The post Adversaries never sleep: unknown malware downloaded every 34 seconds appeared first on Check Point Software.
Monthly Archives: June 2015
Fedora 21 Security Update: libwmf-0.2.8.4-42.fc21
Fedora 20 Security Update: openssl-1.0.1e-43.fc20
Resolved Bugs
1225994 – segfault in ssleay_rand_bytes due to locking regression
1223211 – CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks
1224447 – CVE-2015-4000 openssl: LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks [fedora-all]<br
Update mitigating the LOGJAM security vulnerability and fixing a regression in the RAND subsystem locking.
Cyber Warfare Comes to Main Street: WatchGuard Introduces New Firewalls to Arm Small Businesses with Industry's Most Powerful Protection
Small companies are the new big target: SMBs represent the majority of businesses and nearly 44 percent have already been attacked
CVE-2014-9721
libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMPT v3 protocol security mechanisms via a ZMTP v2 or earlier header.
CVE-2015-0263
XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.
CVE-2015-0264
Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile object in an XPath query.
CVE-2015-4038
The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an iv_membership_update_user_settings action to wp-admin/admin-ajax.php.
CVE-2015-4103
Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators cause a denial of service (host interrupt handling confusion) via vectors related to qemu and accessing spanning multiple fields.
CVE-2015-4104
Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of service (unexpected interrupt and host crash) via unspecified vectors.