吉祥寺北口システムが気になった記事をクリップしています。タイトルから元記事にリンクしています。タグは記事タイトルを形態素分析しています。たまにコメントをつけています。

Advisory

• JVNVU#91880087: CISA ICS Advisory / ICS Medical Advisory(2026年06月09日)
  • 2026(393)
  • 91880087(1)
  • Advisory(309)
  • CISA(103)
  • ICS(14)
  • JVNVU(2689)
  • Medical(55)
• May 2026 Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (Multiple CVEs)
  • 2026(393)
  • Advisory(309)
  • CVEs(7)
  • Endpoint(100)
  • EPMM(9)
  • Ivanti(44)
  • Manager(370)
  • May(123)
  • Mobile(583)
  • multiple(140)
  • Security(5950)
• PDF /GoToR action argv injection enables single-click RCE via –gtk-module dlopen · Advisory · mate-desktop/atril · GitHub
  • Action(96)
  • Advisory(309)
  • argv(1)
  • atril(1)
  • Click(39)
  • Desktop(487)
  • dlopen(1)
  • enables(19)
  • GitHub(1102)
  • GoToR(1)
  • GTK(2)
  • Injection(75)
  • Mate(13)
  • Module(31)
  • PDF(332)
  • RCE(42)
  • Single(42)
  • via(90)
• Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface · Advisory · FreePBX/security-reporting · GitHub
  • Advisory(309)
  • coded(4)
  • credentials(25)
  • FreePBX(1)
  • GitHub(1102)
  • Hard(19)
  • in(2678)
  • Interface(44)
  • of(3552)
  • Reporting(18)
  • Security(5950)
  • UCP(3)
  • Unauthenticated(22)
  • Use(197)
  • Vulnerability(599)
• XML Node Prototype Pollution Patch Bypass · Advisory · n8n-io/n8n · GitHub
  • Advisory(309)
  • Bypass(80)
  • GitHub(1102)
  • IO(118)
  • Node(139)
  • Patch(117)
  • Pollution(6)
  • prototype(16)
  • XML(84)
• PowerDNS Security Advisory 2026-06: Multiple Issues – PowerDNS Authoritative Server documentation
  • 2026(393)
  • Advisory(309)
  • Authoritative(19)
  • Documentation(67)
  • issues(118)
  • multiple(140)
  • PowerDNS(41)
  • Security(5950)
  • Server(798)
• Security Advisory
  • Advisory(309)
  • Security(5950)
• May 2026 Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (Multiple CVEs)
  • 2026(393)
  • Advisory(309)
  • CVEs(7)
  • Endpoint(100)
  • EPMM(9)
  • Ivanti(44)
  • Manager(370)
  • May(123)
  • Mobile(583)
  • multiple(140)
  • Security(5950)
• Oracle Critical Patch Update Advisory – April 2026
  • 2026(393)
  • Advisory(309)
  • April(71)
  • Critical(248)
  • Oracle(942)
  • Patch(117)
  • Update(1185)
• Race condition vulnerability leads to arbitrary package installation as root · Advisory · PackageKit/PackageKit · GitHub
  • Advisory(309)
  • Arbitrary(36)
  • As(328)
  • condition(12)
  • GitHub(1102)
  • installation(8)
  • Leads(22)
  • package(46)
  • PackageKit(2)
  • race(16)
  • root(56)
  • to(3515)
  • Vulnerability(599)
• Race condition vulnerability leads to arbitrary package installation as root · Advisory · PackageKit/PackageKit · GitHub
  • Advisory(309)
  • Arbitrary(36)
  • As(328)
  • condition(12)
  • GitHub(1102)
  • installation(8)
  • Leads(22)
  • package(46)
  • PackageKit(2)
  • race(16)
  • root(56)
  • to(3515)
  • Vulnerability(599)
• Argument injection via newline in PHP INI values forwarded to child processes · Advisory · sebastianbergmann/phpunit · GitHub
  • Advisory(309)
  • argument(2)
  • Child(11)
  • forwarded(1)
