7日 月曜日、大安

+ phpMyAdmin 4.0.8 is released
http://sourceforge.net/p/phpmyadmin/news/2013/10/phpmyadmin-408-is-released/

+ GnuPG 2.0.22, 1.4.15 released
http://lists.gnupg.org/pipermail/gnupg-announce/2013q4/000333.html
http://lists.gnupg.org/pipermail/gnupg-announce/2013q4/000334.html

+ McAfee Managed Agent Framework Service Bug Lets Remote Users Deny Service
http://www.securitytracker.com/id/1029133
http://secunia.com/advisories/55158/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3627

+ Apple OS X Directory Services Authentication Flaw Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1029126
http://secunia.com/advisories/55129/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5163

+ VU#984366 ASUS RT-N10E Wireless Router vulnerable to authentication bypass
http://www.kb.cert.org/vuls/id/984366
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3610

+ VU#613886 McAfee Managed Agent contains a denial-of-service (DoS) vulnerability
http://www.kb.cert.org/vuls/id/613886
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3627

+ Apache Tomcat/JBoss Remote Code Execution
http://cxsecurity.com/issue/WLB-2013100037

+ REMOTE: Apache Tomcat/JBoss EJBInvokerServlet / JMXInvokerServlet (RMI over HTTP) Marshalled Object RCE
http://www.exploit-db.com/exploits/28713

+ REMOTE: SIEMENS Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution
http://www.exploit-db.com/exploits/28724

+ LOCAL: FreeBSD Intel SYSRET Kernel Privilege Escalation Exploit
http://www.exploit-db.com/exploits/28718

JVNDB-2013-000094 Accela BizSearch におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000094.html

チェックしておきたい脆弱性情報＜2013.10.07＞
http://itpro.nikkeibp.co.jp/article/COLUMN/20130930/507757/?ST=security

Adobe、290万人のユーザー情報と主要製品のソースコードに不正アクセス
http://itpro.nikkeibp.co.jp/article/NEWS/20131004/508865/?ST=security

総務省と民間企業が連携、URLフィルタなどを使ったマルウエア感染被害防止プロジェクト開始
http://itpro.nikkeibp.co.jp/article/NEWS/20131004/508862/?ST=security