Oracle Database Multiple Vulnerabilities (January 2014 CPU)

The remote Oracle database server is missing the January 2014 Critical Patch Update CPU and is, therefore, potentially affected by security issues in the following components : - Core RDBMS - Spatial %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

A Look Into the Future and the January 2014 Bulletin Release

In January, there are those who like to make predictions about the upcoming year. I am not one of those people. Instead, I like to quote Niels Bohr who said, “Prediction is very difficult, especially if it’s about the future.” However, I can say without a doubt that change is afoot in 2014...

Assessing risk for the January 2014 security updates

Today we released four security bulletins addressing six CVE’s. All four bulletins have a maximum severity rating of Important. We hope that the table below helps you prioritize the deployment of the updates appropriately for your environment. Bulletin Most likely attack vector Max Bulletin...

CVE-2013-6017

creationtimestamp| type| source ---|---|--- 2014-01-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39015...

Microsoft Releases Advance Notification for January Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating its January release will contain four bulletins. These bulletins will have the severity rating of important and will be for Microsoft Office, Server Software, Windows, and Microsoft Dynamics AX, a multi-language,...

Threat Outbreak Alert: Fake Voice Message Notification Email Messages on January 9, 2014

Medium Alert ID: 32392 First Published: 2014 January 9 21:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a voice message notification for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Confidential Document Delivery Email Messages on January 9, 2014

Medium Alert ID: 32389 First Published: 2014 January 9 18:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a confidential document for the recipient. The text in the email message attempts to convince the recipient to...

Advance Notification Service for the January 2014 Security Bulletin Release

Today we provide advance notification for the release of four bulletins for January 2014. All bulletins this month are rated Important in severity and address vulnerabilities in Microsoft Windows, Office, and Dynamics AX. The update provided in MS14-002 fully addresses the issue first described i...

Threat Outbreak Alert: Email Messages with Malicious Attachments on January 7, 2014

Medium Alert ID: 32338 First Published: 2014 January 7 21:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an image for the recipient. The email message attempts to convince the recipient to open the attachment to view...

Threat Outbreak Alert: Fake Purchase Order Invoice Request Email Messages on January 7, 2014

Medium Alert ID: 32360 First Published: 2014 January 7 21:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order invoice request for the recipient. The text in the email message attempts to convince the...

CVE-2014-1636

creationtimestamp| type| source ---|---|--- 2014-01-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38954 2014-01-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38944 2014-01-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38949 2014-01-07...

Fedora Update for thunderbird FEDORA-2013-23291

Check for the Version of thunderbird OpenVAS Vulnerability Test Fedora Update for thunderbird FEDORA-2013-23291 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Description of the update for Lync Server 2010, Web Conferencing Server: January 2012

Describes the update for Lync Server 2010, Web Conferencing Server that is dated January 2012.SummaryThis article describes the update for Microsoft Lync Server 2010, Web Conferencing Server that is dated January 2012. This update improves the reliability, stability and performance of Lync Server...

TeamSHATTER Security Advisory: SQL Injection in Oracle EM (dBClone) (CVE-2013-0374)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory SQL Injection in Oracle Enterprise Manager dBClone February 20, 2013 Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, 11.2.0.3 Remote...

CVE-2013-0804

creationtimestamp| type| source ---|---|--- 2013-01-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38250...

CVE-2013-0807

creationtimestamp| type| source ---|---|--- 2013-01-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38236...

CVE-2013-1402

creationtimestamp| type| source ---|---|--- 2013-01-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38234...

CVE-2013-1410

creationtimestamp| type| source ---|---|--- 2013-01-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38235...

CVE-2012-2997

creationtimestamp| type| source ---|---|--- 2013-01-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38233...

Oracle Database Multiple Vulnerabilities (January 2013 CPU)

The remote Oracle database server is missing the January 2013 Critical Patch Update CPU and is, therefore, potentially affected by security issues in the following components : - Oracle Spatial - Enterprise Manager Base Platform %NASLMINLEVEL 70300 C Tenable Network Security, Inc...