迷惑/詐欺メール検索エンジン TMASE 6.5(ビルド 1024) 公開のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1450
定期サーバメンテナンスのお知らせ（2010年8月20日）
http://www.trendmicro.co.jp/support/news.asp?id=1448
JVNVU#174089 Oracle Siebel Option Pack for IE の ActiveX コントロールのメモリ初期化処理に脆弱性
http://jvn.jp/cert/JVNVU174089/index.html
JVNVU#275247 FreeType 2 における CFF フォントの処理に脆弱性
http://jvn.jp/cert/JVNVU275247/index.html
JVNVU#362332 Wind River Systems VxWorks においてデバッグサービスがデフォルトで有効になっている問題
http://jvn.jp/cert/JVNVU362332/index.html
JVNVU#840249 Wind River Systems VxWorks の認証 API (loginLib) における問題
http://jvn.jp/cert/JVNVU840249/index.html
+ vsftpd-2.3.0 released
http://vsftpd.beasts.org/
ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.3.0/Changelog
+ iptables 1.4.9.1 released
http://www.iptables.org/news.html#
http://www.iptables.org/projects/iptables/files/changes-iptables-1.4.9.1.txt
+ Sudo 1.7.4p1 released
http://www.sudo.ws/sudo/news.html
http://www.sudo.ws/sudo/stable.html#1.7.4p1
+ Microsoft Windows win32k.sys Driver "CreateDIBPalette()" Buffer Overflow
http://secunia.com/advisories/40870/
http://www.vupen.com/english/advisories/2010/2029
http://www.securityfocus.com/bid/42291
MySQL Workbench 5.2.26 GA Available
http://dev.mysql.com/downloads/workbench/
Kernel release: 2.6.35.1-rc1
http://www.linux.org/news/2010/08/08/0004.html
Kernel release: 2.6.34.3-rc1
http://www.linux.org/news/2010/08/08/0003.html
Kernel release: 2.6.32.18-rc1
http://www.linux.org/news/2010/08/08/0002.html
Kernel release: 2.6.27.50-rc1
http://www.linux.org/news/2010/08/08/0001.html
Debian : DSA-2089-1 New php5 packages fix several vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33340
MustLive : Vulnerabilities in Dataface Web Application Framework
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33351
: HTB22517 XSRF (CSRF) in DiamondList
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33358
JVNDB-2010-001795 Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise Campus Solutions コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001795.html
JVNDB-2010-001794 Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise CRM コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001794.html
JVNDB-2010-001793 Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001793.html
JVNDB-2010-001792 Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM - Time & Labor コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001792.html
JVNDB-2010-001791 Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001791.html
JVNDB-2010-001790 Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise FSCM コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001790.html
JVNDB-2010-001789 Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001789.html
JVNDB-2010-001788 Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM - eProfile Mgr コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001788.html
JVNDB-2010-001787 Oracle Supply Chain Products Suite の Oracle Transportation Management コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001787.html
JVNDB-2010-001786 Oracle Supply Chain Products Suite の Oracle Transportation Management コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001786.html
[ MDVSA-2010:146 ] libtiff
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00092.html
ESA-2010-013: RSA, The Security Division of EMC, informs about potential security vulnerabil
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00089.html
[ MDVSA-2010:145 ] libtiff
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00090.html
Vulnerabilities in Dataface Web Application Framework
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00080.html
[SECURITY] [DSA-2089-1] New php5 packages fix several vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-08/msg00085.html
Cisco Wireless Control System Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/40827/
Microsoft Windows win32k.sys Driver "CreateDIBPalette()" Buffer Overflow
http://secunia.com/advisories/40870/
Hulihan Amethyst Script Insertion and Cross-Site Request Forgery Vulnerabilities
http://secunia.com/advisories/40874/
Amlib NetOpacs "webquery.dll" Buffer Overflow Vulnerability
http://secunia.com/advisories/40890/
Hulihan DiamondList Cross-Site Request Forgery Vulnerability
http://secunia.com/advisories/40873/
D-Link WBR-2310 RangeBooster G Router HTTP Denial of Service Vulnerability
http://secunia.com/advisories/40877/
Hulihan BXR Multiple Vulnerabilities
http://secunia.com/advisories/40875/
Intellinet Pro Series Network Camera Authentication Bypass Vulnerability
http://secunia.com/advisories/40809/
IBM WebSphere Service Registry and Repository Two Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/40862/
Frigate FTP Client Directory Download Directory Traversal Vulnerability
http://secunia.com/advisories/40898/
SmartFTP Directory Download Directory Traversal Vulnerability
http://secunia.com/advisories/40899/
FTPRush Directory Download Directory Traversal Vulnerability
http://secunia.com/advisories/40900/
FTP Explorer Directory Download Directory Traversal Vulnerability
http://secunia.com/advisories/40901/
Debian update for php5
http://secunia.com/advisories/40860/
Foxit Reader FreeType2 CFF Font Parsing Vulnerability
http://secunia.com/advisories/40903/
DT Centrepiece Cross-Site Scripting and Security Bypass Vulnerabilities
http://secunia.com/advisories/40896/
Red Hat update for freetype2
http://secunia.com/advisories/40849/
FreeType2 Multiple Vulnerabilities
http://secunia.com/advisories/40816/
Oracle Siebel Option Pack for IE ActiveX Control Vulnerability
http://secunia.com/advisories/40804/
Prado Portal "page" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/40902/
Bugzilla Multiple Weaknesses and Vulnerability
http://secunia.com/advisories/40892/
Open Blog Cross-Site Request Forgery Vulnerability
http://secunia.com/advisories/40876/
Novell Sentinel Log Manager Unauthorised File Deletion Vulnerability
http://secunia.com/advisories/40711/
Ubuntu update for pcsc-lite
http://secunia.com/advisories/40894/
Nuked-Klan Partenaires Module "id" SQL Injection Vulnerability
http://secunia.com/advisories/40887/
Red Hat update for kernel
http://secunia.com/advisories/40885/
Ubuntu base-files Dell Latitude 2110 Unauthenticated Package Installation
http://secunia.com/advisories/40889/
Thinking about Cyber Security Awareness Month in October
http://isc.sans.edu/diary.html?storyid=9352
DnsMadeEasy under a "quite large and unique" ddos.
