31日 月曜日、先負

+ UPDATE: HPSBST02968 rev.2 - HP StoreOnce, Remote Unauthorized Access
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04126368-2%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ SYM14-005 セキュリティ アドバイザリー - Symantec LiveUpdate Administrator における、アカウントのアクセス権の不正な改ざんと不正な SQL インジェクションの問題
http://www.symantec.com/ja/jp/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140327_00

+ HS14-008 DoS Vulnerability in Cosminexus
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-008/index.html

+ HS14-008 CosminexusにおけるDoS脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS14-008/index.html

+ Tomcat 8.0.5 (beta) Released
http://tomcat.apache.org/tomcat-8.0-doc/changelog.html

+ OpenSSH DNS SSH Fingerprint Record Check Can Be Bypassed By Remote Users
http://www.securitytracker.com/id/1029971
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2653

+ SA57540 Linux Kernel "inet_frag_intern()" Race Condition Vulnerability
http://secunia.com/advisories/57540/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0100

+ Linux Kernel 3.13.6 ath_tx_aggr_sleep() Local DoS
http://cxsecurity.com/issue/WLB-2014030252

+ nginx 1.4.6/1.5.11 Heap-based buffer overflow in the SPDY
http://cxsecurity.com/issue/WLB-2014030250
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0133

「セクシー動画」アプリに注意、アカウント情報を盗まれる
http://itpro.nikkeibp.co.jp/article/NEWS/20140328/546925/?ST=security

2013年の不正アクセス件数は過去最多、不正送金が1000件超に
http://itpro.nikkeibp.co.jp/article/NEWS/20140328/546848/?ST=security

米政府、既存の通話記録収集プログラムの終了を正式発表
http://itpro.nikkeibp.co.jp/article/NEWS/20140328/546822/?ST=security

JVNVU#90746870 ManageEngine OpStor に複数の脆弱性
http://jvn.jp/vu/JVNVU90746870/index.html

LOCAL: AudioCoder 0.8.29 - Memory Corruption (SEH)
http://www.exploit-db.com/exploits/32585