2011年10月13日木曜日

13日 木曜日、先勝


About the security content of Numbers for iOS v1.5
http://support.apple.com/kb/HT5004

About the security content of Pages for iOS v1.5
http://support.apple.com/kb/HT5003

About the security content of Safari 5.1.1
http://support.apple.com/kb/HT5000

About the security content of OS X Lion v10.7.2 and Security Update 2011-006
http://support.apple.com/kb/HT5002

About the security content of Apple TV Software Update 4.4
http://support.apple.com/kb/HT5001

About the security content of iOS 5 Software Update
http://support.apple.com/kb/HT4999

VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console
http://www.vmware.com/security/advisories/VMSA-2011-0012.html

ソニーPSNなどに9万件超の「なりすまし」、不正侵入は確認されず
正規ユーザーのアカウントでログイン試行、カード情報の漏洩もなし
http://itpro.nikkeibp.co.jp/article/NEWS/20111013/370625/?ST=security

IEに危険な脆弱性、Webアクセスでウイルス感染の恐れ
セキュリティ情報8件が公開、2件は深刻度が「緊急」
http://itpro.nikkeibp.co.jp/article/NEWS/20111013/370624/?ST=security

JVNVU#756679 BlueZ-hcidump におけるヒープオーバーフローの脆弱性
http://jvn.jp/cert/JVNVU756679/index.html

JVNVU#377475 VLC Media Player に脆弱性
http://jvn.jp/cert/JVNVU377475/index.html

JVNVU#585859 Apple Safari における複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNVU585859/index.html

JVNVU#971123 Apple Mac OS Xにおける複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNVU971123/index.html

JVNVU#727187 Apple TV における複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNVU727187/index.html

JVNVU#177979 Apple iOS における複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNVU177979/index.html

JVN#07414354 DAEMON Tools におけるサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/jp/JVN07414354/index.html

JVN#04013920 Pligg におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN04013920/index.html

Critical OS X Vulnerability Patched
http://isc.sans.edu/diary.html?storyid=11797

Apple iOS Multiple Flaws Let Remote Users Execute Arbitrary Code, Conduct Cross-Site Scripting Attacks, and Deny Service and Let Local Users Obtain Information
http://www.securitytracker.com/id/1026180

BlackBerry Enterprise Server Collaboration Service Bug Lets Remote Users Impersonate Intra-organization Messages
http://www.securitytracker.com/id/1026179

Mozilla Firefox/Thunderbird/SeaMonkey 'Array.reduceRight()' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48372

Microsoft Silverlight & .NET Framework Inheritance Restriction Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/49999

Microsoft Windows Active Accessibility DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/49976

Apache Tomcat 'sort' and 'orderBy' Parameters Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/45015





+ PSN-2011-10-392: Cross-site scripting injection in J-Web administrator logs
https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2011-10-392&viewMode=view

+ PSN-2011-10-391: Junos kernel crash in Next-Gen MVPN scenario
https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2011-10-391&viewMode=view

+? Apache APR 'apr_fnmatch()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/47820

++ ActivePerl 5.14.2.1402 released
http://www.activestate.com/activeperl/downloads

- PHP 'grapheme_extract()' NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/46429

[ANN] Apache log4net 1.2.11 Released
http://logging.apache.org/log4net/release/release-notes.html

2269637: セキュリティで保護されていないライブラリのロードにより、リモートでコードが実行される
http://technet.microsoft.com/ja-jp/security/advisory/2269637

Cisco Security Response: Cisco TelePresence Video Communication Server Cross-Site Scripting Vulnerability
http://www.cisco.com/en/US/products/products_security_response09186a0080b98d0b.html

Sybase IQが、IMJのSaaS型インハウスSEOツール「MTL KEYWORDS」のデータベースとして採用
http://www.sybase.jp/detail?id=1095188&contentOnly=true

New Insider Threat Demonstration Series Launched
http://www.cert.org/insider_threat/demonstrations/ITDS01.mp4

Insider Threat Control Technical Note Released
http://www.cert.org/archive/pdf/11tn024.pdf

FFRが標的型攻撃マルウエアの有無を検査するサービスを開始
http://itpro.nikkeibp.co.jp/article/NEWS/20111012/370599/?ST=security

エフセキュアがセキュリティソフトの新バージョンを発表
http://itpro.nikkeibp.co.jp/article/NEWS/20111012/370555/?ST=security

