2013年1月29日火曜日
29日 火曜日、大安
+ RHSA-2013:0199 Important: libvirt security update
http://rhn.redhat.com/errata/RHSA-2013-0199.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0170
+ HS13-002 Vulnerability about User Authentication in Operational Management Function of Cosminexus
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-002/index.html
+ HS13-002 Cosminexus運用管理機能におけるユーザ認証の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS13-002/index.html
+ libpng 1.5.14, 1.2.50 released
http://www.libpng.org/pub/png/src/libpng-1.5.14-README.txt
http://www.libpng.org/pub/png/src/libpng-1.2.50-README.txt
+ Linux kernel 3.7.5, 3.4.28, 3.0.61 released
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.5
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.28
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.61
+ iOS 6.1 Software Update
http://support.apple.com/kb/DL1624
+ Apple iPhone/iPad/iPod touch Prior to iOS 6.1 Multiple Vulnerabilities
http://www.securityfocus.com/bid/57572
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0948
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0949
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0950
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0951
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0952
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0953
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0954
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0955
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0956
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0958
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0959
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0962
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0963
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0964
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0968
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0974
トレンドマイクロQ&A検索ページで発生している障害について
http://www.trendmicro.co.jp/support/news.asp?id=1901
InterScan Webmanager SCCの管理画面閲覧不可障害について
http://www.trendmicro.co.jp/support/news.asp?id=1900
Trend Micro Deep Security 8.0 Service Pack 2 公開のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1895
「情報セキュリティエコノミクスシンポジウム2013」開催のご案内
～ 情報セキュリティエコノミクスは何に役立つか ～
http://www.ipa.go.jp/security/event/2013/eco_sympo/index.html
ソフトウェア等の脆弱性関連情報に関する届出状況
[2012年第4四半期（10月～12月）]
http://www.ipa.go.jp/security/vuln/report/vuln2012q4.html
JVNVU#92496224 WebYaST にホスト一覧を改ざんされる脆弱性
http://jvn.jp/cert/JVNVU92496224/index.html
JVNVU#94409047 Foxit Advanced PDF Editor にバッファオーバーフローの脆弱性
http://jvn.jp/cert/JVNVU94409047/index.html
JVNDB-2012-005828 (JVNVU#92426910) (JVNTA13-015A) Internet Explorer に任意のコードが実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005828.html
JVNDB-2013-001027 (JVNTA13-010A) Oracle Java 7 に脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001027.html
JVNDB-2013-001059 Adobe Flash Player におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001059.html
JVNDB-2013-001275 ISC BIND におけるサービス運用妨害 (表明違反および named デーモンの終了) の脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001275.html
JVNDB-2013-001274 Cisco Wireless LAN Controller における無線管理の設定を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001274.html
JVNDB-2013-001273 Cisco Wireless LAN Controller における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001273.html
JVNDB-2013-001272 Cisco Wireless LAN Controller におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001272.html
JVNDB-2013-001271 Cisco Wireless LAN Controller におけるサービス運用妨害 (デバイスリロード) の脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001271.html
JVNDB-2013-001270 複数の Rockwell Automation 製品におけるサービス運用妨害 (制御および通信の停止) の脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001270.html
JVNDB-2013-001269 複数の Rockwell Automation 製品における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001269.html
JVNDB-2013-001268 複数の Rockwell Automation 製品におけるリプレイ攻撃の脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001268.html
JVNDB-2013-001267 複数の Rockwell Automation 製品におけるサービス運用妨害 (制御および通信の停止) の脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001267.html
JVNDB-2013-001266 複数の Rockwell Automation 製品におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001266.html
JVNDB-2013-001265 複数の Rockwell Automation 製品における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001265.html
JVNDB-2013-001264 複数の Rockwell Automation 製品におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001264.html
JVNDB-2013-001263 複数の Rockwell Automation 製品におけるサービス運用妨害 (制御および通信の停止) の脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001263.html
JVNDB-2013-001262 ProFTPD における任意のファイルの所有権を変更される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001262.html
JVNDB-2012-005920 FreeType の _bdf_parse_glyphs 関数におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001260.html
JVNDB-2012-005919 FreeType の _bdf_parse_glyphs 関数におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005919.html
JVNDB-2012-005918 FreeType におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005918.html
JVNDB-2013-001028 (JVNVU#97486520) Dell OpenManage Server Administrator にクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001028.html
JVNDB-2013-001261 Mac OS X 上の Google Chrome におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001261.html
JVNDB-2013-001260 Google Chrome における脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001260.html
