UPDATE: MS10-070 - Important: Vulnerability in ASP.NET Could Allow Information Disclosure (2418042)
http://www.microsoft.com/technet/security/bulletin/MS10-070.mspx
UPDATE: MS10-079 - Important: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2293194)
http://www.microsoft.com/technet/security/bulletin/MS10-079.mspx
UPDATE: Microsoft Security Bulletin Summary for September 2010
http://www.microsoft.com/technet/security/bulletin/MS10-sep.mspx
Fedora 14 released
http://fedoraproject.org/ja/get-fedora
http://docs.fedoraproject.org/ja-JP/Fedora/14/html/Release_Notes/index.html
Postfix 2.8 Snapshot 20101103
http://mirror.postfix.jp/postfix-release/experimental/postfix-2.8-20101103.HISTORY
http://mirror.postfix.jp/postfix-release/experimental/postfix-2.8-20101103.RELEASE_NOTES
ServerProtect 5.8においてスパイウェアパターンファイルの配信ができない現象について
http://www.trendmicro.co.jp/support/news.asp?id=1480
定期サーバメンテナンスのお知らせ（2010年11月19日）
http://www.trendmicro.co.jp/support/news.asp?id=1486
Microsoft Security Advisory (2458511): Vulnerability in Internet Explorer Could Allow Remote Code Execution
http://www.microsoft.com/technet/security/advisory/2458511.mspx
マイクロソフト セキュリティ アドバイザリ (2458511): Internet Explorer の脆弱性により、リモートでコードが実行される
http://www.microsoft.com/japan/technet/security/advisory/2458511.mspx
コンピュータウイルス・不正アクセスの届出状況[10月分]について
http://www.ipa.go.jp/security/txt/2010/11outline.html
共通セキュリティ設定一覧CCE概説 (パスワード編)
http://jvndb.jvn.jp/apis/myjvn/cccheck/cce_password.html
JPCERT/CC WEEKLY REPORT 2010-11-04
http://www.jpcert.or.jp/wr/2010/wr104201.html
JVNVU#899748 Microsoft Internet Explorer における無効なフラグ参照に起因する脆弱性
http://jvn.jp/cert/JVNVU899748/index.html
JVN#01948274 一太郎シリーズにおける任意のコードが実行される脆弱性
http://jvn.jp/jp/JVN01948274/index.html
JVN#19173793 一太郎シリーズにおける任意のコードが実行される脆弱性
http://jvn.jp/jp/JVN19173793/index.html
JVNDB-2010-002144 PostgreSQL の PL/perl および PL/Tcl 実装における権限を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002144.html
JVNDB-2010-002143 FreeType の Standard Encoding Accented Character の呼び出しにおけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002143.html
JVNDB-2010-002141 FreeType の Mac_Read_POST_Resource 関数におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002141.html
JVNDB-2010-002139 FreeType の t42_parse_sfnts 関数における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002139.html
JVNDB-2010-002134 Linux kernel のネットワークキューイング機能の実装における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002134.html
JVNDB-2010-002118 64-bit プラットフォーム上で稼働している Linux kernel の compat_alloc_user_space 関数における権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002118.html
JVNDB-2010-001159 Apache HTTP Server の mod_isapi における脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001159.html
JVNDB-2009-002016 APR ライブラリおよび APR-util ライブラリにおける整数オーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002016.html
JVNDB-2008-001610 Apache の mod_proxy_ftp モジュールにおけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001610.html
JVNDB-2008-001453 Apache HTTP Server の ap_proxy_http_process_response() 関数におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001453.html
JVNDB-2010-002248 複数の Oracle 製品の CORBA コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002248.html
JVNDB-2010-002247 複数の Oracle 製品の 2D コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002247.html
JVNDB-2010-002246 複数の Oracle 製品の 2D コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002246.html
JVNDB-2010-002245 複数の Oracle 製品の 2D コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002245.html
JVNDB-2010-002244 複数の Oracle 製品の 2D コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002244.html
JVNDB-2010-002243 複数の Oracle 製品の 2D コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002243.html
JVNDB-2010-002242 複数の Oracle 製品の 2D コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002242.html
JVNDB-2010-002241 Oracle Solaris および OpenSolaris における USB の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002241.html
JVNDB-2010-002240 Oracle Solaris および OpenSolaris における Device Drivers の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002240.html
JVNDB-2010-002239 Oracle Solaris における Solaris Zones の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002239.html
JVNDB-2010-000053 一太郎シリーズにおける任意のコードが実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000053.html
JVNDB-2010-000052 一太郎シリーズにおける任意のコードが実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000052.html
+ RHSA-2010:0825-1: Moderate: mysql security update
http://rhn.redhat.com/errata/RHSA-2010-0825.html
+ RHSA-2010:0824-1: Moderate: mysql security update
http://rhn.redhat.com/errata/RHSA-2010-0824.html
+ Vulnerability in Internet Explorer Could Allow Remote Code Execution (CVE-2010-3962)
http://isc.sans.edu/diary.html?storyid=9874
http://www.kb.cert.org/vuls/id/899748
http://www.securitytracker.com/id?1024676
http://www.vupen.com/english/advisories/2010/2880
http://www.securityfocus.com/bid/44536
http://www.microsoft.com/japan/technet/security/advisory/2458511.mspx
+ SA42061: Linux Kernel Memory Leak Weaknesses
http://secunia.com/advisories/42061/
http://www.securityfocus.com/bid/44630
MySQL Enterprise Monitor 2.3 Is Now GA!
http://edelivery.oracle.com/
[ANNOUNCE] Hive 0.6.0 is released!
http://hive.apache.org/releases.html
APSA10-05: Security Advisory for Adobe Flash Player, Adobe Reader and Acrobat
http://www.adobe.com/support/security/advisories/apsa10-05.html
CESA-2010:0812 (thunderbird)
http://lwn.net/Alerts/412863/
CESA-2010:0812 (thunderbird)
http://lwn.net/Alerts/412864/
CESA-2010:0811 (cups)
http://lwn.net/Alerts/412865/
CESA-2010:0819 (pam)
http://lwn.net/Alerts/412866/
DHCP 4.2.0-P1 released
https://www.isc.org/software/dhcp/420-p1
http://ftp.isc.org/isc/dhcp/dhcp-4.2.0-P1-RELNOTES
DHCP 4.1.2 released
https://www.isc.org/software/dhcp/412
http://ftp.isc.org/isc/dhcp/dhcp-4.1.2-RELNOTES
DHCP 4.0.3 released
https://www.isc.org/software/dhcp/403
http://ftp.isc.org/isc/dhcp/dhcp-4.0.3-RELNOTES
DHCP: Server Crash with Empty Link-Address Field
https://www.isc.org/software/dhcp/advisories/cve-2010-3611
Sudo 1.7.5b1 released
http://www.sudo.ws/sudo/devel.html#1.7.5b1
Slackware Linux : [SSA:2010-305-02] pidgin Security Fix
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34130
Slackware Linux : [SSA:2010-305-03] proftpd Security Fix
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34131
Debian : [DSA 2123-1] New NSS packages fix cryptographic weaknesses
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34148
Debian : [DSA 2124-1] New Xulrunner packages fix several vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34149
Mandriva : [MDVSA-2010:219] mozilla-thunderbird Code Execution
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34138
Red Hat : [RHSA-2010:0817-01] Low: Red Hat Enterprise Linux 3 - End Of Life
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34132
Slackware Linux : [SSA:2010-305-01] seamonkey: Security Update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34129
YGN Ethical Hacker Group : Joomla 1.5.21 Potential SQL Injection Flaws
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34154
Mandriva : [MDVSA-2010:218] php DoS, Null-pointer Deference
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34137
Mark Stanislav : 'WSN Links' SQL Injection Vulnerability
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34155
Mandriva : [MDVSA-2010:215] python buffer overflows, DoS, Race Condition
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34134
Mandriva : [MDVSA-2010:216] python DoS, Race Condition
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34135
Mandriva : [MDVSA-2010:217] Dovecot Authentication-bypass, DoS, Disclosure
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34136
Mandriva : [MDVSA-2010:214] kernel stack overflow
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34133
「Google」や「YouTube」のバグ発見者に賞金、最高で3133.7ドル
米グーグルが新プログラムを開始、「Blogger」や「Orkut」も対象
http://itpro.nikkeibp.co.jp/article/NEWS/20101104/353748/?ST=security
CVE-2010-3863: Apache Shiro information disclosure vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00045.html
[Onapsis Security Advisory 2010-010] Oracle Virtual Server Agent Local Privilege Escalation
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00042.html
[Onapsis Security Advisory 2010-009] Oracle Virtual Server Agent Remote Command Execution
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00043.html
[Onapsis Security Advisory 2010-008] Oracle Virtual Server Agent Arbitrary File Access
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00044.html
[ MDVSA-2010:202-1 ] krb5
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00041.html
XSS vulnerability in Kandidat CMS
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00034.html
XSS vulnerability in Kandidat CMS
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00040.html
XSS vulnerability in MemHT Portal
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00039.html
XSS vulnerability in MemHT Portal
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00038.html
XSS vulnerability in Kandidat CMS
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00037.html
Stored XSS vulnerability in Webmedia Explorer
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00035.html
Stored XSS (Cross Site Scripting) vulnerability in MemHT Portal
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00036.html
Security-Assessment.com Advisory: BroadWorks Call Detail Record Disclosure Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00033.html
[SECURITY] [DSA 2124-1] New Xulrunner packages fix several vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00031.html
[SECURITY] [DSA 2123-1] New NSS packages fix cryptographic weaknesses
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00032.html
SQL Slammer Clean-up: Roundup and Review
http://isc.sans.edu/diary.html?storyid=9871
Vulnerability in Internet Explorer Could Allow Remote Code Execution (CVE-2010-3962)
http://isc.sans.edu/diary.html?storyid=9874
Adobe Shockwave Player "Shockwave Settings" Use-After-Free Vulnerability
http://isc.sans.edu/diary.html?storyid=9877
Defeating Drive-by Downloads in Windows
http://isc.sans.edu/diary.html?storyid=9880
Limited Malicious Search Engine Poisoning for Election
http://isc.sans.edu/diary.html?storyid=9868
Vulnerability Note VU#899748: Microsoft Internet Explorer invalid flag reference vulnerability
http://www.kb.cert.org/vuls/id/899748
Vulnerability Note VU#465239: NetSupport Manager Gateway transmits identifying information in plaintext
http://www.kb.cert.org/vuls/id/465239
DATAC RealWin Multiple Remote Buffer Overflow Vulnerabilities
http://securityreason.com/securityalert/7873
Kisisel Radyo Script - Multiple Vulnerabilities
http://securityreason.com/securityalert/7872
Directory Traversal Vulnerability in AnyConnect
http://securityreason.com/securityalert/7871
Directory Traversal Vulnerability in FreshFTP
http://securityreason.com/securityalert/7870
HP Storage Essentials Using LDAP, Remote Unauthenticated Access
http://securityreason.com/securityalert/7869
HP LoadRunner Web Tours 9.10 Remote Denial of Service
http://securityreason.com/securityalert/7868
Palm webOS Camera Application, Unauthorized WriteAccess
http://securityreason.com/securityalert/7867
Palm webOS, Code execution vulnerability in Palm webOSservice API
http://securityreason.com/securityalert/7866
Palm webOS, webOS Doc Viewer, Execution of ArbitraryCode
http://securityreason.com/securityalert/7865
HP Insight Control Power Management for Windows, Remote Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF)
http://securityreason.com/securityalert/7864
HP Version Control Repository Manager (VCRM) for Windows, Remote Cross Site Scripting (XSS)
http://securityreason.com/securityalert/7863
HP Insight Control Server Migration for Windows, Remote Cross Site Scripting (XSS), Privilege Escalation, Unauthorized Access
http://securityreason.com/securityalert/7862
Firefox 3.6.8 - 3.6.11 Interleaving document.write and appendChild Exploit (From the Wild)
http://securityreason.com/securityalert/7861
Spring Security bypass of security constraints
http://securityreason.com/securityalert/7860
Firefox Interleaving document.write and appendChild Denial of Service
http://securityreason.com/securityalert/7859
Hewlett-Packard Data Protector DtbClsLogin Utf8cpy Code Vulnerability
