2013年1月31日木曜日

31日 木曜日、先勝


+ About the security content of Apple TV 5.2
http://support.apple.com/kb/HT5643
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0964
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2619

+ About the security content of iOS 6.1 Software Update
http://support.apple.com/kb/HT5642
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0963
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3058
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0964
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0974
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2857
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3606
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3607
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3621
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3632
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3687
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3701
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0948
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0949
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0950
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0951
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0952
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0953
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0954
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0955
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0956
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2824
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0958
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0959
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0968
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0962
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2889
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2619

+ Google Chrome 24.0.1312.57 released
http://googlechromereleases.blogspot.jp/2013/01/stable-channel-update_30.html

+ Opera 12.13 released
http://www.opera.com/docs/changelogs/unified/1213/

+ phpMyAdmin 3.5.6 released
http://sourceforge.net/p/phpmyadmin/news/2013/01/phpmyadmin-356-is-released/

+ UPDATE: Multiple Vulnerabilities in Cisco Wireless LAN Controllers
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc

+ UPDATE: Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp

+ HPSBST02839 SSRT101077 rev.1 - HP XP P9000 Command View Advanced Edition, Remote Denial of Service (DoS)
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03650706-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3281

+ Algorithmic complexity vulnerability in Apache Ant
https://blogs.oracle.com/sunsecurity/entry/algorithmic_complexity_vulnerability_in_apache
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2098

+ Multiple vulnerabilities in Wireshark
https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark4
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3548
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5237
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5238
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5239
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5240

+ Multiple vulnerabilities in Apache HTTP server
https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_apache_http2
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0883
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2687

+ Multiple vulnerabilities in Firefox
https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_firefox
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1960
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1970
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1971
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1972
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1973
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1974
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1975
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1976
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3956
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3957
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3958
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3959
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3960
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3961
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3962
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3963
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3964
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3966
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3967
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3968
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3969
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3970
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3972
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3974
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3976
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3978
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3980

+ Multiple vulnerabilities in Thunderbird
https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_thunderbird7
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1948
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1950
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1951
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1952
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1953
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1954
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1955
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1957
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1958
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1959
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1961
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1962
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1963
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1964
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1965
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1966
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1967
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1970
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1973
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3966

+ CVE-2012-3955 Denial of Service (DoS) vulnerability in ISC DHCP
https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3955

+ CVE-2012-5166 Denial of Service vulnerability in ISC BIND
https://blogs.oracle.com/sunsecurity/entry/cve_2012_5166_denial_of
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5166

+ CVE-2012-4244 Denial of Service vulnerability in ISC BIND
https://blogs.oracle.com/sunsecurity/entry/cve_2012_4244_denial_of
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4244

+ Dovecot 2.1.14 released
http://www.dovecot.org/list/dovecot-news/2013-January/000239.html

+ Samba 4.0.2, 3.6.12 and 3.5.21 Security Releases Available for Download
http://samba.org/samba/history/samba-4.0.2.html
http://samba.org/samba/history/samba-3.6.12.html
http://samba.org/samba/history/samba-3.5.21.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0213
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0214

+ Microsoft Internet Explorer Address Bar CVE-2013-1451 URI Spoofing Vulnerability
http://www.securityfocus.com/bid/57641
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1451

+ GNU glibc 'regexec.c' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/57638
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0242

+ Buffalo TeraStation Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/57634

チェックしておきたい脆弱性情報<2013.01.31>
http://itpro.nikkeibp.co.jp/article/COLUMN/20130129/452665/?ST=security

栃木県管轄のWebサイトにサイバー攻撃、データベース改ざん被害
http://itpro.nikkeibp.co.jp/article/NEWS/20130130/452975/?ST=security

標的型攻撃対策ソフト「FFR yarai」に新版、例外リストを一元管理可能に
http://itpro.nikkeibp.co.jp/article/NEWS/20130130/452909/?ST=security

米政府からの情報開示要求に対する、グーグルの保護策(WIRED.jp)
http://itpro.nikkeibp.co.jp/article/NEWS/20130130/452763/?ST=security

FP国家検定の試験問題が漏洩、実施前の問題をWebサイトに“公開”
http://itpro.nikkeibp.co.jp/article/NEWS/20130129/452522/?ST=security

JVNVU#90348117 Portable SDK for UPnP にバッファオーバーフローの脆弱性
http://jvn.jp/cert/JVNVU90348117/

JVNDB-2012-001258 Apache HTTP Server の protocol.c における HTTPOnly cookies の値を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001258.html

