Alert and Advisories- 2016

HPE Releases Security Bulletin (23 Dec 2016)

Several potential security vulnerabilities have been identified in HPE Version Control Repository Manager(VCRM) on Windows and Linux.
Remediation: The purpose of this advisory is to bring attention to security advisories released by HPE.
VMware Security Advisories (23 Dec 2016)

VMware has released product updates addressing security issues for 2 VMware products.
Remediation: The purpose of this advisory is to bring attention to security advisories released by VMware.
Multiple Vulnerabilities in phpMyAdmin Could Allow for Remote Code Execution (22 Dec 2016)
Nagios Core Security Updates (19 Dec 2016)

Nagios has recently published updates to their Nagios Core software. The latest updates contained security fixes for various vulnerabilities; including arbitrary code execution, cross-site request forgery attacks, and root privilege escalation.
Remediation: The purpose of this advisory is to bring attention to security updates for Nagios Core.
Moxa NPort Device Vulnerabilities (14 Dec 2016)

Moxa NPort devices are serial to ethernet device servers and industrial controllers. This industrial grade class of device is used to control legacy serial devices on modern IP networks.
Remediation: The purpose of this advisory is to bring attention to multiple vulnerabilities in Moxa NPort Devices.
Apple Releases Security Updates (14 Dec 2016)

Apple has released security updates to address vulnerabilities in watchOS, tvOS, and iOS. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.
Remediation: The purpose of this advisory is to raise awareness of vulnerabilities for which upgrades are now available.
Latest Android security update fixes Dirty COW, GPS vulnerabilities (14 Dec 2016)
Millions of routers allegedly backdoored with malware that cannnot be removed (13 Dec 2016)
McAfee VirusScan Enterprise for Linux Updates (13 Dec 2016)

Intel McAfee has released a security bulletin concerning an update to McAfee VirusScan Enterprise for Linux that fixes multiple vulnerabilities.
Remediation: The purpose of this advisory is to bring attention to security updates for McAfee VirusScan Enterprise for Linux.
Android Security Bulletin December 2016 (09 Dec 2016)

The Android Security Bulletin addresses security updates for 74 vulnerabilities (11 Critical, 43 High, and 20 Moderate). The 11 vulnerabilities tagged as critical have the possibility of remote code execution, privilege escalation and/or permanent device compromise.
Remediation: The purpose of this advisory is to bring attention to the Android Security Bulletin for December.
Sungard eTRAKiT3 may be vulnerable to SQL injection (09 Dec 2016)
Buffer Overflow in BSD libc Library Patched (08 Dec 2016)
ForeScout CounterACT SecureConnector agent is vulnerable to privilege escalation (07 Dec 2016)
Gooligan Malware Targets Android Phones (06 Dec 2016)
Mozilla and Tor Update Browsers to Fix Zero-Day Flaw (06 Dec 2016)
Siemens SICAM PAS Vulnerabilities (05 Dec 2016)

Siemens has released an advisory to inform its users on how to mitigate vulnerabilities that affect SICAM PAS.
Remediation: The purpose of this advisory is to raise awareness of vulnerabilities for which upgrades are now available.
Chrome bug triggered errors on websites using Symantec SSL certificates (05 Dec 2016)
Avalanche (crimeware-as-a-service infrastructure) (02 Dec 2016)
Google Releases Security Updates for Chrome (02 Dec 2016)

Google has released Chrome version 55.0.2883.75 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that, if exploited, may allow an attacker to take control of an affected system.
Remediation: The purpose of this advisory is to raise awareness of vulnerabilities for which upgrades are now available.

Mozilla Releases Security Updates (30 Nov 2016)

Mozilla has released security updates to address a vulnerability in Firefox, Firefox ESR, and Thunderbird. Exploitation of this vulnerability may allow a remote attacker to take control of an affected system.
Remediation: The purpose of this advisory is to raise awareness of vulnerabilities for which upgrades are now available.
Mozilla Firefox SVG animation nsSMILTimeContainer use-after-free vulnerability (30 Nov 2016)
VMWare vRealize Operations Security Update (18 Nov 2016)

VMware has released security updates for the vRealize Operations product. The severity of the vulnerability addressed in this update is rated important. The deserialization vulnerability in the REST API implementation may result in a Denial of Service as it allows for the writing of files with arbitrary content and the moving of existing files into certain folders.
Remediation: The purpose of this advisory is to raise awareness of vulnerabilities for which upgrades are now available.
HNAP Protocol Flaw in D-Link Routers (18 Nov 2016)
Ragentek Android OTA update mechanism vulnerable to MITM attack (18 Nov 2016)
CryptoLuck Ransomware being Malvertised via RIG-E Exploit Kits (16 Nov 2016)
Symantec Releases Security Updates (16 Nov 2016)

Symantec has released updates to address a DLL loading issue in Symantec IT Management Suite (ITMS), Symantec Ghost Solution Suite (GSS), and Symantec Endpoint Virtualization (SEV).
Remediation: The purpose of this advisory is to raise awareness of vulnerabilities for which upgrades are now available.
Mozilla Releases Security Updates (15 Nov 2016)

Mozilla has released security updates to address multiple vulnerabilities in Firefox and Firefox ESR. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.
Remediation: The purpose of this advisory is to raise awareness of vulnerabilities for which upgrades are now available.
Linux LUKS Disk Encryption Vulnerability (15 Nov 2016)
Microsoft's Monthly Update Will Include Fix for Flaw Google Disclosed (07 Nov 2016)
Mirai Botnet Targets IP Addresses in Liberia (07 Nov 2016)
Wix.com Flaw Could Be Exploited to Take Control of Websites (04 Nov 2016)
Active Exploitation of a Vulnerability in Microsoft Windows Kernel (01 Nov 2016)