  • GitHub(1102)
  • in(2678)
  • INI(1)
  • Injection(75)
  • newline(1)
  • PHP(182)
  • PHPUnit(2)
  • processes(7)
  • sebastianbergmann(1)
  • to(3515)
  • VALUES(10)
  • via(90)
• Oracle Critical Patch Update Advisory – April 2026
  • 2026(393)
  • Advisory(309)
  • April(71)
  • Critical(248)
  • Oracle(942)
  • Patch(117)
  • Update(1185)
• Unauthenticated remote code execution due to SSH command-line argument injection · Advisory · cockpit-project/cockpit · GitHub
  • Advisory(309)
  • argument(2)
  • Cockpit(6)
  • Code(496)
  • Command(86)
  • due(50)
  • execution(133)
  • GitHub(1102)
  • Injection(75)
  • LINE(2576)
  • Project(472)
  • Remote(218)
  • SSH(65)
  • to(3515)
  • Unauthenticated(22)
• JVNVU#96083153: OpenSSLにおける複数の脆弱性(OpenSSL Security Advisory [7th April 2026])
  • 2026(393)
  • 96083153(2)
  • Advisory(309)
  • April(71)
  • JVNVU(2689)
  • openssl(229)
  • Security(5950)
  • th(153)
  • 脆弱(3304)
  • 複数(2755)
• JVNVU#96083153: OpenSSLにおける複数の脆弱性(OpenSSL Security Advisory [7th April 2026])
  • 2026(393)
  • 96083153(2)
  • Advisory(309)
  • April(71)
  • JVNVU(2689)
  • openssl(229)
  • Security(5950)
  • th(153)
  • 脆弱(3304)
  • 複数(2755)
• Oracle Security Alert Advisory – CVE-2026-21992
  • 2026(393)
  • 21992(2)
  • Advisory(309)
  • Alert(68)
  • CVE-(1634)
  • Oracle(942)
  • Security(5950)
• RCE via SQL Mode of Merge Node · Advisory · n8n-io/n8n · GitHub
  • Advisory(309)
  • GitHub(1102)
  • IO(118)
  • merge(7)
  • Mode(95)
  • Node(139)
  • of(3552)
  • RCE(42)
  • SQL(340)
  • via(90)
• Oracle Security Alert Advisory – CVE-2026-21992
  • 2026(393)
  • 21992(2)
  • Advisory(309)
  • Alert(68)
  • CVE-(1634)
  • Oracle(942)
  • Security(5950)
• Jenkins Security Advisory 2026-03-18
  • 18(441)
  • 2026(393)
  • Advisory(309)
  • Jenkins(21)
  • Security(5950)
• JVNVU#92815756: OpenSSLにおけるTLS 1.3鍵交換グループの選択に関する問題(OpenSSL Security Advisory [13th March 2026])
  • 13(483)
  • 2026(393)
  • 92815756(2)
  • Advisory(309)
  • JVNVU(2689)
  • March(46)
  • openssl(229)
  • Security(5950)
  • th(153)
  • TLS(212)
  • グループ(2930)
  • 交換(371)
  • 問題(1741)
  • 選択(213)
• JVNVU#92815756: OpenSSLにおけるTLS 1.3鍵交換グループの選択に関する問題(OpenSSL Security Advisory [13th March 2026])
  • 13(483)
  • 2026(393)
  • 92815756(2)
  • Advisory(309)
  • JVNVU(2689)
  • March(46)
  • openssl(229)
  • Security(5950)
  • th(153)
  • TLS(212)
  • グループ(2930)
  • 交換(371)
  • 問題(1741)
  • 選択(213)
• Jenkins Security Advisory 2026-02-18
  • 18(441)
  • 2026(393)
  • Advisory(309)
  • Jenkins(21)
  • Security(5950)
• Zyxel security advisory for null pointer dereference and command injection vulnerabilities in certain 4G LTE/5G NR CPE, DSL/Ethernet CPE, Fiber ONTs, Security Routers, and Wireless Extenders | Zyxel Networks
  • Advisory(309)
  • and(3574)
  • Certain(11)
  • Command(86)
  • CPE(4)
  • dereference(3)
  • DSL-(9)
  • Ethernet(46)
  • Extenders(1)
  • Fiber(7)
  • for(5713)
  • in(2678)
  • Injection(75)
  • LTE(242)
  • Networks(230)
  • NR(11)
  • Null(32)
  • ONTs(1)
  • Pointer(7)
  • Routers(17)
  • Security(5950)
