2010年8月6日金曜日

6日 金曜日、先勝

+ vsftpd-2.3.0 released
http://vsftpd.beasts.org/
ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.3.0/Changelog

Thunderbird 3.1.2 Now Available for Download
http://www.mozillamessaging.com/en-US/about/press/archive/2010-08-05-01
http://www.mozillamessaging.com/en-US/thunderbird/3.1.2/releasenotes/

APSB10-17: Security Advisory for Adobe Reader and Acrobat
http://www.adobe.com/support/security/bulletins/apsb10-17.html

Announce: Commons FileUpload 1.2.2
http://www.apache.org/dyn/closer.cgi/commons/fileupload

マイクロソフト セキュリティ情報の事前通知 - 2010 年 8 月
http://www.microsoft.com/japan/technet/security/bulletin/ms10-aug-ans.mspx

Debian : DSA 2088-1 New wget packages fix potential code execution
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33330

Cisco : cisco-sa-20100804-fwsm - Multiple Vulnerabilities in Cisco Firewall Services Module
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33332

大日本印刷、ICカード技術を応用した暗号化ソフトを本格販売
http://itpro.nikkeibp.co.jp/article/NEWS/20100805/351087/?ST=security

[security bulletin] HPSBGN02560 SSRT100193 rev.1 - HP ProCurve 2626 and 2650 Switches, Remote Un
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00076.html

[security bulletin] HPSBGN02561 SSRT100194 rev.1 - HP ProCurve 2610 Switches running DHCP, Remot
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00077.html

[security bulletin] HPSBGN02559 SSRT100192 rev.1 - HP ProCurve 2610 Switch In-band Agent, Re
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00075.html

[security bulletin] HPSBGN02562 SSRT090249 rev.1 - HP ProCurve Threat Management Services (TMS)
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00073.html

[security bulletin] HPSBGN02501 SSRT071407 rev.1 - HP ProCurve 1800 Switches running SNMP, Remot
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00074.html

[USN-968-1] Dell Latitude 2110 vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00078.html

Application Logic Error in DT Centrepiece
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00072.html

Application Logic Error in DT Centrepiece
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00071.html

XSS vulnerability in DT Centrepiece
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00070.html

XSS vulnerability in DT Centrepiece
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00069.html

XSRF (CSRF) in Amethyst
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00068.html

XSS vulnerability in Amethyst
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00067.html

XSS vulnerability in Amethyst
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00066.html

XSRF (CSRF) in BXR
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00065.html

XSS vulnerability in BXR
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00064.html

Directory Traversal in Frigate 3 built-in FTP client
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00063.html

XSRF (CSRF) in Open blog
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00062.html

XSS vulnerability in Open blog
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00061.html

XSS vulnerability in BXR
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00060.html

XSS vulnerability in Amethyst
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00059.html

XSS vulnerability in SiteLoom CMS
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00058.html

XSS vulnerability in DiamondList
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00057.html

Directory Traversal in SmartFTP
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00056.html

XSS vulnerability in Open Blog
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00054.html

XSS vulnerability in BXR search
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00055.html

XSRF (CSRF) in DiamondList
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00053.html

XSS vulnerability in DiamondList
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00052.html

Directory Traversal in FTP Rush
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00051.html

Directory Traversal in FTP Explorer
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00050.html

XSS vulnerability in DT Centrepiece
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00049.html

XSS vulnerability in Prado Portal
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00048.html

SQL injection vulnerability in BXR
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00047.html

MantisBT "Add Category" Script Insertion Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00046.html

ZeusCart Ecommerce Shopping Cart Software Cross-Site scripting Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00045.html

[SECURITY] [DSA 2088-1] New wget packages fix potential code execution
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00044.html

iDefense Security Advisory 08.03.10: Citrix ICA Client ActiveX Memory Corruption Vulnerabillity
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00043.html

[Suspected Spam]CSRF, Information Leakage and Full path disclosure vulnerabilities in WordPress
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00042.html

