7日 金曜日、赤口

+ CESA-2017:1680 Important CentOS 7 bind Security Update
https://lwn.net/Alerts/727286/

+ CESA-2017:1679 Important CentOS 6 bind Security Update
https://lwn.net/Alerts/727287/

+ CESA-2017:1681 Important CentOS 7 qemu-kvm Security Update
https://lwn.net/Alerts/727288/

+ UPDATE: SNMP Remote Code Execution Vulnerabilities in Cisco IOS and IOS XE Software
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp

+ UPDATE: Cisco Prime Network Information Disclosure Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-cpn

+ SA77772 Google Nexus Multiple Vulnerabilities
https://secuniaresearch.flexerasoftware.com/advisories/77772/
CVE-2016-2109
CVE-2017-0540
CVE-2017-0671
CVE-2017-0672
CVE-2017-0673
CVE-2017-0674
CVE-2017-0675
CVE-2017-0676
CVE-2017-0677
CVE-2017-0678
CVE-2017-0679
CVE-2017-0680
CVE-2017-0681
CVE-2017-0682
CVE-2017-0683
CVE-2017-0685
CVE-2017-0686
CVE-2017-0688
CVE-2017-0689
CVE-2017-0690
CVE-2017-0691
CVE-2017-0692
CVE-2017-0693
CVE-2017-0694
CVE-2017-0695
CVE-2017-0696
CVE-2017-0697
CVE-2017-0698
CVE-2017-0699
CVE-2017-0700
CVE-2017-0701
CVE-2017-0702
CVE-2017-3544
CVE-2017-9417

+ PHP 7.1.7, 5.6.31 Released
http://www.php.net/ChangeLog-7.php#7.1.7
http://www.php.net/ChangeLog-5.php#5.6.31

+ PHP < 5.6.28 parse_url() bypass HOST to return fake host
https://cxsecurity.com/issue/WLB-2017070054

Ldap2pg v1.0
https://www.postgresql.org/about/news/1762/

JVNDB-2017-000164 WordPress 用プラグイン Shortcodes Ultimate におけるディレクトリトラバーサルの脆弱性
http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-000164.html

青木恵美の信州ITラプソディ
Facebookアカウントが乗っ取られた！ 「コンビニでカード買ってきて」からの顛末
http://itpro.nikkeibp.co.jp/atcl/column/16/042700098/070600033/?ST=security&itp_list_theme

会員CSIRTは230超、多過ぎて「顔が見えない」弊害も――日本シーサート協議会の10年
http://itpro.nikkeibp.co.jp/atcl/news/17/070601859/?ST=security&itp_list_theme

Cloud computing security: This is where you'll be spending the money
http://www.linuxsecurity.com/content/view/172057/169/

How to Achieve an Optimal Security Posture
http://www.linuxsecurity.com/content/view/172056/169/

7日 木曜日、先負

+ Cisco AMP Threat Grid Unauthorized Clean IP Access Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-tg
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1443

+ Cisco Prime Infrastructure Administrative Web Interface HTML Injection Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-pi
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1442

+ UPDATE: Cisco Products IPv6 Neighbor Discovery Crafted Packet Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160525-ipv6

+ Cisco Video Communication Server and Expressway Trusted Certificate Authentication Bypass Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-vcs
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1444

+ JVNTA#99096686 Symantec および Norton 製品に複数の脆弱性
http://jvn.jp/ta/JVNTA99096686/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2207
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2208
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2209
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2210
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2211
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3644
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3645
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3646

+ JVNVU#97485903 Apache HTTPD の HTTP/2 通信における X.509 クライアント証明書の認証処理の問題
http://jvn.jp/vu/JVNVU97485903/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4979

+ JVNVU#95848898 Acer Portal app for Android における SSL サーバ証明書の検証不備の脆弱性
http://jvn.jp/vu/JVNVU95848898/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5648

+ Linux 4.6 Double-Fetch Race Condition / Buffer Overflow
https://cxsecurity.com/issue/WLB-2016070029

+ Linux 4.6 auditsc.c Double-Fetch
https://cxsecurity.com/issue/WLB-2016070028
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6136

+ Apache 2.4.20 X509 Authentication Bypass
https://cxsecurity.com/issue/WLB-2016070024

UPDATE: JVN#89379547 Apache Commons FileUpload におけるサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/jp/JVN89379547/

「クラウドでも使い慣れた環境を」、日本オラクル社長兼CEO杉原氏
http://itpro.nikkeibp.co.jp/atcl/news/16/070602005/?ST=security

イスラエル政府、テロ行為の責任の一端はFacebookにあると強く非難
http://itpro.nikkeibp.co.jp/atcl/news/16/070501979/?ST=security

7日 月曜日、仏滅

+ HPSBMU03064 rev.1 - HP Universal CMDB, Remote Information Disclosure, Execution of Code
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04357076-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2615
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2616
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2617

+ HPSBMU03059 rev.1 - HP SiteScope, Remote Authentication Bypass
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04355129-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2614

+ UPDATE: HPSBMU03051 rev.2 - HP System Management Homepage running OpenSSL on Linux and Windows, Remote Denial of Service (DoS), Code Execution, Unauthorized Access, Disclosure of Information
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04345210-2%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ Linux kernel 3.12.24 released
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.24