  • Vulnerabilities(250)
  • Wireless(58)
  • ZyXEL(9)
• JVNVU#91919266: OpenSSLにおける複数の脆弱性(OpenSSL Security Advisory [27th January 2026])
  • 2026(393)
  • 27(360)
  • 91919266(3)
  • Advisory(309)
  • January(81)
  • JVNVU(2689)
  • openssl(229)
  • Security(5950)
  • th(153)
  • 脆弱(3304)
  • 複数(2755)
• Local Privilege Escalation via TOCTOU Race Condition in Fido Script Handling · Advisory · pbatard/rufus · GitHub
  • Advisory(309)
  • condition(12)
  • escalation(36)
  • FIDO(74)
  • GitHub(1102)
  • Handling(20)
  • in(2678)
  • local(93)
  • pbatard(1)
  • privilege(51)
  • race(16)
  • Rufus(5)
  • Script(14)
  • TOCTOU(6)
  • via(90)
• JVNVU#91919266: OpenSSLにおける複数の脆弱性(OpenSSL Security Advisory [27th January 2026])
  • 2026(393)
  • 27(360)
  • 91919266(3)
  • Advisory(309)
  • January(81)
  • JVNVU(2689)
  • openssl(229)
  • Security(5950)
  • th(153)
  • 脆弱(3304)
  • 複数(2755)
• JVNVU#91919266: OpenSSLにおける複数の脆弱性(OpenSSL Security Advisory [27th January 2026])
  • 2026(393)
  • 27(360)
  • 91919266(3)
  • Advisory(309)
  • January(81)
  • JVNVU(2689)
  • openssl(229)
  • Security(5950)
  • th(153)
  • 脆弱(3304)
  • 複数(2755)
• Redis Horizontal Scaling Insecure Deserialization · Advisory · laravel/reverb · GitHub
  • Advisory(309)
  • deserialization(4)
  • GitHub(1102)
  • Horizontal(1)
  • insecure(10)
  • Laravel(5)
  • Redis(73)
  • reverb(1)
  • Scaling(53)
• Oracle Critical Patch Update Advisory – January 2026
  • 2026(393)
  • Advisory(309)
  • Critical(248)
  • January(81)
  • Oracle(942)
  • Patch(117)
  • Update(1185)
• oss-sec: GNU InetUtils Security Advisory: remote authentication by-pass in telnetd
  • Advisory(309)
  • authentication(79)
  • by(1161)
  • GNU(55)
  • in(2678)
  • InetUtils(1)
  • OSS(271)
  • Pass(40)
  • Remote(218)
  • SEC(32)
  • Security(5950)
  • telnetd(1)
• pnpm v10 Bypass “Dependency lifecycle scripts execution disabled by default” · CVE-2025-69264 · GitHub Advisory Database · GitHub
  • 2025(1079)
  • 69264(1)
  • Advisory(309)
  • by(1161)
  • Bypass(80)
  • CVE-(1634)
  • Database(290)
  • default(54)
  • Dependency(3)
  • disabled(8)
  • execution(133)
  • GitHub(1102)
  • Lifecycle(18)
  • pnpm(1)
  • scripts(11)
• n8n Remote Code Execution via Expression Injection · Advisory · n8n-io/n8n · GitHub
  • Advisory(309)
  • Code(496)
  • execution(133)
  • Expression(10)
  • GitHub(1102)
  • Injection(75)
  • IO(118)
  • Remote(218)
  • via(90)
• Net-SNMP snmptrapd vulnerability · Advisory · net-snmp/net-snmp · GitHub
  • Advisory(309)
  • GitHub(1102)
  • net(431)
  • SNMP(13)
  • snmptrapd(1)
  • Vulnerability(599)
• Security Advisory
  • Advisory(309)
  • Security(5950)
• Hono Improper Authorization vulnerability | GitLab Advisory Database
  • Advisory(309)
  • Authorization(13)
  • Database(290)
  • GitLab(126)
  • Hono(2)
  • improper(11)
  • Vulnerability(599)
• Security Advisory: Critical RCE Vulnerabilities in React Server Components & Next.js | Snyk
  • Advisory(309)
  • Components(29)
  • Critical(248)
  • in(2678)
  • js(267)
  • Next(352)
  • RCE(42)
  • React(83)
