9日 金曜日、仏滅

+ Incorrect reuse of client certificates
https://curl.haxx.se/docs/adv_20160907.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7141

+ Wireshark 2.0.6 released
https://www.wireshark.org/docs/relnotes/wireshark-2.0.6.html

+ UPDATE: Row Hammer Privilege Escalation Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150309-rowhammer

+ Cisco ACE30 Application Control Engine Module and Cisco ACE 4710 Application Control Engine Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160908-ace
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6399

+ curl 7.50.2 released
https://curl.haxx.se/changes.html#7_50_2

+ PostgreSQL JDBC Driver 9.4.1210 released!
https://www.postgresql.org/about/news/1694/
https://jdbc.postgresql.org/documentation/changelog.html#version_9.4.1210

+ SA72440 Wireshark Multiple Denial of Service Vulnerabilities
https://secunia.com/advisories/72440/

+ SA72437 Zimbra Collaboration Server Multiple Vulnerabilities
https://secunia.com/advisories/72437/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4852
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3401
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3402
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3403
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3404
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3405
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3406
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3407
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3408
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3409
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3410
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3411
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3412
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3413
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3414
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3415
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3999
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4019
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5721

+ WinSCP DLL Hijacking Exploit (shcore.dll)
https://cxsecurity.com/issue/WLB-2016090050

ブロックチェーンは本当に世界を変えるのか
国際的な存在感が希薄すぎる日本のブロックチェーン業界
http://itpro.nikkeibp.co.jp/atcl/column/16/062400138/090100006/?ST=security?itp_list_theme

UPDATE: JVNVU#94423160 Dentsply Sirona CDR DICOM に認証情報がハードコードされている問題
http://jvn.jp/vu/JVNVU94423160/index.html

UPDATE: JVNVU#94993132 Open Dental がインストール時にデフォルトの認証情報を設定する問題
http://jvn.jp/vu/JVNVU94993132/index.html

JVNVU#97260486 Fortinet FortiWAN ロードバランサアプライアンスに複数の脆弱性
http://jvn.jp/vu/JVNVU97260486/index.html

JVNVU#91018225 DEXIS Imaging Suite 10 に認証情報がハードコードされている問題
http://jvn.jp/vu/JVNVU91018225/index.html