Oracle WebLogic Server Multiple Vulnerabilities (October 2014 CPU)

Binary data oracleweblogicservercpuoct2014.nbin...

Threat Outbreak Alert RuleID11962: Email Messages Distributing Malicious Software on October 15, 2014

Severity Alert ID: 36111 First Published: 2014 October 16 18:05 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on October 15, 2014. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND...

Threat Outbreak Alert RuleID11989: Email Messages Distributing Malicious Software on October 15, 2014

Severity Alert ID: 36110 First Published: 2014 October 16 18:05 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on October 15, 2014. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND...

Threat Outbreak Alert RuleID11988: Email Messages Distributing Malicious Software on October 15, 2014

Severity Alert ID: 36109 First Published: 2014 October 16 18:05 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on October 15, 2014. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND...

Threat Outbreak Alert RuleID11993: Email Messages Distributing Malicious Software on October 15, 2014

Medium Alert ID: 36113 First Published: 2014 October 16 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11993 may contain the following files: Name |...

SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability

On October 14, 2014, a vulnerability was publicly announced in the Secure Sockets Layer version 3 SSLv3 protocol when using a block cipher in Cipher Block Chaining CBC mode. SSLv3 is a cryptographic protocol designed to provide communication security, which has been superseded by Transport Layer...

Threat Outbreak Alert RuleID11975: Email Messages Distributing Malicious Software on October 15, 2014

Medium Alert ID: 36088 First Published: 2014 October 15 15:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11975 may contain the following files: Name |...

Remote code execution

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted...

Privilege escalation

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, a...

Privilege escalation

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124...

CVE-2014-4123

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124...

Oracle Java SE Multiple Vulnerabilities (October 2014 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 8 Update 25, 7 Update 71, 6 Update 85, or 5 Update 75. It is, therefore, affected by security issues in the following components : - 2D - AWT - Deployment - Hotspot - JAXP - JSSE - JavaFX -...

Oracle Java Update (October 2014) Multiple Vulnerabilities

Binary data 8550.prm...

Oracle JRockit R27.8.3 / R28.3.3 Multiple Vulnerabilities (October 2014 CPU)

The remote host has a version of Oracle JRockit that is affected by multiple vulnerabilities in the following components : - JAXP - JSSE - Libraries - Security C Tenable Network Security, Inc. include"compat.inc"; if description scriptid78478; scriptversion"1.7"; scriptcvsdate"Date: 2018/11/15...

MySQL 5.5.x < 5.5.40 / 5.6.x < 5.6.21 Multiple Vulnerabilities (October 2014 CPU)

The version of MySQL installed on the remote host is version 5.5.x prior to 5.5.40 or 5.6.x prior to 5.6.21. It is, therefore, affected by errors in the following components : - C API SSL CERTIFICATE HANDLING - CLIENT:SSL:yaSSL - SERVER:DML - SERVER:INNODB DML FOREIGN KEYS - SERVER:OPTIMIZER -...

Threat Outbreak Alert RuleID11970: Email Messages Distributing Malicious Software on October 14, 2014

Medium Alert ID: 36079 First Published: 2014 October 14 18:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11970 may contain the following files: Name |...

Threat Outbreak Alert RuleID11965: Email Messages Distributing Malicious Software on October 14, 2014

Medium Alert ID: 36072 First Published: 2014 October 14 15:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11965 may contain the following files: Name |...

Threat Outbreak Alert RuleID11954: Email Messages Distributing Malicious Software on October 14, 2014

Medium Alert ID: 36069 First Published: 2014 October 14 14:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11954 may contain the following files: Name |...

MS14-060: Vulnerability in Windows OLE could allow for remote code execution: October 14, 2014

None None...

Oracle Releases October 2014 Security Advisory

Oracle has released its Critical Patch Update for October 2014 to address 154 vulnerabilities across multiple products. US-CERT encourages users and administrators to review the Oracle October 2014 Critical Patch Update and apply the necessary updates. This product is provided subject to this...