US-CERT Security Updates and Major Vulnerabilities as at 11/2/2015

The United States Computer Emergency Readiness Team (US-CERT) publishes weekly updates of major vulnerabilities and security issues collected by a range of US Government agencies, and recorded in the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD).

Swift Systems will be publishing the report each week, so check back regularly to see what the major threats and security issues are being identified and to check against your own infrastructure.

Major vulnerabilities identified include exploits affecting the following common systems and applications:

• Adobe Acrobat
• Cisco email security appliance
• Cisco web security appliance
• Cisco content security management appliance
• CommVault Edge Server
• Google Android
• HP Arcsight Command Center
• HP Vertica
• IBM Tivoli Storage Manager
• Mobatek Mobaxterm
• Mozilla Firefox
• PowerDNS Recursor
• Qolsys IQ Panel
• WordPress WP-Championship plugin 5.8 SQL injection vulnerability
• Xen 3.4 thru’ 4.6

In addition, there are a number of medium and low-level vulnerabilities which can be accessed here along with a more complete description of the security hole.

 

Let our Specialists take care of your IT Support