  • Security(5950)
  • Server(798)
  • snyk(18)
  • Vulnerabilities(250)
• Security Advisory: CVE-2025-66478 | Next.js
  • 2025(1079)
  • 66478(3)
  • Advisory(309)
  • CVE-(1634)
  • js(267)
  • Next(352)
  • Security(5950)
• Security Advisory
  • Advisory(309)
  • Security(5950)
• Security Advisory: CVE-2025-49844 | Redis
  • 2025(1079)
  • 49844(1)
  • Advisory(309)
  • CVE-(1634)
  • Redis(73)
  • Security(5950)
• SQUID-2025:2 Information Disclosure in Error handling · Advisory · squid-cache/squid · GitHub
  • 2025(1079)
  • Advisory(309)
  • cache(30)
  • disclosure(51)
  • Error(26)
  • GitHub(1102)
  • Handling(20)
  • in(2678)
  • INFORMATION(239)
  • squid(18)
• JVNVU#93161789: OpenSSLにおける複数の脆弱性(OpenSSL Security Advisory [30th September 2025])
  • 2025(1079)
  • 30(988)
  • 93161789(1)
  • Advisory(309)
  • JVNVU(2689)
  • openssl(229)
  • Security(5950)
  • September(44)
  • th(153)
  • 脆弱(3304)
  • 複数(2755)
• ChatGPT Agent – XSS on file://home/oai/redirect.html · Advisory · google/security-research · GitHub
  • Advisory(309)
  • Agent(206)
  • ChatGPT(254)
  • File(151)
  • GitHub(1102)
  • Google(5985)
  • Home(658)
  • HTML(230)
  • oai(1)
  • on(1997)
  • Redirect(8)
  • RESEARCH(331)
  • Security(5950)
  • XSS(63)
• Node-SAML SAML Signature Verification Vulnerability · Advisory · node-saml/node-saml · GitHub
  • Advisory(309)
  • GitHub(1102)
  • Node(139)
  • SAML(28)
  • signature(17)
  • Verification(31)
  • Vulnerability(599)
• Security Advisory
  • Advisory(309)
  • Security(5950)
• Oracle Critical Patch Update Advisory – July 2025
  • 2025(1079)
  • Advisory(309)
  • Critical(248)
  • July(53)
  • Oracle(942)
  • Patch(117)
  • Update(1185)
• JVNVU#91298012: OpenSSL x509アプリケーションにおける、拒否設定の代わりに信頼設定を付加してしまう問題(OpenSSL Security Advisory [22nd May 2025])
  • 2025(1079)
  • 22(392)
  • 509(10)
  • 91298012(2)
  • Advisory(309)
  • JVNVU(2689)
  • May(123)
  • nd(27)
  • openssl(229)
  • Security(5950)
  • アプリケーション(1057)
  • 付加(41)
  • 代わり(25)
  • 信頼(234)
  • 問題(1741)
  • 拒否(226)
  • 設定(937)
• JVNVU#91298012: OpenSSL x509アプリケーションにおける、拒否設定の代わりに信頼設定を付加してしまう問題(OpenSSL Security Advisory [22nd May 2025])
  • 2025(1079)
  • 22(392)
  • 509(10)
  • 91298012(2)
  • Advisory(309)
  • JVNVU(2689)
  • May(123)
  • nd(27)
  • openssl(229)
  • Security(5950)
  • アプリケーション(1057)
  • 付加(41)
  • 代わり(25)
  • 信頼(234)
  • 問題(1741)
  • 拒否(226)
  • 設定(937)
• JVNVU#96140980: OpenSSLのPOLY1305 MAC実装におけるWindows上のXMMレジスタが破損する問題(Security Advisory [8th September 2023])
  • 1305(7)
  • 2023(1936)
  • 96140980(4)
  • Advisory(309)
  • JVNVU(2689)
  • Mac(545)
  • openssl(229)
  • poly(11)
  • Security(5950)
  • September(44)
  • th(153)
  • Windows(3519)
  • XMM(4)
  • レジスタ(7)
  • 問題(1741)
  • 実装(761)
  • 破損(98)
• Security Advisory
  • Advisory(309)
  • Security(5950)
• Security Advisory
  • Advisory(309)
  • Security(5950)
• Oracle Critical Patch Update Advisory – April 2025
  • 2025(1079)
  • Advisory(309)
  • April(71)
  • Critical(248)
  • Oracle(942)
  • Patch(117)
  • Update(1185)
• incomplete signature validation for unsigned-trailer uploads · Advisory · minio/minio · GitHub
