Multiple vulnerabilites in Java 1.7.0_15

The version of Java we bundle with Confluence is badly out of date, and well behind the security baseline Oracle defines see http://www.oracle.com/technetwork/java/javase/7u80-relnotes-2494162.html for example, which says we should be running update 79 for security fixes, and update 80 for...

Oracle E-Business Multiple Vulnerabilities (April 2015 CPU)

The version of Oracle E-Business installed on the remote host is missing the April 2015 Oracle Critical Patch Update CPU. It is, therefore, affected by vulnerabilities in the following components : - A unspecified flaw exists related to the Configurator DMZ rules subcomponent in the Applications...

Oracle Patch Update Delivers 98 Fixes

Released alongside patches from Microsoft and Adobe yesterday, Oracle’s regularly scheduled Critical Patch Update fixed 98 issues across a handful of products, including Oracle’s Database, Fusion Middleware, Java SE, and MySQL, to name a few. One of the most pressing issues the update resolves is...

Oracle Releases April 2015 Security Advisory

Oracle has released security fixes to address 98 vulnerabilities as part of its quarterly Critical Patch Update. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the Oracle April 2015...

Oracle Critical Patch Update - April 2015

A Critical Patch Update CPU is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update...

Oracle Critical Patch Update Advisory - January 2015

A Critical Patch Update CPU is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update...

Oracle WebCenter Content Server Remote Security Vulnerability (January 2015 CPU)

The version of Oracle WebCenter Content installed on the remote host is potentially affected by an unspecified remote security vulnerability in the Content Server component. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Multiple vulnerabilities in current releases of IBM SDK Java Technology Edition; issues disclosed in the Oracle Feb 2015 Critical Patch Update vulnerability and two additional Vuln

IBM SECURITY ADVISORY First Issued: Thu Feb 19 10:53:54 CST 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javafeb2015advisory.asc https://aix.software.ibm.com/aix/efixes/security/javafeb2015advisory.asc...

mariadb security update

CentOS Errata and Security Advisory CESA-2015:0118 Updated mariadb packages that fix several security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

Moderate: Red Hat Security Advisory: mariadb security update

Updated mariadb packages that fix several security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

Moderate: Red Hat Security Advisory: mysql55-mysql security update

Updated mysql55-mysql packages that fix several security issues are now available for Red Hat Software Collections 1. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Oracle Access Manager Multiple Vulnerabilities (January 2015 CPU)

The version of Oracle Access Manager installed on the remote host is affected by multiple unspecified vulnerabilities that allow remote attackers to impact integrity and confidentiality. Note that this plugin does not check for additional configuration required to completely mitigate CVE-2015-036...

Oracle Real User Experience Insight October 2014 CPU

The version of Oracle Real User Experience Insight 12.1.0.6 is missing the October 2014 Critical Patch Update. It is, therefore, affected by an unspecified vulnerability that can be exploited by an authenticated, remote attacker to impact confidentiality and integrity. %NASLMINLEVEL 70300 C Tenab...

Fedora 21 : java-1.8.0-openjdk-1.8.0.31-3.b13.fc21 (2015-1075)

Update to January, 2015 Critical Patch Update CPU. See: http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.h tmlAppendixJAVA Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Oracle Solaris Third-Party Patch Update : ntp (multiple_vulnerabilities_in_ntp)

The remote Solaris system is missing necessary patches to address security updates : - Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to 1 the cryptorecv function when the Autokey Authentication...

Oracle Solaris Critical Patch Update : jan2015_SRU11_1_11_4_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: AMD pcnet driver. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows...

Oracle Solaris Critical Patch Update : jan2015_SRU11_1_15_4_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Network. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful...

Oracle Solaris Critical Patch Update : jan2015_SRU9_5

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Resource Control. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring log...

Oracle Solaris Critical Patch Update : jan2015_SRU10_5a

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Power Management Utility. The supported version that is affected is 11. Easily exploitable vulnerability requiring...

Oracle Solaris Critical Patch Update : jan2015_SRU11_1_16_5_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Network. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful...