Oracle warns of exploits for latest DB flaws
12873
Oracle is warning customers to apply software patches it released in August because of the availability of malicious code that can exploit unpatched vulnerabilities in its software.
205240
Oracle&#39;s new quarterly security-patch schedule departs from its monthly schedule, which Microsoft also uses. By George V. Hulme.
68810
Rare, out-of-cycle Windows patch fixes one flaw, but attacks through other known, yet-to-be-plugged holes continue.
349775
A new class at Vulnerability High Flaws in ActiveX controls are being increasingly used to run security exploits.â¦
688722
Sample code that exploits a yet-to-be-fixed Windows flaw is circulating. Microsoft plans to deal with it on the next Patch Tuesday.
711902
The newly discovered vulnerabilities could leave systems open to remote attacks, according to antivirus companies. Microsoft has not yet announced fixes.
685791
Database administrators have a flock of new products to choose from right now, but hardware problems and glitches elsewhere in the system can negate version improvements. Computerworld talked to DBAs balancing the new products with the old realities.
537932
SEPTEMBER 03, 2004 (IDG NEWS SERVICE) - The US government&#39;s Computer Emergency Response Team (US-CERT) and software security companies have issued warnings about a number of security vulnerabilities in versions of Oracle Corp.
746798
Oracle Corp. released security patches this week that plug several vulnerabilities reported last month in its database software and other products.
707431
Oracle posts its third security update of the year, patching 45 vulnerabilities in its flagship database software and other products.
425933
Users of the open-source MySQL database could be at risk from remote attacks from a bug in phpMyAdmin, the web-based MySQL administration tool.
154046
This update resolves a newly-discovered, privately reported vulnerability. The vulnerability is documented in the Vulnerability details section of this bulletin.
507714
After coming under criticism for sitting on patches for multiple holes in its database software, Oracle has announced that it will move to a monthly patch release schedule, though it hasn't said when.
569314
Incoming Security researchers irked at Oracle's tardiness at releasing patches for security bugs plan to name a different vulnerability in Oracle's enterprise software every day for a week in December.â¦
358905
Users of the increasingly popular, open-source MySQL database may be at risk from remote attacks due to a bug in phpMyAdmin, a widely used Web-based MySQL administration tool.
300950
Update addresses potential denial-of-service vulnerabilities as well as a flaw in QuickTime.
228808
Stefan Esser points out a new patch today - CORE GRASP - from the Core Security Technologies group that provides taint support surrounding the mysql_query function.   Their implementation adds a tainted or not flag for every byte so that it is possible on invocation of mysql_query() to determine any kind of injection.   Unfortunately, Stefan also mentions two big issues it might have from the get-go: the overhead for the memory needed can slow things down and an incorrect parsing in their query handler could lead to injection attacks.