9日 火曜日、友引

+ MantisBT 2.25.0 Released

https://mantisbt.org/blog/archives/mantisbt/688

+ RHSA-2021:0744 Important: nodejs:14 security and bug fix update

https://access.redhat.com/errata/RHSA-2021:0744

CVE-2021-22883

CVE-2021-22884

+ About the security content of Safari 14.0.3

https://support.apple.com/ja-jp/HT212223

CVE-2021-1844

+ About the security content of macOS Big Sur 11.2.3

https://support.apple.com/ja-jp/HT212220

CVE-2021-1844

+ About the security content of watchOS 7.3.2

https://support.apple.com/ja-jp/HT212222

CVE-2021-1844

+ About the security content of iOS 14.4.1 and iPadOS 14.4.1

https://support.apple.com/ja-jp/HT212221

CVE-2021-1844

+ Zabbix 3.0.32 released

https://www.zabbix.com/rn/rn3.0.32

+ Linux Kernelの脆弱性(Important: CVE-2021-27364, CVE-2021-27365, Moderate: CVE-2021-27363)

https://security.sios.com/vulnerability/kernel-security-vulnerability-20210309.html

CVE-2021-27364

CVE-2021-27365

CVE-2021-27363

+ VMware vCenter Server File Upload / Remote Code Execution

https://cxsecurity.com/issue/WLB-2021030046

JVNVU#94889258 GROWI における複数の脆弱性

http://jvn.jp/vu/JVNVU94889258/index.html

Emotetは停止したはずなのに、なりすましメールの注意喚起が10件以上相次ぐ謎

https://xtech.nikkei.com/atcl/nxt/column/18/00598/010400104/?ST=nxt_thmit_security

SMBC信託銀行と日興証券で不正アクセス、セールスフォース製品設定不備で

https://xtech.nikkei.com/atcl/nxt/news/18/09827/?ST=nxt_thmit_security

JAL・ANAなどのマイレージ上級会員情報が漏洩、2航空連合で広範に被害か

https://xtech.nikkei.com/atcl/nxt/news/18/09823/?ST=nxt_thmit_security