  • Advisory(309)
  • for(5713)
  • GitHub(1102)
  • Incomplete(2)
  • minio(1)
  • signature(17)
  • trailer(3)
  • unsigned(2)
  • uploads(8)
  • Validation(35)
• WordPress テーマ・プラグイン 脆弱性情報のダイジェストを無料でお届けする「WordPress Security Advisory」を開始 – プライム・ストラテジー – CMSマネージドサービス
  • Advisory(309)
  • CMS(243)
  • Security(5950)
  • WordPress(542)
  • イン(827)
  • ストラテジー(44)
  • ダイジェスト(10)
  • テーマ(193)
  • プライム(148)
  • プラグ(186)
  • マネージドサービス(34)
  • 情報(13794)
  • 無料(1827)
  • 脆弱(3304)
  • 開始(22292)
• Jenkins Security Advisory 2025-03-05
  • 2025(1079)
  • Advisory(309)
  • Jenkins(21)
  • Security(5950)
• JVNVU#91390536: OpenSSLにおける、RFC7250ハンドシェイクによる認証の失敗を検知できない問題(OpenSSL Security Advisory [11th February 2025])
  • 11(1653)
  • 2025(1079)
  • 7250(1)
  • 91390536(1)
  • Advisory(309)
  • February(32)
  • JVNVU(2689)
  • openssl(229)
  • RFC(49)
  • Security(5950)
  • th(153)
  • ハンドシェイク(4)
  • 問題(1741)
  • 失敗(185)
  • 検知(674)
  • 認証(1450)
• Security Advisory
  • Advisory(309)
  • Security(5950)
• JVNVU#95772889: OpenSSLにおける秘密鍵のタイミング攻撃に対する問題(OpenSSL Security Advisory [20th January 2025])
  • 20(982)
  • 2025(1079)
  • 95772889(2)
  • Advisory(309)
  • January(81)
  • JVNVU(2689)
  • openssl(229)
  • Security(5950)
  • th(153)
  • タイミング(35)
  • 問題(1741)
  • 攻撃(2830)
  • 秘密(200)
• JVNVU#95772889: OpenSSLにおける秘密鍵のタイミング攻撃に対する問題(OpenSSL Security Advisory [20th January 2025])
  • 20(982)
  • 2025(1079)
  • 95772889(2)
  • Advisory(309)
  • January(81)
  • JVNVU(2689)
  • openssl(229)
  • Security(5950)
  • th(153)
  • タイミング(35)
  • 問題(1741)
  • 攻撃(2830)
  • 秘密(200)
• Oracle Critical Patch Update Advisory – October 2024
  • 2024(1653)
  • Advisory(309)
  • Critical(248)
  • October(84)
  • Oracle(942)
  • Patch(117)
  • Update(1185)
• Oracle Releases Quarterly Critical Patch Update Advisory for October 2024 | CISA
  • 2024(1653)
  • Advisory(309)
  • CISA(103)
  • Critical(248)
  • for(5713)
  • October(84)
  • Oracle(942)
  • Patch(117)
  • Quarterly(8)
  • Releases(722)
  • Update(1185)
• JVNVU#90424473: OpenSSLにおける境界外書き込みの脆弱性(OpenSSL Security Advisory [16th October 2024])
  • 16(461)
  • 2024(1653)
  • 90424473(3)
  • Advisory(309)
  • JVNVU(2689)
  • October(84)
  • openssl(229)
  • Security(5950)
  • th(153)
  • 境界(99)
  • 脆弱(3304)
• Security Advisory
  • Advisory(309)
  • Security(5950)
• JVNVU#90424473: OpenSSLにおける境界外書き込みの脆弱性(OpenSSL Security Advisory [16th October 2024])
  • 16(461)
  • 2024(1653)
  • 90424473(3)
  • Advisory(309)
  • JVNVU(2689)
  • October(84)
  • openssl(229)
  • Security(5950)
  • th(153)
  • 境界(99)
  • 脆弱(3304)
• JVNVU#90424473: OpenSSLにおける境界外書き込みの脆弱性(OpenSSL Security Advisory [16th October 2024])
  • 16(461)
  • 2024(1653)
  • 90424473(3)
  • Advisory(309)
  • JVNVU(2689)
  • October(84)
  • openssl(229)
  • Security(5950)
  • th(153)
  • 境界(99)
  • 脆弱(3304)
• VMware Releases Security Advisory for VMware Cloud Foundation and vCenter Server | CISA
  • Advisory(309)
  • and(3574)
  • CISA(103)
  • Cloud(2316)
  • for(5713)
  • Foundation(422)
  • Releases(722)
  • Security(5950)