http://www.securiteam.com/unixfocus/6G02V0K0AE.html
Hewlett-Packard Data Protector Express PrvRecvRqu Denial of Service Vulnerability
http://www.securiteam.com/unixfocus/6H02W0K0AI.html
Mozilla Firefox normalizeDocument Code Execution Vulnerability
http://www.securiteam.com/securitynews/6I02X0K0AM.html
Mozilla Firefox tree Object Removal Code Execution Vulnerability
http://www.securiteam.com/securitynews/6J02Y0K0AQ.html
Microsoft Internet Explorer Freed Object Invalid Flag Reference Access Lets Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Nov/1024676.html
HP Insight Control Performance Management for Windows Lets Remote Users Download Arbitrary Files
http://securitytracker.com/alerts/2010/Nov/1024675.html
Trend Micro Titanium Maximum Security 'tmtdi.sys' Driver Lets Local Users Gain Elevated Privileges
http://securitytracker.com/alerts/2010/Nov/1024674.html
HP Insight Recovery for Windows Flaws Permit Cross-Site Scripting and Directory Traversal Attacks
http://securitytracker.com/alerts/2010/Nov/1024673.html
HP Insight Control Performance Management for Windows Flaws Permit Cross-Site Scripting and Cross-Site Request Forgery Attacks and Let Remote Authenticated Users Gain Elevated Privileges
http://securitytracker.com/alerts/2010/Nov/1024672.html
BroadSoft BroadWorks Lets Remote Authenticated Users View and Record Live Call Detail Records
http://securitytracker.com/alerts/2010/Nov/1024671.html
IBM Tivoli Directory Server Proxy Server Can Be Crashed By Remote Users
http://securitytracker.com/alerts/2010/Nov/1024670.html
PAM Lets Local Users Gain Elevated Privileges
http://securitytracker.com/alerts/2010/Nov/1024668.html
Internet Explorer CSS Tag Parsing Code Execution Vulnerability
http://secunia.com/advisories/42091/
IBM Tivoli Directory Server BER Denial of Service Vulnerability
http://secunia.com/advisories/42116/
Linux Kernel Memory Leak Weaknesses
http://secunia.com/advisories/42061/
SUSE update for Multiple Packages
http://secunia.com/advisories/42049/
SUSE update for kernel
http://secunia.com/advisories/42076/
F5 Products BIND "EVP_VerifyFinal()" Spoofing Vulnerability
http://secunia.com/advisories/42085/
Adobe Shockwave Player "Shockwave Settings" Use-After-Free Vulnerability
http://secunia.com/advisories/42112/
Apache Shiro URL Path Security Bypass Vulnerability
http://secunia.com/advisories/41989/
Advantage Data Architect Buffer Overflow Vulnerability
http://secunia.com/advisories/42025/
Pay Roll - Time Sheet and Punch Card Application With Web Interface SQL Injection Vulnerabilities
http://secunia.com/advisories/42096/
Dolphin "file" File Disclosure Vulnerability
http://secunia.com/advisories/42108/
Bugzilla Multiple Vulnerabilities
http://secunia.com/advisories/42071/
ISC DHCP Relay-Forward Denial of Service Vulnerability
http://secunia.com/advisories/42082/
Site2Ntite Vacation Rental (VRBO) Listings "ID" SQL Injection Vulnerability
http://secunia.com/advisories/42087/
Site2Nite Business e-Listings "ID" SQL Injection Vulnerability
http://secunia.com/advisories/42086/
Online Work Order Suite Professional Edition "password" SQL Injection
http://secunia.com/advisories/42111/
Cisco AnyConnect VPN Client Privilege Escalation Vulnerability
http://secunia.com/advisories/42093/
Fedora update for perl-libwww-perl
http://secunia.com/advisories/42114/
Douran Portal Information Disclosure Weakness and Cross-Site Scripting
http://secunia.com/advisories/42065/
Kandidat CMS Multiple Vulnerabilities
http://secunia.com/advisories/42050/
Advantage Data Architect Insecure Library Loading Vulnerability
http://secunia.com/advisories/42092/
XWiki Watch Cross-Site Scripting and Script Insertion Vulnerabilities
http://secunia.com/advisories/42090/
XWiki Enterprise Cross-Site Scripting and SQL Injection Vulnerabilities
http://secunia.com/advisories/42058/
Monkeysphere "monkeysphere-authentication" Privilege Escalation Vulnerability
http://secunia.com/advisories/42067/
AVG Internet Security IOCTL Handling Denial of Service
http://secunia.com/advisories/42046/
MemHT Portal "Referer" HTTP Header SQL Injection Vulnerability
http://secunia.com/advisories/42057/
MemHT Portal Cross-Site Request Forgery Vulnerability
http://secunia.com/advisories/42089/
Red Hat update for pam
http://secunia.com/advisories/42064/
Linux-PAM Modules Information Disclosure and Privilege Escalation
http://secunia.com/advisories/42088/
Intel Xeon 5500 / 5600 Series BMC Firmware Privilege Escalation Vulnerability
http://secunia.com/advisories/42059/
Trend Micro Titanium Maximum Security 2011 IOCTL Handling Vulnerability
http://secunia.com/advisories/42012/
WSN Links Multiple SQL Injection Vulnerabilities
http://secunia.com/advisories/42062/
Debian update for nss
http://secunia.com/advisories/42045/
Debian update for xulrunner
http://secunia.com/advisories/42026/
Fedora update for tomcat6
http://secunia.com/advisories/42079/
Fedora update for thunderbird and sunbird
http://secunia.com/advisories/42077/
Fedora update for pidgin
http://secunia.com/advisories/42075/
CometBird "document.write()" and DOM Insertion Vulnerability
http://secunia.com/advisories/42010/
Slackware update for proftpd
http://secunia.com/advisories/42047/
Minishare 1.5.5 Buffer Overflow Vulnerability (SEH)
http://www.exploit-db.com/exploits/15406/
Minishare 1.5.5 Buffer Overflow Vulnerability (users.txt)
http://www.exploit-db.com/exploits/15403/
HtaEdit v 3.2.3.0 (.hta) Buffer Overflow Vulnerability
http://www.exploit-db.com/exploits/15411/
Crystal Report Viewer v8.0.0.371 ActiveX Denial of Service Vulnerability
http://www.exploit-db.com/exploits/15408/
Avira Premium Security Suite NtCreateKey Race Condition Vulnerability
http://www.exploit-db.com/exploits/15407/
Gom Player (wav) Denial of Service Vulnerability
http://www.exploit-db.com/exploits/15401/
Maxthon 3.0.18.1000 CSS Denial of Service Vulnerability
http://www.exploit-db.com/exploits/15394/
Quickzip 5.1.8.1 Denial of Service Vulnerability
http://www.exploit-db.com/exploits/15393/
Microsoft Internet Explorer CSS "clip" Attribute Memory Corruption
http://www.vupen.com/english/advisories/2010/2880
ISC DHCP Relay Forward Message Denial of Service Vulnerability
http://www.vupen.com/english/advisories/2010/2879
Bugzilla Cross Site Scripting and HTTP Response Splitting Vulnerabilities
http://www.vupen.com/english/advisories/2010/2878
Redhat Security Update Fixes PAM Privilege Escalation Vulnerabilities
http://www.vupen.com/english/advisories/2010/2877
Linux-PAM Multiple Privilege Escalation and Information Disclosure
http://www.vupen.com/english/advisories/2010/2876
Intel Xeon 5500/5600 BMC Firmware Privilege Escalation and DoS Issue
http://www.vupen.com/english/advisories/2010/2875
Fedora Security Update Fixes Libguestfs Format Detection Vulnerability
http://www.vupen.com/english/advisories/2010/2874
Fedora Security Update Fixes Luci Authentication Bypass Vulnerability
http://www.vupen.com/english/advisories/2010/2873
Fedora Security Update Fixes libwww-perl File Overwrite Vulnerability
http://www.vupen.com/english/advisories/2010/2872
Fedora Security Update Fixes SeaMonkey Code Execution Vulnerability
http://www.vupen.com/english/advisories/2010/2871
Fedora Security Update Fixes Pidgin Denial of Service Vulnerabilities
http://www.vupen.com/english/advisories/2010/2870
Fedora Security Update Fixes CVS Delta Fragments Array Indexing
http://www.vupen.com/english/advisories/2010/2869
Fedora Security Update Fixes Tomcat Information Disclosure
http://www.vupen.com/english/advisories/2010/2868
Fedora Security Update Fixes FreeType Multiple Vulnerabilities
http://www.vupen.com/english/advisories/2010/2867
Fedora Security Update Fixes Thunderbird and Sunbird Vulnerability
http://www.vupen.com/english/advisories/2010/2866
Mandriva Security Update Fixes Kerberos Uninitialized Pointer Vulnerability
http://www.vupen.com/english/advisories/2010/2865
Mandriva Security Update Fixes Thunderbird Code Execution Vulnerability
http://www.vupen.com/english/advisories/2010/2864
IBM Tivoli Directory Server LDAP and BER Denial of Service Vulnerabilities
http://www.vupen.com/english/advisories/2010/2863
Xerox 4595 Web Server Remote Denial of Service Vulnerability
http://www.vupen.com/english/advisories/2010/2862
IBM Tivoli Directory Server Proxy Server Denial of Service Vulnerability
http://www.vupen.com/english/advisories/2010/2861
Trend Micro Titanium Maximum Security "tmtdi.sys" Privilege Escalation
http://www.vupen.com/english/advisories/2010/2860
Mongoose HTTP Requests Processing Directory Traversal Vulnerability
http://www.vupen.com/english/advisories/2010/2859
Yaws HTTP Requests Processing Directory Traversal Vulnerability
http://www.vupen.com/english/advisories/2010/2858
Redhat Security Update Fixes Thunderbird Code Execution Vulnerability
http://www.vupen.com/english/advisories/2010/2857
Redhat Security Update Fixes CUPS Use-after-free and Privilege Escalation
http://www.vupen.com/english/advisories/2010/2856
Debian Security Update Fixes Xulrunner and Iceweasel Vulnerabilities
http://www.vupen.com/english/advisories/2010/2855
Debian Security Update Fixes NSS Security Bypass Vulnerabilities
http://www.vupen.com/english/advisories/2010/2854
Slackware Security Update Fixes ProFTPD Remote Vulnerabilities
http://www.vupen.com/english/advisories/2010/2853
ProFTPD Remote Buffer Overflow and Directory Traversal Vulnerabilities
http://www.vupen.com/english/advisories/2010/2852
Slackware Security Update Fixes Pidgin Denial of Service Vulnerabilities
http://www.vupen.com/english/advisories/2010/2851
Ubuntu Security Update Fixes Xulrunner Code Execution Vulnerability
http://www.vupen.com/english/advisories/2010/2850
NetSupport Manager Gateway HTTP Protocol Information disclosure vulnerability
http://www.securityfocus.com/bid/44629
Oracle MySQL 'COM_FIELD_LIST' Command Packet Security Bypass Vulnerability
http://www.securityfocus.com/bid/40109
Oracle MySQL Prior to 5.1.51 Multiple Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/43676
Oracle MySQL 'TEMPORARY InnoDB' Tables Denial Of Service Vulnerability
http://www.securityfocus.com/bid/42598
Oracle MySQL Prior to 5.1.49 'JOIN' Statement Denial Of Service Vulnerability
http://www.securityfocus.com/bid/42646
Oracle MySQL 'HANDLER' interface Denial Of Service Vulnerability
http://www.securityfocus.com/bid/42633
Oracle MySQL 'EXPLAIN' Denial Of Service Vulnerability
http://www.securityfocus.com/bid/42599
Multiple Browser Wild Card Certificate Spoofing Vulnerability
http://www.securityfocus.com/bid/42817
Microsoft Internet Explorer CSS Tags Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/44536
OpenSSL 'EVP_VerifyFinal' Function Signature Verification Vulnerability
http://www.securityfocus.com/bid/33150
Todd Miller Sudo 'sudoedit' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/38362
Todd Miller Sudo 'runas_default' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/38432
PEAR Sendmail 'From' Parameter Arbitrary Argument Injection Vulnerability
http://www.securityfocus.com/bid/37081
PEAR Sendmail 'Recipient' Parameter Arbitrary Argument Injection Vulnerability
http://www.securityfocus.com/bid/37395
GnuPG 'GPGSM Tool' Certificate Importing Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/41945
Dovecot Access Control List (ACL) Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/43690
PostgreSQL PL/Perl and PL/Tcl Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/43747
Festival Server 'LD_LIBRARY_PATH' Insecure Library Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44395
ClamAV 'find_stream_bounds()' PDF File Processing Denial Of Service Vulnerability
http://www.securityfocus.com/bid/43555
ISC BIND 9 'RRSIG' Record Type Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/41730
dbus-glib 'access' Flag Local Denial Of Service Vulnerability
http://www.securityfocus.com/bid/42347
Linux Kernel Rose Protocol 'srose_ndigis' Heap Memory Corruption Vulnerability
http://www.securityfocus.com/bid/43368
Linux Kernel 'EQL_GETMASTRCFG' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/43229
Linux Kernel 'CHELSIO_GET_QSET_NUM' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/43221
Linux Kernel 'irda_bind()' Null Pointer Dereference Vulnerability
http://www.securityfocus.com/bid/42900
