CVE-2011-3522

Unspecified vulnerability in SysFW 8.0 on certain SPARC T3, Netra SPARC T3, Sun Fire, and Sun Blade based servers allows local users to affect confidentiality, related to Integrated Lights Out Manager CLI...

CVE-2011-2310

Technical details for CVE-2011-2310 are not publicly provided in the supplied documents. Monitor for updates from Oracle CPU advisories and vulnerability databases.

CVE-2011-3522

CVE-2011-3522 concerns an unspecified vulnerability in SysFW 8.0 on Oracle SPARC-based servers (SPARC T3, Netra SPARC T3, Sun Fire, Sun Blade) that allows local users to affect confidentiality, related to the Integrated Lights Out Manager (ILOM) CLI. The available connected sources confirm the af...

CVE-2011-3559

CVE-2011-3559 : Open vulnerability affecting Oracle GlassFish Server/Web Container components. Multiple Nessus/OpenVAS entries describe an unspecified DoS vulnerability in GlassFish/Web Container that could affect availability, with affected versions including GlassFish 2.1.1 (up to 2.1.1.14), 3....

CVE-2011-3538

Technical details about CVE-2011-3538 are not publicly available in the provided documents; the entries reference Sun Ray in Oracle Virtualization 4.0 and a note about CVE-2011-2323, but no explicit vulnerability specifics are given.

Oracle to Release 56 Patches, Plus 20 More For Java in October CPU

Oracle on Tuesday plans to release patches for 56 new vulnerabilities in a huge number of its products through its scheduled quarterly critical patch update. The company said that the various vulnerabilities in this month’s CPU affect hundreds of Oracle products. The most serious group of...

Oracle Releases Critical Patch Update for October 2011

Oracle has released its Critical Patch Update and Java SE Critical Patch Update Advisory for October 2011 to address 77 vulnerabilities across multiple products. This update contains the following security fixes: 5 for Oracle Database Server 10 for Oracle Fusion Middleware 5 for Oracle E-Business...

Solaris 10 (sparc) : 147713-01

SunOS 5.10: libc patch. Date this patch was last updated by Sun : Oct/07/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/11/14. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 8 (x86) : 121431-54

SunOS 5.8x86 5.9x86 5.10x86: Live Upgra. Date this patch was last updated by Sun : Aug/04/10 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if !...

Cisco ASA / Cisco FSM multiple security vulnerabilities

Multiple vulnerabilities in MSN, ILS and Sun RPC parsing, authentication bypass in TACACS+...

CVE-2008-7300

CVE-2008-7300 describes a vulnerability in the labeled networking implementation of Solaris Trusted Extensions on Sun Solaris 10 and OpenSolaris (snv_39 through snv_67). When a labeled zone is in the installed state, remote authenticated users can bypass Mandatory Access Control (MAC) and gain ac...

PT-2011-4379 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.0 through 7.08.12 Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.1 through 7.25.3 Cisco Adaptive Security Appliances ASA 5500 series devices versions...

MySql.com Site Hacked, Was Serving Malware

The main Web site of MySql.com has been compromised and on Monday afternoon was serving malware to visitors for a short time through the use of JavaScript redirects. The site, which is owned by Oracle, was sending victims off to a remote site that is using the BlackHole exploit kit to install...

OpenJDK: integer overflows in JPEGImageReader and font SunLayoutEngine (2D, 7013519)

Multiple unspecified vulnerabilities in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

Oracle Sun Java multiple security vulnerabilities

No description provided...

Sun/Oracle GlassFish Server Authenticated Code Execution

This module logs in to a GlassFish Server Open Source or Commercial using various methods such as authentication bypass, default credentials, or user-supplied login, and deploys a malicious war file in order to get remote code execution. It has been tested on Glassfish 2.x, 3.0, 4.0 and Sun Java...

Sun website 1000's users data stolen

Sun website 1000's users data stolen Britain's Rupert Murdoch-owned tabloid The Sun has sent a message to readers warning them that computer hackers may have published their data online after an attack on the paper's website last month. News International, News Group's parent company, issued a...

Sun Java System Web Server Admin Server Denial of Service

A denial of service vulnerability has been reported in Sun Java Web Server Admin Server. The vulnerability is due to an error in the way the server validates input while parsing malformed HTTP requests. Remote attackers can exploit this vulnerability by sending malicious HTTP requests to the targ...

Oracle Sun GlassFish Enterprise Server Stored XSS Vulnerability - Security Advisory - SOS-11-009

Sense of Security - Security Advisory - SOS-11-009 Release Date. 19-Jul-2011 Last Update. - Vendor Notification Date. 23-Mar-2011 Product. Oracle Sun GlassFish Enterprise Server Platform. Java EE Affected versions. 2.1.1 v2.1 Patch069.102 Patch12 build b31g-fcs verified and possibly others Severi...

OpenJDK: integer overflows in JPEGImageReader and font SunLayoutEngine (2D, 7013519)

Multiple unspecified vulnerabilities in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...