  • Server(798)
  • vCenter(9)
  • VMware(338)
• Security Advisory Ivanti Cloud Service Appliance (CSA) (CVE-2024-8190)
  • 2024(1653)
  • 8190(1)
  • Advisory(309)
  • Appliance(72)
  • Cloud(2316)
  • CSA(10)
  • CVE-(1634)
  • Ivanti(44)
  • Security(5950)
  • Service(887)
• Security Advisory Ivanti Workspace Control (IWC)
  • Advisory(309)
  • Control(153)
  • Ivanti(44)
  • IWC(2)
  • Security(5950)
  • Workspace(123)
• Security Advisory EPM September 2024 for EPM 2024 and EPM 2022
  • 2022(1917)
  • 2024(1653)
  • Advisory(309)
  • and(3574)
  • EPM(4)
  • for(5713)
  • Security(5950)
  • September(44)
• Cisco Event Response: September 2024 Semiannual Cisco IOS XR Software Security Advisory Bundled Publication
  • 2024(1653)
  • Advisory(309)
  • bundled(2)
  • Cisco(227)
  • Event(40)
  • iOS(1266)
  • Publication(6)
  • response(331)
  • Security(5950)
  • Semiannual(4)
  • September(44)
  • Software(409)
  • XR(101)
• Versa Networks Releases Advisory for a Vulnerability in Versa Director, CVE-2024-39717 | CISA
  • 2024(1653)
  • 39717(2)
  • Advisory(309)
  • CISA(103)
  • CVE-(1634)
  • Director(27)
  • for(5713)
  • in(2678)
  • Networks(230)
  • Releases(722)
  • Versa(4)
  • Vulnerability(599)
• August 29, 2024 Advisory: Moodle Calculated Questions RCE [CVE-2024-43425] | Censys
  • 2024(1653)
  • 29(339)
  • 43425(1)
  • Advisory(309)
  • August(31)
  • Calculated(4)
  • Censys(3)
  • CVE-(1634)
  • Moodle(29)
  • questions(18)
  • RCE(42)
• JVNVU#91755094: OpenSSLにおけるサービス運用妨害(DoS)の脆弱性(Security Advisory [3rd September 2024])
  • 2024(1653)
  • 91755094(1)
  • Advisory(309)
  • DoS(214)
  • JVNVU(2689)
  • openssl(229)
  • rd(25)
  • Security(5950)
  • September(44)
  • サービス(20045)
  • 妨害(233)
  • 脆弱(3304)
  • 運用(2455)
• Security Advisory
  • Advisory(309)
  • Security(5950)
• Jenkins Security Advisory 2024-08-07
  • 2024(1653)
  • Advisory(309)
  • Jenkins(21)
  • Security(5950)
• Remote Code Execution vulnerability in `update-integration-tests` GitHub Action workflow ? Advisory ? jupyterlab/extension-template ? GitHub
  • Action(96)
  • Advisory(309)
  • Code(496)
  • execution(133)
  • Extension(52)
  • GitHub(1102)
  • in(2678)
  • Integration(61)
  • JupyterLab(13)
  • Remote(218)
  • template(20)
  • tests(25)
  • Update(1185)
  • Vulnerability(599)
  • Workflow(29)
• Security Advisory EPM July 2024 for EPM 2024
  • 2024(1653)
  • Advisory(309)
  • EPM(4)
  • for(5713)
  • July(53)
  • Security(5950)
• Security Advisory Ivanti Endpoint Manager for Mobile (EPMM) July 2024
  • 2024(1653)
  • Advisory(309)
  • Endpoint(100)
  • EPMM(9)
  • for(5713)
  • Ivanti(44)
  • July(53)
  • Manager(370)
  • Mobile(583)
  • Security(5950)
• Oracle Critical Patch Update Advisory – July 2024
  • 2024(1653)
  • Advisory(309)
  • Critical(248)
  • July(53)
  • Oracle(942)
  • Patch(117)
  • Update(1185)
• JVNVU#90911615: OpenSSLの関数SSL_select_next_protoにおけるバッファオーバーリードの脆弱性(OpenSSL Security Advisory [27th June 2024])
  • 2024(1653)
  • 27(360)
  • 90911615(2)
  • Advisory(309)
  • June(37)
  • JVNVU(2689)
  • Next(352)
