CA Security Advisor Newly Discovered Vulnerabilities

Ruby rb_ary_store() multiple integer overflow vulnerabilities

Ruby contains multiple vulnerabilities that can allow a remote attacker to cause a denial of service condition or possibly execute arbitrary code.

Microsoft Windows DNS insufficient socket entropy vulnerability

Microsoft Windows DNS contains a vulnerability that can allow a remote attacker to cause DNS cache poisoning.

Microsoft SQL Server convert () buffer overrun vulnerability

Microsoft SQL Server contains a vulnerability that can allow an attacker to gain escalated privileges.

Microsoft SQL Server memory page reuse information disclosure vulnerability

Microsoft SQL Server contains a vulnerability that can allow an attacker to access and collect the uninitialized memory pages from another user's session.

Microsoft SQL Server buffer overrun vulnerability

Microsoft SQL Server contains a vulnerability that can allow an attacker to gain escalated privileges.

Microsoft Exchange server Outlook Web Acess HTML parsing cross-site scripting vulnerability

Microsoft Exchange server Outlook Web Acess contains a vulnerability that can allow an attacker to conduct cross-site scripting attacks.

Microsoft Windows DNS cache poisoning vulnerability

Microsoft Windows contains a vulnerability that can allow a remote attacker to cause DNS cache poisoning.

Microsoft Exchange server Outlook Web Access data validation cross-site scripting vulnerability

Microsoft Exchange server Outlook Web Access contains a vulnerability that can allow an attacker to conduct cross-site scripting attacks.

Microsoft Office Word document remote code execution vulnerability

Microsoft Word contains a vulnerability that can allow a remote attacker to execute arbitrary code.

Microsoft Windows Explorer saved search remote code execution vulnerability

Microsoft Windows Explorer contains a vulnerability that can allow a remote attacker to execute arbitrary code.

Microsoft SQL Server memory corruption vulnerability

Microsoft SQL Server contains a vulnerability that can allow an attacker to gain escalated privileges.

Adobe Reader Javascript API execution of arbitary code vulnerability

Adobe Reader Javascript API contains a vulnerability that allows remote attacker to execute arbitrary code.

Linux Kernel information disclosure vulnerability

Linux Kernel contains a vulnerability that can allow a local attacker to gain access to sensitive data.

Linux Kernel ptrace and utrace race condition vulnerability

Linux kernel contains a vulnerability that can allow a local attacker to cause a denial of service condition.

sblim libraries arbitrary code execution vulnerability

sblim contains a vulnerability that can allow a local attacker to execute arbitrary code.