MySQL Cluster 7.4.x < 7.4.15 DD Subcomponent Arbitrary Data Manipulation (April 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.4.x prior to 7.4.15. It is, therefore, affected by an arbitrary data manipulation vulnerability in the DD subcomponent due to an unspecified flaw. An authenticated, remote attacker can exploit this to update, insert, or delete arbitrary...

Oracle VM VirtualBox 5.0.x < 5.0.38 / 5.1.x < 5.1.20 (April 2017 CPU)

The version of Oracle VM VirtualBox installed on the remote host is 5.0.x prior to 5.0.38 or 5.1.x prior to 5.1.20. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Core component that allows a local attacker to disclose potentially sensitive informatio...

java-1.8.0-openjdk security and bug fix update

1:1.8.0.131-2.b13 - Backport 'S8153711: REDO JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command' - Resolves: rhbz1442162 1:1.8.0.131-1.b11 - Update to aarch64-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update...

MySQL Cluster 7.5.x < 7.5.6 DD Subcomponent Arbitrary Data Manipulation (April 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.5.x prior to 7.5.6. It is, therefore, affected by an arbitrary data manipulation vulnerability in the DD subcomponent due to an unspecified flaw. An authenticated, remote attacker can exploit this to update, insert, or delete arbitrary...

Updated capabilities to upgrade Windows 8.1 and Windows 7

Updated capabilities to upgrade Windows 8.1 and Windows 7 About this update This update adds capabilities to some computers that lets users easily learn about Windows 10 or start an upgrade to Windows 10. Before you install this update, see the Prerequisites section. For more information about...

Oracle E-Business Multiple Vulnerabilities (April 2017 CPU)

The version of Oracle E-Business installed on the remote host is missing the April 2017 Oracle Critical Patch Update CPU. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists in the Oracle Marketing component within the User Interface subcomponent that allows...

Oracle Releases Security Bulletin

Oracle has released its Critical Patch Update for April 2017 to address 299 vulnerabilities across multiple products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the Oracle April...

Threat Outbreak Alert RuleID28783: Email Messages Distributing Malicious Software on April 17, 2017

Medium Alert ID: 53481 First Published: 2017 April 17 16:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28783 may contain the following files: Name | Si...

donerre.fr XSS vulnerability

Vulnerable URL: http://www.donerre.fr/actualites.article.php?id=27%22%27--!%3E%3CScript%20/K/%3EconfirmOPENBUGBOUNTY%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

tl.statcounter.com XSS vulnerability

Open Bug Bounty ID: OBB-224903 Description| Value ---|--- Affected Website:| tl.statcounter.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID28763: Email Messages Distributing Malicious Software on April 14, 2017

Medium Alert ID: 53465 First Published: 2017 April 14 13:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28763 may contain the following files: Name | Si...

CVE-2017-7725

creationtimestamp| type| source ---|---|--- 2017-04-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41885...

Threat Outbreak Alert RuleID28758: Email Messages Distributing Malicious Software on April 13, 2017

Medium Alert ID: 53445 First Published: 2017 April 13 14:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28758 may contain the following files: Name | Si...

CVE-2017-3006

creationtimestamp| type| source ---|---|--- 2017-04-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41878...

CVE-2017-0167

creationtimestamp| type| source ---|---|--- 2017-04-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41880...

Threat Outbreak Alert RuleID28744: Email Messages Distributing Malicious Software on April 12, 2017

Medium Alert ID: 53437 First Published: 2017 April 12 19:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28744 may contain the following files: Name | Si...

vda.gtarcade.com XSS vulnerability

Vulnerable URL: http://vda.gtarcade.com/?q="'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...

iu.edu XSS vulnerability

Vulnerable URL: http://www.iu.edu/liblilly/ask.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4139 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value...

April 2017 Patch Tuesday Video Highlights

Microsoft Fixes 45 Vulnerabilities with new Security Update Guide and says goodbye to Security Bulletins. Adobe Fixes Flash, PDF reader and Photoshop...

Microsoft Releases April 2017 Security Updates

Microsoft has released 61 updates to address vulnerabilities in Microsoft software. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of a system. This Security Update addresses a Microsoft Office vulnerability that is actively being exploited to spread...