JVNDB-2013-001259 Google Chrome におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001259.html
JVNDB-2013-001258 Google Chrome における脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001258.html
JVNDB-2013-001257 Google Chrome におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001257.html
iOS 6.1 Released
https://isc.sans.edu/diary.html?storyid=15022
VU#628463 Ruby on Rails 3.0 and 2.3 JSON Parser vulnerability
http://www.kb.cert.org/vuls/id/628463
Cisco Adaptive Security Appliance CIFS UNC Handling Denial of Service Vulnerability
http://secunia.com/advisories/51955/
Elgg Twitter Widget Plugin "params[twitter_username]" Script Insertion Vulnerability
http://secunia.com/advisories/52007/
Cisco Unified Communications Domain Manager (CUCDM) Cross-Site Scripting Vulnerability
http://secunia.com/advisories/51954/
Cisco WebEx Social Information Disclosure and Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/51996/
Hitachi Cosminexus Operational Management Function Security Bypass Security Issue
http://secunia.com/advisories/51950/
ImageCMS "q" SQL Injection Vulnerability
http://secunia.com/advisories/51913/
SUSE update for java-1_7_0-openjdk
http://secunia.com/advisories/52008/
FFmpeg Multiple Vulnerabilities
http://secunia.com/advisories/51964/
DoS/PoC: PHP Weby Directory Software 1.2 Multiple Vulnerabilities
http://www.exploit-db.com/exploits/24433
Hunt CCTV (and generics brands) Insufficient Authentication
http://cxsecurity.com/issue/WLB-2013010216
Moodle 'cURL' API Security Bypass Vulnerability
http://www.securityfocus.com/bid/57104
QEMU CVE-2012-6075 Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/57420
Broadcom BCM4325 and BCM4329 Wireless Chipset Out of Bound Read Denial of Service Vulnerability
http://www.securityfocus.com/bid/56184
Google Chrome Prior to 22.0.1229.79 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/55676
Google Chrome Prior to 20.0.1132.43 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/54203
Zabbix 'cnf' Parameter Authentication Bypass Vulnerability
http://www.securityfocus.com/bid/57471
WebKit Multiple Unspecified Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/55534
Google Chrome Prior to 21 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/54749
Google Chrome Prior to 18.0.1025.142 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/52762
Drupal Core Path Disclosure Vulnerability
http://www.securityfocus.com/bid/53454
Perl CVE-2012-5195 Heap-Based Memory Corruption Vulnerability
http://www.securityfocus.com/bid/56287
FFmpeg Multiple Unspecified Vulnerabilities
http://www.securityfocus.com/bid/55355
Google Chrome Prior to 23.0.1271.97 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/56903
WebYaST CVE-2012-0435 Hosts List Modification Information Disclosure Vulnerability
http://www.securityfocus.com/bid/57511
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-0744 Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/57218
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-0752 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/57241
OSClass Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/51721
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-0743 Security Bypass Vulnerability
http://www.securityfocus.com/bid/57258
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-0762 Use After Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/57193
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-0764 Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/57211
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-0760 Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/57199
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-0766 Use After Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/57194
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-0770 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/57207
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-0745 Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/57244
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-0763 Use After Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/57197
Ruby multi_xml CVE-2013-0175 Remote Arbitrary Command Execution Vulnerability
http://www.securityfocus.com/bid/57281
Rack Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/57430
JBoss Web Services W3C XML Encryption Standard Information Disclosure Vulnerability
http://www.securityfocus.com/bid/55770
Apache CXF Elements Validation Security Bypass Vulnerability
http://www.securityfocus.com/bid/53877
JBoss Enterprise Application Platform Cross Site Request Forgery Vulnerability
http://www.securityfocus.com/bid/54915
JBoss 'twiddle.sh' Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/54631
JBoss Enterprise BRMS Platform JGroups Diagnostics Service Information Disclosure Vulnerability
http://www.securityfocus.com/bid/54183
Apple iPhone/iPad/iPod touch Prior to iOS 6.1 Multiple Vulnerabilities
http://www.securityfocus.com/bid/57572
Elgg 'params[twitter_username]' Parameter HTML Injection Vulnerability
http://www.securityfocus.com/bid/57569
Cisco WebEx Social CVE-2013-1107 Information Disclosure Vulnerability
http://www.securityfocus.com/bid/57568
Hitachi Cosminexus Products Authentication Bypass Vulnerability
http://www.securityfocus.com/bid/57566
Oracle Java Runtime Environment Unsigned Java Code Security Bypass Vulnerability
http://www.securityfocus.com/bid/57563
登録:
コメントの投稿 (Atom)
0 件のコメント:
コメントを投稿