USN-2949-1: Linux kernel (Vivid HWE) vulnerabilities

Venkatesh Pottem discovered a use-after-free vulnerability in the Linux kernel's CXGB3 driver. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2015-8812 Xiaofei Rex Guo discovered a timing side channel vulnerability in the Linux...

Here's the Exploit to Bypass Apple Security Feature that Fits in a Tweet

Did you install the latest update OS X 10.11.4? If yes, then you might be wondering with a fact that the Apple had delivered an ineffective patch update this time. Yes! This news would definitely disappoint many Apple users, as the latest update of OS X El Capitan 10.11.4 and iOS 9.3 still contai...

Oracle Java SE Hotspot Component Vulnerability

Oracle Java SE is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. A security vulnerability in the Hotspot subcomponent of Oracle Java SE can be exploited remotely by an unauthenticated, remote attacker to compromise the...

Mac OS X Zero-Day Exploit Can Bypass Apple's Latest Protection Feature

A critical zero-day vulnerability has been discovered in all versions of Apple's OS X operating system that allows hackers to exploit the company’s newest protection feature and steal sensitive data from affected devices. With the release of OS X El Capitan, Apple introduced a security protection...

The vulnerability of the Mac OS X operating system allows a hacker to execute arbitrary code in a privileged context.

The vulnerability of the System Integrity Protection function in the Mac OS X operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially created application with superuser...

PT-2016-4261

Name of the Vulnerable Software and Affected Versions Oracle iLearning versions 6.0 through 6.1 Description The issue affects the integrity of the system, related to Learner Administration in the Oracle iLearning component, allowing remote attackers to exploit it via unknown vectors...

PT-2016-4284

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite version 12.1.3 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to Oracle Diagnostics Interfaces. Recommendations For Oracle...

PT-2016-4279

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the Wireless Framework in the Oracle C...

PT-2016-4341

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products versions 9.1 through 9.2 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors. No information is available about the estimated number of potentially...

PT-2016-4192

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products versions 9.1 through 9.2 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to Manage Requisition Status in the PeopleSoft...

PT-2016-4286

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2 through 12.1.3 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to Messaging in the Oracle CRM Technical Foundation...

PT-2016-4274

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite version 11.5.10.2 Description The issue affects the integrity of the system, related to Redirection in the Oracle iProcurement component. Recommendations For Oracle E-Business Suite version 11.5.10.2, at the moment, the...

PT-2016-4236

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products versions 8.54 through 8.55 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it through vectors related to PIA Core Technology in the PeopleSoft Enterprise...

PT-2016-1063

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris 11 affected versions not specified Description The issue is related to errors in the code of the NDMP Backup Service subcomponent in the Solaris operating system. It allows a local attacker to affect the integrity of the...

CVE-2015-7044

The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary code in a privileged context via a crafted app with root privileges...

Design/Logic Flaw

The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary code in a privileged context via a crafted app with root privileges...

CVE-2015-7044

The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary code in a privileged context via a crafted app with root privileges...

CVE-2015-7044

Technical details about CVE-2015-7044 are not publicly available in the provided connected documents. The sources reference the OS X union mounts issue but do not disclose affected versions, exploit specifics, or fixes beyond the basic description. Monitor for updates.

Mac OS X Multiple Vulnerabilities (Security Updates 2015-005 / 2015-008)

The remote host is running a version of Mac OS X 10.9.5 or 10.10.5 that is missing Security Update 2015-005 or 2015-008. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression -...

CVE-2015-7044: Undefined Security Weakness

The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary code in a privileged context via a crafted app with root privileges...