Oracle Plans 78 Security Fixes for Upcoming Critical Update

Oracle has fixes for 78 security vulnerabilities slated for next week as part of its first critical update of the year. The patches are expected to touch the Oracle Database Server, Fusion Middleware, E-Business suite, Supply Chain, PeopleSoft, JD Edwards, Virtualization, Sun and MySQL products...

Pre-Owned Hardware

Counterfeit and “certified pre-owned” hardware is nothing new, but we think 2012 will see this issue morph from a sideshow in the cyber security world to center stage, with new revelations about contamination of the global supply chain by hardware and software components of dubious origin and...

More than 100 Pakistani Government Sites Under Malware attack

More than 100 Pakistani Government Sites Under Malware attack Website Malware : A newer form of malware is what can be found attacking websites today. In the old days malware was mostly in the form of computer viruses. In today's age of globalization, malware starts to target websites and mobile...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile Product Supplier Collaboration for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0.2, 6.0.0.3, and 6.0.0.4 allows remote attackers to affect confidentiality via unknown vectors related to Supplier Portal...

CVE-2011-3532

CVE-2011-3532 concerns Oracle Agile Product Supplier Collaboration for Process within Oracle Supply Chain Products Suite (versions 5.2.2, 6.0.0.2, 6.0.0.3, 6.0.0.4). The initial description states an unspecified vulnerability that allows remote attackers to affect confidentiality via unknown vect...

Oracle Releases Critical Patch Update for October 2011

Oracle has released its Critical Patch Update and Java SE Critical Patch Update Advisory for October 2011 to address 77 vulnerabilities across multiple products. This update contains the following security fixes: 5 for Oracle Database Server 10 for Oracle Fusion Middleware 5 for Oracle E-Business...

CVE-2011-2273

Unspecified vulnerability in the Agile Core Technology component in Oracle Supply Chain Products Suite 9.3.0.3 and 9.3.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Search...

Code injection

Unspecified vulnerability in the Agile Core Technology component in Oracle Supply Chain Products Suite 9.3.0.3 and 9.3.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Search...

CVE-2011-2273

Unspecified vulnerability in the Agile Core Technology component in Oracle Supply Chain Products Suite 9.3.0.3 and 9.3.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Search...

CVE-2011-2273

Technical details for CVE-2011-2273 are not publicly available in the provided documents; the description cites an unspecified vulnerability in Oracle Supply Chain Products Suite 9.3.0.3/9.3.1.1 related to Search. Monitor for updates.

Oracle Releases Critical Patch Update for July 2011

Oracle has released its Critical Patch Update for July 2011 to address 78 vulnerabilities across multiple products. This update contains the following security fixes: 13 for Oracle Database Server 3 for Oracle Secure Backup 7 for Oracle Fusion Middleware 18 for Oracle Enterprise Manager 1 for...

DHS Official Warns of Security Risks in Supply Chain

In a House committee hearing on cybersecurity threats Thursday, a DHS official said he was aware of some cases in which software and hardware manufactured overseas had arrived in the U.S. pre-loaded with security bugs. However, the official did not say that those cases involved vulnerabilities or...

Supply Network Collaboration of Uniliver Hacked by CrosS | R00TW0RM

Supply Network Collaboration of Uniliver Hacked by CrosS | R00TW0RM CrosS , A hacker from R00TW0RM hack the Supply Network Collaboration of Uniliver at aasnc.unilever.com , The Screenshot submitted by him to us as shown above for Hack Proof...

CVE-2011-0837

Unspecified vulnerability in the Agile Technology Platform component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote attackers to affect confidentiality via unknown vectors related to Security...

CVE-2011-0837

CVE-2011-0837 denotes an unspecified vulnerability in the Agile Technology Platform component of Oracle Supply Chain Products Suite (SCP) 9.3.0.2 and 9.3.1. The vulnerability is described as allowing remote attackers to affect confidentiality through unknown vectors related to Security. The affec...

McAfee Firewall Reporter 'GernalUtilities.pm'验证绕过漏洞

Bugtraq ID: 47306 McAfee Firewall Reporter用于集中处理企业范围内McAfee网关安全设备的日志和审计数据。 负责验证用户的代码存在缺陷。GernalUtilities.pm包含的代码通过解析Cookie值来验证会话是否合法。在检查特定文件只判断是否存在而没有检查其内容。使用目录遍历技术攻击者可以把cgisess cookie值指向任意服务器上存在的文件，绕过验证。 0 McAfee Firewall Reporter 5.1.0.6 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

Expert: Stuxnet Just Latest in U.S. Hacks of Covert Nuke Programs

CORRECTION: This article originally included the incorrect name for an associate of A.Q. Khan. The correct name of the associate is “Friedrich Tinner,” a Swiss nuclear engineer. The name has been corrected in the article. The author of a new book on the evolution of the world’s first nuclear blac...

CVE-2010-4432

Unspecified vulnerability in the Oracle Transportation Manager component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure...

CVE-2010-4429

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Client, a different vulnerability than CVE-2010-3505...

Code injection

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Client, a different vulnerability than CVE-2010-3505...