Moderate: Red Hat Security Advisory: mariadb security update

Updated mariadb packages that fix several security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

Moderate: Red Hat Security Advisory: mysql55-mysql security update

Updated mysql55-mysql packages that fix several security issues are now available for Red Hat Software Collections 1. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Oracle Access Manager Multiple Vulnerabilities (January 2015 CPU)

The version of Oracle Access Manager installed on the remote host is affected by multiple unspecified vulnerabilities that allow remote attackers to impact integrity and confidentiality. Note that this plugin does not check for additional configuration required to completely mitigate CVE-2015-036...

Oracle Real User Experience Insight October 2014 CPU

The version of Oracle Real User Experience Insight 12.1.0.6 is missing the October 2014 Critical Patch Update. It is, therefore, affected by an unspecified vulnerability that can be exploited by an authenticated, remote attacker to impact confidentiality and integrity. %NASLMINLEVEL 70300 C Tenab...

Fedora 21 : java-1.8.0-openjdk-1.8.0.31-3.b13.fc21 (2015-1075)

Update to January, 2015 Critical Patch Update CPU. See: http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.h tmlAppendixJAVA Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Oracle Solaris Third-Party Patch Update : ntp (multiple_vulnerabilities_in_ntp)

The remote Solaris system is missing necessary patches to address security updates : - Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to 1 the cryptorecv function when the Autokey Authentication...

Oracle Solaris Critical Patch Update : jan2015_SRU9_5

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Resource Control. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring log...

Oracle Solaris Critical Patch Update : jan2015_SRU11_1_15_4_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Network. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful...

Oracle Solaris Critical Patch Update : jan2015_SRU11_1_11_4_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: AMD pcnet driver. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows...

Oracle E-Business Multiple Vulnerabilities (January 2015 CPU)

The version of Oracle E-Business installed on the remote host is missing the January 2015 Oracle Critical Patch Update CPU. It is, therefore, affected by vulnerabilities in the following components : - Oracle Application Object Library - Oracle Applications DBA - Oracle Applications DBA - Oracle...

Oracle Solaris Critical Patch Update : jan2015_SRU11_1_16_5_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Network. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful...

Oracle Solaris Critical Patch Update : jan2015_SRU10_5a

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Power Management Utility. The supported version that is affected is 11. Easily exploitable vulnerability requiring...

Oracle Solaris Critical Patch Update : jan2015_SRU11_2_6_4_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: KSSL. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows successful...

Oracle Solaris Critical Patch Update : jan2015_SRU11_2_3_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: File System. The supported version that is affected is 11. Easily exploitable vulnerability requiring logon to...

Oracle Database Multiple Vulnerabilities (January 2015 CPU)

The remote Oracle database server is missing the January 2015 Critical Patch Update CPU. It is, therefore, affected by security issues in the following components : - Core RDBMS - DBMSUTILITY - PL/SQL - Recovery - Workspace Manager - XML Developer's Kit for C %NASLMINLEVEL 70300 C Tenable Network...

CAS Server 3.5.2 LDAP Authentication Bypass

=====Alligator Security Team - Security Advisory======== CVE-2015-1169 - CAS Server 3.5.2 allows remote attackers to bypass LDAP authentication via crafted wildcards. Reporter: José Tozo =====Table of Contents================================== 1. Background 2. Detailed description 3. Other contex...

Oracle Secure Global Desktop Multiple Vulnerabilities (January 2015 CPU) (POODLE)

The remote host has a version of Oracle Secure Global Desktop that is version 4.63, 4.71, 5.0 or 5.1. It is, therefore, affected by multiple vulnerabilities in the following components : - Apache HTTP Server - Client - Gateway JARP module - Gateway Reverse Proxy - OpenSSL - Print Servlet only in...

January 2015 Oracle Critical Patch update

Oracle’s first Critical Patch Update of the year arrived Tuesday with its usual volume, and some disturbing fanfare. Oracle admins today are staring at 169 patches on their collective plates across the company’s product line. One of the more pressing fixes is for a an issue in the Oracle E-Busine...

Nasty Oracle Vulnerability Leaves Researcher 'Flabbergasted'

Oracle on Tuesday will release a huge number of security fixes as part of its quarterly critical patch update, and one of them is a patch for a vulnerability that a well-known security researcher said looks a lot like a back door but was likely just a terrible mistake. The flaw is found in Oracle...

Oracle Solaris Third-Party Patch Update : puppet (multiple_vulnerabilities_in_puppet1)

The remote Solaris system is missing necessary patches to address security updates : - Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when...