12日 月曜日、先勝

+ Cisco ACE30 Application Control Engine Module and Cisco ACE 4710 Application Control Engine Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160908-ace
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6399

+ Linux kernel 3.14.79 released
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.79

+ SA72441 Hitachi Multiple Cosminexus / uCosminexus Products Java Information Disclosure Vulnerability
https://secunia.com/advisories/72441/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0887

+ SA72444 Hitachi Multiple Products Multiple Vulnerabilities
https://secunia.com/advisories/72444/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177

+ HS16-024 Vulnerability in Cosminexus
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS16-024/index.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0887

+ HS16-023 Multiple Vulnerabilities in Hitachi Web Server
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS16-023/index.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177

+ HS16-024 Cosminexusにおける問題
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS16-024/index.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0887

+ HS16-023 Hitachi Web Serverにおける複数の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS16-023/index.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177

+ Wireshark QNX6 QNET, H.225, Catapult DCT2000, UMTS FP, and IPMI Trace Dissector Bugs Lets Remote Users Cause the Target Service to Crash
http://www.securitytracker.com/id/1036760
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7175
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7176
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7177
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7178
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7179
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7180

+ Vodafone Mobile Wifi Reset Admin Password
https://cxsecurity.com/issue/WLB-2016090070

+ Google Docs XSPA / SSRF
https://cxsecurity.com/issue/WLB-2016090068

+ Apple iCloud Desktop Client 5.2.1.0 Credential Disclosure
https://cxsecurity.com/issue/WLB-2016090066

+ Dropbox Desktop Client 9.4.49 Credential Disclosure
https://cxsecurity.com/issue/WLB-2016090064

+ Wireshark Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/92889

UPDATE: JVNVU#94993132 Open Dental がインストール時にデフォルトの認証情報を設定する問題
http://jvn.jp/vu/JVNVU94993132/