[ MDVSA-2010:144 ] wireshark
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00040.html

Cisco Wireless Control System XSS
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00041.html

JVNDB-2010-001174 Apache HTTP Server の ap_read_request 関数における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001174.html

JVNDB-2010-001159 Apache HTTP Server の mod_isapi における脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001159.html

JVNDB-2008-001453 Apache HTTP Server の ap_proxy_http_process_response() 関数におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001453.html

Adobe Acrobat Font Parsing Integer Overflow Vulnerability
http://isc.sans.edu/diary.html?storyid=9334

Access Controls for Network Infrastructure
http://isc.sans.edu/diary.html?storyid=9337

HP ProCurve 2626 and 2650 Switch Grant Unauthorized Access to Remote Users
http://securitytracker.com/alerts/2010/Aug/1024293.html

HP ProCurve 2610 Switch DHCP Flaw Lets Remote Users Deny Service
http://securitytracker.com/alerts/2010/Aug/1024292.html

HP ProCurve 2610 Switch Unspecified Flaw in the In-band Agent Lets Remote Users Deny Service
http://securitytracker.com/alerts/2010/Aug/1024290.html

Linux Kernel NFS Server-Side XDR Buffer Overflow May Let Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Aug/1024286.html

Linux Kernel Flaw in CIFS CIFSSMBWrite() Lets Remote Users Deny Service
http://securitytracker.com/alerts/2010/Aug/1024285.html

FreeType 2 Font Rendering Engine Stack Overflows Let Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Aug/1024283.html

LFTP Content-Disposition Header Processing Flaw Lets Remote Users Overwrite Files on the Target System
http://securitytracker.com/alerts/2010/Aug/1024272.html

Vulnerability Note VU#275247: FreeType 2 CFF font stack corruption vulnerability
http://www.kb.cert.org/vuls/id/275247

Vulnerability Note VU#174089: Oracle Siebel Option Pack for IE ActiveX control memory initialization vulnerability
http://www.kb.cert.org/vuls/id/174089

Debian update for wget
http://secunia.com/advisories/40861/

Invensys Wonderware ConfigurationAccessComponent ActiveX Control Buffer Overflow
http://secunia.com/advisories/40851/

MantisBT "Add Category" Script Insertion Vulnerability
http://secunia.com/advisories/40832/

Piwik "url" Redirection Weakness
http://secunia.com/advisories/40869/

PHPFinance Multiple Vulnerabilities
http://secunia.com/advisories/40826/

Cisco ASA 5500 Series Multiple Denial of Service Vulnerabilities
http://secunia.com/advisories/40842/

JomSocial Graffiti Wall Plugin Insecure Directory Permissions Weakness
http://secunia.com/advisories/40852/

JomSocial Personal Classifieds Plugin Insecure Directory Permissions Weakness
http://secunia.com/advisories/40880/

JomSocial Profile Designer Plugin Insecure Directory Permissions Weakness
http://secunia.com/advisories/40881/

Joomla! Aardvertiser Component Insecure Directory Permissions Weakness
http://secunia.com/advisories/40882/

Drupal Devel (Performance logging) Module Script Insertion Vulnerability
http://secunia.com/advisories/40844/

Cisco Firewall Services Module Multiple Denial of Service Vulnerabilities
http://secunia.com/advisories/40843/

HP ProCurve 2626/2650 Security Bypass Vulnerability
http://secunia.com/advisories/40865/

HP ProCurve Threat Management Services zl Module TLS/SSL Vulnerability
http://secunia.com/advisories/40866/

HP ProCurve 2610 Two Denial of Service Vulnerabilities
http://secunia.com/advisories/40864/

HP ProCurve 1800 SNMP Information Disclosure Vulnerability
http://secunia.com/advisories/40867/

