7日 木曜日、大安

+ Cisco IoT Field Network Director Memory Exhaustion Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-fnd
CVE-2017-6780

+ Cisco Unified Communications Manager Trust Verification Service Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-ucm
CVE-2017-6791

+ Cisco Yes Set-Top Box Denial of Service vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-stb
CVE-2017-6631

+ Cisco SocialMiner XML External Entity Injection Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-socmin
CVE-2017-12216

+ Cisco IOS and Cisco IOS XE Software IPv6 SNMP Message Handling Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-snmp
CVE-2017-12211

+ Cisco Prime LAN Management Solution Session Fixation Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-prime-lms
CVE-2017-12225

+ Cisco Prime Collaboration Provisioning Tool Inventory Management Feature Information Disclosure Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-pcpt1
CVE-2017-6793

+ Cisco Prime Collaboration Provisioning Tool System File Overwrite Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-pcpt
CVE-2017-6792

+ Cisco IR800 Integrated Services Router ROM Monitor Input Validation Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-isr
CVE-2017-12223

+ Cisco IOS and Cisco IOS XE Software UDP Packet Processing Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-ios-udp
CVE-2017-6627

+ Cisco Firepower Management Center Cross-Site Scripting Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-firepower-2
CVE-2017-12221

+ Cisco Firepower Management Center Cross-Site Scripting Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-firepower-1
CVE-2017-12220

+ Cisco Email Security Appliance Malformed EML Attachment Bypass Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-esa
CVE-2017-12218

+ Cisco Unified Intelligence Center Cross-Site Scripting Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cuic
CVE-2017-6789

+ Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cuc
CVE-2017-12212

+ Cisco Meeting Server Guest Hyperlink Information Disclosure Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cms
CVE-2017-12224

+ Cisco Emergency Responder Blind SQL Injection Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cer
CVE-2017-12227

+ Cisco Catalyst 4000 Series Switches Dynamic ACL Bypass Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cat
CVE-2017-12213

+ Cisco IOS XE Software for Cisco ASR 920 Series Routers Arbitrary File Overwrite Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-2
CVE-2017-6795

+ Cisco IOS XE Software for Cisco ASR 920 Series Routers Arbitrary Command Execution Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-1
CVE-2017-6796

+ Cisco ASR 5500 System Architecture Evolution Gateway GPRS Tunneling Protocol Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr
CVE-2017-12217

+ VU#112992 Apache Struts 2 framework REST plugin insecurely deserializes untrusted XML data
https://www.kb.cert.org/vuls/id/112992
CVE-2017-9805

+ JVNVU#92761484 Apache Struts2 に任意のコードが実行可能な脆弱性 (S2-052)
http://jvn.jp/vu/JVNVU92761484/
CVE-2017-9805

+ Apache Struts 2.5.13 released
https://struts.apache.org/announce.html#a20170905

+ Apache Struts CVE-2017-9805 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/100609
CVE-2017-9805

+ Microsoft Edge Content Security Policy Security Bypass Vulnerability
http://www.securityfocus.com/bid/100637

編集長の眼
どうにも冴えない企業SDN、起爆剤はあるのか
http://itpro.nikkeibp.co.jp/atcl/watcher/16/110700001/090100045/?ST=security&itp_list_theme

米国発！ Appleニュースの読み解き方
新型iPhone発表間近、有機EL採用で高まる「北朝鮮リスク」
http://itpro.nikkeibp.co.jp/atcl/column/16/082600184/090600056/?ST=security&itp_list_theme

Windows 10の機能で攻撃を検知・回復、PwCが新サービス
http://itpro.nikkeibp.co.jp/atcl/news/17/090602187/?ST=security&itp_list_theme

Struts 2にまたも深刻な脆弱性、至急対応を
http://itpro.nikkeibp.co.jp/atcl/news/17/090602186/?ST=security&itp_list_theme

タニウムがEDR特化の新製品、ウイルス感染の検知から対応を迅速に
http://itpro.nikkeibp.co.jp/atcl/news/17/090602184/?ST=security&itp_list_theme

Tor Project boosts support for anonymous mobile browsing
http://www.linuxsecurity.com/content/view/175778/169/

Scammers Are Targeting Naive Bitcoin Owners With Terribly Simple Trick
http://www.linuxsecurity.com/content/view/175777/169/

CISOs' Salaries Expected to Edge Above $240,000 in 2018
http://www.linuxsecurity.com/content/view/175776/169/