Linux Kernel JFS xattr Namespace Rules Security Bypass Vulnerability
http://www.securityfocus.com/bid/42589
Linux Kernel 'XFS_IOC_FSGETXATTR' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/43022
Linux Kernel 'snd_seq_oss_open()' Multiple Local Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/43062
Linux Kernel 'net/sched/act_police.c' File Memory Leak Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/42529
Linux Kernel GFS2 Directory Rename NULL Pointer Dereference Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/42124
Linux Kernel 'SIOCGIWSSID' IOCTL Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/42885
Linux Kernel DRM Module IOCTL Information Disclosure Vulnerability
http://www.securityfocus.com/bid/42577
Linux Kernel EXT4 Multiple Local Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/42477
Zen Cart 'includes/initsystem.php' Local File Include Vulnerability
http://www.securityfocus.com/bid/44636
Open Handset Alliance Android Multiple Unspecified Security Vulnerabilities
http://www.securityfocus.com/bid/44625
Avira Premium Security Suite 'avipbb.sys' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44624
eLouai's Force Download Script 'force-download.php' Arbitrary File Download Vulnerability
http://www.securityfocus.com/bid/44621
Bugzilla Response Splitting and Security Bypass Vulnerabilities
http://www.securityfocus.com/bid/44618
Adobe Shockwave Player 'Shockwave Settings' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44617
digiSHOP 'id' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/44614
Mozilla Firefox 3.5/3.6 Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44425
Mozilla Firefox and SeaMonkey Gopher Parser Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/44253
Mozilla Firefox SeaMonkey and Thunderbird 'nsBarProp' Use-After-Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44248
Mozilla Firefox SeaMonkey Thunderbird Modal Calls Cross Domain Information Disclosure Vulnerability
http://www.securityfocus.com/bid/44252
Mozilla Firefox SeaMonkey and Thunderbird CVE-2010-3176 Multiple Memory-Corruption Vulnerabilities
http://www.securityfocus.com/bid/44243
Mozilla Firefox SeaMonkey and Thunderbird 'LookupGetterOrSetter' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44249
Mozilla Firefox SeaMonkey and Thunderbird 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44251
Mozilla Firefox SeaMonkey and Thunderbird 'document.write' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44247
Mozilla Firefox and Thunderbird CVE-2010-3175 Multiple Memory-Corruption Vulnerabilities
http://www.securityfocus.com/bid/44245
Mozilla Firefox SeaMonkey and Thunderbird DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44250
Mozilla Firefox SeaMonkey and Thunderbird CVE-2010-3174 Memory-Corruption Vulnerability
http://www.securityfocus.com/bid/44246
Oracle VM CVE-2010-3583 Remote Command Execution Vulnerability
http://www.securityfocus.com/bid/44044
libguestfs Disk Format Specifier Information Disclosure Vulnerability
http://www.securityfocus.com/bid/44166
FreeType Stack Buffer Overflow and Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/42285
FreeType Rendering Engine Position Value Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/43700
FreeType 'seac' Calls Multiple Remote Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/42621
Linux Kernel 'do_io_submit()' Integer Overflow Vulnerability
http://www.securityfocus.com/bid/43353
Oracle VM CVE-2010-3585 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/44047
Xpdf Multiple Integer Overflow Vulnerabilities
http://www.securityfocus.com/bid/36703
Xpdf 'Gfx::getPos()' (CVE-2010-3702) Unitialized Pointer Dereference Vulnerability
http://www.securityfocus.com/bid/43845
Oracle VM CVE-2010-3584 'ovs-agent' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44043
Adobe Acrobat, Reader, and Flash CVE-2010-3654 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/44504
MIT Kerberos KDC 'kdc_authdata.c' NULL Pointer Denial Of Service Vulnerability
http://www.securityfocus.com/bid/43756
ProFTPD Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/44562
Pidgin 'libpurple' Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/44283
Linux Kernel Multiple 'net/' Subsystems Local Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/44630
FUSE fusermount Tool Race Condition Vulnerability
http://www.securityfocus.com/bid/44623
Dolphin SQL Injection and Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/44620
Site2Nite Multiple Products 'detail.asp' SQL Injection Vulnerability
http://www.securityfocus.com/bid/44619
Apache Shiro Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44616
ISC DHCP Server Relay-Forward Empty Link-Address Field Denial of Service Vulnerability
http://www.securityfocus.com/bid/44615
MySource Matrix CMS 'id' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/44612
Luci Spoofed Ticket Cookie Authentication Bypass Vulnerability
http://www.securityfocus.com/bid/44611
Digger Solutions Newsletter Open Source 'article.asp' SQL Injection Vulnerability
http://www.securityfocus.com/bid/44610
Pay Roll Time Sheet & Punch Card Login SQL Injection Vulnerability
http://www.securityfocus.com/bid/44609
Online Work Order Suite Login SQL Injection Vulnerability
http://www.securityfocus.com/bid/44608
Maxthon Browser CSS Remote Denial Of Service Vulnerability
http://www.securityfocus.com/bid/44607
XWiki Watch HTML Injection and Cross-Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/44606
IBM Tivoli Directory Server Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/44604
Azaronline Design 'id' Parameter Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/44602
XWiki Enterprise Unspecified SQL Injection and Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/44601
Sybase Advantage Data Architect DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44600
Webmedia Explorer HTML Injection Vulnerability
http://www.securityfocus.com/bid/44598
BroadWorks Call Detail Record Security Bypass Vulnerability
http://www.securityfocus.com/bid/44597
AVG Internet Security IOCTL Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/44596
Rising Antivirus 2009 IOCTL Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/44595
2010年11月2日火曜日
2日 火曜日、仏滅
JVNVU#889047 Attachmate Reflection for the Web におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/cert/JVNVU889047/index.html
JVNDB-2010-002238 Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002238.html
JVNDB-2010-002237 Oracle Solaris および OpenSolaris における SCSI enclosure services デバイスドライバの処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002237.html
JVNDB-2010-002236 Oracle Solaris および OpenSolaris における ZFS の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002236.html
JVNDB-2010-002235 Oracle Solaris および OpenSolaris における InfiniBand の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002235.html
JVNDB-2010-002234 Oracle Solaris および OpenSolaris の Solaris コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002234.html
JVNDB-2010-002233 Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002233.html
JVNDB-2010-002232 Oracle Solaris および OpenSolaris における Kernel/X86 の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002232.html
JVNDB-2010-002231 Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002231.html
JVNDB-2010-002230 Oracle Solaris における su の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002230.html
JVNDB-2010-001892 FreeType 2 における CFF フォントの処理に脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001892.html
JVNDB-2008-001611 Apache Tomcat におけるディレクトリトラバーサルの脆弱性
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001611.html
Cyber Security Awareness Month - Day 31 - Tying it all together
http://isc.sans.edu/diary.html?storyid=9853
AVG Internet Security v9.0.851 Local Denial of Service Exploit
http://www.exploit-db.com/exploits/15384/
Rising RSNTGDI.sys Local Denial of Service Vulnerability
http://www.exploit-db.com/exploits/15383/
+ JK-1.2.31 released
http://tomcat.apache.org/connectors-doc/
http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html
+- MySQL Community Server 5.1.52 has been released
http://dev.mysql.com/doc/refman/5.1/en/mysql-nutshell.html
+ RHSA-2010:0819-1: Moderate: pam security update
http://rhn.redhat.com/errata/RHSA-2010-0819.html
+ SA42052: ProFTPD Directory Traversal and Buffer Overflow Vulnerabilities
http://secunia.com/advisories/42052/
http://www.securityfocus.com/bid/44562
- Dovecot Access Control List (ACL) Plugin Security Bypass Weakness
http://www.securityfocus.com/bid/41964
- RHSA-2010:0817-1: Low: Red Hat Enterprise Linux 3 - End Of Life
http://rhn.redhat.com/errata/RHSA-2010-0817.html
[ANNOUNCE] Apache Jackrabbit 2.0.3 released
http://jackrabbit.apache.org/downloads.html
[ANNOUNCE] Apache Jackrabbit 2.1.2 released
http://jackrabbit.apache.org/downloads.html
[ANNOUNCE] PostgreSQL 9.1alpha2 Now Available
http://www.postgresql.org/about/news.1252
Linux Kernel release: 2.6.37-rc1
http://www.linux.org/news/2010/11/01/0001.html
日本の「迷惑メール率」は9割、「標的型攻撃」も増加中
自動翻訳で日本語の迷惑メールを作成、738通に1通はウイルス
http://itpro.nikkeibp.co.jp/article/NEWS/20101102/353710/?ST=security
JVNDB-2010-002229 Oracle Solaris における Live Upgrade の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002229.html
JVNDB-2010-002228 Oracle Solaris における Scheduler の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002228.html
JVNDB-2010-002227 Oracle Fusion Middleware の Forms コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002227.html
JVNDB-2010-002226 Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002226.html
JVNDB-2010-002225 Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002225.html
JVNDB-2010-002224 Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002224.html
JVNDB-2010-002223 Oracle Fusion Middleware の OID コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002223.html
JVNDB-2010-002222 複数の Oracle 製品の Perl コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002222.html
JVNDB-2010-002221 Oracle Database Server の Core RDBMS コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002221.html
JVNDB-2010-002220 Oracle Database Server の XDK コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002220.html
JVNDB-2010-000051 GVim における DLL 読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000051.html
[ MDVSA-2010:219 ] mozilla-thunderbird
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00011.html
Call for Papers: The International Conference on Cyber Conflict, Estonia
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00030.html
Call for Papers -YSTS V - Security Conference, Brazil
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00029.html
Joomla 1.5.21 Potential SQL Injection Flaws
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00028.html
WSN Links SQL Injection Vulnerability (CVE-2010-4006)
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00027.html
[ MDVSA-2010:218 ] php
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00004.html
XSS and SQL Injection vulnerabilities in CMS WebManager-Pro
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00026.html
[ MDVSA-2010:217 ] dovecot
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00025.html
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4089
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00023.html
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4087
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00024.html
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4088
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00022.html
cforms WordPress Plugin Cross Site Scripting Vulnerability - CVE-2010-3977
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00021.html
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4086
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00020.html
[ MDVSA-2010:216 ] python
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00019.html
[ MDVSA-2010:215 ] python
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00017.html
[ MDVSA-2010:214 ] kernel
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00018.html
Revision: Audacity (= 1.3 Beta Multiple Local Vulnerabilities ===> Audacity <= 1.3 Beta DLL Hijackin http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00016.html
[DEMO] Sample videos about IDS/IPS evasions...