Red Hat Update for Multiple Packages
http://secunia.com/advisories/40859/

Ubuntu update for kernel
http://secunia.com/advisories/40833/

Unauthorized Access to Root NFS Export on EMC Celerra NAS Appliance
http://securityreason.com/securityalert/7647

ZABBIX 'formatQuery()' Cross Site Scripting Vulnerability
http://securityreason.com/securityalert/7646

MoinMoin 'PageEditor.py' Cross-Site Scripting Vulnerability
http://securityreason.com/securityalert/7645

HP OpenView NNM v.7.53 OvJavaLocale Buffer Overflow Vulnerability
http://securityreason.com/securityalert/7644

Cisco ASA 5500 Series Adaptive Security Appliances Vulnerabilities
http://www.vupen.com/english/advisories/2010/2014

EMC Celerra Unified Storage Platform Root NFS Export Access
http://www.vupen.com/english/advisories/2010/2013

HP ProCurve 2610 Switch Remote Denial of Service Vulnerabilities
http://www.vupen.com/english/advisories/2010/2012

HP ProCurve 2626/2650 Switches Remote Unauthorized Access
http://www.vupen.com/english/advisories/2010/2011

HP ProCurve Threat Management Services zl Module SSL Vulnerability
http://www.vupen.com/english/advisories/2010/2010

HP ProCurve Switch 1800 SNMP Information Disclosure Vulnerability
http://www.vupen.com/english/advisories/2010/2009

Ubuntu Security Update Fixes Kernel Privilege Escalation and DoS
http://www.vupen.com/english/advisories/2010/2008

Debian Security Update Fixes Wget File Overwrite Vulnerability
http://www.vupen.com/english/advisories/2010/2007

Redhat Security Update Fixes GnuPG2 Use-after-free Vulnerability
http://www.vupen.com/english/advisories/2010/2006

Mandriva Security Update Fixes Wireshark Buffer Overflow and DoS
http://www.vupen.com/english/advisories/2010/2005

PCSC-Lite 'PCSCD' Daemon Unspecified Local Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/40758

Apache 'mod_deflate' Remote Denial Of Service Vulnerability
http://www.securityfocus.com/bid/35623

Apache Subrequest Handling Information Disclosure Vulnerability
http://www.securityfocus.com/bid/38580

Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/36260

Apache APR and APR-util Multiple Integer Overflow Vulnerabilities
http://www.securityfocus.com/bid/35949

Apache mod_proxy_ftp Remote Command Injection Vulnerability
http://www.securityfocus.com/bid/36254

Apache 'mod_isapi' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/38494

Apache APR-util 'xml/apr_xml.c' Denial of Service Vulnerability
http://www.securityfocus.com/bid/35253

Apache APR-util 'apr_brigade_vprintf' Off By One Vulnerability
http://www.securityfocus.com/bid/35251

Novell iPrint Client Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/42100

WebKit ':first-letter' and ':first-line' Pseudo-Elements Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/42037

Apache Tomcat 'RequestDispatcher' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/35263

Apache APR-util 'apr_strmatch_precompile()' Integer Underflow Vulnerability
http://www.securityfocus.com/bid/35221

Apache 'mod_proxy_ftp' Wildcard Characters Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/30560

Apache Tomcat Form Authentication Existing/Non-Existing Username Enumeration Weakness
http://www.securityfocus.com/bid/35196

Apache Tomcat Java AJP Connector Invalid Header Denial of Service Vulnerability
http://www.securityfocus.com/bid/35193

Apache Tomcat 'RequestDispatcher' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/30494

Perl Unicode '\Q...\E' Quoting Construct Regular Expression Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/28928

Apache Tomcat SingleSignOn Remote Information Disclosure Vulnerability
http://www.securityfocus.com/bid/27365

Apache Tomcat 'HttpServletResponse.sendError()' Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/30496

Apache 'mod_proxy_http' Interim Response Denial of Service Vulnerability
http://www.securityfocus.com/bid/29653

WebKit 'foreignObject' Elements Use-After-Free Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/42046

