11日 月曜日、先勝

+ UPDATE: Multiple Vulnerabilities in OpenSSL (March 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150320-openssl

+ HPSBGN03256 rev.1 - HP Network Node Manager i (NNMi) and Smart Plugins (iSPIs) for HP-UX, Linux, Solaris, and Windows running SSLv3, Remote Disclosure of Information
https://h20566.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04567918&docLocale=ja_JP
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566

+ HPSBGN03328 rev.1 - Network Virtualization for HP LoadRunner and Performance Center, Remote Information Disclosure
https://h20566.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04657310&docLocale=ja_JP
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2121

+ HPSBHF03331 rev.1 - HP Integrity Superdome X and HP ConvergedSystem 900 for SAP HANA, Remote Code Execution
https://h20566.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04674535&docLocale=ja_JP
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9295
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235

+ Linux kernel 3.2.69 released
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.69

+ SA64468 McAfee Firewall Enterprise FreeBSD IPv6 Neighbour Discovery Denial of Service Vulnerability
http://secunia.com/advisories/64468/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2923

+ SA64369 Apache Struts Exclude Patterns Vulnerabilities
http://secunia.com/advisories/64369/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1831

+ Oracle Business Intelligence Mobile HD 11.x Script Insertion
http://cxsecurity.com/issue/WLB-2015050056

JVNTA#99041988 標的型攻撃に使用されるリスクの高い脆弱性 Top 30
http://jvn.jp/ta/JVNTA99041988/

UPDATE: JVNVU#95993136 NTP daemon (ntpd) に複数の脆弱性
http://jvn.jp/vu/JVNVU95993136/

マイナンバーで遂に住基ネット接続、国に反旗を翻した東北の町の13年
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/050100262/?ST=security

名古屋大学の学生261人の成績情報がWebサーバーで公開状態に
http://itpro.nikkeibp.co.jp/atcl/news/15/050801531/?ST=security

VU#110532 Subrion CMS vulnerable to SQL injection by an authenticated user
http://www.kb.cert.org/vuls/id/110532