19日 木曜日、大安

+ Issues with attachments, including viewing previews, downloading and uploading

https://jira-service-management.status.atlassian.com/incidents/g9x89cndnw2g

https://confluence.status.atlassian.com/incidents/h80llrtdr0yy

+ Customers experiencing outage in Asia Paciffic region for Assets based experiences

https://jira-service-management.status.atlassian.com/incidents/p7709q3my81y

+ RHSA-2024:11345 Important: gstreamer1-plugins-base security update

https://access.redhat.com/errata/RHSA-2024:11345

CVE-2024-47538

CVE-2024-47607

CVE-2024-47615

+ Google Chrome 131.0.6778.204/.205 released

https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop_18.html

+ JVNVU#98102314 Apache Tomcatにおける複数の脆弱性

https://jvn.jp/vu/JVNVU98102314/index.html

CVE-2024-50379

CVE-2024-54677

+ Pythonの脆弱性(Important: CVE-2024-12254)

https://security.sios.jp/vulnerability/python-security-vulnerability-20241219/

CVE-2024-12254

+ elasticsearchの脆弱性(Moderate: CVE-2024-12539)

https://security.sios.jp/vulnerability/elasticsearch-security-vulnerability-20241219/

CVE-2024-12539

+ Linux Kernelの脆弱性(CVE-2024-53128, CVE-2024-53129, CVE-2024-53130, CVE-2024-53131, CVE-2024-53132, CVE-2024-53133, CVE-2024-53134, CVE-2024-53135, CVE-2024-53136, CVE-2024-53137, CVE-2024-53138, CVE-2024-53139, CVE-2024-53140, CVE-2024-53141, CVE-2024-53142, CVE-2024-53143, CVE-2024-53144)

https://security.sios.jp/vulnerability/kernel-security-vulnerability-20241219/

CVE-2024-53128

CVE-2024-53129

CVE-2024-53130

CVE-2024-53131

CVE-2024-53132

CVE-2024-53133

CVE-2024-53134

CVE-2024-53135

CVE-2024-53136

CVE-2024-53137

CVE-2024-53138

CVE-2024-53139

CVE-2024-53140

CVE-2024-53141

CVE-2024-53142

CVE-2024-53143

CVE-2024-53144

+ Strutsの脆弱性(Critical: CVE-2024-53677)

https://security.sios.jp/vulnerability/struts-vulnerability-20241211/

CVE-2024-53677

+ Apache Tomcat の脆弱性(Important: CVE-2024-50379, Low: CVE-2024-54677)

https://security.sios.jp/vulnerability/tomcat-security-vulnerability-20241218/

CVE-2024-50379

CVE-2024-54677

JVNVU#96102310 ThreatQuotient製ThreatQ Platformにおけるコマンドインジェクションの脆弱性

https://jvn.jp/vu/JVNVU96102310/index.html

JVNVU#98437686 Hitachi Energy製TropOS 1400/2400/6400シリーズにおける不適切な入力検証の脆弱性

https://jvn.jp/vu/JVNVU98437686/index.html

JVNVU#94528170 Rockwell Automation製PowerMonitor 1000における複数の脆弱性

https://jvn.jp/vu/JVNVU94528170/index.html

JVNVU#94868903 Schneider Electric製Modiconにおける不適切な入力確認の脆弱性

https://jvn.jp/vu/JVNVU94868903/index.html

JVNVU#98636658 BD製Diagnostic Solutions製品におけるデフォルト認証情報の使用の脆弱性

https://jvn.jp/vu/JVNVU98636658/index.html

JVN#46615026 アイ・オー・データ製ルーターUD-LT1およびUD-LT1/EXにおける複数の脆弱性

https://jvn.jp/jp/JVN46615026/index.html