  • openssl(229)
  • PROTO(3)
  • Security(5950)
  • Select(25)
  • SSL(320)
  • th(153)
  • バッファオーバー(2)
  • リード(163)
  • 脆弱(3304)
  • 関数(94)
• JVNVU#90911615: OpenSSLの関数SSL_select_next_protoにおけるバッファオーバーリードの脆弱性(OpenSSL Security Advisory [27th June 2024])
  • 2024(1653)
  • 27(360)
  • 90911615(2)
  • Advisory(309)
  • June(37)
  • JVNVU(2689)
  • Next(352)
  • openssl(229)
  • PROTO(3)
  • Security(5950)
  • Select(25)
  • SSL(320)
  • th(153)
  • バッファオーバー(2)
  • リード(163)
  • 脆弱(3304)
  • 関数(94)
• JVNVU#96140980: OpenSSLのPOLY1305 MAC実装におけるWindows上のXMMレジスタが破損する問題(Security Advisory [8th September 2023])
  • 1305(7)
  • 2023(1936)
  • 96140980(4)
  • Advisory(309)
  • JVNVU(2689)
  • Mac(545)
  • openssl(229)
  • poly(11)
  • Security(5950)
  • September(44)
  • th(153)
  • Windows(3519)
  • XMM(4)
  • レジスタ(7)
  • 問題(1741)
  • 実装(761)
  • 破損(98)
• JVNVU#96872634: OpenSSLにおける解放済みメモリ使用(use-after-free)の脆弱性(Security Advisory [28th May 2024])
  • 2024(1653)
  • 28(413)
  • 96872634(2)
  • Advisory(309)
  • after(91)
  • Free(299)
  • JVNVU(2689)
  • May(123)
  • openssl(229)
  • Security(5950)
  • th(153)
  • Use(197)
  • メモリ(467)
  • 使用(2459)
  • 脆弱(3304)
  • 解放(70)
• JVNVU#96872634: OpenSSLにおける解放済みメモリ使用(user-after-free)の脆弱性(Security Advisory [28th May 2024])
  • 2024(1653)
  • 28(413)
  • 96872634(2)
  • Advisory(309)
  • after(91)
  • Free(299)
  • JVNVU(2689)
  • May(123)
  • openssl(229)
  • Security(5950)
  • th(153)
  • user(143)
  • メモリ(467)
  • 使用(2459)
  • 脆弱(3304)
  • 解放(70)
• JVNVU#94875946: OpenSSLにおけるサービス運用妨害(DoS)の脆弱性(Security Advisory [16th May 2024])
  • 16(461)
  • 2024(1653)
  • 94875946(1)
  • Advisory(309)
  • DoS(214)
  • JVNVU(2689)
  • May(123)
  • openssl(229)
  • Security(5950)
  • th(153)
  • サービス(20045)
  • 妨害(233)
  • 脆弱(3304)
  • 運用(2455)
• SAML authentication bypass due to missing validation on unsigned SAML messages ? Advisory ? line/armeria ? GitHub
  • Advisory(309)
  • Armeria(2)
  • authentication(79)
  • Bypass(80)
  • due(50)
  • GitHub(1102)
  • LINE(2576)
  • Messages(29)
  • Missing(11)
  • on(1997)
  • SAML(28)
  • to(3515)
  • unsigned(2)
  • Validation(35)
• JVNVU#96443143: OpenSSLにおけるサービス運用妨害(DoS)の脆弱性(Security Advisory [8th April 2024])
  • 2024(1653)
  • 96443143(2)
  • Advisory(309)
  • April(71)
  • DoS(214)
  • JVNVU(2689)
  • openssl(229)
  • Security(5950)
  • th(153)
  • サービス(20045)
  • 妨害(233)
  • 脆弱(3304)
  • 運用(2455)
• JVNVU#96443143: OpenSSLにおけるサービス運用妨害(DoS)の脆弱性(Security Advisory [8th April 2024])
  • 2024(1653)
  • 96443143(2)
  • Advisory(309)
  • April(71)
  • DoS(214)
  • JVNVU(2689)
  • openssl(229)
  • Security(5950)
  • th(153)
  • サービス(20045)
  • 妨害(233)
  • 脆弱(3304)
  • 運用(2455)
• New Security Advisory Tab Added to the Microsoft Security Update Guide | MSRC Blog | Microsoft Security Response Center
  • added(16)
  • Advisory(309)
  • Blog(6630)
  • Center(784)
  • Guide(66)
  • Microsoft(4568)
  • MSRC(113)
  • new(1535)
  • response(331)
  • Security(5950)
  • tab(16)
  • the(4651)
  • to(3515)
  • Update(1185)
• Code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php ? Advisory ? composer/composer
