CVE-2014-2603: Undefined Security Weakness

Unspecified vulnerability on HP 8/20q switches, SN6000 switches, and 8Gb Simple SAN Connection Kit with firmware before 8.0.14.08.00 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2014-0963

The Reverse Proxy feature in IBM Global Security Kit aka GSKit in IBM Security Access Manager ISAM for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attackers to cause a denial of service infinite loop via crafted SSL messages...

CVE-2014-0963

The Reverse Proxy feature in IBM Global Security Kit aka GSKit in IBM Security Access Manager ISAM for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attackers to cause a denial of service infinite loop via crafted SSL messages...

PT-2014-3979

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager ISAM for Web versions 7.0 through 7.0.0-ISS-SAM-IF0005 IBM Security Access Manager ISAM for Web versions 8.0 through 8.0.0.3-ISS-WGA-IF0001 Description The issue allows remote attackers to cause a denial of service,...

CVE-2014-0963: Undefined Security Weakness

The Reverse Proxy feature in IBM Global Security Kit aka GSKit in IBM Security Access Manager ISAM for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attackers to cause a denial of service infinite loop via crafted SSL messages...

Device-Locking Ransomware Moves to Android

UPDATE–Ransomware has been wreaking havoc on desktops for many years now, with attackers demanding that victims pay a fee to unlock the infected system. This kind of malware hasn’t been a huge issue yet on mobile devices, but that’s beginning to change, albeit slowly. A new piece of mobile malwar...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via a 1 parameter or 2 id name...

CVE-2014-0149

Multiple cross-site scripting XSS vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via a 1 parameter or 2 id name...

CVE-2014-0149

Affected product/component: Red Hat JBoss Web Framework Kit 2.5.0 (JBoss Seam Remoting component). Vulnerability: Multiple cross-site scripting (XSS) vulnerabilities allowing remote injection of arbitrary script/HTML via request parameters (including parameter or id name). Root cause: unsanitized...

PT-2014-3503

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Web Framework Kit version 2.5.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via a parameter or id name, potentially leading to cross-site scripting XSS attacks. Recommendations For Red Hat...

CVE-2014-0149: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via a 1 parameter or 2 id name...

JBIG-KIT buffer overflow

Buffer overflow in jbgdecin on JPEG parsing...

Ubuntu 14.04 LTS : JBIG-KIT vulnerability (USN-2190-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2190-1 advisory. Florian Weimer discovered that JBIG-KIT incorrectly handled certain malformed images. If a user or automated system were tricked into processing a specially craft...

g01pack Exploit Kit Remote Code Execution

g01pack exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with g01pack exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to download additional malware t...

KLA10001 Multiple vulnerabilities in Oracle Java Runtime Environment & Java Development Kit

Multiple serious vulnerabilities have been found in Oracle Java Runtime Environment & Java Development Kit: 5.61, 6.71, 7.51, 8. Malicious use of these vulnerabilities can affect confidentiality, integrity and availability, cause denial of service, obtain sensitive information or overwrite...

OpenJDK: Missing check for valid DOMCanonicalizationMethod canonicalization algorithm (Libraries, 8014281)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in Oracle Fusion Middleware R27.7.5 and earlier and R28.2.7 and earlier; and OpenJDK 7 allows remote attackers to affect...

OpenJDK: Incorrect IntegerComponentRaster size checks (2D, 8011248)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2...

OpenJDK: insufficient security checks (JAXWS, 8017505)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to JAX-WS...

JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (2D)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

CentOS 5 : java-1.7.0-openjdk (CESA-2014:0407)

Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...