JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0418, and CVE-2014-0424...

Critical: Red Hat Security Advisory: java-1.7.0-oracle security update

Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

OpenJDK: XML canonicalizer mutable strings passed to untrusted code (Security, 8026417)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that...

PT-2014-1260

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Description The issue is related to a component of the Java platform, specifically the Deployment component. It allows a remote...

PT-2014-1225

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Oracle JDK affected versions not specified Oracle JRE affected versions not specified Description The issue is related to a component...

PT-2014-1252

Name of the Vulnerable Software and Affected Versions Java Development Kit affected versions not specified Java Runtime Environment affected versions not specified Oracle Java SE affected versions not specified Description The issue is related to a vulnerability in the Java Development Kit, Java...

RHEL 5 : java-1.7.0-openjdk (RHSA-2014:0027)

Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

PT-2014-1226

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Description The issue is related to a component of the Java platform, specifically the Deployment component. It allows a remote...

PT-2014-1253

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Description The issue is related to a component of the Java platform, specifically the Deployment component. It allows a remote...

PT-2014-1264

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u65 through 7u45 Java Development Kit affected versions not specified Java Runtime Environment affected versions not specified Description The issue affects confidentiality, integrity, and availability. It is related t...

PT-2014-1273

Name of the Vulnerable Software and Affected Versions Java Development Kit affected versions not specified Java Runtime Environment affected versions not specified Oracle JDK affected versions not specified Oracle JRE affected versions not specified Description The issue allows a remote attacker ...

PT-2014-1231

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u51 and 8 Java SE Embedded version 7u51 lcms versions prior to 2.6-r1 Java Runtime Environment affected versions not specified Jrockit affected versions not specified Java Development Kit affected versions not specifie...

Blackhole Exploit Kit Successor Years Away

It should shock no one that a viable successor to the Blackhole exploit kit has yet to emerge in the criminal underground. It’s been less than three months since the arrest of its alleged creator Paunch sent cybercriminals reliant on the toolkit scrambling for a replacement. And like any profitab...

DailyMotion Hosting Malvertising Leading to Fake AV Attack

Video-sharing site DailyMotion, one of the most popular destinations on the Web, is in the throes of an attack where it is serving malicious ads redirecting users to a fake AV scam. Security firm Invincea reported the issue to the website, and as of 4 p.m. ET, DailyMotion was still serving the fa...

Yahoo Removes Ads Redirecting to Magnitude Exploit Kit

The race to replace the Blackhole Exploit Kit as the web exploit pack of choice for cybercriminals seems to have an early leader in Magnitude. Researchers at Dutch security firm Fox-IT reported over the weekend that European visitors to Yahoo were falling victim to malicious ads hosted on the sit...

Yahoo Ad Network abused to redirect users to malicious websites serving Magnitude Exploit Kit

Internet advertisement networks provide hackers with an effective venue for targeting wide range computers through malicious advertisements. Previously it was reported by some security researchers that Yahoo's online advertising Network is one of the top ad networks were being abused to spread...

Dennis Fisher and Mike Mimoso Discuss the NSA, Blackhole Exploit Kit

Dennis Fisher and Mike Mimoso discuss the happenings in the security world of late, including the latest NSA revelations, the odd DGA Changer malware and the response of attackers to the death of Blackhole...

Chewbacca Tor-Based Malware Steals Keystrokes

The Tor network may provide a lead-lined cover for Internet users seeking a measure of privacy online, but it also has proven to be an attractive shelter for attackers. A number of malware campaigns have been able to successfully maneuver on Tor, using the anonymity network as a communication...

PT-2013-1040

Name of the Vulnerable Software and Affected Versions IBM Global Security Kit GSKit versions 8.5 and 9.0 Description The issue allows remote attackers to cause a denial of service via a crafted handshake during resumption of an SSLv2 session. This occurs when a specially formed handshake is used ...

CVE-2013-6329: Undefined Security Weakness

IBM Global Security Kit aka GSKit, as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted handshake during resumption of an SSLv2 session...