Adobe has released security updates for Adobe Flash Player that addresses multiple, critical vulnerabilities that could allow an attacker to take control of an affected system. Microsoft has released an out-of-band patch for Adobe Flash Player when on all supported editions of Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows RT 8.1, and Windows 10.
Security Alerts
March 10, 2016
March 2, 2016
The OpenSSL development team published a security advisory regarding high-impact TLS/SSL vulnerabilities, which could allow an attacker to
decrypt TLS sessions by using a server supporting legacy ciphers (CVE-2016-0800).
February 18, 2016
The glibc (since version 2.9) DNS client side resolver is vulnerable to a stack-based buffer overflow when the getaddrinfo() library function is used.
Software using this function may be remotely exploited with attacker-controlled domain names, attacker-controlled DNS servers, or through a man-in-the-middle attack.
December 15, 2015
A remote code execution vulnerability has been discovered in Joomla versions 1.5.0 to version 2.4.5. Exploits for this vulnerability have been observed in the wild. Patches are available and users are advised to upgrade immediately.
November 13, 2015
A serious vulnerability in Apache Commons, a library that contains a widely used set of Java components maintained by the Apache Software Foundation, puts thousands of Java applications and servers at risk of remote code execution attacks.
October 15, 2014
A critical vulnerability that can be exploited remotely without authentication has been discovered in Drupal 7.
October 14, 2014
A major flaw, dubbed POODLE, has been discovered by Google in the design of SSL version 3.0.
September 24, 2014
A remotely exploitable flaw has been discovered in GNU Bash that allows code execution through specially-crafted environment variables.
April 8, 2014
A critical information disclosure flaw dubbed "Heartbleed" has been discovered in the OpenSSL library.