Scientific Linux Security Update : java-1.7.0-openjdk on SL5.x i386/x86_64 (20151021)

Multiple flaws were discovered in the CORBA, Libraries, RMI, Serialization, and 2D components in OpenJDK. An untrusted Java application or applet could use these flaws to completely bypass Java sandbox restrictions. CVE-2015-4835, CVE-2015-4881, CVE-2015-4843, CVE-2015-4883, CVE-2015-4860,...

RedHat Update for java-1.8.0-openjdk RHSA-2015:1919-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The software for managing VMware vCenter Server is vulnerable, allowing attackers to cause a system failure.

The vulnerability of the Host Heartbeat service for VMware software that manages virtual infrastructure exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown of the service by sending a specially crafted UDP...

Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x, SL7.x i386/x86_64 (20151021)

Multiple flaws were discovered in the CORBA, Libraries, RMI, Serialization, and 2D components in OpenJDK. An untrusted Java application or applet could use these flaws to completely bypass Java sandbox restrictions. CVE-2015-4835, CVE-2015-4881, CVE-2015-4843, CVE-2015-4883, CVE-2015-4860,...

Scientific Linux Security Update : java-1.8.0-openjdk on SL6.x, SL7.x i386/x86_64 (20151021)

Multiple flaws were discovered in the CORBA, Libraries, RMI, Serialization, and 2D components in OpenJDK. An untrusted Java application or applet could use these flaws to completely bypass Java sandbox restrictions. CVE-2015-4835, CVE-2015-4881, CVE-2015-4843, CVE-2015-4883, CVE-2015-4860,...

Critical: Red Hat Security Advisory: java-1.7.0-openjdk security update

Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

The vulnerability of the Mac OS X operating system, which allows a hacker to increase their privileges

The vulnerability of the Address Book component of the Mac OS X operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker, operating locally, to increase their privileges...

Oracle JRockit R28 < R28.3.8 Multiple Vulnerabilities (October 2015 CPU)

The version of Oracle JRockit installed on the remote Windows host is R28 prior to R28.3.8. It is, therefore, affected by multiple vulnerabilities : - Multiple denial of service vulnerabilities exist due to multiple unspecified flaws in the JAXP subcomponent. A remote attacker can exploit these...

spice: multiple issues

CVE-2015-3247 race condition flaw: A race condition flaw was found in spice's workerupdatemonitorsconfig function, leading to a heap-based memory corruption. A user in a guest could leverage this flaw to crash the host QEMU-KVM process or, possibly, execute arbitrary code with the privileges of...

Mageia: Security Advisory (MGASA-2015-0284)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities of the Android operating system that allow a hacker to execute arbitrary code

The multiple vulnerabilities in the libstagefright library of the Android operating system are caused by buffer overflows. Exploitation of these vulnerabilities could allow a malicious actor to execute arbitrary code using specially crafted MP4 data...

Patch Report: All Versions of Windows affected by Critical Vulnerability

Microsoft has rolled out six security updates this Patch Tuesday, out of which three are considered to be "critical," while the rest are marked as "important." Bulletin MS15-106 is considered to be critical for Internet Explorer IE and affects absolutely all versions of Windows operating system...

The vulnerability of the NX-OS network operating system allows a hacker to gain root user privileges.

The vulnerability of the NX-OS network operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a malicious actor, who operates remotely and has completed the authentication process, to gain root user privileges due to errors in...

The vulnerability of the NX-OS network operating system allows a hacker to gain root user privileges.

The vulnerability of the NX-OS network operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain root user privileges by sending a specific set of commands to the Python interpreter...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the RegioncreateFromParcel function in the Android operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted application...

The vulnerability of the Android operating system, which allows a hacker to intercept or simulate SIM STK commands

The vulnerability of the SIM Toolkit component in the Android operating system is related to deficiencies in access control for files. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept or simulate SIM STK commands using a specially crafted application...

The vulnerability of the Squid proxy server allows attackers to bypass existing restrictions and gain access to the server.

The vulnerability of the Squid proxy server is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to bypass existing restrictions and gain access to the server by manipulating the CONNECT request...

The vulnerability of the Android operating system, which allows a hacker to trigger an improper boot process

The vulnerability of the getProcessRecordLocked method in the ActivityManager component of the Android operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to trigger an improper process loading through a...

The vulnerability of the NX-OS network operating system allows a hacker to gain access to protected information.

The vulnerability of the NX-OS network operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor, who operates remotely and has completed the authentication process, to gain access to protected information...

Oracle: Security Advisory (ELSA-2014-1801)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...