http://isc.sans.edu/diary.html?storyid=9349
Countdown to Tuesday...
http://isc.sans.edu/diary.html?storyid=9346
RSA enVision Input Validation Flaw Lets Remote Authenticated Users Deny Service
http://securitytracker.com/alerts/2010/Aug/1024295.html
Adobe Acrobat Memory Corruption Error in CoolType Module May Let Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Aug/1024291.html
HP ProCurve 1800 Switch Discloses Potentially Sensitive Information to Remote Users via SNMP
http://securitytracker.com/alerts/2010/Aug/1024289.html
Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0-day
http://www.exploit-db.com/exploits/14580/
myMP3-Player v3.0 Buffer Overflow Exploit
http://www.exploit-db.com/exploits/14581/
Mini-stream Ripper v3.1.2.1 Buffer Overflow (DEP Bypass)
http://www.exploit-db.com/exploits/14576/
Microsoft Windows Kernel "Win32k.sys" Pool Corruption Vulnerability
http://www.vupen.com/english/advisories/2010/2029
Oracle Siebel Option Pack for IE Memory Initialization Vulnerability
http://www.vupen.com/english/advisories/2010/2028
sX-Shop "id" Parameter Remote SQL Injection Vulnerabilities
http://www.vupen.com/english/advisories/2010/2027
Prado Portal "page" Parameter Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2010/2027
DiamondList "category[description]" Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2010/2025
SiteLoom CMS "mailform_1" Parameter Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2010/2024
BXR Multiple SQL Injection and Cross Site Scripting Vulnerabilities
http://www.vupen.com/english/advisories/2010/2023
Amethyst Cross Site Scripting and Request Forgery Vulnerabilities
http://www.vupen.com/english/advisories/2010/2022
DT Centrepiece "user" and "c" Cross Site Scripting Vulnerabilities
http://www.vupen.com/english/advisories/2010/2021
Redhat Security Update Fixes FreeType Buffer Overflow Vulnerabilities
http://www.vupen.com/english/advisories/2010/2020
Foxit Reader Compact Font Format Memory Corruption Vulnerability
http://www.vupen.com/english/advisories/2010/2019
FreeType Compact Font Format Two Buffer Overflow Vulnerabilities
http://www.vupen.com/english/advisories/2010/2018
Redhat Security Update Fixes Kernel Buffer Overflow and DoS Issues
http://www.vupen.com/english/advisories/2010/2017
Debian Security Update Fixes PHP Multiple Vulnerabilities
http://www.vupen.com/english/advisories/2010/2016
Ubuntu Security Update Fixes Dell Latitude 2110 Vulnerability
http://www.vupen.com/english/advisories/2010/2015
Winplot '.wp2' File Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/40879
Joomla!/Mambo Tupinambis Component SQL Injection Vulnerability
http://www.securityfocus.com/bid/36511
AtomixMP3 Malformed M3U and PLS Playlist Files Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/34290
LibTIFF Multiple Remote Code Execution Vulnerabilities
http://www.securityfocus.com/bid/41088
LibTIFF 'TIFFroundup()' Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/41011
LibTIFF 'td_stripbytecount' NULL Pointer Dereference Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/41480
LibTIFF FAX3 Decoder Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/40823
LibTIFF 'tif_dirread.c' SubjectDistance EXIF Tag Remote Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/41012
LibTIFF Multiple Remote Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/41295
RETIRED: Joomla! 'com_joomla-visites' Component Remote File Include Vulnerability
http://www.securityfocus.com/bid/41983
Joomla Visites Component mosConfig_absolute_path Remote File Include Vulnerability
http://www.securityfocus.com/bid/28942
FreeType Compact Font Format (CFF) Multiple Stack Based Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/42241
PHP Versions Prior to 5.3.3/5.2.14 Multiple Vulnerabilities
http://www.securityfocus.com/bid/41991
PHP 'SplObjectStorage' Unserializer Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/40948
ccTiddly 'cct_base' Parameter Multiple Remote File Include Vulnerabilities
http://www.securityfocus.com/bid/32631
RSA enVision Unspecified Input Validation Vulnerability
http://www.securityfocus.com/bid/42294
Microsoft Windows Kernel 'CreateDIBPalette()' Function Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/42291
FreeType Stack Buffer Overflow and Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/42285
IBM WebSphere Service Registry and Repository Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/42281
Ubuntu Dell Latitude 2110 Package Installation Security Bypass Vulnerability
http://www.securityfocus.com/bid/42280
0 件のコメント:
コメントを投稿