25日 木曜日、大安

+ Multiple Vulnerabilities in the Cisco Video Surveillance Manager
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3429
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3430
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3431

+ HPSBGN02905 rev.1 - HP LoadRunner, Remote Code Execution and Denial of Service (DoS)
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03862772-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2368
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2369
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2370
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4797
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4798
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4799
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4800
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4801

+ HPSBGN02906 rev.1 - HP Application Lifecycle Management Quality Center (ALM), Remote Cross Site Scripting (XSS)
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03864640-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4802

+ HPSBMU02894 rev.1 - HP Network Node Manager I (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Denial of Service (DoS), Unauthorized Access, Execution of Arbitrary Code
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03824583-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5333
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3554
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0738
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1428
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1429
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1483
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2196
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4605
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4858
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3546

+ Apache HTTP Server 2.4.4 mod_session_dbd missing flag
http://cxsecurity.com/issue/WLB-2013070190

+ McAfee Network Threat Behavior Analysis Zebra Telnet Service Privilege Escalation Vulnerability
http://secunia.com/advisories/54290/

第4回：端末、ネットワーク、クラウド…新時代のリスク管理のポイント
http://itpro.nikkeibp.co.jp/article/COLUMN/20130718/492305/?ST=security

子供のネット依存、治療に当たる久里浜医療センター院長が「生易しい問題ではない」と警告
http://itpro.nikkeibp.co.jp/article/Watcher/20130720/492762/?ST=security

セキュリティ・ホットトピックスITpro
スマホの不正アプリで逮捕者、「the Movie事件」以降続く個人情報の詐取
http://itpro.nikkeibp.co.jp/article/COLUMN/20130724/493943/?ST=security

NTTコムのOCNに不正アクセス、400万件の暗号化パスワード流出の可能性
http://itpro.nikkeibp.co.jp/article/NEWS/20130724/493944/?ST=security

子供にとって最も危険な“遊び場”はソーシャル、カスペルスキーが調査結果発表
http://itpro.nikkeibp.co.jp/article/NEWS/20130724/493847/?ST=security

Suica乗降履歴データの外部提供で問われるプライバシー問題---JR東日本に聞く
http://itpro.nikkeibp.co.jp/article/NEWS/20130724/493665/?ST=security