Critical Control 8 - Controlled Use of Administrative Privileges
http://isc.sans.edu/diary.html?storyid=11794

Apple Safari Bugs Let Remote Users Conduct Cross-Site Scripting Attacks, Execute Arbitrary Code, and Bypass Cookie Restrictions
http://www.securitytracker.com/id/1026178

SilverStripe URL Cross-Site Scripting Vulnerability
http://secunia.com/advisories/46390/

ManageEngine ADSelfService Plus Security Bypass Vulnerability
http://secunia.com/advisories/46381/

SUSE update for libqt4
http://secunia.com/advisories/46371/

Contao URL "getPageIdFromURL()" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/46396/

Hitachi JP1/Cm2/Network Node Manager Unspecified Vulnerabilities
http://secunia.com/advisories/46411/

WordPress Light Post Plugin "abspath" File Inclusion Vulnerability
http://secunia.com/advisories/46422/

SUSE update for Qt
http://secunia.com/advisories/46410/

Google App Engine SDK for Python Cross-Site Request Forgery Vulnerability
http://secunia.com/advisories/46357/

SUSE update for tomcat5
http://secunia.com/advisories/46407/

MyBB MyStatus Plugin "statid" SQL Injection Vulnerability
http://secunia.com/advisories/46360/

BlackBerry Enterprise Server Instant Messaging User Impersonation Vulnerability
http://secunia.com/advisories/46370/

Apple iTunes Multiple Vulnerabilities
http://secunia.com/advisories/46339/

POSH Cross-Site Scripting and File Inclusion Vulnerabilities
http://secunia.com/advisories/46354/

Red Hat update for kdelibs
http://secunia.com/advisories/46383/

DMXready Polling Booth Manager SQL Injection
http://securityreason.com/securityalert/8452

iJoomla Magazine 3.0.1 Remote File Inclusion
http://securityreason.com/securityalert/8451

A-Blog v2.0 (sources/search.php) SQL Injection Exploit
http://securityreason.com/securityalert/8450

ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability
http://securityreason.com/securityalert/8449

ColdUserGroup 1.06 Blind SQL Injection
http://securityreason.com/securityalert/8448

PHP Classifieds ADS Blind SQL Injection
http://securityreason.com/securityalert/8447

UCenter Home 2.0 -(0day) Remote SQL Injection Vulnerability
http://securityreason.com/securityalert/8446

ColdGen - coldcalender v2.06 Remote 0day SQL Injection
http://securityreason.com/securityalert/8445

Mechbunny PaysiteReviewCMS Permanent XSS Vulnerabilities
http://securityreason.com/securityalert/8444

Virtue Shopping Mall (detail.php prodid) SQL Injection Vulnerability
http://securityreason.com/securityalert/8443

Zenphoto 1.3 Security problems
http://securityreason.com/securityalert/8442

CubeCart 4.3.3 SQL Injection and XSS
http://securityreason.com/securityalert/8441

Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerability
http://securityreason.com/securityalert/8440

MySource Matrix 3.28.3 (height) Remote Reflected XSS Vulnerability
http://securityreason.com/securityalert/8439

CMS WebManager-Pro Vulnerabilities
http://securityreason.com/securityalert/8438

chillyCMS Multiple Vulnerabilities
http://securityreason.com/securityalert/8437

HINNENDAHL.COM Gaestebuch 1.2 Remote File Inclusion Vulnerability
http://securityreason.com/securityalert/8436

MODx Revolution 2.0.2-pl Reflected Cross-site Scripting
http://securityreason.com/securityalert/8435

Auto CMS XSS vulnerability
http://securityreason.com/securityalert/8434

ApPHP Calendar XSS CSRF
http://securityreason.com/securityalert/8433

REMOTE: Mozilla Firefox Array.reduceRight() Integer Overflow Exploit
http://www.exploit-db.com/exploits/17974/

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-1985) Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49968

AzeoTech DAQFactory Denial of Service Vulnerability
http://www.securityfocus.com/bid/48955

Microsoft Windows Kernel 'Win32k.sys' TrueType Font File Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/49973

Microsoft Windows Kernel '.fon' Font File Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/49975

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-2011) Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49981

Microsoft Internet Explorer Virtual Function Table CVE-2011-2001 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49966

Microsoft Windows AFD Driver CVE-2011-2005 Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49941

Microsoft Internet Explorer Body Element CVE-2011-2000 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49965

