OpenJDK: Restrict use of privileged annotations (Libraries, 8034985)

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-4223. NOTE: the previous information is...

Oracle E-Business (July 2014 CPU)

The version of Oracle E-Business installed on the remote host is missing the July 2014 Critical Patch Update CPU. It is, therefore, affected by vulnerabilities in the following components : - Oracle Applications Technology Stack - Oracle Concurrent Processing - Oracle Applications Manager - Oracl...

CVE-2014-2483

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-4223. NOTE: the previous information is...

Oracle Secure Global Desktop Multiple Vulnerabilities (July 2014 CPU)

The remote host has a version of Oracle Secure Global Desktop that is version 4.63, 4.71, 5.0 or 5.1. It is, therefore, affected by the following vulnerabilities : - Apache Tomcat does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrec...

CVE-2014-5112

creationtimestamp| type| source ---|---|--- 2014-07-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39352...

Oracle Siebel Multiple Vulnerabilities (July 2014 CPU)

The remote Oracle Siebel install is affected by multiple unspecified vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid76576; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

Oracle Java SE Multiple Vulnerabilities (July 2014 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 8 Update 11, 7 Update 65, 6 Update 81, or 5 Update 71. It is, therefore, affected by security issues in the following components : - Deployment - Hotspot - JavaFX - JMX - Libraries - Security ...

Oracle Java SE Multiple Vulnerabilities (July 2014 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 8 Update 11, 7 Update 65, 6 Update 81, or 5 Update 71. It is, therefore, affected by security issues in the following components : - Deployment - Hotspot - JavaFX - JMX - Libraries - Security ...

Oracle WebLogic Server Multiple Vulnerabilities (July 2014 CPU)

Binary data oracleweblogicservercpujul2014.nbin...

Oracle Database Multiple Vulnerabilities (July 2014 CPU)

The remote Oracle database server is missing the July 2014 Critical Patch Update CPU. It is, therefore, affected by security issues in the following components : - XML Parser - Network Layer - RDBMS Core %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Threat Outbreak Alert RuleID10677: Email Messages Distributing Malicious Software on July 15, 2014

Medium Alert ID: 34933 First Published: 2014 July 15 14:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10677 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID10682: Email Messages Distributing Malicious Software on July 15, 2014

Medium Alert ID: 34937 First Published: 2014 July 15 14:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10682 may contain the following files: Name | Siz...

Oracle Releases July 2014 Security Advisory

Oracle has released its Critical Patch Update for July 2014 to address 113 vulnerabilities across multiple products. This update contains the following security fixes: 5 for Oracle Database Server 29 for Oracle Fusion Middleware 7 for Oracle Hyperion 1 for Oracle Enterprise Manager Grid Control 5...

Oracle Critical Patch Update - July 2014

A Critical Patch Update CPU is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are generally cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update...

July 2014 Security Bulletin Webcast and Q&A

Today we published the July 2014 Security Bulletin webcast questions and answers page along with the webcast replay. We answered eight questions on air, with the majority focusing on the update for Internet Explorer. The transcript also includes a question we did not have time to answer on the ai...

CVE-2014-9094

creationtimestamp| type| source ---|---|--- 2014-07-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39250 2018-07-30 08:48:29+00:00| seen| MISP/5b5ece74-a5c8-40cd-87d6-d789950d210f...

tracking.au.pwc.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-46491 Description| Value ---|--- Affected Website:| tracking.au.pwc.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

Threat Outbreak Alert RuleID10551: Email Messages Distributing Malicious Software on July 28, 2014

Medium Alert ID: 34887 First Published: 2014 July 9 13:16 GMT Last Updated: 2014 July 29 12:21 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10551 and...

CVE-2014-4944

creationtimestamp| type| source ---|---|--- 2014-07-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39240...

Assessing risk for the July 2014 security updates

Today we released six security bulletins addressing 29 unique CVE’s. Two bulletins have a maximum severity rating of Critical, three have maximum severity Important, and one is Moderate. We hope that the table below helps you prioritize the deployment of the updates appropriately for your...