Oracle Critical Patch Update Advisory - April 2010

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are cumulative, except as noted below, but each advisory describes only th...

Oracle Releases Critical Patch Update for Java SE and Java for Business

Oracle has released a critical patch update to address 27 vulnerabilities in Java SE and Java for Business. These vulnerabilities are in the following components: ImageIO, Java 2D, Java Runtime Environment, Java Web Start, Pack200, Sound, JSSE, and HotSpot Server. US-CERT encourages users and...

Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit to the exploit-vulnerability warning-the black bar safety net

From su bun's blog Very early on saw through this vulnerability, but since Y is a bruteforce, just don't be too concerned about yesterday and a friend chat to this vulnerability, look carefully at the next, hazard is still quite large, although the need for certain conditions before they can be...

Solaris 9 (x86) : 125327-03

SunOS 5.9x86: wget patch. Date this patch was last updated by Sun : Apr/15/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris Update for Install and Utilities 119254-73

Check for the Version of Install and Utilities OpenVAS Vulnerability Test Solaris Update for Install and Utilities 119254-73 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

PT-2010-2040 · Microsoft · Windows Vista +2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions Gold, SP1, and SP2 Microsoft Windows Server 2008 versions Gold and SP2 Description: A remote code execution issue exists due to improper handling of local fragmentation of Encapsulating Security Payload ESP ov...

Microsoft Windows ICMPv6 Router Advertisement Remote Code Execution Vulnerability

Description Microsoft Windows TCP/IP protocol implementation is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful attacks will completely compromise affected computers. Failed exploit attempts will...

Red Hat Linux Kernel qla2xxx驱动完全可写文件漏洞

BUGTRAQ ID: 37876 CVE ID: CVE-2009-3556 Linux Kernel是开放源码操作系统Linux所使用的内核。 对于使用qla2xxx驱动且支持NPIV硬件的Red Hat版本的Linux Kernel系统，驱动向SCSI主机属性中添加了两个新的sysfs伪文件： w--w--w- root root /sys/class/scsihost/host1/vportcreate w--w--w- root root /sys/class/scsihost/host1/vportdelete w--w--w- root root...

Oracle Critical Patch Update Advisory - January 2010

Oracle Critical Patch Update Advisory - January 2010 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are...

Oracle Releases Critical Patch Update for January 2010

Oracle has released its Critical Patch Update for January 2010 to address 24 vulnerabilities across several products. This update contains the following security fixes: 10 for Oracle Database 3 for Oracle Application Server 3 for the Oracle Applications Suite 1 for PeopleSoft and JD Edwards Suite...

Oracle Critical Patch Update Advisory - January 2010

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are cumulative, except as noted below, but each advisory describes only th...

Security | Oracle Critical Patch Update - January 2010

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are cumulative, except as noted below, but each advisory describes only th...

Oracle applications multiple security vulnerabilities

Oracle Critical Patch Update fixes 40 of different vulnerabilities in all Oracle applications...

Oracle E-Business Suite - Multiple Vulnerabilities

Oracle E-Business Suite is prone to multiple authentication-bypass and HTML-injection vulnerabilities. Attackers could exploit these issues to steal cookie-based authentication credentials, perform unauthorized actions, or bypass certain security restrictions. Other attacks are also possible. Som...

Oracle E-Business Suite Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= Oracle E-Business Suite Multiple Remote Vulnerabilities ======================================================= Oracle E-Business Suite is prone to multiple authentication-bypass and...

Fedora Core 10 FEDORA-2009-12652 (cups)

The remote host is missing an update to cups announced via advisory FEDORA-2009-12652. OpenVAS Vulnerability Test $Id: fcore200912652.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12652 cups Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

PT-2009-1058 · Moxa +4 · Moxa Pt-7728 +7

Name of the Vulnerable Software and Affected Versions: Moxa PT-508, PT-7728, PT-7828, MDS-G4012 affected versions not specified ntp versions prior to 4.2.4p8 ntp version 4.2.0.a.20040617 ntp version 4.1.2 Description: The issue is related to uncontrolled recursion in the Ethernet switch microcode...

US-CERT Technical Cyber Security Alert TA09-294A -- Oracle Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-294A Oracle Updates for Multiple Vulnerabilities Original release date: Last revised: -- Source: US-CERT Systems Affected Oracle Database 11g, version 11.1.0.7 Oracle Database 10g Release...

US-CERT Technical Cyber Security Alert TA09-294A -- Oracle Updates for Multiple Vulnerabilities

Oracle Critical Patch Update Advisory - October 2009 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are...

Oracle Releases Critical Patch Update

Oracle has released its Critical Patch Update for October 2009 to address 38 vulnerabilities across several database and server products. The update contains the following security fixes: 16 for the Oracle Database 3 for the Oracle Application Server 8 for the Oracle E-Business Suite and...