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00015.html
H2HC 2010 - Final Speakers List Available
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00014.html
[security bulletin] HPSBMA02598 SSRT100314 rev.2 - HP Insight Control Virtual Machine Management
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00013.html
[security bulletin] HPSBMA02607 SSRT100214 rev.1 - HP Insight Control for Linux, Remote Cross Si
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00012.html
[security bulletin] HPSBMA02606 SSRT100321 rev.1 - HP Insight Orchestration Software for Windows
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00006.html
[security bulletin] HPSBMA02605 SSRT100238 rev.1 - HP Insight Managed System Setup Wizard for Wi
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00007.html
[security bulletin] HPSBMA02604 SSRT100320 rev.1 - HP Insight Recovery for Windows, Remote Cross
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00008.html
[security bulletin] HPSBMA02602 SSRT100317 rev.1 - HP Insight Control Performance Management for
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00005.html
[security bulletin] HPSBMA02600 SSRT100239 rev.1 - HP Insight Control Performance Management for
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00009.html
Audacity (= 1.3 Beta Multiple Local Vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00010.html
Secunia Research: SonicWALL SSL-VPN End-Point ActiveX Control Buffer Overflow
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00003.html
Secunia Research: Adobe Shockwave Player "DEMX" Chunk Parsing Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00002.html
Secunia Research: Adobe Shockwave Player "pamm" Chunk Parsing Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00001.html
[USN-1011-3] Xulrunner vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00000.html
CVE-2010-3654 exploit in the wild
http://isc.sans.edu/diary.html?storyid=9859
Checkpoint UTM-1 edge VPN boxes worldwide did an unscheduled reboot
http://isc.sans.edu/diary.html?storyid=9862
Cyber Security Awareness Month - Day 29- Role of the office geek
http://isc.sans.edu/diary.html?storyid=9844
Vulnerability Note VU#889047: Attachmate Reflection for the Web cross site scripting vulnerability
http://www.kb.cert.org/vuls/id/889047
Novell Netware SSHD.NLM Code Execution Vulnerability
http://www.securiteam.com/securitynews/6W02V0A0AI.html
Apple Safari Webkit Run-in Code Execution Vulnerability
http://www.securiteam.com/securitynews/6X02W0A0AM.html
Atmail WebMail Reflected Cross Site Scripting Vulnerability
http://www.securiteam.com/securitynews/6Z02Y0A0AW.html
Motorito SQL Injection and Cross Site Scripting Vulnerabilities
http://www.securiteam.com/securitynews/6L0300A0AM.html
Mozilla Firefox nsTreeContentView Dangling Pointer Code Execution Vulnerability
http://www.securiteam.com/securitynews/6Y02X0A0AG.html
WordPress cformsII Plugin "rs" and "rsargs" Script Insertion Vulnerabilities
http://secunia.com/advisories/42006/
GVim Insecure Library Loading Vulnerability
http://secunia.com/advisories/42084/
Elastix Multiple Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/42063/
Project Jug Directory Traversal Vulnerability
http://secunia.com/advisories/42070/
SmartOptimizer Source Code Disclosure Vulnerability
http://secunia.com/advisories/42080/
Home File Share Server Directory Traversal Vulnerability
http://secunia.com/advisories/42068/
Yaws Directory Traversal Vulnerability
http://secunia.com/advisories/42066/
ACDSee Canvas Insecure Library Loading Vulnerability
http://secunia.com/advisories/42053/
Smallftpd Directory Traversal Vulnerability
http://secunia.com/advisories/42078/
IBM Tivoli Directory Proxy Server Denial of Service Vulnerability
http://secunia.com/advisories/42083/
ProFTPD Directory Traversal and Buffer Overflow Vulnerabilities
http://secunia.com/advisories/42052/
Fedora update for firefox and xulrunner
http://secunia.com/advisories/42056/
Xerox 4595 Copier/Printer Denial of Service Vulnerability
http://secunia.com/advisories/42051/
Joomla! Sponsor Wall Component "catid" SQL Injection Vulnerability
http://secunia.com/advisories/42072/
Joomla! Flip Wall Component "catid" SQL Injection Vulnerability
http://secunia.com/advisories/42073/
Fedora update for gnucash
http://secunia.com/advisories/42054/
GnuCash LD_LIBRARY_PATH Security Issue
http://secunia.com/advisories/42048/
Fedora update for glibc
http://secunia.com/advisories/42055/
HP Insight Managed System Setup Wizard for Windows Lets Remote Users Download Arbitrary Files
http://securitytracker.com/alerts/2010/Nov/1024667.html
Mongoose Web Server 2.11 Directory Traversal Vulnerability
http://www.exploit-db.com/exploits/15373/
Trend Micro Titanium Maximum Security 2011 0day Local Kernel Exploit
http://www.exploit-db.com/exploits/15376/
Xerox 4595 Denial of Service Vulnerability
http://www.exploit-db.com/exploits/15380/
Sybase Advantage Data Architect "*.SQL" Format Heap Oveflow
http://www.exploit-db.com/exploits/15378/
Fedora Security Update Fixes OpenLDAP Multiple Vulnerabilities
http://www.vupen.com/english/advisories/2010/2849
Fedora Security Update Fixes GnuCash Library Loading Vulnerability
http://www.vupen.com/english/advisories/2010/2848
Fedora Security Update Fixes Pidgin Denial of Service Vulnerabilities
http://www.vupen.com/english/advisories/2010/2847
Fedora Security Update Fixes CVS Delta Fragments Array Indexing
http://www.vupen.com/english/advisories/2010/2846
CVS "apply_rcs_changes()" Delta Fragments Changes Array Indexing
http://www.vupen.com/english/advisories/2010/2845
Fedora Security Update Fixes libHX Buffer Overflow Vulnerability
http://www.vupen.com/english/advisories/2010/2844
Fedora Security Update Fixes Glibc Privilege Escalation Vulnerability
http://www.vupen.com/english/advisories/2010/2843
Fedora Security Update Fixes Firefox and Xulrunner Vulnerability
http://www.vupen.com/english/advisories/2010/2842
Mandriva Security Update Fixes PHP DoS and Security Bypass Issues
http://www.vupen.com/english/advisories/2010/2841
Mandriva Security Update Fixes Dovecot Security Bypass Vulnerabilities
http://www.vupen.com/english/advisories/2010/2840
Mandriva Security Update Fixes Python Modules Multiple Vulnerabilities
http://www.vupen.com/english/advisories/2010/2839
Mandriva Security Update Fixes Kernel Privilege Escalation Vulnerability
http://www.vupen.com/english/advisories/2010/2838
Slackware Security Update Fixes SeaMonkey Code Execution Vulnerability
http://www.vupen.com/english/advisories/2010/2837
Adobe Acrobat, Reader and Flash CVE-2010-3654 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/44504
Pidgin 'libpurple' Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/44283
CVS CVE-2010-3846 RCS File Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44528
Apache Tomcat 'Transfer-Encoding' Information Disclosure and Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/41544
Mozilla Firefox SeaMonkey and Thunderbird 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44251
Mozilla Firefox SeaMonkey Thunderbird Modal Calls Cross Domain Information Disclosure Vulnerability
http://www.securityfocus.com/bid/44252
Mozilla Firefox 3.5/3.6 Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44425
Mozilla Firefox and Thunderbird CVE-2010-3175 Multiple Memory-Corruption Vulnerabilities
http://www.securityfocus.com/bid/44245
Mozilla Firefox SeaMonkey and Thunderbird 'LookupGetterOrSetter' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44249
Multiple Browser Wild Card Certificate Spoofing Vulnerability
http://www.securityfocus.com/bid/42817
Mozilla Firefox SeaMonkey and Thunderbird DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44250
Mozilla Firefox SeaMonkey and Thunderbird 'nsBarProp' Use-After-Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44248
Mozilla Firefox SeaMonkey and Thunderbird CVE-2010-3176 Multiple Memory-Corruption Vulnerabilities
http://www.securityfocus.com/bid/44243
Mozilla Firefox SeaMonkey and Thunderbird 'document.write' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44247
Mozilla Firefox and SeaMonkey Gopher Parser Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/44253
Mozilla Firefox SeaMonkey and Thunderbird CVE-2010-3174 Memory-Corruption Vulnerability
http://www.securityfocus.com/bid/44246
FreeType Compact Font Format (CFF) Multiple Stack Based Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/42241
FreeType Versions Prior to 2.4.0 Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/41663
FreeType Rendering Engine Position Value Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/43700
FreeType Stack Buffer Overflow and Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/42285
Apple iOS for iPhone/iPad/iPod touch Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/42151
Linux-PAM 'pam_env' and 'pam_mail' Modules Multiple Vulnerabilities
http://www.securityfocus.com/bid/43487
pam-xauth Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/42472
HP Insight Control Virtual Machine Management Unspecified Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/44429
Auto CMS Multiple PHP Code Injection Vulnerabilities
http://www.securityfocus.com/bid/42761
Xerox 4595 Copier/Printer Unspecified Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/44548
Adobe Shockwave Player 'IML32.dll' CVE-2010-4089 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44521
Adobe Shockwave Player 'IML32.dll' CVE-2010-4087 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44518
Adobe Shockwave Player 'dirapi.dll' CVE-2010-4088 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44519
Adobe Shockwave Player 'dirapi.dll' CVE-2010-4086 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44517
Python Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/44533
Python 'rgbimg' RLE Decoder Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/40365
Python Asyncore Module 'accept()' function Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/43233
Python 'rgbimg' Module ZSIZE Value Buffer Underflow Vulnerability
http://www.securityfocus.com/bid/40361
Python 'rgbimg' Module 'rv' Array Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/40363
GNU glibc Dynamic Linker '$ORIGIN' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44154
GNU glibc Dynamic Linker 'LD_AUDIT' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44347
OpenLDAP 'modrdn' Request Multiple Vulnerabilities
http://www.securityfocus.com/bid/41770
Home FTP Server Directory Traversal Vulnerability
http://www.securityfocus.com/bid/40419
Dovecot Access Control List (ACL) Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/43690
Dovecot Access Control List (ACL) Plugin Security Bypass Weakness
http://www.securityfocus.com/bid/41964
yPlay '.mp3' File Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/40301
Sybase Advantage Data Architect '.sql' File Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44589
GVim DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44588
cformsII Plugin for WordPress 'lib_ajax.php' Multiple HTML Injection Vulnerabilities
http://www.securityfocus.com/bid/44587
Mongoose Web Server URI Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44586
HP Insight Control Performance Management Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/44585
HP Insight Control Performance Management CVE-2010-4100 Arbitrary File Download Vulnerability
http://www.securityfocus.com/bid/44583
Home File Share Server Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44580
XAMPP Cross Site Scripting and Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/44579
SmartOptimizer Null Character Remote Information Disclosure Vulnerability
http://www.securityfocus.com/bid/44578
SmallFTPD GET Request Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44574
Pulse Infotech Flip Wall Component for Joomla! 'catid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/44573
ACDSee Canvas DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44572
Pulse Infotech Sponsor Wall Component for Joomla! 'catid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/44571
Project Jug Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44569
Trend Micro Titanium Maximum Security 2011 'tmtdi.sys' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44567
Elastix Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/44565
Yaws URI Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44564
ProFTPD Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/44562
WSN Links 'search.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/44593
Buffy 'comb' Command Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44577
GNUCash 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44563
CMS WebManager-Pro Cross Site Scripting and SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/44591
Simpli Easy (AFC Simple) Newsletter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/44561
Joomla! 'com_jfuploader' Arbitrary File Upload Vulnerability
http://www.securityfocus.com/bid/44559
http://jvn.jp/cert/JVNVU889047/index.html
JVNDB-2010-002238 Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002238.html
JVNDB-2010-002237 Oracle Solaris および OpenSolaris における SCSI enclosure services デバイスドライバの処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002237.html
JVNDB-2010-002236 Oracle Solaris および OpenSolaris における ZFS の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002236.html
JVNDB-2010-002235 Oracle Solaris および OpenSolaris における InfiniBand の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002235.html
JVNDB-2010-002234 Oracle Solaris および OpenSolaris の Solaris コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002234.html
JVNDB-2010-002233 Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002233.html
JVNDB-2010-002232 Oracle Solaris および OpenSolaris における Kernel/X86 の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002232.html
JVNDB-2010-002231 Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002231.html
JVNDB-2010-002230 Oracle Solaris における su の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002230.html
JVNDB-2010-001892 FreeType 2 における CFF フォントの処理に脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001892.html
JVNDB-2008-001611 Apache Tomcat におけるディレクトリトラバーサルの脆弱性
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001611.html
Cyber Security Awareness Month - Day 31 - Tying it all together
http://isc.sans.edu/diary.html?storyid=9853
AVG Internet Security v9.0.851 Local Denial of Service Exploit
http://www.exploit-db.com/exploits/15384/
Rising RSNTGDI.sys Local Denial of Service Vulnerability
http://www.exploit-db.com/exploits/15383/
+ JK-1.2.31 released
http://tomcat.apache.org/connectors-doc/
http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html
+- MySQL Community Server 5.1.52 has been released
http://dev.mysql.com/doc/refman/5.1/en/mysql-nutshell.html
+ RHSA-2010:0819-1: Moderate: pam security update
http://rhn.redhat.com/errata/RHSA-2010-0819.html
+ SA42052: ProFTPD Directory Traversal and Buffer Overflow Vulnerabilities
http://secunia.com/advisories/42052/
http://www.securityfocus.com/bid/44562
- Dovecot Access Control List (ACL) Plugin Security Bypass Weakness
http://www.securityfocus.com/bid/41964
- RHSA-2010:0817-1: Low: Red Hat Enterprise Linux 3 - End Of Life
http://rhn.redhat.com/errata/RHSA-2010-0817.html
[ANNOUNCE] Apache Jackrabbit 2.0.3 released
http://jackrabbit.apache.org/downloads.html
[ANNOUNCE] Apache Jackrabbit 2.1.2 released
http://jackrabbit.apache.org/downloads.html
[ANNOUNCE] PostgreSQL 9.1alpha2 Now Available
http://www.postgresql.org/about/news.1252
Linux Kernel release: 2.6.37-rc1
http://www.linux.org/news/2010/11/01/0001.html
日本の「迷惑メール率」は9割、「標的型攻撃」も増加中
自動翻訳で日本語の迷惑メールを作成、738通に1通はウイルス
http://itpro.nikkeibp.co.jp/article/NEWS/20101102/353710/?ST=security
JVNDB-2010-002229 Oracle Solaris における Live Upgrade の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002229.html
JVNDB-2010-002228 Oracle Solaris における Scheduler の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002228.html
JVNDB-2010-002227 Oracle Fusion Middleware の Forms コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002227.html
JVNDB-2010-002226 Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002226.html
JVNDB-2010-002225 Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002225.html
JVNDB-2010-002224 Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002224.html
JVNDB-2010-002223 Oracle Fusion Middleware の OID コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002223.html
JVNDB-2010-002222 複数の Oracle 製品の Perl コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002222.html
JVNDB-2010-002221 Oracle Database Server の Core RDBMS コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002221.html
JVNDB-2010-002220 Oracle Database Server の XDK コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002220.html
JVNDB-2010-000051 GVim における DLL 読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000051.html
[ MDVSA-2010:219 ] mozilla-thunderbird
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00011.html
Call for Papers: The International Conference on Cyber Conflict, Estonia
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00030.html
Call for Papers -YSTS V - Security Conference, Brazil
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00029.html
Joomla 1.5.21 Potential SQL Injection Flaws
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00028.html
WSN Links SQL Injection Vulnerability (CVE-2010-4006)
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00027.html
[ MDVSA-2010:218 ] php
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00004.html
XSS and SQL Injection vulnerabilities in CMS WebManager-Pro
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00026.html
[ MDVSA-2010:217 ] dovecot
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00025.html
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4089
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00023.html
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4087
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00024.html
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4088
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00022.html
cforms WordPress Plugin Cross Site Scripting Vulnerability - CVE-2010-3977
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00021.html
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4086
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00020.html
[ MDVSA-2010:216 ] python
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00019.html
[ MDVSA-2010:215 ] python
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00017.html
[ MDVSA-2010:214 ] kernel
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00018.html
Revision: Audacity (= 1.3 Beta Multiple Local Vulnerabilities ===> Audacity <= 1.3 Beta DLL Hijackin http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00016.html
[DEMO] Sample videos about IDS/IPS evasions...