Apache Tomcat Cookie Quote Handling Remote Information Disclosure Vulnerability
http://www.securityfocus.com/bid/27706

Apache HTTP Server 2.2.6, 2.0.61 and 1.3.39 'mod_status' Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/27237

Apache Tomcat WebDav Remote Information Disclosure Vulnerability
http://www.securityfocus.com/bid/26070

Apache Mod_AutoIndex.C Undefined Charset Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/25653

Apache mod_imagemap and mod_imap Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/26838

Perl Unicode Regular Expression Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/26350

Apache Tomcat Multiple Remote Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/25316

Apache 'mod_proxy_ftp' Undefined Charset UTF-7 Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/27234

Apache HTTP Server Mod_Proxy Denial of Service Vulnerability
http://www.securityfocus.com/bid/25489

Apache HTTP Server Worker Process Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/24215

Apache HTTP Server Mod_Cache Denial of Service Vulnerability
http://www.securityfocus.com/bid/24649

Apache HTTP Server Mod_Status Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/24645

Mod_Perl Path_Info Remote Denial Of Service Vulnerability
http://www.securityfocus.com/bid/23192

Apache Tomcat Accept-Language Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/24524

Apache HTTP Server Arbitrary HTTP Request Headers Security Weakness
http://www.securityfocus.com/bid/19661

Apache HTTP Server Tomcat Directory Traversal Vulnerability
http://www.securityfocus.com/bid/22960

Apache Tomcat Information Disclosure Vulnerability
http://www.securityfocus.com/bid/19106

Multiple Vendor Multiple HTTP Request Smuggling Vulnerabilities
http://www.securityfocus.com/bid/13873

Apache Tomcat Simultaneous Directory Listing Denial Of Service Vulnerability
http://www.securityfocus.com/bid/15325

MediaMonkey '.mp3' File Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/37836

KDE Konqueror Cookie Domain Validation Vulnerability
http://www.securityfocus.com/bid/10991

Linux Kernel Floating Point Exception Handler Local Denial Of Service Vulnerability
http://www.securityfocus.com/bid/10538

Linux Kernel e1000 Ethernet Card Driver Kernel Memory Disclosure Vulnerability
http://www.securityfocus.com/bid/10352

MIT Kerberos 5 KRB5_AName_To_Localname Multiple Principal Name Buffer Overrun Vulnerabilities
http://www.securityfocus.com/bid/10448

Apache ap_escape_html Memory Allocation Denial Of Service Vulnerability
http://www.securityfocus.com/bid/10619

Red Hat Enterprise Linux Kernel Multiple Vulnerabilities
http://www.securityfocus.com/bid/12599

SuSE Linux Kernel Unauthorized SCSI Command Vulnerability
http://www.securityfocus.com/bid/11784

Mozilla Browser Vcard Handling Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/11174

MySQL Aborted Bug Report Insecure Temporary File Creation Vulnerability
http://www.securityfocus.com/bid/9976

Microsoft Windows Shortcut 'LNK/PIF' Files Automatic File Execution Vulnerability
http://www.securityfocus.com/bid/41732

VxWorks Insecure Password Hashing Vulnerability
http://www.securityfocus.com/bid/42114

Apache Tomcat 'Transfer-Encoding' Information Disclosure and Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/41544

ImageMagick Remote EXIF Parsing Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/11548

PostgreSQL Insecure Temporary File Creation Vulnerability
http://www.securityfocus.com/bid/11295

GNU GLibC Insecure Temporary File Creation Vulnerability
http://www.securityfocus.com/bid/11286

Samba Mksmbpasswd.sh Insecure User Account Creation Vulnerability
http://www.securityfocus.com/bid/9637

Apple Mac OS X WebDAV Kernel Extension Local Denial Of Service Vulnerability
http://www.securityfocus.com/bid/41958

Linux Kernel CIFS DNS Lookup Cache Poisoning Vulnerability
http://www.securityfocus.com/bid/41904