JVNDB-2013-001059 Adobe Flash Player におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001259.html

JVNDB-2013-001319 Microsoft Internet Explorer 8 および 9 における Web サイトを偽装される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001319.html

JVNDB-2013-001318 Microsoft Internet Explorer 8 および 9 における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001318.html

JVNDB-2013-001317 Apple iOS 6.1 未満の StoreKit におけるアクセス制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001317.html

JVNDB-2013-001316 Apple iOS 6.1 未満で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001316.html

JVNDB-2013-001315 Apple iOS および Apple TV のカーネルにおけるポインタの制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001315.html

JVNDB-2013-001314 Apple iOS 6.1 の Identity Services における認証を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001314.html

JVNDB-2013-001313 Apple iOS 6.1 未満で使用される WebKit におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001313.html

JVNDB-2013-001312 Apple iOS 6.1 未満で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001312.html

JVNDB-2013-001311 Apple iOS 6.1 未満で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001311.html

JVNDB-2013-001310 Apple iOS 6.1 未満で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001310.html

JVNDB-2013-001309 Apple iOS 6.1 未満で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001309.html

JVNDB-2013-001308 Apple iOS 6.1 未満で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001308.html

JVNDB-2013-001307 Apple iOS 6.1 未満で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001307.html

JVNDB-2013-001306 Apple iOS 6.1 未満で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001306.html

JVNDB-2013-001305 Apple iOS 6.1 未満で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001305.html

JVNDB-2013-001304 Apple iOS 6.1 未満で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001304.html

JVNDB-2013-001303 Apple iOS 6.1 未満で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001303.html

JVNDB-2013-001302 Apple iOS 6.1 未満で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001302.html

[SECURITY] [DSA 2613-1] rails security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2013-01/msg00124.html

Cisco Security Advisory: Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2013-01/msg00123.html

Exposed UPNP Devices
https://isc.sans.edu/diary.html?storyid=15040

Getting Involved with the Local Community
https://isc.sans.edu/diary.html?storyid=15043

VLC Media Player ASF Movie Buffer Overflow Lets Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1028059

D-Link DCS cameras Unauthenticated remote access
http://cxsecurity.com/issue/WLB-2013010226

Buffalo TeraStation TS-Series multiple vulnerabilities
http://cxsecurity.com/issue/WLB-2013010225

Adobe Reader XI Heap Overflow
http://cxsecurity.com/issue/WLB-2013010224

Devise Type Conversion Security Bypass Vulnerability
http://secunia.com/advisories/51916/

Ubuntu update for nova
http://secunia.com/advisories/51992/

Ubuntu update for glance
http://secunia.com/advisories/51990/

Debian update for rails
http://secunia.com/advisories/51978/

Cisco Network Admission Control Cross-Site Scripting Vulnerability
http://secunia.com/advisories/52016/

IBM InfoSphere Information Two Vulnerabilities
http://secunia.com/advisories/52020/

IBM InfoSphere Information Server Multiple Vulnerabilities
http://secunia.com/advisories/51985/

OpenStack Compute (Nova) Boot From Volume Arbitrary Volume Booting Vulnerability
http://secunia.com/advisories/51963/

OpenStack Glance Swift Backend Password Disclosure Security Issue
http://secunia.com/advisories/51957/

Samba SWAT Clickjacking Vulnerability
http://secunia.com/advisories/51994/

IRCD-Hybrid "try_parse_v4_netmask()" Denial of Service Vulnerability
http://secunia.com/advisories/51948/

Wireshark Multiple Vulnerabilities
http://secunia.com/advisories/51968/

Opera Multiple Vulnerabilities
http://secunia.com/advisories/52005/

IBM InfoSphere Information Server Java Denial of Service Vulnerability
http://secunia.com/advisories/52022/

VLC Media Player ASF Processing Buffer Overflow Vulnerability
http://secunia.com/advisories/51995/

WordPress Poll Plugin "poll_id" and "pollid" SQL Injection Vulnerabilities
http://secunia.com/advisories/51942/

WordPress Poll Plugin Cross-Site Request Forgery Vulnerability
http://secunia.com/advisories/51925/

Ubuntu update for libvirt
http://secunia.com/advisories/52000/

WordPress Simple History Plugin RSS Feed "rss_secret" Disclosure Weakness
http://secunia.com/advisories/51998/

Microsoft Internet Explorer Address Bar CVE-2013-1451 URI Spoofing Vulnerability
http://www.securityfocus.com/bid/57641

Adobe Reader 'util.printf()' JavaScript Function Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/30035