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00015.html
H2HC 2010 - Final Speakers List Available
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00014.html
[security bulletin] HPSBMA02598 SSRT100314 rev.2 - HP Insight Control Virtual Machine Management
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00013.html
[security bulletin] HPSBMA02607 SSRT100214 rev.1 - HP Insight Control for Linux, Remote Cross Si
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00012.html
[security bulletin] HPSBMA02606 SSRT100321 rev.1 - HP Insight Orchestration Software for Windows
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00006.html
[security bulletin] HPSBMA02605 SSRT100238 rev.1 - HP Insight Managed System Setup Wizard for Wi
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00007.html
[security bulletin] HPSBMA02604 SSRT100320 rev.1 - HP Insight Recovery for Windows, Remote Cross
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00008.html
[security bulletin] HPSBMA02602 SSRT100317 rev.1 - HP Insight Control Performance Management for
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00005.html
[security bulletin] HPSBMA02600 SSRT100239 rev.1 - HP Insight Control Performance Management for
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00009.html
Audacity (= 1.3 Beta Multiple Local Vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00010.html
Secunia Research: SonicWALL SSL-VPN End-Point ActiveX Control Buffer Overflow
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00003.html
Secunia Research: Adobe Shockwave Player "DEMX" Chunk Parsing Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00002.html
Secunia Research: Adobe Shockwave Player "pamm" Chunk Parsing Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00001.html
[USN-1011-3] Xulrunner vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-11/msg00000.html
CVE-2010-3654 exploit in the wild
http://isc.sans.edu/diary.html?storyid=9859
Checkpoint UTM-1 edge VPN boxes worldwide did an unscheduled reboot
http://isc.sans.edu/diary.html?storyid=9862
Cyber Security Awareness Month - Day 29- Role of the office geek
http://isc.sans.edu/diary.html?storyid=9844
Vulnerability Note VU#889047: Attachmate Reflection for the Web cross site scripting vulnerability
http://www.kb.cert.org/vuls/id/889047
Novell Netware SSHD.NLM Code Execution Vulnerability
http://www.securiteam.com/securitynews/6W02V0A0AI.html
Apple Safari Webkit Run-in Code Execution Vulnerability
http://www.securiteam.com/securitynews/6X02W0A0AM.html
Atmail WebMail Reflected Cross Site Scripting Vulnerability
http://www.securiteam.com/securitynews/6Z02Y0A0AW.html
Motorito SQL Injection and Cross Site Scripting Vulnerabilities
http://www.securiteam.com/securitynews/6L0300A0AM.html
Mozilla Firefox nsTreeContentView Dangling Pointer Code Execution Vulnerability
http://www.securiteam.com/securitynews/6Y02X0A0AG.html
WordPress cformsII Plugin "rs" and "rsargs" Script Insertion Vulnerabilities
http://secunia.com/advisories/42006/
GVim Insecure Library Loading Vulnerability
http://secunia.com/advisories/42084/
Elastix Multiple Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/42063/
Project Jug Directory Traversal Vulnerability
http://secunia.com/advisories/42070/
SmartOptimizer Source Code Disclosure Vulnerability
http://secunia.com/advisories/42080/
Home File Share Server Directory Traversal Vulnerability
http://secunia.com/advisories/42068/
Yaws Directory Traversal Vulnerability
http://secunia.com/advisories/42066/
ACDSee Canvas Insecure Library Loading Vulnerability
http://secunia.com/advisories/42053/
Smallftpd Directory Traversal Vulnerability
http://secunia.com/advisories/42078/
IBM Tivoli Directory Proxy Server Denial of Service Vulnerability
http://secunia.com/advisories/42083/
ProFTPD Directory Traversal and Buffer Overflow Vulnerabilities
http://secunia.com/advisories/42052/
Fedora update for firefox and xulrunner
http://secunia.com/advisories/42056/
Xerox 4595 Copier/Printer Denial of Service Vulnerability
http://secunia.com/advisories/42051/
Joomla! Sponsor Wall Component "catid" SQL Injection Vulnerability
http://secunia.com/advisories/42072/
Joomla! Flip Wall Component "catid" SQL Injection Vulnerability
http://secunia.com/advisories/42073/
Fedora update for gnucash
http://secunia.com/advisories/42054/
GnuCash LD_LIBRARY_PATH Security Issue
http://secunia.com/advisories/42048/
Fedora update for glibc
http://secunia.com/advisories/42055/
HP Insight Managed System Setup Wizard for Windows Lets Remote Users Download Arbitrary Files
http://securitytracker.com/alerts/2010/Nov/1024667.html
Mongoose Web Server 2.11 Directory Traversal Vulnerability
http://www.exploit-db.com/exploits/15373/
Trend Micro Titanium Maximum Security 2011 0day Local Kernel Exploit
http://www.exploit-db.com/exploits/15376/
Xerox 4595 Denial of Service Vulnerability
http://www.exploit-db.com/exploits/15380/
Sybase Advantage Data Architect "*.SQL" Format Heap Oveflow
http://www.exploit-db.com/exploits/15378/
Fedora Security Update Fixes OpenLDAP Multiple Vulnerabilities
http://www.vupen.com/english/advisories/2010/2849
Fedora Security Update Fixes GnuCash Library Loading Vulnerability
http://www.vupen.com/english/advisories/2010/2848
Fedora Security Update Fixes Pidgin Denial of Service Vulnerabilities
http://www.vupen.com/english/advisories/2010/2847
Fedora Security Update Fixes CVS Delta Fragments Array Indexing
http://www.vupen.com/english/advisories/2010/2846
CVS "apply_rcs_changes()" Delta Fragments Changes Array Indexing
http://www.vupen.com/english/advisories/2010/2845
Fedora Security Update Fixes libHX Buffer Overflow Vulnerability
http://www.vupen.com/english/advisories/2010/2844
Fedora Security Update Fixes Glibc Privilege Escalation Vulnerability
http://www.vupen.com/english/advisories/2010/2843
Fedora Security Update Fixes Firefox and Xulrunner Vulnerability
http://www.vupen.com/english/advisories/2010/2842
Mandriva Security Update Fixes PHP DoS and Security Bypass Issues
http://www.vupen.com/english/advisories/2010/2841
Mandriva Security Update Fixes Dovecot Security Bypass Vulnerabilities
http://www.vupen.com/english/advisories/2010/2840
Mandriva Security Update Fixes Python Modules Multiple Vulnerabilities
http://www.vupen.com/english/advisories/2010/2839
Mandriva Security Update Fixes Kernel Privilege Escalation Vulnerability
http://www.vupen.com/english/advisories/2010/2838
Slackware Security Update Fixes SeaMonkey Code Execution Vulnerability
http://www.vupen.com/english/advisories/2010/2837
Adobe Acrobat, Reader and Flash CVE-2010-3654 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/44504
Pidgin 'libpurple' Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/44283
CVS CVE-2010-3846 RCS File Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44528
Apache Tomcat 'Transfer-Encoding' Information Disclosure and Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/41544
Mozilla Firefox SeaMonkey and Thunderbird 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44251
Mozilla Firefox SeaMonkey Thunderbird Modal Calls Cross Domain Information Disclosure Vulnerability
http://www.securityfocus.com/bid/44252
Mozilla Firefox 3.5/3.6 Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44425
Mozilla Firefox and Thunderbird CVE-2010-3175 Multiple Memory-Corruption Vulnerabilities
http://www.securityfocus.com/bid/44245
Mozilla Firefox SeaMonkey and Thunderbird 'LookupGetterOrSetter' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44249
Multiple Browser Wild Card Certificate Spoofing Vulnerability
http://www.securityfocus.com/bid/42817
Mozilla Firefox SeaMonkey and Thunderbird DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44250
Mozilla Firefox SeaMonkey and Thunderbird 'nsBarProp' Use-After-Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44248
Mozilla Firefox SeaMonkey and Thunderbird CVE-2010-3176 Multiple Memory-Corruption Vulnerabilities
http://www.securityfocus.com/bid/44243
Mozilla Firefox SeaMonkey and Thunderbird 'document.write' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44247
Mozilla Firefox and SeaMonkey Gopher Parser Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/44253
Mozilla Firefox SeaMonkey and Thunderbird CVE-2010-3174 Memory-Corruption Vulnerability
http://www.securityfocus.com/bid/44246
FreeType Compact Font Format (CFF) Multiple Stack Based Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/42241
FreeType Versions Prior to 2.4.0 Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/41663
FreeType Rendering Engine Position Value Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/43700
FreeType Stack Buffer Overflow and Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/42285
Apple iOS for iPhone/iPad/iPod touch Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/42151
Linux-PAM 'pam_env' and 'pam_mail' Modules Multiple Vulnerabilities
http://www.securityfocus.com/bid/43487
pam-xauth Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/42472
HP Insight Control Virtual Machine Management Unspecified Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/44429
Auto CMS Multiple PHP Code Injection Vulnerabilities
http://www.securityfocus.com/bid/42761
Xerox 4595 Copier/Printer Unspecified Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/44548
Adobe Shockwave Player 'IML32.dll' CVE-2010-4089 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44521
Adobe Shockwave Player 'IML32.dll' CVE-2010-4087 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44518
Adobe Shockwave Player 'dirapi.dll' CVE-2010-4088 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44519
Adobe Shockwave Player 'dirapi.dll' CVE-2010-4086 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44517
Python Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/44533
Python 'rgbimg' RLE Decoder Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/40365
Python Asyncore Module 'accept()' function Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/43233
Python 'rgbimg' Module ZSIZE Value Buffer Underflow Vulnerability
http://www.securityfocus.com/bid/40361
Python 'rgbimg' Module 'rv' Array Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/40363
GNU glibc Dynamic Linker '$ORIGIN' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44154
GNU glibc Dynamic Linker 'LD_AUDIT' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44347
OpenLDAP 'modrdn' Request Multiple Vulnerabilities
http://www.securityfocus.com/bid/41770
Home FTP Server Directory Traversal Vulnerability
http://www.securityfocus.com/bid/40419
Dovecot Access Control List (ACL) Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/43690
Dovecot Access Control List (ACL) Plugin Security Bypass Weakness
http://www.securityfocus.com/bid/41964
yPlay '.mp3' File Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/40301
Sybase Advantage Data Architect '.sql' File Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44589
GVim DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44588
cformsII Plugin for WordPress 'lib_ajax.php' Multiple HTML Injection Vulnerabilities
http://www.securityfocus.com/bid/44587
Mongoose Web Server URI Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44586
HP Insight Control Performance Management Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/44585
HP Insight Control Performance Management CVE-2010-4100 Arbitrary File Download Vulnerability
http://www.securityfocus.com/bid/44583
Home File Share Server Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44580
XAMPP Cross Site Scripting and Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/44579
SmartOptimizer Null Character Remote Information Disclosure Vulnerability
http://www.securityfocus.com/bid/44578
SmallFTPD GET Request Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44574
Pulse Infotech Flip Wall Component for Joomla! 'catid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/44573
ACDSee Canvas DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44572
Pulse Infotech Sponsor Wall Component for Joomla! 'catid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/44571
Project Jug Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44569
Trend Micro Titanium Maximum Security 2011 'tmtdi.sys' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44567
Elastix Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/44565
Yaws URI Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44564
ProFTPD Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/44562
WSN Links 'search.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/44593
Buffy 'comb' Command Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44577
GNUCash 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44563
CMS WebManager-Pro Cross Site Scripting and SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/44591
Simpli Easy (AFC Simple) Newsletter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/44561
Joomla! 'com_jfuploader' Arbitrary File Upload Vulnerability
http://www.securityfocus.com/bid/44559
2010年11月1日月曜日
1日 月曜日、先負
+ JK-1.2.31 released
http://tomcat.apache.org/connectors-doc/
http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html
ServerProtect 5.8においてスパイウェアパターンファイルの配信ができない現象について
http://www.trendmicro.co.jp/support/news.asp?id=1480
JVN#27868039 GVim における DLL 読み込みに関する脆弱性
http://jvn.jp/jp/JVN27868039/index.html
JVNDB-2010-000051 GVim における DLL 読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000051.html
Yaws 1.89 Directory Traversal
http://www.exploit-db.com/exploits/15371/
[ANNOUNCE] James Server 3.0-M1 released
http://james.apache.org/
+ [ANNOUNCE] Apache POI 3.7 released
http://www.apache.org/dist/poi/release/bin/RELEASE-NOTES.txt
http://poi.apache.org/changes.html
+ Linux kernel 2.6.27.55, 2.6.32.25, 2.6.35.8 released
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.55
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.25
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.8
+ [ANNOUNCE]: Release of iptables-1.4.10
http://www.iptables.org/news.html#
http://www.iptables.org/projects/iptables/files/changes-iptables-1.4.10.txt
+ [ProFTPD-announce] ProFTPD 1.3.3c released!