  • Advisory(309)
  • and(3574)
  • Code(496)
  • Composer(14)
  • Compromised(18)
  • escalation(36)
  • execution(133)
  • installed(5)
  • InstalledVersions(1)
  • or(105)
  • PHP(182)
  • possible(27)
  • privilege(51)
  • via(90)
• Interactive containers API does not validate entitlements check ? Advisory ? moby/buildkit
  • Advisory(309)
  • API(1186)
  • BuildKit(8)
  • Check(119)
  • Containers(48)
  • Does(29)
  • Entitlements(2)
  • Interactive(65)
  • Moby(9)
  • Not(122)
  • validate(9)
• Possible host system access from mount stub cleaner ? Advisory ? moby/buildkit
  • Access(328)
  • Advisory(309)
  • BuildKit(8)
  • Cleaner(4)
  • from(638)
  • Host(39)
  • Moby(9)
  • Mount(2)
  • possible(27)
  • stub(1)
  • System(351)
• Possible race condition with accessing subpaths from cache mounts ? Advisory ? moby/buildkit
  • accessing(8)
  • Advisory(309)
  • BuildKit(8)
  • cache(30)
  • condition(12)
  • from(638)
  • Moby(9)
  • mounts(1)
  • possible(27)
  • race(16)
  • subpaths(1)
  • with(1758)
• several container breakouts due to internally leaked fds ? Advisory ? opencontainers/runc
  • Advisory(309)
  • breakouts(1)
  • Container(141)
  • due(50)
  • fds(1)
  • internally(2)
  • Leaked(17)
  • opencontainers(1)
  • runC(7)
  • several(6)
  • to(3515)
• JVNVU#93108954: OpenSSLにおけるNULLポインタ参照の脆弱性(Security Advisory [25th January 2024])
  • 2024(1653)
  • 25(494)
  • 93108954(2)
  • Advisory(309)
  • January(81)
  • JVNVU(2689)
  • Null(32)
  • openssl(229)
  • Security(5950)
  • th(153)
  • ポインタ(23)
  • 参照(136)
  • 脆弱(3304)
• JVNVU#93108954: OpenSSLにおけるNULLポインタ参照の脆弱性(Security Advisory [25th January 2024])
  • 2024(1653)
  • 25(494)
  • 93108954(2)
  • Advisory(309)
  • January(81)
  • JVNVU(2689)
  • Null(32)
  • openssl(229)
  • Security(5950)
  • th(153)
  • ポインタ(23)
  • 参照(136)
  • 脆弱(3304)
• DHCC-SA-202106-001:Security Advisory – Identity authentication bypass vulnerability found in some Dahua products – Dahua International
  • 202106(1)
  • Advisory(309)
  • authentication(79)
  • Bypass(80)
  • Dahua(8)
  • DHCC(2)
  • found(50)
  • Identity(82)
  • in(2678)
  • International(108)
  • products(100)
  • SA(85)
  • Security(5950)
  • some(43)
  • Vulnerability(599)
• VMware Releases Security Advisory for Aria Automation | CISA
  • Advisory(309)
  • ARIA(5)
  • Automation(219)
  • CISA(103)
  • for(5713)
  • Releases(722)
  • Security(5950)
  • VMware(338)
• JVNVU#90782686: OpenSSLにおける不正なRSA公開鍵のチェックに時間を要する問題(Security Advisory [15th January 2024])
  • 15(622)
  • 2024(1653)
  • 90782686(4)
  • Advisory(309)
  • January(81)
  • JVNVU(2689)
  • openssl(229)
  • RSA(53)
  • Security(5950)
  • th(153)
  • チェック(520)
  • 不正な(39)
  • 公開(4592)
  • 問題(1741)
  • 時間(723)
• JVNVU#90782686: OpenSSLにおける不正なRSA公開鍵のチェックに時間を要する問題(Security Advisory [15th January 2024])
  • 15(622)
  • 2024(1653)
  • 90782686(4)
  • Advisory(309)
  • January(81)
  • JVNVU(2689)
  • openssl(229)
  • RSA(53)
  • Security(5950)
  • th(153)
  • チェック(520)
  • 不正な(39)
  • 公開(4592)
  • 問題(1741)
  • 時間(723)