PT-2014-1263

Name of the Vulnerable Software and Affected Versions Java Development Kit affected versions not specified Java Runtime Environment affected versions not specified Description The issue is related to a component of the Java platform, specifically involving the Libraries subcomponent. It allows a...

PT-2014-1228

Name of the Vulnerable Software and Affected Versions Java Development Kit versions affected versions not specified Java Runtime Environment versions affected versions not specified Oracle Java SE and Java SE Embedded versions affected versions not specified Description The issue is related to a...

PT-2014-1262

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Oracle JDK affected versions not specified Oracle JRE affected versions not specified Canonical Ubuntu Linux affected versions not...

PT-2014-1266

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u71, 7u51, and 8 Java SE Embedded version 7u51 Description The issue allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB. It is associated with subcomponents of th...

PT-2014-1269

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Description The issue is related to a component of the Java platform, specifically the Libraries subcomponent. It allows a remote...

PT-2014-1235

Name of the Vulnerable Software and Affected Versions Java Development Kit affected versions not specified Java Runtime Environment affected versions not specified canonical ubuntu linux affected versions not specified oracle jdk affected versions not specified oracle jre affected versions not...

PT-2014-1236

Name of the Vulnerable Software and Affected Versions Java Development Kit affected versions not specified Java Runtime Environment affected versions not specified Description The issue is related to a component of the Java platform, specifically the JAX-WS subcomponent. Exploitation of this issu...

First Phase of TrueCrypt Audit Turns Up No Backdoors

A initial audit of the popular open source encryption software TrueCrypt turned up fewer than a dozen vulnerabilities, none of which so far point toward a backdoor surreptitiously inserted into the codebase. A report on the first phase of the audit was released today by iSEC Partners, which was...

Exploits for Two-Year-Old PHP Security Vulnerability Found

Close to two years ago, a serious vulnerability in PHP was accidentally disclosed after it was discovered months prior during a hacking contest. A patch was released in relatively short order, and one would assume that given PHP’s prevalence as a web development framework, the fix would have been...

udisks security update

1.0.1-7.el65 - Make sure doc subpackage is noarch 1.0.1-6.el65 - Put devel-docs in a separate package related: rhbz1070145 . 1.0.1-5.el65 - Related: rhbz1070145...

Dexter, Project Hook Point of Sale Malware Still Prevalent

While the Target data breach may be in the rear view mirror, research this week shows it’s clear that many attackers are still using point of sale malware, namely Dexter and Project Hook, in active attacks. Researchers at Arbor Networks’ Security Engineering & Response Team ASERT looked at severa...

IBM Rational Quality Manager Jazz Team Server未明远程代码执行漏洞

Bugtraq ID:65900 CVE ID:CVE-2014-0862 IBM Rational Quality Manager是一款为完整的软件开发生命周期提供集成的测试计划和测试资产的协作的，基于Web的质量管理软件。 IBM Rational Quality Manager所包含的Jazz Team服务器存在未明错误，允许远程攻击者利用漏洞执行任意代码。 0 IBM Rational Quality Manager 2.x IBM Rational Quality Manager 3.x IBM Rational Quality Manager 4.x 厂商补丁： IBM...

SA-CONTRIB-2014-023 - Project Issue File Review - XSS

The Project Issue File Review PIFR module provides an abstracted client-server model and plugin API for performing distributed operations such as code review and testing, with a focus on supporting Drupal development. Two scenarios were identified where the module does not sufficiently sanitize...

3S CODESYS Development System V2 Installed (Windows)

Binary data scadaappcodesys2detect.nbin...

[Charles] Web Debugging Proxy Application

Charles is a web proxy HTTP Proxy / HTTP Monitor that runs on your own computer. Your web browser or any other Internet application is then configured to access the Internet through Charles, and Charles is then able to record and display for you all of the data that is sent and received. In Web a...

Access Bypass in extensions "Yet Another Gallery" (yag) and "Tools for Extbase development" (pt_extbase)

It has been discovered that the extensions "Yet Another Gallery" yag and "Tools for Extbase development" ptextbase are susceptible to Access Bypass Release Date: February 12, 2014 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected...

RHEL 5 / 6 : java-1.6.0-ibm (RHSA-2014:0135)

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Critical: Red Hat Security Advisory: java-1.7.0-ibm security update

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

OpenJDK: TLS/SSL handshake timing issues (JSSE, 8023069)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the January 2014 CPU. Oracle ha...

JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0375...