http://www.proftpd.org/docs/NEWS-1.3.3c
http://www.proftpd.org/docs/RELEASE_NOTES-1.3.3c
+ SA41986: Microsoft Windows DAO 3.6 Object Library Insecure Library Loading Vulnerability
http://secunia.com/advisories/41986/
http://www.securityfocus.com/bid/44541
+ RHSA-2010:0811-1: Important: cups security update
http://rhn.redhat.com/errata/RHSA-2010-0811.html
http://secunia.com/advisories/42009/
+ Oracle Java SE and Java for Business CVE-2010-3552 Remote New Java Plug-in Vulnerability
http://www.securityfocus.com/bid/44023/exploit
- Linux Kernel Reliable Datagram Sockets (RDS) Protocol Local Integer Overflow Vulnerability
http://www.securityfocus.com/bid/44549
[ANNOUNCE] psqlODBC 09.00.0200 Released
http://www.postgresql.org/ftp/odbc/versions/
CESA-2010:0810 (seamonkey)
http://lwn.net/Alerts/412445/
CESA-2010:0810 (seamonkey)
http://lwn.net/Alerts/412446/
CESA-2010:0808 (firefox)
http://lwn.net/Alerts/412447/
CESA-2010:0809 (xulrunner)
http://lwn.net/Alerts/412448/
James Server 3.0-M1 is out!
http://james.apache.org/newsarchive.html#01112010_1
Linux Kernel release: 2.6.35.8
http://www.linux.org/news/2010/10/29/0003.html
Linux Kernel release: 2.6.32.25
http://www.linux.org/news/2010/10/29/0002.html
"PostgreSQL 9 Administration Cookbook" now available
http://www.postgresql.org/about/news.1251
Plack-Middleware-Debug-DBIProfile-0.101 released
http://search.cpan.org/~timb/Plack-Middleware-Debug-DBIProfile-0.101/
Plack-Middleware-Debug-CatalystPluginCache-0.101 released
http://search.cpan.org/~timb/Plack-Middleware-Debug-CatalystPluginCache-0.101/
Memcached-libmemcached-0.4405 released
http://search.cpan.org/~timb/Memcached-libmemcached-0.4405/
UPDATE: Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability
http://www.cisco.com/warp/public/707/cisco-sa-20101027-cs.shtml
Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of the Vulnerability in CiscoWorks Common Services
http://www.cisco.com/warp/public/707/cisco-amb-20101027-cs.shtml
Red Hat : [RHSA-2010:0811-01] Important: cups security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34098
Red Hat : [RHSA-2010:0812-01] Moderate: thunderbird security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34099
Secunia : SonicWALL SSL-VPN End-Point - Buffer Overflow
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34126
Secunia : Adobe Shockwave Player - Chunk Parsing Vulnerability
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34127
Secunia : Adobe Shockwave Player - Chunk Parsing Vulnerability
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34128
Slackware Linux : [SSA:2010-301-01] glibc
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34079
Slackware Linux : [SSA:2010-300-01] seamonkey: Security Update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34088
Ubuntu Security Notice : [USN-1011-3] Xulrunner vulnerability
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34071
「Firefox」にゼロデイ脆弱性、報告から48時間で修正版をリリース
ノーベル平和賞のサイトで悪用確認、最新版3.6.12/3.5.15で解消
http://itpro.nikkeibp.co.jp/article/NEWS/20101101/353642/?ST=security
iPhoneにパスコードロックを無効化する脆弱性
通話履歴や連絡先が丸見え、次期バージョンで対応見込み
http://itpro.nikkeibp.co.jp/article/NEWS/20101101/353644/?ST=security
JVNDB-2010-001842 Apache HTTP Server の mod_cache および mod_dav モジュールにおけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001842.html
JVNDB-2010-001740 Apache Tomcat における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001740.html
JVNDB-2010-001733 LibTIFF の OJPEGReadBufferFill 関数におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001733.html
JVNDB-2010-001895 Oracle Siebel Option Pack for IE の ActiveX コントロールのメモリ初期化処理に脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001895.html
JVNDB-2010-001732 LibTIFF の TIFFroundup マクロにおける整数オーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001732.html
JVNDB-2010-001453 Apache Tomcat における BASIC または DIGEST 認証の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001453.html
JVNDB-2010-001174 Apache HTTP Server の ap_read_request 関数における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001174.html
JVNDB-2010-002219 Oracle Database Server の Job Queue コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002219.html
JVNDB-2010-002218 Oracle Database Server の Change Data Capture コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002218.html
JVNDB-2010-002217 Oracle Database Server の OLAP コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002217.html
JVNDB-2010-002216 Oracle Database Server の Java Virtual Machine コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002216.html
JVNDB-2010-002215 複数の Oracle 製品の Database Control コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002215.html
JVNDB-2010-002214 ActiveCollab のアクセス制御機能における問題
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002214.html
JVNDB-2010-002213 Microsoft Windows Server の Microsoft Cluster Service 内にあるユーザインターフェイスにおけるディスク上のデータを読まれるまたは編集される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002213.html
JVNDB-2010-002212 複数の Microsoft 製品の UpdateFrameTitleForDocument メソッドにおけるスタックベースのバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002212.html
JVNDB-2010-002211 複数の Microsoft 製品の Secure Channel におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002211.html
JVNDB-2010-002210 複数の Microsoft 製品の Remote Procedure Call Subsystem におけるスタックベースのバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002210.html
JVNDB-2010-002209 Microsoft Windows Media Player における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002209.html
JVNDB-2010-000050 Active! mail 6 における HTTP ヘッダインジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000050.html
Security Update for Shockwave Player
http://isc.sans.edu/diary.html?storyid=9847
Cyber Security Awareness Month - Day 30 - Role of the network team
http://isc.sans.edu/diary.html?storyid=9850
SQL Slammer Clean-up: Contacting CERTs
http://isc.sans.edu/diary.html?storyid=9841
SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control Buffer Overflow Lets Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Oct/1024666.html
CUPS IPP Request Processing Bug Lets Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Oct/1024662.html
Asset UPnP Buffer Overflow Vulnerabilities
http://secunia.com/advisories/42044/
XBMC Buffer Overflow Vulnerabilities
http://secunia.com/advisories/42034/
Platinum UPnP Multiple Vulnerabilities
http://secunia.com/advisories/42033/
Microsoft Windows DAO 3.6 Object Library Insecure Library Loading Vulnerability
http://secunia.com/advisories/41986/
IBM OS/400 HTTP Server Denial of Service Vulnerabilities
http://secunia.com/advisories/42017/
Active! mail HTTP Header Injection Vulnerability
http://secunia.com/advisories/42039/
Fedora update for cvs
http://secunia.com/advisories/42041/
CVS Delta Fragment Array Indexing Vulnerability
http://secunia.com/advisories/41079/
4images Cross-Site Scripting and Request Forgery Vulnerabilities
http://secunia.com/advisories/41712/
HP Insight Recovery Cross-Site Scripting and File Download Vulnerabilities
http://secunia.com/advisories/42037/
SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control Buffer Overflow
http://secunia.com/advisories/41644/
HP Insight Orchestration Two Vulnerabilities
http://secunia.com/advisories/42036/
Python smtpd Module Two Denial of Service Vulnerabilities
http://secunia.com/advisories/41968/
HP Insight Managed System Setup Wizard File Disclosure Vulnerability
http://secunia.com/advisories/42038/
HP Insight Control for Linux Cross Site Request Forgery Vulnerability
http://secunia.com/advisories/42040/
TFT Gallery "adminlangfile" Local File Inclusion Vulnerability
http://secunia.com/advisories/42032/
IP.Board Personal Conversation Disclosure Vulnerability
http://secunia.com/advisories/42005/
Red Hat update for cups
http://secunia.com/advisories/42009/
Ubuntu update for openjdk
http://secunia.com/advisories/41972/
Fedora update for glibc
http://secunia.com/advisories/42042/
HP LoadRunner Web Tours Directory Traversal Vulnerability
http://secunia.com/advisories/42021/
Ubuntu update for thunderbird
http://secunia.com/advisories/41996/
Red Hat update for thunderbird
http://secunia.com/advisories/42008/
Fedora update for firefox and xulrunner
http://secunia.com/advisories/42043/
Ubuntu update for xulrunner
http://secunia.com/advisories/42003/
Firefox Memory Corruption Proof of Concept (Simplified)
http://securityreason.com/securityalert/7858
HP Insight Control Virtual Machine Management 6.1.2 XSS CSRF PE
http://securityreason.com/securityalert/7857
HP Virtual Server Environment 6.1.2 Arbitrary File Download
http://securityreason.com/securityalert/7856
Robo-FTP 3.7.4 Directory Traversal Vulnerability
http://securityreason.com/securityalert/7855
Aardvark Topsite 5.2.1 XSS vulnerability
http://securityreason.com/securityalert/7854
IP.Board Personal Conversations System Message Disclosure Issue
http://www.vupen.com/english/advisories/2010/2836
IBM HTTP Server for iSeries Remote Denial of Service Vulnerabilities
http://www.vupen.com/english/advisories/2010/2835
HP Insight Control for Linux Cross Site Request Forgery Vulnerability
http://www.vupen.com/english/advisories/2010/2834
HP Insight Control Performance Management File Download Vulnerability
http://www.vupen.com/english/advisories/2010/2833
HP Insight Control Performance Management Multiple Vulnerabilities
http://www.vupen.com/english/advisories/2010/2832
HP Insight Managed System Setup Wizard File Download Vulnerability
http://www.vupen.com/english/advisories/2010/2831
HP Insight Recovery File Download and Cross Site Scripting Issues
http://www.vupen.com/english/advisories/2010/2830
HP Insight Orchestration Software File Download and Unauthorized Access
http://www.vupen.com/english/advisories/2010/2829
IBM Security Update Fixes ENOVIA Web Services Vulnerability
http://www.vupen.com/english/advisories/2010/2828
IBM WebSphere Portal Semantic Tag Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2010/2827
Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/2826
rPath Security Update Fixes Sudo Privilege Escalation Vulnerabilities
http://www.vupen.com/english/advisories/2010/2825
rPath Security Update Fixes ImageMagick Overflow Vulnerability
http://www.vupen.com/english/advisories/2010/2824
rPath Security Update Fixes lftp File Overwrite Vulnerability
http://www.vupen.com/english/advisories/2010/2823
rPath Security Update Fixes cURL Data Callback Excessive Length
http://www.vupen.com/english/advisories/2010/2822
rPath Security Update Fixes Automake Insecure Permissions Issue
http://www.vupen.com/english/advisories/2010/2821
rPath Security Update Fixes Cpio and Tar Buffer Overflow Vulnerability
http://www.vupen.com/english/advisories/2010/2820
SuSE Security Update Fixes Kernel Privilege Escalation Vulnerabilities
http://www.vupen.com/english/advisories/2010/2819
SuSE Security Update Fixes Glibc Privilege Escalation Vulnerabilities
http://www.vupen.com/english/advisories/2010/2818
Slackware Security Update Fixes Firefox Code Execution Vulnerability
http://www.vupen.com/english/advisories/2010/2817
Slackware Security Update Fixes Glibc Privilege Escalation Vulnerability
http://www.vupen.com/english/advisories/2010/2816
Ubuntu Security Update Fixes OpenJDK Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/2815
Ubuntu Security Update Fixes Thunderbird Code Execution Vulnerability
http://www.vupen.com/english/advisories/2010/2814
Mandriva Security Update Fixes Xulrunner Code Execution Vulnerability
http://www.vupen.com/english/advisories/2010/2813
NetBSD Security Update Fixes OpenSSL Use-after-free Vulnerability
http://www.vupen.com/english/advisories/2010/2812
Buffy v1.3 Remote Directory Traversal Exploit
http://www.exploit-db.com/exploits/15368/
SmallFTPD v1.0.3 Remote Directory Traversal Vulnerability
http://www.exploit-db.com/exploits/15358/
yPlay v2.4.5 Denial of Service Vulnerability
http://www.exploit-db.com/exploits/15356/
Linux Kernel 'video4linux' IOCTL and IP Multicast 'getsockopt' Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/43239
Mozilla Firefox 3.5/3.6 Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44425
bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability
http://www.securityfocus.com/bid/43331
Pidgin 'libpurple' Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/44283
Adobe Shockwave Player 'SetVertexArray()' CVE-2010-4090 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44515
Adobe Shockwave Player 'dirapi.dll' CVE-2010-3655 Stack Overflow Vulnerability
http://www.securityfocus.com/bid/44516
Adobe Acrobat, Reader and Flash CVE-2010-3654 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/44504
Platinum UPnP Library Post UPnP Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44522
Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
http://www.securityfocus.com/bid/36935
Oracle Java SE and Java for Business CVE-2010-3553 Remote Swing Vulnerability
http://www.securityfocus.com/bid/44035