+ FreeBSD-9.3 RC3 released
http://www.freebsd.org/news/newsflash.html#event20140706:01

+ Linux Ptrace Bug Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1030526
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4699

+ PHP Symlink Flaw in 'configure' Script Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1030523
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3981

+ PHP 5.4.29 phpinfo() SSL Private Keys Leak PoC
http://cxsecurity.com/issue/WLB-2014070022

+ PHP 5.4.29 phpinfo() Type Confusion Information Leak Vulnerability
http://cxsecurity.com/issue/WLB-2014070020

JVNVU#91860797 Autodesk VRED に任意のコードを実行される脆弱性
http://jvn.jp/vu/JVNVU91860797%20/

JVNVU#91918249 Netgear GS108PE Prosafe Plus Switch に認証情報がハードコードされている問題
http://jvn.jp/vu/JVNVU91918249/

VU#143740 Netgear GS108PE Prosafe Plus Switch contains hard-coded login credentials
http://www.kb.cert.org/vuls/id/143740

VU#402020 Autodesk VRED contains an unauthenticated remote code execution vulnerability
http://www.kb.cert.org/vuls/id/402020

韓国によるLINE盗聴疑惑、日本のユーザーはどう対処すべきか
http://itpro.nikkeibp.co.jp/article/COLUMN/20140627/567263/?ST=security

世界のセキュリティ・ラボから日経コミュニケーション
テンプレートドキュメントを使った標的型攻撃
http://itpro.nikkeibp.co.jp/article/COLUMN/20140703/568728/?ST=security

Facebookの感情伝染実験、米プライバシー団体がFTCに苦情申請
http://itpro.nikkeibp.co.jp/article/NEWS/20140704/569029/?ST=security

「スカパー！」システム障害が一部復旧、工事関連やWeb手続きは停止継続
http://itpro.nikkeibp.co.jp/article/NEWS/20140704/569026/?ST=security

あなたの企業も既に侵入されているかもしれない
http://itpro.nikkeibp.co.jp/article/COLUMN/20140703/568863/?ST=security

7日 水曜日、赤口

定期サーバメンテナンスのお知らせ（2010年7月23日）
http://www.trendmicro.co.jp/support/news.asp?id=1442

ウイルスバスター コーポレートエディション 10.0 Service Pack 1 リパック版および 10.0 Service Pack1 Patch 1 公開のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1440

JPCERT/CC WEEKLY REPORT 2010-07-07
http://www.jpcert.or.jp/wr/2010/wr102501.html

JVNVU#643615 libpng に脆弱性
http://jvn.jp/cert/JVNVU643615/index.html

VLC Media Player Buffer Overflow in Processing ftp:// URLs May Let Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Jul/1024172.html

Blackberry OS Unspecified Hotspot Browser Flaw Lets Remote Users Deny Service in Certain Cases
http://securitytracker.com/alerts/2010/Jul/1024169.html

HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow (SEH)
http://www.exploit-db.com/exploits/14256/

HP OpenView Network Node Manager CVE-2010-1964 Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/40873

Firefox 4 Beta 1 available for download
http://developer.mozilla.org/devnews/index.php/2010/07/06/firefox-4-beta-1-available-for-download/
http://www.mozilla.com/en-US/firefox/4.0b1/releasenotes/

SUN ALERT WEEKLY SUMMARY REPORT
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021776.1-1

Ubuntu Security Notice : Thunderbird vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33045

Independent Researcher : VLC Player M3U file ftp:// URI Handler Remote Stack Buffer Overflow
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33053

Secunia : Joomla BookLibrary From Same Author Module "id" SQL Injection
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33051

Debian : New pcsc-lite packages fix regression
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33047

MustLive : File Download and DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33050

TEHTRI-Security : Security Advisories from TEHTRI-Security at HITB Europe
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33049

DcLabs : IrcDelphi Vulnerability Report
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33052

Debian : New mahara packages fix several vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33046

「YouTube」にスクリプトを埋め込める脆弱性、現在では修正済み
アクセスするだけで偽メッセージが表示、悪質サイトへの誘導も
http://itpro.nikkeibp.co.jp/article/NEWS/20100707/350016/?ST=security

pam_captcha username harvest vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-07/msg00035.html

[USN-943-1] Thunderbird vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-07/msg00034.html

Xlight FTPd Multiple Directory Traversal in SFTP
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-07/msg00033.html

VLC Player M3U file ftp:// URI Handler Remote Stack Buffer Overflow
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-07/msg00028.html

NTSOFT BBS E-Market Professional = XSS / Remote Execution Code
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-07/msg00029.html

JVNDB-2010-001628 Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001628.html

JVNDB-2010-001627 Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001627.html

JVNDB-2010-001626 Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001626.html

JVNDB-2010-001625 Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001625.html

JVNDB-2010-001624 Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001624.html

JVNDB-2010-001623 Adobe Flash Player および Adobe AIR におけるヒープベースのバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001623.html

JVNDB-2010-001622 Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001622.html

JVNDB-2010-001621 Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001621.html

JVNDB-2010-001620 Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001620.html

JVNDB-2010-001619 Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001619.html

JVNDB-2010-001618 Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001618.html

JVNDB-2010-001617 Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001617.html

JVNDB-2010-001616 Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001616.html

JVNDB-2010-001615 Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001615.html

JVNDB-2008-002431 Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002431.html

