資安新聞及事件週報 2016/10/31 ~ 2016/11/4

資安新聞及事件週報  2016/10/31 ~ 2016/11/4

**1.重大弱點漏洞：**
  CVE-2015-0665 Cisco AnyConnect Secure Mobility Client Multiple Security Vulnerabilities
  http://www.0daybank.org/?p=2816


  ISC BIND 阻斷服務漏洞
  http://securitytracker.com/id/1037156


  Palo Alto PAN-OS 多個漏洞
  http://securitytracker.com/id/1037152
  http://securitytracker.com/id/1037153


  Oracle WebLogic Commons DiskFileItem Deserialization of Untrusted Data 漏洞
  https://www.seebug.org/vuldb/ssvid-92515

資安新聞及事件週報 2016/10/24 ~ 2016/10/28

資安新聞及事件週報  2016/10/24 ~ 2016/10/28

**1.重大弱點漏洞：**
  臟牛漏洞Dirty COW CVE-2016-5195 2.6.22 < 3.9 (x86/x64)
  http://www.bkjia.com/Linuxjc/1167392.html


  Adobe搶修已遭攻擊的Flash漏洞
  http://www.ithome.com.tw/news/109272


  Apache Tomcat 多個漏洞
  https://www.auscert.org.au/render.html?it=40038


  Android Rowhammer 攻擊漏洞(Drammer)
  https://www.seebug.org/vuldb/ssvid-92489


  Palo Alto PAN-OS JavaScript 執行和輸入驗證漏洞
  http://securityadvisories.paloaltonetworks.com/Home/Detail/64
  http://securityadvisories.paloaltonetworks.com/Home/Detail/62

資安新聞及事件週報 2016/10/17 ~ 2016/10/21

資安新聞及事件週報  2016/10/17 ~ 2016/10/21

**1.重大弱點漏洞：**
  phpMyAdmin 跨站腳本漏洞 CVE-2016-6607
  https://www.phpmyadmin.net/security/PMASA-2016-30/


  Juniper Junos Space 安全漏洞 CVE-2016-4927
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760&cat=SIRT_1&actp=LIST


  甲骨文大舉修補253個安全漏洞，含15個重大漏洞
  http://www.ithome.com.tw/news/109162


  VMware Horizon View 存在安全性弱點
  http://www.vmware.com/security/advisories/VMSA-2016-0015.html

資安新聞及事件週報 2016/10/10 ~ 2016/10/14

**1.重大弱點漏洞：**
  Palo Alto PAN-OS 敏感資訊洩露漏洞
  http://securityadvisories.paloaltonetworks.com/


  Apache Tomcat 緩衝區滿溢漏洞
  http://tomcat.apache.org/security-jk.html#Fixed_in_Apache_Tomcat_JK_Connector_1.2.42


  F5 BIG-IP 漏洞 CVE-2016-5700
  https://support.f5.com/kb/en-us/solutions/public/k/35/sol35520031.html


  Winhex Editor DLL劫持漏洞
  https://cxsecurity.com/issue/WLB-2016020001


  VMware Horizon View 漏洞
  http://securitytracker.com/id/1036972

資安新聞及事件週報 2016/10/03 ~ 2016/10/07

**1.重大弱點漏洞：**
  Apache Tomcat 緩衝區滿溢漏洞 CVE-2016-6808
  http://tomcat.apache.org/security-jk.html#Fixed_in_Apache_Tomcat_JK_Connector_1.2.42


  Palo Alto PAN-OS 敏感資訊洩露漏洞
  http://securitytracker.com/id/1036968


  MariaDB 漏洞   CVE-2016-6662
  http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6662


  Cisco發佈多項產品安全更新，部分漏洞可能導致認證繞過
  https://www.us-cert.gov/ncas/current-activity/2016/10/05/Cisco-Releases-Security-Updates

資安新聞及事件週報 2016/09/26 ~ 2016/09/30

**1.重大弱點漏洞：**
  Internet Systems Consortium(ISC)發布BIND的安全更新，部分漏洞可能導致阻斷服務攻擊
  http://www.cert.org.tw/twcert/advdetail/3344


  D-Link DWR-932 B遭爆有約20個安全漏洞，研究人員：別用了
  http://www.ithome.com.tw/news/108741


  swagger高危漏洞影響Java、PHP、NodeJS和 Ruby等語言
  https://www.taiwanfansclub.com/article-405880-1.html?mod=view&aid=405880&page=1&


  macOS Server、macOS Sierra、Safari與iCloud for Windows.存在多個弱點
  https://support.apple.com/en-us/HT207171

資安新聞及事件週報 2016/09/19 ~ 2016/09/23

**1.重大弱點漏洞：**
  升級需謹慎，iOS 10又曝出重大漏洞
  http://tech.fanpiece.com/leiphone/%E5%8D%87%E7%B4%9A%E9%9C%80%E8%AC%B9%E6%85%8E-iOS-10%E5%8F%88%E6%9B%9D%E5%87%BA%E9%87%8D%E5%A4%A7%E6%BC%8F%E6%B4%9E-c1245202.html
 
  Cisco Firepower Management Center漏洞(CVE-2016-6394)
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsmc
 
  Mozilla 計劃下週二釋出更新修復中間人攻擊漏洞
  http://www.solidot.org/story?sid=49711


  IE又爆漏洞美國軍方網站遭遇雪人攻擊
  http://online.ysbk0i.com/gwpj/21954.html


  黑客可通過寶馬門戶網站漏洞篡改BMW車輛的設置
  http://mini.eastday.com/a/160918163923884.html