Oracle Java SE and Java for Business CVE-2010-3574 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44011
Oracle Java SE and Java for Business CVE-2010-3551 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44009
Oracle Java SE and Java for Business CVE-2010-3548 Remote JNDI Vulnerability
http://www.securityfocus.com/bid/44017
Oracle Java SE and Java for Business CVE-2010-3541 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44032
Oracle Java SE and Java for Business CVE-2010-3549 HTTP Response Splitting Vulnerability
http://www.securityfocus.com/bid/44027
Oracle Communications Messaging Server CVE-2010-3564 Webmail Remote Vulnerability
http://www.securityfocus.com/bid/43963
Cisco AnyConnect VPN Trial Client Insecure Temporary File Creation Vulnerability
http://www.securityfocus.com/bid/44108
Oracle Java SE and Java for Business CVE-2010-3562 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43979
Oracle Java SE and Java for Business CVE-2010-3557 Remote Swing Vulnerability
http://www.securityfocus.com/bid/44014
Oracle Java SE and Java for Business CVE-2010-3554 Remote CORBA Vulnerability
http://www.securityfocus.com/bid/43994
Oracle Java SE and Java for Business CVE-2010-3573 Same Origin Bypass Vulnerability
http://www.securityfocus.com/bid/44028
Oracle Java SE and Java for Business CVE-2010-3565 JPEGImageWriter.writeImage Vulnerability
http://www.securityfocus.com/bid/43985
Oracle Java SE and Java for Business 'defaultReadObject' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/44016
Oracle Java SE and Java for Business CVE-2010-3568 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/44012
Oracle Java SE and Java for Business CVE-2010-3561 Remote CORBA Vulnerability
http://www.securityfocus.com/bid/44013
Oracle Java SE and Java for Business CVE-2010-3567 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43992
Oracle Java SE and Java for Business CVE-2010-3571 ICC Profile Vulnerability
http://www.securityfocus.com/bid/43965
Oracle Java SE and Java for Business CVE-2010-3572 Remote Sound Vulnerability
http://www.securityfocus.com/bid/44030
Oracle Java SE and Java for Business CVE-2010-3570 Remote Deployment Toolkit Vulnerability
http://www.securityfocus.com/bid/44020
Oracle Java SE and Java for Business CVE-2010-3566 ICC Profile Vulnerability
http://www.securityfocus.com/bid/43988
Oracle Java SE and Java for Business CVE-2010-3560 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44024
Oracle Java SE and Java for Business CVE-2010-3558 Remote Java Web Start Vulnerability
http://www.securityfocus.com/bid/44021
Oracle Java SE and Java for Business CVE-2010-3563 BasicServiceImpl Vulnerability
http://www.securityfocus.com/bid/43999
Oracle Java SE and Java for Business CVE-2010-3559 HeadspaceSoundbank.nGetName Vulnerability
http://www.securityfocus.com/bid/44026
Oracle Java SE and Java for Business CVE-2010-3556 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43971
Oracle Java SE and Java for Business CVE-2010-3555 Remote ActiveX Plug-in Vulnerability
http://www.securityfocus.com/bid/44038
MIT Kerberos GSS-API Checksum NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/40235
Oracle Java SE and Java for Business CVE-2010-3552 Remote New Java Plug-in Vulnerability
http://www.securityfocus.com/bid/44023
Oracle Java SE and Java for Business CVE-2010-3550 Remote Java Web Start Vulnerability
http://www.securityfocus.com/bid/44040
Apache APR-util 'apr_brigade_split_line' Denial of Service Vulnerability
http://www.securityfocus.com/bid/43673
GNU glibc Dynamic Linker 'LD_AUDIT' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44347
Adobe Shockwave Player 'dirapi.dll' CVE-2010-2581 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44512
Adobe Shockwave Player 'TextXtra.x32' Module Heap Based Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44514
Red Hat Certificate System 'agent/request/op.cgi' Security Bypass Vulnerability
http://www.securityfocus.com/bid/35104
CUPS 'cupsFileOpen' function Symlink Attack Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/41131
FrontAccounting Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/44558
FrontAccounting Multiple HTML Injection Vulnerabilities
http://www.securityfocus.com/bid/44557
FrontAccounting Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/44556
Invision Power Board IP.Board Information Disclosure Vulnerability
http://www.securityfocus.com/bid/44553
Linux Kernel Reliable Datagram Sockets (RDS) Protocol Local Integer Overflow Vulnerability
http://www.securityfocus.com/bid/44549
Xerox 4595 Copier/Printer Unspecified Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/44548
Platinum UPnP Library Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/44547
HP Insight Recovery Unspecified Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/44545
4images Cross Site Request Forgery and Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/44544
Home FTP Server Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44543
HP Insight Recovery Arbitrary File Download Vulnerability
http://www.securityfocus.com/bid/44542
Microsoft Data Access Objects (DAO) 'dao360.dll' DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44541
Active! Mail HTTP Header Injection Vulnerability
http://www.securityfocus.com/bid/44540
PHPKIT 'overview.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/44539
My Gaming Ladder MGL Combo System 'game.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/44538
HP Insight Control for Linux Cross Site Request Forgery Vulnerability
http://www.securityfocus.com/bid/44537
SonicWALL SSL-VPN E-Class ActiveX Control Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/44535
HP Insight Orchestration Multiple Unspecified Vulnerabilities
http://www.securityfocus.com/bid/44534
Python Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/44533
HP Insight Managed System Setup Wizard Arbitrary File Download Vulnerability
http://www.securityfocus.com/bid/44532
http://tomcat.apache.org/connectors-doc/
http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html
ServerProtect 5.8においてスパイウェアパターンファイルの配信ができない現象について
http://www.trendmicro.co.jp/support/news.asp?id=1480
JVN#27868039 GVim における DLL 読み込みに関する脆弱性
http://jvn.jp/jp/JVN27868039/index.html
JVNDB-2010-000051 GVim における DLL 読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000051.html
Yaws 1.89 Directory Traversal
http://www.exploit-db.com/exploits/15371/
[ANNOUNCE] James Server 3.0-M1 released
http://james.apache.org/
+ [ANNOUNCE] Apache POI 3.7 released
http://www.apache.org/dist/poi/release/bin/RELEASE-NOTES.txt
http://poi.apache.org/changes.html
+ Linux kernel 2.6.27.55, 2.6.32.25, 2.6.35.8 released
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.55
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.25
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.8
+ [ANNOUNCE]: Release of iptables-1.4.10
http://www.iptables.org/news.html#
http://www.iptables.org/projects/iptables/files/changes-iptables-1.4.10.txt
+ [ProFTPD-announce] ProFTPD 1.3.3c released!
http://www.proftpd.org/docs/NEWS-1.3.3c
http://www.proftpd.org/docs/RELEASE_NOTES-1.3.3c
+ SA41986: Microsoft Windows DAO 3.6 Object Library Insecure Library Loading Vulnerability
http://secunia.com/advisories/41986/
http://www.securityfocus.com/bid/44541
+ RHSA-2010:0811-1: Important: cups security update
http://rhn.redhat.com/errata/RHSA-2010-0811.html
http://secunia.com/advisories/42009/
+ Oracle Java SE and Java for Business CVE-2010-3552 Remote New Java Plug-in Vulnerability
http://www.securityfocus.com/bid/44023/exploit
- Linux Kernel Reliable Datagram Sockets (RDS) Protocol Local Integer Overflow Vulnerability
http://www.securityfocus.com/bid/44549
[ANNOUNCE] psqlODBC 09.00.0200 Released
http://www.postgresql.org/ftp/odbc/versions/
CESA-2010:0810 (seamonkey)
http://lwn.net/Alerts/412445/
CESA-2010:0810 (seamonkey)
http://lwn.net/Alerts/412446/
CESA-2010:0808 (firefox)
http://lwn.net/Alerts/412447/
CESA-2010:0809 (xulrunner)
http://lwn.net/Alerts/412448/
James Server 3.0-M1 is out!
http://james.apache.org/newsarchive.html#01112010_1
Linux Kernel release: 2.6.35.8
http://www.linux.org/news/2010/10/29/0003.html
Linux Kernel release: 2.6.32.25
http://www.linux.org/news/2010/10/29/0002.html
"PostgreSQL 9 Administration Cookbook" now available
http://www.postgresql.org/about/news.1251
Plack-Middleware-Debug-DBIProfile-0.101 released
http://search.cpan.org/~timb/Plack-Middleware-Debug-DBIProfile-0.101/
Plack-Middleware-Debug-CatalystPluginCache-0.101 released
http://search.cpan.org/~timb/Plack-Middleware-Debug-CatalystPluginCache-0.101/
Memcached-libmemcached-0.4405 released
http://search.cpan.org/~timb/Memcached-libmemcached-0.4405/
UPDATE: Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability
http://www.cisco.com/warp/public/707/cisco-sa-20101027-cs.shtml
Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of the Vulnerability in CiscoWorks Common Services
http://www.cisco.com/warp/public/707/cisco-amb-20101027-cs.shtml
Red Hat : [RHSA-2010:0811-01] Important: cups security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34098
Red Hat : [RHSA-2010:0812-01] Moderate: thunderbird security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34099
Secunia : SonicWALL SSL-VPN End-Point - Buffer Overflow
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34126
Secunia : Adobe Shockwave Player - Chunk Parsing Vulnerability
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34127
Secunia : Adobe Shockwave Player - Chunk Parsing Vulnerability
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34128
Slackware Linux : [SSA:2010-301-01] glibc
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34079
Slackware Linux : [SSA:2010-300-01] seamonkey: Security Update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34088
Ubuntu Security Notice : [USN-1011-3] Xulrunner vulnerability
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34071
「Firefox」にゼロデイ脆弱性、報告から48時間で修正版をリリース
ノーベル平和賞のサイトで悪用確認、最新版3.6.12/3.5.15で解消
http://itpro.nikkeibp.co.jp/article/NEWS/20101101/353642/?ST=security
iPhoneにパスコードロックを無効化する脆弱性
通話履歴や連絡先が丸見え、次期バージョンで対応見込み
http://itpro.nikkeibp.co.jp/article/NEWS/20101101/353644/?ST=security
JVNDB-2010-001842 Apache HTTP Server の mod_cache および mod_dav モジュールにおけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001842.html
JVNDB-2010-001740 Apache Tomcat における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001740.html
JVNDB-2010-001733 LibTIFF の OJPEGReadBufferFill 関数におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001733.html
JVNDB-2010-001895 Oracle Siebel Option Pack for IE の ActiveX コントロールのメモリ初期化処理に脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001895.html
JVNDB-2010-001732 LibTIFF の TIFFroundup マクロにおける整数オーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001732.html
JVNDB-2010-001453 Apache Tomcat における BASIC または DIGEST 認証の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001453.html
JVNDB-2010-001174 Apache HTTP Server の ap_read_request 関数における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001174.html
JVNDB-2010-002219 Oracle Database Server の Job Queue コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002219.html
JVNDB-2010-002218 Oracle Database Server の Change Data Capture コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002218.html
JVNDB-2010-002217 Oracle Database Server の OLAP コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002217.html
JVNDB-2010-002216 Oracle Database Server の Java Virtual Machine コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002216.html
JVNDB-2010-002215 複数の Oracle 製品の Database Control コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002215.html
JVNDB-2010-002214 ActiveCollab のアクセス制御機能における問題
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002214.html
JVNDB-2010-002213 Microsoft Windows Server の Microsoft Cluster Service 内にあるユーザインターフェイスにおけるディスク上のデータを読まれるまたは編集される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002213.html
JVNDB-2010-002212 複数の Microsoft 製品の UpdateFrameTitleForDocument メソッドにおけるスタックベースのバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002212.html
JVNDB-2010-002211 複数の Microsoft 製品の Secure Channel におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002211.html
JVNDB-2010-002210 複数の Microsoft 製品の Remote Procedure Call Subsystem におけるスタックベースのバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002210.html
JVNDB-2010-002209 Microsoft Windows Media Player における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002209.html
JVNDB-2010-000050 Active! mail 6 における HTTP ヘッダインジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000050.html
Security Update for Shockwave Player
http://isc.sans.edu/diary.html?storyid=9847
Cyber Security Awareness Month - Day 30 - Role of the network team
http://isc.sans.edu/diary.html?storyid=9850
SQL Slammer Clean-up: Contacting CERTs
http://isc.sans.edu/diary.html?storyid=9841
SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control Buffer Overflow Lets Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Oct/1024666.html