JVNDB-2010-001522 MySQL の DROP TABLE コマンドにおけるシンボリックリンク攻撃の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001522.html

JVNDB-2010-001514 MySQL におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001514.html

JVNDB-2010-001512 MySQL におけるディレクトリトラバーサルの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001512.html

JVNDB-2010-001454 Linux 上で稼働する IBM DB2 におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001454.html

JVNDB-2009-002470 Linux kernel の NFSv4 クライアントの nfs4_proc_lock 関数におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002470.html

JVNDB-2009-002207 SquirrelMail におけるクロスサイトリクエストフォージェリの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002207.html

JVNDB-2009-001555 SquirrelMail におけるユーザインターフェースを偽装される脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001555.html

JVNDB-2009-001554 SquirrelMail におけるセッション固定の脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001554.html

JVNDB-2009-001553 SquirrelMail における任意のコマンドを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001553.html

JVNDB-2009-001552 SquirrelMail におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001552.html

Bogus Support Organizations use Live Operators to Install Malware
http://isc.sans.edu/diary.html?storyid=9139

SocialABC NetworX Cross-Site Scripting and File Upload Vulnerabilities
http://secunia.com/advisories/40484/

nuBuilder Cross-Site Scripting and File Inclusion
http://secunia.com/advisories/40483/

RightInPoint Lyrics Script "artist_id" SQL Injection Vulnerability
http://secunia.com/advisories/40438/

SIDA University System "TBox_Email" SQL Injection Vulnerability
http://secunia.com/advisories/40417/

Novell ZENworks Linux Management Tomcat Multiple Vulnerabilities
http://secunia.com/advisories/40425/

ScriptsFeed Scripts Directory Software SQL Injection Vulnerabilities
http://secunia.com/advisories/40463/

ScriptsFeed Realtor Classifieds System "c" SQL Injection Vulnerability
http://secunia.com/advisories/40461/

EDItran Communications Platform Packet Handling Vulnerability
http://secunia.com/advisories/40395/

ScriptsFeed Auto Dealer Software "id" SQL Injection Vulnerability
http://secunia.com/advisories/40391/

Orbis CMS "s" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/40474/

ScriptsFeed Home Classifieds Software SQL Injection Vulnerabilities
http://secunia.com/advisories/40458/

ALPHA Ethernet Adapter II Web-Manager Authentication Bypass
http://secunia.com/advisories/40369/

ScriptsFeed Events Directory Software SQL Injection Vulnerabilities
http://secunia.com/advisories/40457/

ScriptsFeed General Classifieds Ads Software SQL Injection Vulnerabilities
http://secunia.com/advisories/40453/

Lanius CMS Cross-Site Request Forgery Vulnerability
http://secunia.com/advisories/40482/

Drupal Views Module Autocomplete User Information Disclosure Weakness
http://secunia.com/advisories/40444/

IRC Services MemoServ Denial of Service and Information Disclosure
http://secunia.com/advisories/40505/

ScriptsFeed Auto Classifieds Software "id" SQL Injection Vulnerabilities
http://secunia.com/advisories/40451/

Joomla Canteen Component Multiple Vulnerabilities
http://secunia.com/advisories/40503/

Fedora update for bugzilla
http://secunia.com/advisories/40464/

Fedora update for gcc
http://secunia.com/advisories/40468/

Google Chrome Memory Corruption Bugs May Let Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Jul/1024170.html

nuBuilder Local File Inclusion and Cross Site Scripting Vulnerabilities
http://www.vupen.com/english/advisories/2010/1726

NetworX Arbitrary File Upload and Cross Site Scripting Vulnerabilities
http://www.vupen.com/english/advisories/2010/1725

odCMS "design" Parameter Handling Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2010/1724

News Office "n-cat" Parameter Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2010/1723

ATutor Admin Interface Cross Site Request Forgery Vulnerability
http://www.vupen.com/english/advisories/2010/1722

Log1 CMS Admin Interface Cross Site Request Forgery Vulnerability
http://www.vupen.com/english/advisories/2010/1721

Lanius CMS Admin Interface Cross Site Request Forgery Vulnerability
http://www.vupen.com/english/advisories/2010/1720

MooreAdvice Multiple Parameter Remote SQL Injection Vulnerabilities
http://www.vupen.com/english/advisories/2010/1719

Giga Nepal CMS "id" and "pgid" Remote SQL Injection Vulnerabilities
http://www.vupen.com/english/advisories/2010/1718

eSmart-vision "id" Parameter Remote SQL Injection Vulnerability
http://www.vupen.com/english/advisories/2010/1717

Asidus WebWizard "page_id" and "site_id" SQL Injection Vulnerabilities
http://www.vupen.com/english/advisories/2010/1716

Samin CMS "pg" Parameter Remote Directory Traversal Vulnerability
http://www.vupen.com/english/advisories/2010/1715

BrotherScripts Recipe Website Remote SQL Injection Vulnerabilities
http://www.vupen.com/english/advisories/2010/1714

BrotherScripts Business Directory Remote SQL Injection Vulnerabilities
http://www.vupen.com/english/advisories/2010/1713

BrotherScripts Auto Classifieds "id" Remote SQL Injection Vulnerability
http://www.vupen.com/english/advisories/2010/1712

