMC NetWorker: Execute arbitrary code/commands - Remote/unauthenticated - (09/01/2013)

ESB-2013.0019 - [Win][UNIX/Linux] Asterisk: Denial of service - Remote/unauthenticated - (08/01/2013)

ESB-2013.0018 - ALERT [Win][UNIX/Linux] Adobe ColdFusion: Multiple vulnerabilities - In-the-wild exploits have been discovered for vulnerabilities in Cold Fusion. (07/01/2013)

ESB-2013.0016 - [Win][UNIX/Linux][Debian] gnupg, gnupg2: Denial of service - Remote/unauthenticated - (07/01/2013)

ESB-2013.0014 - [UNIX/Linux][Debian] nss: Provide misleading information - Remote/unauthenticated - (07/01/2013)

ESB-2013.0013 - [UNIX/Linux][Debian] weechat: Multiple vulnerabilities - (07/01/2013)


Previous  1, 2, 3, 4, 5, 6  Next denotes AusCERT member only content.