2日 水曜日、赤口

+ Google Chrome 47.0.2526.73 released
http://googlechromereleases.blogspot.jp/2015/12/stable-channel-update.html

+ Cisco WebEx Meetings for Android Custom Permissions Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151201-wmc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6384

+ Cisco Unified Computing System Central Software Cross-Site Scripting Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151201-ucs
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6387

+ Cisco UCS Central Software Server-Side Request Forgery Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151201-ucs1
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6388

+ Samba 4.3.2 Available for Download
https://www.samba.org/samba/history/samba-4.3.2.html

+ Xen Heap Overflow in PC-Net II Emulator Lets Local Users on a Guest System Gain Elevated Privileges on the Host System
http://www.securitytracker.com/id/1034268
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7504

JVNVU#97647301 RSI Video Technologies の Videofied Frontel がセキュアでない独自プロトコルを使用する問題
http://jvn.jp/vu/JVNVU97647301/index.html

VU#630239 Epiphany Cardio Server version 3.3 is vulnerable to SQL and LDAP injection
http://www.kb.cert.org/vuls/id/630239