DBHcms SQL Injection and Cross Site Scripting Vulnerabilities
http://www.vupen.com/english/advisories/2010/1711

CompactCMS "keywords" Parameter Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2010/1710

CruxPA "txtusername" and "todo" Cross Site Scripting Vulnerabilities
http://www.vupen.com/english/advisories/2010/1709

CruxCMS "txtusername" Parameter Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2010/1708

BookLibrary From Same Author for Joomla SQL Injection Vulnerability
http://www.vupen.com/english/advisories/2010/1707

Studiomenozzi CMS Multiple Remote SQL Injection Vulnerabilities
http://www.vupen.com/english/advisories/2010/1706

Novell Identity Manager Multiple Cross Site Scripting Vulnerabilities
http://www.vupen.com/english/advisories/2010/1705

Samba 3.3.12 Memory Corruption Vulnerability
http://www.securiteam.com/unixfocus/5DQ2V0K26E.html

Novell ZENworks Configuration Management Preboot Service Code Execution Vulnerability
http://www.securiteam.com/windowsntfocus/5UQ320K26O.html

HP OpenView NNM ovwebsnmpsrv.exe Command Line Argument Code Execution Vulnerability
http://www.securiteam.com/windowsntfocus/5FQ2W0K27W.html

Microsoft Office Excel SxView Memory Corruption Vulnerability
http://www.securiteam.com/windowsntfocus/5SP2V1F20E.html

Microsoft Office Excel RTD Heap Corruption Vulnerability
http://www.securiteam.com/windowsntfocus/5UP2X1F20S.html

Microsoft Office Excel OBJ Stack Overflow Vulnerability
http://www.securiteam.com/windowsntfocus/5HP301F20S.html

Apple Safari WebKit HTML Button Use-after-free Vulnerability
http://www.securiteam.com/securitynews/5TP2W1F20G.html

HP OpenView Network Node Manager Execution of Arbitrary Code Vulnerabilities
http://www.securiteam.com/securitynews/5VP2Y1F20G.html

Hewlett-Packard OpenView NNM ovwebsnmpsrv.exe Bad Option Code Execution Vulnerability
http://www.securiteam.com/windowsntfocus/5VQ320K27K.html

CactuShop User Invoices Persistent XSS Vulnerability
http://www.securiteam.com/windowsntfocus/5HQ2Y0K27Q.html

Apple Webkit Option Element ContentEditable Remote Code Execution Vulnerability
http://www.securiteam.com/securitynews/5FQ2X0K26K.html

Adobe Flash Player AVM newFrameState Integer Overfow Code Execution Vulnerability
http://www.securiteam.com/securitynews/5GQ2Y0K26G.html

Apple Webkit ConditionEventListener Code Execution Vulnerability
http://www.securiteam.com/securitynews/5TQ310K26Q.html

Adobe Flash Player Multiple Tag JPEG Parsing Code Execution Vulnerability
http://www.securiteam.com/securitynews/5VQ330K26E.html

Adobe Flash Player LocalConnection Memory Corruption Code Execution Vulnerability
http://www.securiteam.com/securitynews/5WQ340K26A.html

Adobe Flash Player AVM2 getouterscope Opcode Code Execution Vulnerability
http://www.securiteam.com/securitynews/5SQ300K26C.html

NextGEN Gallery Wordpress Plugin XSS Vulnerability
http://www.securiteam.com/securitynews/5EQ2V0K27U.html

Adobe Shockwave Player Heap Memory Indexing Vulnerability
http://www.securiteam.com/securitynews/5GQ2X0K27Q.html

Apple Webkit SVG RadialGradiant Run-in Code Execution Vulnerability
http://www.securiteam.com/securitynews/5DQ2U0K27O.html

HP OpenView Network Node Manager (OV NNM) Execution of Arbitrary Code Vulnerabilities
http://www.securiteam.com/securitynews/5TQ300K27O.html

Apple Webkit Attribute Child Removal Remote Code Execution Vulnerability
http://www.securiteam.com/securitynews/5UQ310K27M.html

Adobe Flash Player Out of Bounds Memory Indexing Vulnerability
http://www.securiteam.com/securitynews/5EQ2W0K26I.html

Mozilla Firefox XSLT Sort Code Execution Vulnerability
http://www.securiteam.com/securitynews/5WQ330K27K.html

EvoCam Web Server OSX ROP Remote Exploit (Snow Leopard)
http://www.exploit-db.com/exploits/14254/

minerCPP 0.4b Remote BOF+Format String Attack Exploit
http://www.exploit-db.com/exploits/14248/

Red Hat Client Tools 'loginAuth.pkl' Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/40492

Todd Miller Sudo 'secure path' Security Bypass Vulnerability
http://www.securityfocus.com/bid/40538

Oracle Java SE and Java for Business CVE-2010-0092 Remote Vulnerability
http://www.securityfocus.com/bid/39090

FastJar 'extract_jar()' Absolute Path Archive Extraction Directory Traversal Vulnerability
http://www.securityfocus.com/bid/41009

GNU Libtool 'libltdl' Library Search Path Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37128

FastJar 'extract_jar()' Archive Extraction Directory Traversal Vulnerability
http://www.securityfocus.com/bid/41006

Avahi 'avahi-core/socket.c' Zero Size Packet Denial Of Service Vulnerability
http://www.securityfocus.com/bid/41075