Linux Kernel do_mremap Function VMA Limit Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/9686

Apache HTTP Server Multiple Remote Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/41963

RedHat Linux SysReport Proxy Information Disclosure Vulnerability
http://www.securityfocus.com/bid/13936

Linux Kernel SYS_EPoll_Wait Local Integer Overflow Vulnerability
http://www.securityfocus.com/bid/12763

GNU GLibC LD_DEBUG Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/10963

Linux Kernel Device Driver Virtual Memory Flags Unspecified Vulnerability
http://www.securityfocus.com/bid/12338

SoX WAV File Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/10819

Mozilla/Firefox Browsers Unauthorized Clipboard Contents Disclosure
http://www.securityfocus.com/bid/11179

Mozilla/Firefox Browsers Tar.GZ Archive Weak Permissions Vulnerability
http://www.securityfocus.com/bid/11192

Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
http://www.securityfocus.com/bid/36935

Mozilla/Firefox Browsers URI Drag And Drop Cross-Domain Scripting Vulnerability
http://www.securityfocus.com/bid/11177

Mozilla Browser BMP Image Decoding Multiple Integer Overflow Vulnerabilities
http://www.securityfocus.com/bid/11171

Linux Kernel 'btrfs' File Permissions Security Bypass Vulnerability
http://www.securityfocus.com/bid/41467

Linux Kernel GFS2 File Attribute Security Bypass Vulnerability
http://www.securityfocus.com/bid/40356

Linux Kernel 'knfsd' 'current->mm' Modifier Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/40377

Linux Kernel Btrfs Cloned File Security Bypass Vulnerability
http://www.securityfocus.com/bid/40241

Linux Kernel 'find_keyring_by_name()' Local Memory Corruption Vulnerability
http://www.securityfocus.com/bid/39719

Linux Kernel TSB I-TLB Load Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/38393

Linux Kernel 'gfs2_quota' Structure Write Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/39715

Linux Kernel 'sctp_process_unk_param()' Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/39794

TomaA? Muraus Open Blog Multiple HTML Injection Vulnerabilities
http://www.securityfocus.com/bid/42255

DiamondList Cross Site Scripting and HTML Injection Vulnerabilities
http://www.securityfocus.com/bid/42252

Linux Kernel XDR Implementation Local Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/42249

Linux Kernel CIFS 'CIFSSMBWrite()' Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/42242

FreeType Compact Font Format (CFF) Multiple Stack Based Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/42241

Joomla! Aardvertiser Component Insecure Directory Permissions Vulnerability
http://www.securityfocus.com/bid/42239

Adobe Acrobat and Reader APSB10-17 Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/42238

JomSocial Graffiti Wall Plugin Insecure Directory Permissions Vulnerability
http://www.securityfocus.com/bid/42235

Microsoft August 2010 Advance Notification Multiple Vulnerabilities
http://www.securityfocus.com/bid/42234

Mantis 'manage_proj_cat_add.php' HTML Injection Vulnerability
http://www.securityfocus.com/bid/42233

JomSocial Profile Designer Plugin Insecure Directory Permissions Vulnerability
http://www.securityfocus.com/bid/42232

PHPFinance 'group.php' SQL Injection and HTML Injection Vulnerabilities
http://www.securityfocus.com/bid/42230

JomSocial Personal Classifieds Plugin Insecure Directory Permissions Vulnerability
http://www.securityfocus.com/bid/42229

HP ProCurve 2626/2650 Unspecified Security Bypass Vulnerability
http://www.securityfocus.com/bid/42228

HP ProCurve 2610 Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/42225




+ RHSA-2010:0607-2: Important: freetype security update
http://rhn.redhat.com/errata/RHSA-2010-0607.html

+ RHSA-2010:0606-1: Important: kernel security and bug fix update
http://rhn.redhat.com/errata/RHSA-2010-0606.html

0 件のコメント:

コメントを投稿