4日 水曜日、友引

+ Google Chrome 41.0.2272.76 released
http://googlechromereleases.blogspot.jp/2015/03/stable-channel-update.html

+ UPDATE: GNU glibc gethostbyname Function Buffer Overflow Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghost

+ UPDATE: Multiple Vulnerabilities in ntpd Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141222-ntpd

+ HPSBST03274 rev.1 - HP XP P9000 Command View Advanced Edition Software Online Help for Windows and Linux, Remote Cross-site Scripting (XSS)
https://h20566.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04582371&docLocale=ja_JP
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7896

+ Java SE Development Kit 8, Update 40 released
http://www.oracle.com/technetwork/java/javase/8u40-relnotes-2389089.html

+ PuTTY 0.64 released
http://www.chiark.greenend.org.uk/~sgtatham/putty/

+ Symantec Web Gateway 5 restore.php Command Injection
http://cxsecurity.com/issue/WLB-2015030016
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7285

+ SA63204 Symantec NetBackup OpsCenter Script Insertion Vulnerability
http://secunia.com/advisories/63204/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1483

JVNDB-2015-000030 WordPress 用プラグイン Google Captcha (reCAPTCHA) by BestWebSoft における CAPTCHA 保護メカニズムを回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000030.html

JVNDB-2015-000029 WordPress 用プラグイン Captcha における CAPTCHA 保護メカニズムを回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000029.html

3割以上が「業務メールの誤送信」を経験、そのうち9割近くは“累犯”
http://itpro.nikkeibp.co.jp/atcl/news/15/030300773/?ST=security

JVN#55063777 WordPress 用プラグイン Google Captcha (reCAPTCHA) by BestWebSoft における CAPTCHA 保護メカニズムを回避される脆弱性
http://jvn.jp/jp/JVN55063777/

JVN#93727681 WordPress 用プラグイン Captcha における CAPTCHA 保護メカニズムを回避される脆弱性
http://jvn.jp/jp/JVN93727681/

VU#302668 ShareLaTeX vulnerable to remote command execution and information disclosure
http://www.kb.cert.org/vuls/id/302668