RETIRED: Joomla! Phoca Gallery Component 'Itemid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/41347

LibTIFF FAX3 Decoder Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/40823

RPM Package Update File Attribute Security Bypass Vulnerability
http://www.securityfocus.com/bid/40512

MediaWiki 'thumb.php' Security Bypass Vulnerability
http://www.securityfocus.com/bid/38617

MediaWiki 'CSS validation' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/38621

MediaWiki CSS Input Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/40423

RETIRED: JPodium Component for Joomla! 'Itemid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/41376

Multiple Java Runtime Implementations UTF-8 Input Validation Vulnerability
http://www.securityfocus.com/bid/30633

Apache Tomcat Cookie Quote Handling Remote Information Disclosure Vulnerability
http://www.securityfocus.com/bid/27706

Apache Tomcat JSP Example Web Applications Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/24476

Apache Tomcat Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/28481

Apache Tomcat 'RequestDispatcher' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/30494

Apache Tomcat 'HttpServletResponse.sendError()' Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/30496

Multiple Vendor Multiple HTTP Request Smuggling Vulnerabilities
http://www.securityfocus.com/bid/13873

Apache Tomcat SingleSignOn Remote Information Disclosure Vulnerability
http://www.securityfocus.com/bid/27365

Apache Tomcat Manager and Host Manager Upload Script Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/24475

Apache Tomcat SSL Anonymous Cipher Configuration Information Disclosure Vulnerability
http://www.securityfocus.com/bid/28482

Mozilla Firefox/Thunderbird/SeaMonkey XSLT Integer Overflow Vulnerability
http://www.securityfocus.com/bid/41082

Mozilla Firefox CVE-2010-1200 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/41090

Mozilla Firefox/Thunderbird/SeaMonkey DOM Nodes Integer Overflow Vulnerability
http://www.securityfocus.com/bid/41087

Mozilla Firefox CVE-2010-1202 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/41094

Mozilla Firefox 'jstracer.cpp' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/41099

Mozilla Firefox CVE-2010-1201 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/41093

Mozilla Firefox Cross Document DOM Node Movement Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/38952

Multiple BrotherScripts 'username' and 'password' SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/41371

Oracle Java SE and Java for Business CVE-2010-0091 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/39096

Oracle Java SE and Java for Business CVE-2010-0089 Remote Java Web Start Vulnerability
http://www.securityfocus.com/bid/39095

Oracle Java SE and Java for Business CVE-2010-0085 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/39094

Oracle Java SE and Java for Business CVE-2010-0084 Remote Vulnerability
http://www.securityfocus.com/bid/39093

Oracle Java SE and Java for Business CVE-2010-0095 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/39086

Oracle Java SE and Java for Business Sound Component MIDI Stream Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/39084

Oracle Java SE and Java for Business 'XNewPtr()' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/39083

Oracle Java SE and Java for Business CVE-2010-0848 Remote Java 2D Vulnerability
http://www.securityfocus.com/bid/39078

Oracle Java SE and Java for Business CVE-2010-0088 Remote Java Runtime Environme Vulnerability
http://www.securityfocus.com/bid/39081

Oracle Java SE and Java for Business 'MixerSequencer' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/39077

Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
http://www.securityfocus.com/bid/36935

cPanel Cross-Site Request Forgery Vulnerability
http://www.securityfocus.com/bid/41391

Oracle Java SE and Java for Business CVE-2010-0094 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/39075

Oracle Java SE and Java for Business CVE-2010-0849 Remote Java 2D Vulnerability
http://www.securityfocus.com/bid/39073

Oracle Java SE and Java for Business CVE-2010-0837 Remote Vulnerability
http://www.securityfocus.com/bid/39072

Oracle Java Runtime Environment 'JPEGImageEncoderImpl' Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/39062

Oracle Java SE and Java for Business JRE Trusted Method Chaining Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/39065

Oracle Java SE and Java for Business CVE-2010-0847 Remote Java 2D Vulnerability
http://www.securityfocus.com/bid/39071

Oracle Java SE and Java for Business CVE-2010-0839 Remote Sound Vulnerability
http://www.securityfocus.com/bid/39070

Oracle Java SE and Java for Business 'readMabCurveData()' Remote Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/39069

Oracle Java SE and Java for Business CVE-2010-0087 Remote Vulnerability
http://www.securityfocus.com/bid/39068

Oracle Java SE and Java for Business ImageIO 'JPEGImageReader' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/39067

Multiple BrotherScripts 'articledetails.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/41368

Microsoft Windows Kernel 'Win32k.sys' Window Creation Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/40569

UFO: Alien Invasion IRC Client Multiple Remote Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/41004

pam_captcha Username Enumeration Weakness
http://www.securityfocus.com/bid/41413

PSnews 'id' Parameter Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/41410

JPodium Component for Joomla! 'CID' SQL Injection Vulnerability
http://www.securityfocus.com/bid/41409

NeoRecruit Component for Joomla! 'Itemid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/41408

Jobs Pro Component for Joomla! 'search_jobs.html' SQL Injection Vulnerability
http://www.securityfocus.com/bid/41403

NTSOFT BBS E-Market Professional Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/41401

Joomla! AutarTimonial Component 'index.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/41400

Scriptsfeed Scripts Directory Software 'login.php' Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/41395

Lyrics V3 Engine 'artist_id' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/41394