Microsoft Internet Explorer Select Element CVE-2011-1999 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49964

Microsoft Internet Explorer Option Element CVE-2011-1996 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49961

Microsoft Internet Explorer 'Jscript9.dll' CVE-2011-1998 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49963

Microsoft Internet Explorer 'OLEAuto32.dll' CVE-2011-1995 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49960

Microsoft Internet Explorer Uninitalized Object CVE-2011-1993 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49947

Apache Tomcat Authentication Header Realm Name Information Disclosure Vulnerability
http://www.securityfocus.com/bid/39635

Microsoft Internet Explorer OnLoad Event CVE-2011-1997 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49962

Apple QuickTime CVE-2011-0252 STTS Atoms Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49038

PHP 'OpenSSL' Extension Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/46977

Multiple Vendors STARTTLS Implementation Plaintext Arbitrary Command Injection Vulnerability
http://www.securityfocus.com/bid/46767

PHP 'Intl' Extension 'NumberFormatter::setSymbol()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/46968

WebKit 'libxslt' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48840

Google Chrome Prior to 13.0.782.215 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49279

Webkit Address Bar URI Spoofing Vulnerability
http://www.securityfocus.com/bid/47020

Google Chrome Prior to 13.0.782.107 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/48960

Google Chrome Prior to 14.0.835.163 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49658

WebKit 'HTML5' Drag and Drop Cross-Origin Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46811

PHP 'Zip' Extension 'zip_fread()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/46975

WebKit Embedded URL Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/48859

Apache Tomcat 'Transfer-Encoding' Information Disclosure and Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/41544

Apache Tomcat SecurityManager Security Bypass Vulnerability
http://www.securityfocus.com/bid/46177

Apache Tomcat HTML Manager Interface HTML Injection Vulnerability
http://www.securityfocus.com/bid/46174

FreeType 'src/psaux/t1decode.c' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/48619

Apache Tomcat NIO Connector Denial of Service Vulnerability
http://www.securityfocus.com/bid/46164

WebKit CVE-2011-1797 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48858

Google Chrome Prior to 12.0.742.112 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/48479

ISC BIND 9 'RRSIG' Record Type Negative Cache Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/45133

Apache APR 'apr_fnmatch()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/47820

Apache HTTP Server CVE-2011-3192 Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49303

Python 'audioop' Module Integer Overflow Vulnerability
http://www.securityfocus.com/bid/40370

ISC BIND 9 Unspecified Packet Processing Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/48566

WebKit CVE-2011-1457 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48856

WebKit CVE-2011-1462 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48857

WebKit CVE-2011-1453 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48855

PHP 'Zip' Extension 'stream_get_contents()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/46969

PHP Stream Component Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/46970

Google Chrome Prior to 11.0.696.57 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/47604

WebKit MathML Tags Use-After-Free Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48824

Google Chrome Prior to 10.0.648.204 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/47029

WebKit CVE-2011-1288 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48854

WebKit CVE-2011-0222 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48844

WebKit CVE-2011-0225 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48845

WebKit CVE-2011-0232 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48846

WebKit FrameOwner Element Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48847

WebKit Malformed XHTML Tags Use After Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/48823

WebKit CVE-2011-0235 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48848

WebKit CVE-2011-0238 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48850

WebKit CVE-2011-0255 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48853

WebKit 'NamedNodeMap.cpp' Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48852

Google Chrome prior to 9.0.597.94 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/46262

WebKit Multiple Unspecifeid Remote Code Execution Vulnerabilities
http://www.securityfocus.com/bid/50066

Google Chrome prior to 10.0.648.127 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/46785

Google Chrome prior to 9.0.597.107 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/46614

WebKit CVE-2011-0221 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48843

WebKit CVE-2011-0218 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48842

Apple Mac OS X Quicklook Office File Memory Corruption Vulnerability
http://www.securityfocus.com/bid/48440

Apple Mac OS X QuickLook Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/46965

Apple Mac OS X IPV6 Socket Options (CVE-2010-1132) Denial of Service Vulnerability
http://www.securityfocus.com/bid/48422

Apple Mac OS X QuickTime Cross Domain Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46992

Apple Mac OS X ICU (CVE-2011-0206) Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48429

Mozilla Firefox/Thunderbird/SeaMonkey CVE-2011-3232 YARR Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/49850

libTIFF CCITT Group 4 Encoded TIFF Image Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/46658

Apple Safari ImageIO TIFF Image Handling Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48833

SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49778

PHP 'shmop_read()' Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/46786

PHP Exif Extension 'exif_read_data()' Function Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/46365

PHP 'phar/phar_object.c' Format String Vulnerability
http://www.securityfocus.com/bid/46854

OTRS Unspecified Remote Command Execution Vulnerability
http://www.securityfocus.com/bid/46947

libzip '_zip_name_locate()' NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/46354

PHP 'grapheme_extract()' NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/46429

PHP 'zend_strtod()' Function Floating-Point Value Denial of Service Vulnerability
http://www.securityfocus.com/bid/45668

PHP 'open_basedir' Security-Bypass Vulnerability
http://www.securityfocus.com/bid/44723

GNU Mailman 'Full name' Field Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/46464

ISC BIND Key Algorithm Rollover Security Vulnerability
http://www.securityfocus.com/bid/45137

ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability
http://www.securityfocus.com/bid/37118

ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability
http://www.securityfocus.com/bid/37865

Apple Mac OS X CoreFoundation (CVE-2011-0259) Memory Corruption Vulnerability
http://www.securityfocus.com/bid/50067

Python 'urllib' and 'urllib2' Modules Information Disclosure and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/47024

Apple Mac OS X CoreMedia H.264 Encoded Movie Files Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50068

Python 'audioop' Module Memory Corruption Vulnerability
http://www.securityfocus.com/bid/40863

libpng Buffer Overflow and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/48660

jabberd XML Parsing Denial of Service Vulnerability
http://www.securityfocus.com/bid/48250

ISC BIND 9 Large RRSIG RRsets Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/48007

libpng PNG File Denial Of Service Vulnerability
http://www.securityfocus.com/bid/48618

Apple Mobile OfficeImport Framework Excel Record Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44799

Apple Mac OS X QuickLook Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44812

Apple Mobile Safari for iOS 4.2.1 Unspecified Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/46832

Linux Kernel TCP Sequence Number Generation Security Weakness
http://www.securityfocus.com/bid/49289

Linux Kernel Generic Receive Offload (GRO) CVE-2011-2723 Denial of Service Vulnerability
http://www.securityfocus.com/bid/48929

Samba 'etc/mtab' File Appending Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49939

Adobe Flash Media Server NULL Pointer Dereference Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/49103

Samba 'client/mount.cifs.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/38326

OPC Systems.NET RPC Packet Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50047

Linux Kernel 'drivers/media/radio/si4713-i2c.c' Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48804

Linux Kernel 'fs/befs/linuxvfs.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49256

Linux Kernel 'inet_diag_bc_audit()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48333

Linux kernel l2cap Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48472

Linux Kernel 'CIFSFindNext()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/49295

Linux Kernel EFI Partition Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47796

Linux Kernel EXT4 Extent Format File Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48697

Google App Engine SDK Cross Site Request Forgery Vulnerability And Command Execution Weaknesses
http://www.securityfocus.com/bid/50075

TUGZip ZIP File Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/31913

Joomla! JCE Component Multiple Directory Traversal Vulnerabilities
http://www.securityfocus.com/bid/49338

Microsoft Publisher '.pub' File 'pubconv.dll' Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50090

Apple Safari Prior to 5.1.1 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/50089

WebKit Inactive DOM Windows Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/50088

Apple Kernel TCP Exhaustion Denial of Service Vulnerability
http://www.securityfocus.com/bid/50087

Apple iPhone/iPad/iPod touch Prior to iOS 5 Multiple Vulnerabilities
http://www.securityfocus.com/bid/50086

Cisco TelePresence Video Communication Server 'User-Agent' HTTP Header HTML Injection Vulnerability
http://www.securityfocus.com/bid/50084

BugFree Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50083

WordPress GD Star Rating Plugin 'de' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50082

Filmis SQL Injection and Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50081

WordPress Light Post Plugin 'abspath' Parameter Remote File Include Vulnerability
http://www.securityfocus.com/bid/50080

Hitachi JP1/Cm2/Network Node Manager Multiple Unspecified Remote Vulnerabilities
http://www.securityfocus.com/bid/50079

Honeywell EBI TEMA Remote Installer ActiveX Control Arbitrary File Download Vulnerability
http://www.securityfocus.com/bid/50078

POSH Local File Include and Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50077

MyBB MyStatus 'statid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50073

Joomla! Sgicatalog Component 'id' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50072

0 件のコメント:

コメントを投稿