Adobe Reader Unspecified Remote Denial Of Service Vulnerability
http://www.securityfocus.com/bid/29420

Neon 'ne_xml*' expat XML Parsing Denial of Service Vulnerability
http://www.securityfocus.com/bid/36080

IBM Eclipse Help System Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/53884

OpenStack Compute (Nova) 'nova-volume' Security Bypass Vulnerability
http://www.securityfocus.com/bid/57613

Poweradmin 'index.php' Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/55619

Oracle Java SE CVE-2012-0501 Remote Stack Overflow Vulnerability
http://www.securityfocus.com/bid/52013

Linux Kernel 'dvb_net_ule()' Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/38479

Linux Kernel USB interface Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/39042

Linux Kernel 'tcp_rcv_state_process()' Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/39016

Red Hat Enterprise Linux 'ptrace()' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/38702

Linux Kernel 'azx_position_ok()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/38348

Sun Solaris XScreenSaver Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/35733

Sun Solaris Sockets Direct Protocol (SDP) Driver 'sdp(7D)' Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/36904

Python 'expandtabs' Multiple Integer Overflow Vulnerabilities
http://www.securityfocus.com/bid/33187

Python Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/30491

Python 'Imageop' Module Argument Validation Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/31932

Python 'stringobject.c' Multiple Remote Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/28749

Python zlib Module Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/28715

NOS Microsystems getPlus Download Manager ActiveX Control Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/32105

Adobe Acrobat and Reader 8.1.2 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/32100

Linux Kernel dl2k Network Driver IOCTL Handling Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/53965

Oracle Java Runtime Environment CVE-2012-3174 Unspecified Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/57312

Oracle Java Runtime Environment CVE-2013-0422 Multiple Remote Code Execution Vulnerabilities
http://www.securityfocus.com/bid/57246

Ruby on Rails 'convert_json_to_yaml()' Method Security Vulnerability
http://www.securityfocus.com/bid/57575

Neon NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
http://www.securityfocus.com/bid/36079

FreeIPA CVE-2012-5484 Man in The Middle Security Vulnerability
http://www.securityfocus.com/bid/57529

Linux DiskQuota 'hosts_ctl()' Security Bypass Vulnerability
http://www.securityfocus.com/bid/55066

GNOME glib Base64 Encoding and Decoding Multiple Integer Overflow Vulnerabilities
http://www.securityfocus.com/bid/34100

NetworkManager Permission Enforcement Multiple Local Vulnrabilities
http://www.securityfocus.com/bid/33966

Evolution Data Server 'ntlm_challenge()' Memory Contents Information Disclosure Vulnerability
http://www.securityfocus.com/bid/34109

OpenSSL 'EVP_VerifyFinal' Function Signature Verification Vulnerability
http://www.securityfocus.com/bid/33150

GNOME Evolution S/MIME Email Signature Verification Vulnerability
http://www.securityfocus.com/bid/33720

Apache APR-util 'apr_brigade_split_line()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/43673

ISC BIND 9 DNS RDATA Handling CVE-2012-5166 Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/55852

FreeType Multiple Integer Overflow Vulnerabilities
http://www.securityfocus.com/bid/34550

TWiki and Foswiki 'MAKETEXT' Variable Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/56950

Multiple Asterisk Products CVE-2012-5977 Denial of Service Vulnerability
http://www.securityfocus.com/bid/57105

Multiple Asterisk Products CVE-2012-5976 Stack Overflow Denial of Service Vulnerability
http://www.securityfocus.com/bid/57106

ProFTPD Race Condition Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/57172

Drupal Drush Debian Packaging Module Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/57643

Drupal Boxes Module 'subject' field HTML Injection Vulnerability
http://www.securityfocus.com/bid/57642

Drupal email2image Module Access Bypass Vulnerability
http://www.securityfocus.com/bid/57639

GNU glibc 'regexec.c' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/57638

QEMU KVM QXL Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/57637

Buffalo TeraStation Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/57634

Opera Web Browser Prior to 12.13 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/57633

Cisco Network Admission Control CVE-2012-6029 Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/57632

Samba SWAT Cross Site Request Forgery and Clickjacking Vulnerabilities
http://www.securityfocus.com/bid/57631

WordPress Poll Plugin Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/57630

VLC Media Player ASF File Handling Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/57629

WordPress Simple History Plugin RSS Feed Information Disclosure Vulnerability
http://www.securityfocus.com/bid/57628

WordPress Poll Plugin Cross Site Request Forgery Vulnerability
http://www.securityfocus.com/bid/57624

0 件のコメント:

コメントを投稿