Multi-Vendor Shopping Malls Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/41393

BrotherScripts Auto Classifieds Software 'info.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/41392

Sun Java System Web Server Admin Interface Denial of Service Vulnerability
http://www.securityfocus.com/bid/41389

i-Net Solution Matrimonial Script 'alert.php' Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/41387

BrotherScripts Auto Dealer Software 'info.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/41384

IBM BladeCenter Management Module Multiple Vulnerabilities
http://www.securityfocus.com/bid/41383

7日 火曜日、先勝

Apache Portable Runtime 1.3.6 and APR-Utility 1.3.8 Released
http://apr.apache.org/download.cgi

JVNDB-2009-001569: OpenSSL におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001569.html

JVNDB-2009-001568: Sun ONE/iPlanet Web Server における情報を盗まれる脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001568.html

JVNDB-2009-001567: GStreamer の gst_vorbis_tag_add_coverart 関数における整数オーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001567.html

JVNDB-2009-001566: libsoup の soup_base64_encode 関数における整数オーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001566.html

JVNDB-2008-002314: Wireshark の Q.931 解析部におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002314.html

JVNDB-2009-001274: 複数の Mozilla 製品の view-source: URI 実装における同一生成元ポリシーを回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001274.html

The latest snapshot for the stable Linux kernel tree is: 2.6.31-rc2-git1
http://git.kernel.org/?p=linux%2Fkernel%2Fgit%2Ftorvalds%2Flinux-2.6.git;a=summary

Microsoft Video ActiveX コントロール の脆弱性(MS 972890)について
http://www.ipa.go.jp/security/ciadr/vul/20090707-ms-activex.html

2009年Q2のマルウエア状況，新検出の7割がトロイの木馬
http://itpro.nikkeibp.co.jp/article/NEWS/20090707/333337/?ST=security

ColdFusionのエディタ機能に脆弱性，サイト攻撃が多発
http://itpro.nikkeibp.co.jp/article/NEWS/20090707/333314/?ST=security

Microsoft，ビデオ処理用ActiveXコントロールに遠隔コード実行のぜい弱性
http://itpro.nikkeibp.co.jp/article/NEWS/20090707/333313/?ST=security

JVNTA09-187A: Microsoft Video ActiveX コントロールにおけるバッファオーバーフローの脆弱性
http://jvn.jp/cert/JVNTA09-187A/index.html

US-CERT Technical Cyber Security Alert TA09-187A -- Microsoft Video ActiveX Control Vulnerability
http://www.derkeiler.com/Mailing-Lists/Cert/2009-07/msg00000.html

IE 0day exploit domains (constantly updated)
http://isc.sans.org/diary.html?storyid=6739

FCKeditor "CurrentFolder" Information Disclosure and Arbitrary File Upload
http://secunia.com/advisories/35712/

+ Microsoft Security Advisory (972890) Vulnerability in Microsoft Video ActiveX Control Could Allow Remote Code Execution
http://www.microsoft.com/technet/security/advisory/972890.mspx
http://www.microsoft.com/japan/technet/security/advisory/972890.mspx
http://isc.sans.org/diary.html?storyid=6733
http://www.kb.cert.org/vuls/id/180513
http://secunia.com/advisories/35683/
http://www.securitytracker.com/id?1022514
http://www.securityfocus.com/bid/35558

+ SA35705: Linux Kernel KVM "kvm_arch_vcpu_ioctl_set_sregs()" Denial of Service
http://secunia.com/advisories/35705/
http://www.vupen.com/english/advisories/2009/1790

+ IBM WebSphere MQ Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/35170

+ Microsoft Windows 'msvidctl.dll' ActiveX Control Unspecified Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/35585

Bkis-10-2009: Photo DVD Maker Professional Buffer Overflow Vulnerability
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29738

DSA 1827-1: New ipplan packages fix cross-site scripting
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29725

Nokia-SA-07/06/2009: Pwning Nokia phones (and other Symbian based smartphones)
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29737

TekRADIUS-SA-07/06/2009: Medium security hole in TekRADIUS
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29739

DSA 1826-1: New eggdrop packages fix several vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29724

GLSA 200907-03: APR Utility Library: Multiple vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29732

DSA 1825-1: New nagios2/nagios3 packages fix arbitrary code execution
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29723

HPSBPI02398 SSRT080166 rev.4: Certain HP LaserJet Printers and Digital Senders, Remote Unauthorized Access to Files
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29749

PHPMyAdmin-SA-07/03/2009: phpMyAdmin exploited in masses
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29735

Soulseek-SA-07/03/2009: Soulseek 157 NS http://www.criticalwatch.com/support/security-advisories.aspx?AID=29734

oCERT-2009-007: FCKeditor input sanitization errors
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29745

oCERT-2009-008: Dillo integer overflow
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29746

FreeBSD-SA-08:08.nmount: CVE-2008-3531
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29736

GLSA 200907-01: libwmf: User-assisted execution of arbitrary code
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29730

GLSA 200907-02: ModSecurity: Denial of Service
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29731

Joomla-SA-07/02/2009: Recent XSS in joomla 1.5.11
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29729

INTERNET SECURITY AUDITORS ALERT 2009-007: Joomla! http://www.criticalwatch.com/support/security-advisories.aspx?AID=29733

eAccelerator-SA-07/02/2009: eAccelerator encoder files backup Vulnerability
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29743

