Threat Outbreak Alert RuleID11993: Email Messages Distributing Malicious Software on October 15, 2014

Medium Alert ID: 36113 First Published: 2014 October 16 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11993 may contain the following files: Name |...

SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability

On October 14, 2014, a vulnerability was publicly announced in the Secure Sockets Layer version 3 SSLv3 protocol when using a block cipher in Cipher Block Chaining CBC mode. SSLv3 is a cryptographic protocol designed to provide communication security, which has been superseded by Transport Layer...

Threat Outbreak Alert RuleID11975: Email Messages Distributing Malicious Software on October 15, 2014

Medium Alert ID: 36088 First Published: 2014 October 15 15:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11975 may contain the following files: Name |...

Remote code execution

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted...

Privilege escalation

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124...

Privilege escalation

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, a...

CVE-2014-4123

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124...

Oracle Java SE Multiple Vulnerabilities (October 2014 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 8 Update 25, 7 Update 71, 6 Update 85, or 5 Update 75. It is, therefore, affected by security issues in the following components : - 2D - AWT - Deployment - Hotspot - JAXP - JSSE - JavaFX -...

Oracle Java Update (October 2014) Multiple Vulnerabilities

Binary data 8550.prm...

Oracle JRockit R27.8.3 / R28.3.3 Multiple Vulnerabilities (October 2014 CPU)

The remote host has a version of Oracle JRockit that is affected by multiple vulnerabilities in the following components : - JAXP - JSSE - Libraries - Security C Tenable Network Security, Inc. include"compat.inc"; if description scriptid78478; scriptversion"1.7"; scriptcvsdate"Date: 2018/11/15...

MySQL 5.5.x < 5.5.40 / 5.6.x < 5.6.21 Multiple Vulnerabilities (October 2014 CPU)

The version of MySQL installed on the remote host is version 5.5.x prior to 5.5.40 or 5.6.x prior to 5.6.21. It is, therefore, affected by errors in the following components : - C API SSL CERTIFICATE HANDLING - CLIENT:SSL:yaSSL - SERVER:DML - SERVER:INNODB DML FOREIGN KEYS - SERVER:OPTIMIZER -...

Threat Outbreak Alert RuleID11970: Email Messages Distributing Malicious Software on October 14, 2014

Medium Alert ID: 36079 First Published: 2014 October 14 18:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11970 may contain the following files: Name |...

Threat Outbreak Alert RuleID11965: Email Messages Distributing Malicious Software on October 14, 2014

Medium Alert ID: 36072 First Published: 2014 October 14 15:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11965 may contain the following files: Name |...

Threat Outbreak Alert RuleID11954: Email Messages Distributing Malicious Software on October 14, 2014

Medium Alert ID: 36069 First Published: 2014 October 14 14:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11954 may contain the following files: Name |...

MS14-060: Vulnerability in Windows OLE could allow for remote code execution: October 14, 2014

None None...

Oracle Releases October 2014 Security Advisory

Oracle has released its Critical Patch Update for October 2014 to address 154 vulnerabilities across multiple products. US-CERT encourages users and administrators to review the Oracle October 2014 Critical Patch Update and apply the necessary updates. This product is provided subject to this...

Threat Outbreak Alert RuleID11921: Email Messages Distributing Malicious Software on October 12, 2014

Medium Alert ID: 36041 First Published: 2014 October 13 13:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11921 may contain the following files: Name |...

Threat Outbreak Alert RuleID11924: Email Messages Distributing Malicious Software on October 12, 2014

Medium Alert ID: 36048 First Published: 2014 October 13 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11924 may contain the following files: Name |...

Threat Outbreak Alert RuleID11936: Email Messages Distributing Malicious Software on October 13, 2014

Medium Alert ID: 36055 First Published: 2014 October 13 13:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11936 may contain the following files: Name |...

Threat Outbreak Alert RuleID11933: Email Messages Distributing Malicious Software on October 13, 2014

Medium Alert ID: 36052 First Published: 2014 October 13 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11933 may contain the following files: Name |...