資安新聞及事件週報 2017/3/27 ~ 2017/3/31
1.重大弱點漏洞
Cisco AsyncOS 漏洞
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wsa
NTP拒絕服務漏洞(CVE-2016-9042)
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9042
Trend_Micro Endpoint_Sensor漏洞 CVE-2017-6798
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-6798
Mikrotik Router hap lite firmware 漏洞 CVE-2017-6444
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-6444
Trend_Micro Interscan Messaging Security Virtual Appliance 漏洞 CVE-2017-6398
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-6398
2017年3月31日 星期五
2017年3月24日 星期五
資安新聞及事件週報 2017/3/20 ~ 2017/3/24
資安新聞及事件週報 2017/3/20 ~ 2017/3/24
1.重大弱點漏洞
3秒攻破Adobe公司閱讀器 挖出蘋果系統「骨灰級」漏洞
http://news.sina.com.tw/article/20170318/21148926.html
ASUS RT-AC53漏洞 CVE-2017-6548 CVE-2017-6549
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-6548
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-6549
D-Link DI-524 漏洞 CVE-2017-5633
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-5633
IBM QRadar Security Information and Event Manager漏洞 CVE-2016-9726 CVE-2016-9727 CVE-2016-9740
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-9726
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-9727
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-9740
Netgear Dgn2200 series firmware 漏洞 CVE-2017-6334
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-6334
1.重大弱點漏洞
3秒攻破Adobe公司閱讀器 挖出蘋果系統「骨灰級」漏洞
http://news.sina.com.tw/article/20170318/21148926.html
ASUS RT-AC53漏洞 CVE-2017-6548 CVE-2017-6549
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-6548
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-6549
D-Link DI-524 漏洞 CVE-2017-5633
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-5633
IBM QRadar Security Information and Event Manager漏洞 CVE-2016-9726 CVE-2016-9727 CVE-2016-9740
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-9726
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-9727
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-9740
Netgear Dgn2200 series firmware 漏洞 CVE-2017-6334
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-6334
2017年3月17日 星期五
資安新聞及事件週報 2017/3/13 ~ 2017/3/17
資安新聞及事件週報 2017/3/13 ~ 2017/3/17
1.重大弱點漏洞
A10 AX1030 漏洞
https://www.a10networks.com/blog/cve-2016-0270-gcm-nonce-vulnerability
Linux修補了存在已有7年的可擴張使用者權限漏洞
http://www.ithome.com.tw/news/112816
D-Link 路由器多個漏洞 CVE-2017-3191 CVE-2017-3192 CVE-2017-3193
http://www.kb.cert.org/vuls/id/305448
http://www.kb.cert.org/vuls/id/553503
IBM WebSphere Application 伺服器權限提升漏洞 CVE-2017-1151
http://securitytracker.com/id/1037984
http://www-01.ibm.com/support/docview.wss?uid=swg21999293
VMware 產品遠端程式碼執行漏洞 CVE-2017-4901
https://www.us-cert.gov/ncas/current-activity/2017/03/14/VMware-Releases-Security-Updates
http://www.vmware.com/security/advisories/VMSA-2017-0005.html
Veritas Netbackup appliance CVE-2017-6403 CVE-2017-6409
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-6403
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-6409
1.重大弱點漏洞
A10 AX1030 漏洞
https://www.a10networks.com/blog/cve-2016-0270-gcm-nonce-vulnerability
Linux修補了存在已有7年的可擴張使用者權限漏洞
http://www.ithome.com.tw/news/112816
D-Link 路由器多個漏洞 CVE-2017-3191 CVE-2017-3192 CVE-2017-3193
http://www.kb.cert.org/vuls/id/305448
http://www.kb.cert.org/vuls/id/553503
IBM WebSphere Application 伺服器權限提升漏洞 CVE-2017-1151
http://securitytracker.com/id/1037984
http://www-01.ibm.com/support/docview.wss?uid=swg21999293
VMware 產品遠端程式碼執行漏洞 CVE-2017-4901
https://www.us-cert.gov/ncas/current-activity/2017/03/14/VMware-Releases-Security-Updates
http://www.vmware.com/security/advisories/VMSA-2017-0005.html
Veritas Netbackup appliance CVE-2017-6403 CVE-2017-6409
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-6403
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-6409
2017年3月10日 星期五
資安新聞及事件週報 2017/3/6 ~ 2017/3/10
資安新聞及事件週報 2017/3/6 ~ 2017/3/10
1.重大弱點漏洞
Tenable Nessus 漏洞
http://securitytracker.com/id/1037887
IBM iNotes 漏洞
http://www-01.ibm.com/support/docview.wss?uid=swg21997010
Apache Struts2 遠端執行程式碼漏洞
http://www.cert.org.cn/publish/main/9/2017/20170307143036394110259/20170307143036394110259_.html
Symantec Endpoint Protection 多個漏洞
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170306_00
EXPLOITEE.RS 揭露WD MY CLOUD 系列NAS 存在安全漏洞
https://news.xfastest.com/wd/32237/exploitee-rs-wd-my-cloud-nas/
1.重大弱點漏洞
Tenable Nessus 漏洞
http://securitytracker.com/id/1037887
IBM iNotes 漏洞
http://www-01.ibm.com/support/docview.wss?uid=swg21997010
Apache Struts2 遠端執行程式碼漏洞
http://www.cert.org.cn/publish/main/9/2017/20170307143036394110259/20170307143036394110259_.html
Symantec Endpoint Protection 多個漏洞
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170306_00
EXPLOITEE.RS 揭露WD MY CLOUD 系列NAS 存在安全漏洞
https://news.xfastest.com/wd/32237/exploitee-rs-wd-my-cloud-nas/
2017年3月3日 星期五
資安新聞及事件週報 2017/2/27 ~ 2017/3/3
資安新聞及事件週報 2017/2/27 ~ 2017/3/3
1.重大弱點漏洞
多款TP-Link路由器存在多個漏洞
https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html
Java、Python安全漏洞可能讓攻擊者繞過防火牆
http://www.ithome.com.tw/news/112310
Linux kernel tcp_splice_read 漏洞（CVE-2017-6214）
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccf7abb93af09ad0868ae9033d1ca8108bdaec82
Drupal Facebook Pull 漏洞
https://www.drupal.org/node/2850873
IBM WebSphere Application Server 多個漏洞
https://www.ibm.com/support/docview.wss?uid=swg21998379
Joomla Joomloc-CAT組件'ville'漏洞
https://www.exploit-db.com/exploits/41383/
1.重大弱點漏洞
多款TP-Link路由器存在多個漏洞
https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html
Java、Python安全漏洞可能讓攻擊者繞過防火牆
http://www.ithome.com.tw/news/112310
Linux kernel tcp_splice_read 漏洞（CVE-2017-6214）
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccf7abb93af09ad0868ae9033d1ca8108bdaec82
Drupal Facebook Pull 漏洞
https://www.drupal.org/node/2850873
IBM WebSphere Application Server 多個漏洞
https://www.ibm.com/support/docview.wss?uid=swg21998379
Joomla Joomloc-CAT組件'ville'漏洞
https://www.exploit-db.com/exploits/41383/
訂閱：
文章 (Atom)