Multiple Browsers-SA-07/02/2009: Cross-Site Scripting vulnerabilities in Mozilla, Internet Explorer, Opera and Chrome
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29747

Axesstel-SA-07/02/2009: Multiple Flaws in Axesstel MV 410R
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29748

oCERT-2009-009: CamlImages integer overflows
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29744

RHSA-2009:1138-01: Important: openswan security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29726

RHSA-2009:1139-01: Moderate: pidgin security and bug fix update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29727

RHSA-2009:1140-02: Moderate: ruby security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29728

SUSE-SA:2009:036: IBM Java 6
http://www.criticalwatch.com/support/security-advisories.aspx?AID=29722

[USN-797-1] tiff vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2009-07/msg00034.html

[USN-796-1] Pidgin vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2009-07/msg00033.html

[SECURITY] [DSA 1827-1] New ipplan packages fix cross-site scripting
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2009-07/msg00029.html

[SECURITY] [DSA 1826-1] New eggdrop packages fix several vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2009-07/msg00024.html

[Bkis-10-2009] Photo DVD Maker Professional Buffer Overflow Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2009-07/msg00028.html

Pwning Nokia phones (and other Symbian based smartphones)
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2009-07/msg00032.html

Medium security hole in TekRADIUS
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2009-07/msg00031.html

High security hole in NullLogic Groupware
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2009-07/msg00030.html

Avax Vector ActiveX 1.3 (avPreview.ocx) Denial of Service Exploit
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2009-07/msg00027.html

[ GLSA 200907-03 ] APR Utility Library: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2009-07/msg00025.html

[security bulletin] HPSBPI02398 SSRT080166 rev.4 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2009-07/msg00023.html

[oCERT-2009-008] Dillo integer overflow
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2009-07/msg00022.html

Samba 3.4.0 Available for Download
http://news.samba.org/releases/3.4.0/

0-day in Microsoft DirectShow (msvidctl.dll) used in drive-by attacks
http://isc.sans.org/diary.html?storyid=6733

Vulnerability Note VU#180513: Microsoft Video ActiveX control stack buffer overflow
http://www.kb.cert.org/vuls/id/180513

Horde Passwd Module "backend" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/35720/

Fedora update for drupal
http://secunia.com/advisories/35717/

Fedora update for libtiff
http://secunia.com/advisories/35716/

Fedora update for phpMyAdmin
http://secunia.com/advisories/35715/

Debian update for ipplan
http://secunia.com/advisories/35714/

Gentoo update for apr-util
http://secunia.com/advisories/35710/

Photo DVD Maker Project File Processing Buffer Overflow
http://secunia.com/advisories/35709/

Fedora update for pidgin
http://secunia.com/advisories/35706/

Linux Kernel KVM "kvm_arch_vcpu_ioctl_set_sregs()" Denial of Service
http://secunia.com/advisories/35705/

Ruby on Rails HTTP Authentication Security Bypass
http://secunia.com/advisories/35702/

Sun Java System Web Server Java Server Pages Content Disclosure
http://secunia.com/advisories/35701/

ClanSphere Multiple SQL Injection Vulnerabilities
http://secunia.com/advisories/35694/

Debian update for nagios2 and nagios3
http://secunia.com/advisories/35692/

Debian update for eggdrop
http://secunia.com/advisories/35690/

SUSE Update for Multiple Packages
http://secunia.com/advisories/35685/

Microsoft DirectShow MPEG2TuneRequest ActiveX Control Buffer Overflow
http://secunia.com/advisories/35683/

KVM "kvm_arch_vcpu_ioctl_set_sregs()" Denial of Service
http://secunia.com/advisories/35675/

Sourcefire 3D Sensor and Defense Center "user.cgi" Security Bypass
http://secunia.com/advisories/35658/

Dillo PNG Processing Integer Overflow Vulnerability
http://secunia.com/advisories/35647/

CMME admin.php Cross-Site Scripting Vulnerability
http://secunia.com/advisories/35610/

Microsoft DirectShow Buffer Overflow in ActiveX Control Lets Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2009/Jul/1022514.html

FCKeditor input Validation Flaw Lets Remote Users Upload Arbitrary Files
http://securitytracker.com/alerts/2009/Jul/1022513.html

XScreenSaver Symlink Bug Lets Local Users View Arbitrary Files
http://securitytracker.com/alerts/2009/Jul/1022512.html

Sun Java System Web Server Discloses JSP Source Code to Remote Users
http://securitytracker.com/alerts/2009/Jul/1022511.html

HP-UX Running NFS/ONCplus DoS
http://www.securiteam.com/unixfocus/5XP020KRQI.html

Joomla! HTTP Header Multiple XSS Vulnerabilities
http://www.securiteam.com/unixfocus/5DP090KRPO.html

Sourcefire 3D Sensor and DC Privilege Escalation Vulnerability
http://www.securiteam.com/unixfocus/5AP060KRPS.html

HP-UX Running Apache Web Server Suite DoS and Code Execution
http://www.securiteam.com/unixfocus/5VP010KRPK.html

CamlImages Heap Overflow Arbitrary Code Execution
http://www.securiteam.com/securitynews/5ZP040KRQO.html

