18日 水曜日、友引

+ Mozilla Firefox 109.0 released

https://www.mozilla.org/en-US/firefox/109.0/releasenotes/

+ Mozilla Foundation Security Advisory 2023-01 Security Vulnerabilities fixed in Firefox 109

https://www.mozilla.org/en-US/security/advisories/mfsa2023-01/

CVE-2023-23597

CVE-2023-23598

CVE-2023-23599

CVE-2023-23600

CVE-2023-23601

CVE-2023-23602

CVE-2023-23603

CVE-2023-23604

CVE-2023-23605

CVE-2023-23606

+ Oracle Critical Patch Update Advisory - January 2023

https://www.oracle.com/security-alerts/cpujan2023.html

+ Apache HTTP Server 2.4.55 released

https://downloads.apache.org/httpd/Announcement2.4.html

+ VU#572615 Vulnerabilities in TP-Link routers, WR710N-V1-151022 and Archer C5 V2

https://www.kb.cert.org/vuls/id/572615

CVE-2022-4498

CVE-2022-4499

+ VU#986018 New Netcomm router models NF20MESH, NF20, and NL1902 vulnerabilities

https://www.kb.cert.org/vuls/id/986018

CVE-2022-4873

CVE-2022-4874

+ Apache HTTP Serverの脆弱性情報(Moderate: CVE-2006-20001, CVE-2022-36760, CVE-2022-37436)

https://security.sios.jp/vulnerability/apache-security-vulnerability-20230118/

CVE-2006-20001

CVE-2022-36760

CVE-2022-37436

JVNVU#99673580 三菱電機製MELSECシリーズのWEBサーバ機能における認証回避の脆弱性

http://jvn.jp/vu/JVNVU99673580/index.html

JVN#31073333 WordPress 用プラグイン Welcart e-Commerce におけるディレクトリトラバーサルの脆弱性

http://jvn.jp/jp/JVN31073333/index.html

ニュース解説

鴻池運輸がセキュリティー対策を強化、EDR・SWG・IDP・サイバー衛生で防御

https://xtech.nikkei.com/atcl/nxt/column/18/00001/07589/?ST=nxt_thmit_security