CUPS IPP Request Processing Bug Lets Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Oct/1024662.html
Asset UPnP Buffer Overflow Vulnerabilities
http://secunia.com/advisories/42044/
XBMC Buffer Overflow Vulnerabilities
http://secunia.com/advisories/42034/
Platinum UPnP Multiple Vulnerabilities
http://secunia.com/advisories/42033/
Microsoft Windows DAO 3.6 Object Library Insecure Library Loading Vulnerability
http://secunia.com/advisories/41986/
IBM OS/400 HTTP Server Denial of Service Vulnerabilities
http://secunia.com/advisories/42017/
Active! mail HTTP Header Injection Vulnerability
http://secunia.com/advisories/42039/
Fedora update for cvs
http://secunia.com/advisories/42041/
CVS Delta Fragment Array Indexing Vulnerability
http://secunia.com/advisories/41079/
4images Cross-Site Scripting and Request Forgery Vulnerabilities
http://secunia.com/advisories/41712/
HP Insight Recovery Cross-Site Scripting and File Download Vulnerabilities
http://secunia.com/advisories/42037/
SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control Buffer Overflow
http://secunia.com/advisories/41644/
HP Insight Orchestration Two Vulnerabilities
http://secunia.com/advisories/42036/
Python smtpd Module Two Denial of Service Vulnerabilities
http://secunia.com/advisories/41968/
HP Insight Managed System Setup Wizard File Disclosure Vulnerability
http://secunia.com/advisories/42038/
HP Insight Control for Linux Cross Site Request Forgery Vulnerability
http://secunia.com/advisories/42040/
TFT Gallery "adminlangfile" Local File Inclusion Vulnerability
http://secunia.com/advisories/42032/
IP.Board Personal Conversation Disclosure Vulnerability
http://secunia.com/advisories/42005/
Red Hat update for cups
http://secunia.com/advisories/42009/
Ubuntu update for openjdk
http://secunia.com/advisories/41972/
Fedora update for glibc
http://secunia.com/advisories/42042/
HP LoadRunner Web Tours Directory Traversal Vulnerability
http://secunia.com/advisories/42021/
Ubuntu update for thunderbird
http://secunia.com/advisories/41996/
Red Hat update for thunderbird
http://secunia.com/advisories/42008/
Fedora update for firefox and xulrunner
http://secunia.com/advisories/42043/
Ubuntu update for xulrunner
http://secunia.com/advisories/42003/
Firefox Memory Corruption Proof of Concept (Simplified)
http://securityreason.com/securityalert/7858
HP Insight Control Virtual Machine Management 6.1.2 XSS CSRF PE
http://securityreason.com/securityalert/7857
HP Virtual Server Environment 6.1.2 Arbitrary File Download
http://securityreason.com/securityalert/7856
Robo-FTP 3.7.4 Directory Traversal Vulnerability
http://securityreason.com/securityalert/7855
Aardvark Topsite 5.2.1 XSS vulnerability
http://securityreason.com/securityalert/7854
IP.Board Personal Conversations System Message Disclosure Issue
http://www.vupen.com/english/advisories/2010/2836
IBM HTTP Server for iSeries Remote Denial of Service Vulnerabilities
http://www.vupen.com/english/advisories/2010/2835
HP Insight Control for Linux Cross Site Request Forgery Vulnerability
http://www.vupen.com/english/advisories/2010/2834
HP Insight Control Performance Management File Download Vulnerability
http://www.vupen.com/english/advisories/2010/2833
HP Insight Control Performance Management Multiple Vulnerabilities
http://www.vupen.com/english/advisories/2010/2832
HP Insight Managed System Setup Wizard File Download Vulnerability
http://www.vupen.com/english/advisories/2010/2831
HP Insight Recovery File Download and Cross Site Scripting Issues
http://www.vupen.com/english/advisories/2010/2830
HP Insight Orchestration Software File Download and Unauthorized Access
http://www.vupen.com/english/advisories/2010/2829
IBM Security Update Fixes ENOVIA Web Services Vulnerability
http://www.vupen.com/english/advisories/2010/2828
IBM WebSphere Portal Semantic Tag Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2010/2827
Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/2826
rPath Security Update Fixes Sudo Privilege Escalation Vulnerabilities
http://www.vupen.com/english/advisories/2010/2825
rPath Security Update Fixes ImageMagick Overflow Vulnerability
http://www.vupen.com/english/advisories/2010/2824
rPath Security Update Fixes lftp File Overwrite Vulnerability
http://www.vupen.com/english/advisories/2010/2823
rPath Security Update Fixes cURL Data Callback Excessive Length
http://www.vupen.com/english/advisories/2010/2822
rPath Security Update Fixes Automake Insecure Permissions Issue
http://www.vupen.com/english/advisories/2010/2821
rPath Security Update Fixes Cpio and Tar Buffer Overflow Vulnerability
http://www.vupen.com/english/advisories/2010/2820
SuSE Security Update Fixes Kernel Privilege Escalation Vulnerabilities
http://www.vupen.com/english/advisories/2010/2819
SuSE Security Update Fixes Glibc Privilege Escalation Vulnerabilities
http://www.vupen.com/english/advisories/2010/2818
Slackware Security Update Fixes Firefox Code Execution Vulnerability
http://www.vupen.com/english/advisories/2010/2817
Slackware Security Update Fixes Glibc Privilege Escalation Vulnerability
http://www.vupen.com/english/advisories/2010/2816
Ubuntu Security Update Fixes OpenJDK Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/2815
Ubuntu Security Update Fixes Thunderbird Code Execution Vulnerability
http://www.vupen.com/english/advisories/2010/2814
Mandriva Security Update Fixes Xulrunner Code Execution Vulnerability
http://www.vupen.com/english/advisories/2010/2813
NetBSD Security Update Fixes OpenSSL Use-after-free Vulnerability
http://www.vupen.com/english/advisories/2010/2812
Buffy v1.3 Remote Directory Traversal Exploit
http://www.exploit-db.com/exploits/15368/
SmallFTPD v1.0.3 Remote Directory Traversal Vulnerability
http://www.exploit-db.com/exploits/15358/
yPlay v2.4.5 Denial of Service Vulnerability
http://www.exploit-db.com/exploits/15356/
Linux Kernel 'video4linux' IOCTL and IP Multicast 'getsockopt' Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/43239
Mozilla Firefox 3.5/3.6 Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44425
bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability
http://www.securityfocus.com/bid/43331
Pidgin 'libpurple' Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/44283
Adobe Shockwave Player 'SetVertexArray()' CVE-2010-4090 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44515
Adobe Shockwave Player 'dirapi.dll' CVE-2010-3655 Stack Overflow Vulnerability
http://www.securityfocus.com/bid/44516
Adobe Acrobat, Reader and Flash CVE-2010-3654 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/44504
Platinum UPnP Library Post UPnP Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44522
Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
http://www.securityfocus.com/bid/36935
Oracle Java SE and Java for Business CVE-2010-3553 Remote Swing Vulnerability
http://www.securityfocus.com/bid/44035
Oracle Java SE and Java for Business CVE-2010-3574 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44011
Oracle Java SE and Java for Business CVE-2010-3551 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44009
Oracle Java SE and Java for Business CVE-2010-3548 Remote JNDI Vulnerability
http://www.securityfocus.com/bid/44017
Oracle Java SE and Java for Business CVE-2010-3541 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44032
Oracle Java SE and Java for Business CVE-2010-3549 HTTP Response Splitting Vulnerability
http://www.securityfocus.com/bid/44027
Oracle Communications Messaging Server CVE-2010-3564 Webmail Remote Vulnerability
http://www.securityfocus.com/bid/43963
Cisco AnyConnect VPN Trial Client Insecure Temporary File Creation Vulnerability
http://www.securityfocus.com/bid/44108
Oracle Java SE and Java for Business CVE-2010-3562 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43979
Oracle Java SE and Java for Business CVE-2010-3557 Remote Swing Vulnerability
http://www.securityfocus.com/bid/44014
Oracle Java SE and Java for Business CVE-2010-3554 Remote CORBA Vulnerability
http://www.securityfocus.com/bid/43994
Oracle Java SE and Java for Business CVE-2010-3573 Same Origin Bypass Vulnerability
http://www.securityfocus.com/bid/44028
Oracle Java SE and Java for Business CVE-2010-3565 JPEGImageWriter.writeImage Vulnerability
http://www.securityfocus.com/bid/43985
Oracle Java SE and Java for Business 'defaultReadObject' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/44016
Oracle Java SE and Java for Business CVE-2010-3568 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/44012
Oracle Java SE and Java for Business CVE-2010-3561 Remote CORBA Vulnerability
http://www.securityfocus.com/bid/44013
Oracle Java SE and Java for Business CVE-2010-3567 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43992
Oracle Java SE and Java for Business CVE-2010-3571 ICC Profile Vulnerability
http://www.securityfocus.com/bid/43965
Oracle Java SE and Java for Business CVE-2010-3572 Remote Sound Vulnerability
http://www.securityfocus.com/bid/44030
Oracle Java SE and Java for Business CVE-2010-3570 Remote Deployment Toolkit Vulnerability
http://www.securityfocus.com/bid/44020
Oracle Java SE and Java for Business CVE-2010-3566 ICC Profile Vulnerability
http://www.securityfocus.com/bid/43988
Oracle Java SE and Java for Business CVE-2010-3560 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44024
Oracle Java SE and Java for Business CVE-2010-3558 Remote Java Web Start Vulnerability
http://www.securityfocus.com/bid/44021
Oracle Java SE and Java for Business CVE-2010-3563 BasicServiceImpl Vulnerability
http://www.securityfocus.com/bid/43999
Oracle Java SE and Java for Business CVE-2010-3559 HeadspaceSoundbank.nGetName Vulnerability
http://www.securityfocus.com/bid/44026
Oracle Java SE and Java for Business CVE-2010-3556 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43971
Oracle Java SE and Java for Business CVE-2010-3555 Remote ActiveX Plug-in Vulnerability
http://www.securityfocus.com/bid/44038
MIT Kerberos GSS-API Checksum NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/40235
Oracle Java SE and Java for Business CVE-2010-3552 Remote New Java Plug-in Vulnerability
http://www.securityfocus.com/bid/44023
Oracle Java SE and Java for Business CVE-2010-3550 Remote Java Web Start Vulnerability
http://www.securityfocus.com/bid/44040
Apache APR-util 'apr_brigade_split_line' Denial of Service Vulnerability
http://www.securityfocus.com/bid/43673
GNU glibc Dynamic Linker 'LD_AUDIT' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44347
Adobe Shockwave Player 'dirapi.dll' CVE-2010-2581 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44512
Adobe Shockwave Player 'TextXtra.x32' Module Heap Based Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44514
Red Hat Certificate System 'agent/request/op.cgi' Security Bypass Vulnerability
http://www.securityfocus.com/bid/35104
CUPS 'cupsFileOpen' function Symlink Attack Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/41131
FrontAccounting Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/44558
FrontAccounting Multiple HTML Injection Vulnerabilities
http://www.securityfocus.com/bid/44557
FrontAccounting Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/44556
Invision Power Board IP.Board Information Disclosure Vulnerability
http://www.securityfocus.com/bid/44553
Linux Kernel Reliable Datagram Sockets (RDS) Protocol Local Integer Overflow Vulnerability
http://www.securityfocus.com/bid/44549
Xerox 4595 Copier/Printer Unspecified Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/44548
Platinum UPnP Library Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/44547
HP Insight Recovery Unspecified Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/44545
4images Cross Site Request Forgery and Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/44544
Home FTP Server Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44543
HP Insight Recovery Arbitrary File Download Vulnerability
http://www.securityfocus.com/bid/44542
Microsoft Data Access Objects (DAO) 'dao360.dll' DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44541
Active! Mail HTTP Header Injection Vulnerability
http://www.securityfocus.com/bid/44540
PHPKIT 'overview.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/44539
My Gaming Ladder MGL Combo System 'game.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/44538
HP Insight Control for Linux Cross Site Request Forgery Vulnerability
http://www.securityfocus.com/bid/44537
SonicWALL SSL-VPN E-Class ActiveX Control Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/44535
HP Insight Orchestration Multiple Unspecified Vulnerabilities
http://www.securityfocus.com/bid/44534
Python Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/44533
HP Insight Managed System Setup Wizard Arbitrary File Download Vulnerability
http://www.securityfocus.com/bid/44532
登録:
投稿 (Atom)