Threat Outbreak Alert: Fake Bank Transfer Slip Email Messages on May 15, 2014

Medium Alert ID: 34250 First Published: 2014 May 16 13:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank transfer slip for the recipient. The text in the email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Fake Voice Message Notification Email Messages on May 15, 2014

Medium Alert ID: 34249 First Published: 2014 May 16 13:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a voice message for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Hotel Booking Confirmation Email Messages on May 15, 2014

Medium Alert ID: 34239 First Published: 2014 May 16 13:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a hotel booking confirmation for the recipient. The email message attempts to convince the recipient to open the...

SOL15261 - Apache Struts vulnerability CVE-2014-0112

Recommended action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...

SOL15260 - Apache Struts vulnerability CVE-2014-0094

Recommended action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...

SOL15262 - Apache Struts vulnerability CVE-2014-0113

Recommended action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...

[oss-security] Mumble 1.2.6: Mumble-SA-2014-005 and Mumble-SA-2014-006

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi oss-security, The Mumble team has just released Mumble 1.2.6, which contains fixes for the two following vulnerabilities: Mumble-SA-2014-005 http://mumble.info/security/Mumble-SA-2014-005.txt - SVG images with local file references could trigger...

MS KB2962824: Update Rollup of Revoked Non-Compliant UEFI Modules

The remote host is missing Microsoft KB2962824, an update that revokes the digital signatures of four third-party Unified Extensible Firmware Interface UEFI modules. This update prevents the modules from being loaded on systems where UEFI Secure Boot is enabled. C Tenable Network Security, Inc...

Threat Outbreak Alert: Fake Product Price Quote Request Email Messages on May 9, 2014

Medium Alert ID: 34178 First Published: 2014 May 9 15:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product price quote request for the recipient. The text in the email message attempts to convince the recipient t...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 6, 2014

Medium Alert ID: 34113 First Published: 2014 May 6 15:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a balance sheet for the recipient. The text in the email message attempts to convince the recipient to open the...

[ MDVSA-2014:054 ] otrs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:054 http://www.mandriva.com/en/support/security/ Package : otrs Date : March 13, 2014 Affected: Business Server 1.0 Problem Description: Updated otrs package fixes security vulnerability: An attacker could...

Threat Outbreak Alert: Fake Account Payment Notification Email Messages on May 1, 2014

Medium Alert ID: 34024 First Published: 2014 May 2 15:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account payment notification for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on April 30, 2014

Medium Alert ID: 33999 First Published: 2014 April 30 18:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quote request for the recipient. The email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Malicious Attachment Email Messages on April 28, 2014

Medium Alert ID: 33978 First Published: 2014 April 29 18:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with a blank message body and an attachment for the recipient. However, the .rar attachment contains a malicious .scr file that, when...

Threat Outbreak Alert: Email Messages with Malicious Attachments on April 25, 2014

Medium Alert ID: 33949 First Published: 2014 April 25 19:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment relating to an E-pin recharge card for the recipient. The email message attempts to convince the recipient ...

CVE-2014-2734

The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, which allows remote attackers to spoof signatures within the context of a Ruby script that attempts signature verification after performing a certain sequence of filesystem operation...

Design/Logic Flaw

The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, which allows remote attackers to spoof signatures within the context of a Ruby script that attempts signature verification after performing a certain sequence of filesystem operation...

CVE-2014-2734

The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, which allows remote attackers to spoof signatures within the context of a Ruby script that attempts signature verification after performing a certain sequence of filesystem operation...

CVE-2014-2734

The CVE-2014-2734 entry concerns the Ruby OpenSSL extension in Ruby 2.x, where the process memory state may not be correctly maintained after reopening a file, enabling remote attackers to spoof signatures during signature verification after specific filesystem operations. SUSE/PT-2019-4673 and P...

Threat Outbreak Alert: Fake Stock Purchase Information Email Messages on April 24, 2014

Medium Alert ID: 33927 First Published: 2014 April 24 14:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain stock purchase information for the recipient. The text in the email message instructs the recipient to open a .z...