MIT Kerberos DoS and Arbitrary Code Vulnerability
http://www.securiteam.com/unixfocus/5VP000KRQI.html

phion airlock Web Application Firewall DOS and Command Execution
http://www.securiteam.com/unixfocus/5BP070KRPI.html

radware AppWall Web Application Firewall Source Code Disclosure
http://www.securiteam.com/securitynews/5CP080KRPY.html

Artofdefence Hyperguard Web Application Firewall DoS
http://www.securiteam.com/securitynews/5YP030KRQI.html

ClanSphere Multiple Unspecified Remote SQL Injection Vulnerabilities
http://www.vupen.com/english/advisories/2009/1794

Photo DVD Maker PDM File Handling Buffer Overflow Vulnerability
http://www.vupen.com/english/advisories/2009/1793

Dillo "Png_datainfo_callback()" PNG Integer Overflow Vulnerability
http://www.vupen.com/english/advisories/2009/1792

CMME "admin.php" Username Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2009/1791

Linux Kernel "kvm_arch_vcpu_ioctl_set_sregs()" Denial of Service Issue
http://www.vupen.com/english/advisories/2009/1790

KVM "kvm_arch_vcpu_ioctl_set_sregs()" Denial of Service Vulnerability
http://www.vupen.com/english/advisories/2009/1789

XScreenSaver ".xscreensaver" Handling File Disclosure Vulnerability
http://www.vupen.com/english/advisories/2009/1788

Microsoft Windows MSVidCtl Remote Buffer Overflow Vulnerability (0day)
http://www.vupen.com/english/advisories/2009/1787

Sun Java System Web Server JSP Source Code Disclosure Vulnerability
http://www.vupen.com/english/advisories/2009/1786

Sourcefire 3D Sensor and Defense Center Privilege Escalation Issue
http://www.vupen.com/english/advisories/2009/1785

Horde Passwd Application "backend" Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2009/1784

phpMyAdmin SQL Bookmark Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2009/1781

IBM WebSphere MQ Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/35170

IBM Rational ClearQuest CQWeb Server Cross Site Scripting and Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/35490

IBM Tivoli Identity Manager Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/35566

Microsoft Windows SeImpersonatePrivilege Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/28833

Microsoft Windows 'msvidctl.dll' ActiveX Control Unspecified Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/35585

Microsoft Windows 'MPEG2TuneRequest' ActiveX Control Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/35558

Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/32608

Apple QuickTime Clipping Region (CRGN) Atom Types Stack Exhaustion Vulnerability
http://www.securityfocus.com/bid/35375

IBM Tivoli Storage Manager Multiple Vulnerabilities
http://www.securityfocus.com/bid/34803

Apple iPhone SMS Application Denial of Service Vulnerability
http://www.securityfocus.com/bid/35569

Nullsoft Winamp 'gen_ff.dll' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/35052

Apple Safari 'reload()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/35555

Campsite Multiple Remote Input Validation Vulnerabilities
http://www.securityfocus.com/bid/35456

phpDatingClub 'search.php' Cross-Site Scripting and SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/35454

LibTIFF 'LZWDecodeCompat()' Remote Buffer Underflow Vulnerability
http://www.securityfocus.com/bid/35451

Pidgin OSCAR Protocol Web Message Denial of Service Vulnerability
http://www.securityfocus.com/bid/35530

FCKeditor 'CurrentFolder' Parameter Arbitrary File Upload Vulnerability
http://www.securityfocus.com/bid/31812

Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2009 -14 through -22 Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/34656

Google Chrome 'javascript:' URI in 'Refresh' Header Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/35572

Opera Web Browser 'javascript:' URI in 'Refresh' Header Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/35571

Microsoft Internet Explorer 'javascript:' URI in 'Refresh' Header Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/35570

RSMonials Joomla! Component Multiple HTML Injection Vulnerabilities
http://www.securityfocus.com/bid/34684

F5 Networks FirePass SSL VPN 'password' Field Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/35312

Apache Tomcat 'RequestDispatcher' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/35263

Apache Tomcat XML Parser Information Disclosure Vulnerability
http://www.securityfocus.com/bid/35416

Apache Tomcat Form Authentication Existing/Non-Existing Username Enumeration Weakness
http://www.securityfocus.com/bid/35196

XScreenSaver Symbolic Link Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/35574

IPplan 'grp' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/35037

Cisco VPN 3000 Concentrator FTP Arbitrary File Access Vulnerability
http://www.securityfocus.com/bid/19680

Eggdrop 'ctcpbuf' Remote Denial Of Service Vulnerability
http://www.securityfocus.com/bid/34985

Apache APR-util 'apr_brigade_vprintf' Off By One Vulnerability
http://www.securityfocus.com/bid/35251

Apache APR-util 'apr_strmatch_precompile()' Integer Underflow Vulnerability
http://www.securityfocus.com/bid/35221

Apache APR-util 'xml/apr_xml.c' Denial of Service Vulnerability
http://www.securityfocus.com/bid/35253

Avax Vector 'avPreview.ocx' ActiveX Control Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/35583

Ruby on Rails 'http_authentication.rb' Nil Credentials Authentication Bypass Vulnerability
http://www.securityfocus.com/bid/35579

CMME 'admin.php' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/35578

Sun Java System Web Server '.jsp' File Information Disclosure Vulnerability
http://www.securityfocus.com/bid/35577