Resources | Flexera
Main navigation Solutions Column 1 Business challenge Software renewals and audits Software license management and optimization SaaS spend management Cloud cost management IT asset lifecycle management CMDB data quality Accurate IT inventory Security and regulatory risk management Sustainable IT AI-powered transformation Public sector Column 2 Spend management by vendor IBM Oracle Microsoft SAP VM
Secunia - Forum Thread: Recent PSI issues
Secunia delivers software security research that provides reliable, curated and actionable vulnerability intelligence. Organizations can expect to receive standardized, validated and enriched vulnerability research on a specific version of a software product. Secunia Research supports four solutions:
不適切な脆弱性情報ハンドリングが生んだ WordPress プラグイン cforms II のゼロデイ脆弱性 - co3k.org
2012/02/15、 JVN から JVN#35256978: cforms II におけるクロスサイトスクリプティングの脆弱性 が公開されました。これはクレジットされているとおり、海老原と、同僚の渡辺優也君が勤務中に発見した脆弱性です。 脆弱性自体はどこにでもあるような普通の XSS ですが、実はこの脆弱性、 2010 年 10 月に exploit コードが公開され、それから 1 年 4 ヶ月後の 2012 年 2 月まで修正版が提供されていなかったものです。 このような危険な状態が長期間続いていたのには、様々な理由があります。ここでは、その説明と、どうすれば事態が防げたかということについて検討したいと思います。 脆弱性の概要 本題に入る前に、主に cforms II のユーザ向けに脆弱性自体の概要についてざっくり説明します。前述のとおり、未修正の状態で exploit コードが公開
Oracle Critical Patch Update - July 2011
Oracle Critical Patch Update Advisory - July 2011 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are cumulative but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories should be reviewed for information regarding earl
About Secunia Research | Flexera
Secunia delivers software security research that provides reliable, curated and actionable vulnerability intelligence. Organizations can expect to receive standardized, validated and enriched vulnerability research on a specific version of a software product. Secunia Research supports four solutions:
Apache APR "apr_fnmatch()" Pattern Processing Denial of Service Vulnerability - Advisories - Community
Main navigation Solutions Column 1 Business challenge Software renewals and audits Software license management and optimization SaaS spend management Cloud cost management IT asset lifecycle management CMDB data quality Accurate IT inventory Security and regulatory risk management Sustainable IT AI-powered transformation Public sector Column 2 Spend management by vendor IBM Oracle Microsoft SAP VM
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Security Advisory SA64563 - Linux Kernel "vhost_scsi_make_tpg()" Memory Corruption Vuln...
Security Advisory SA64563 - Linux Kernel "vhost_scsi_make_tpg()" Memory Corruption Vuln...
Secunia - Forum Thread: PSI 3 compatibility on Windows 8.1
Secunia PSI: US PCs Have 2,720,800,000 Vulnerable Programs Installed!
Secunia - Forum Thread: Recent PSI issues
Changelog - Personal (PSI) - Vulnerability Scanning - Secunia.com
Secunia - Forum Thread: Recent PSI issues
Changelog - Personal (PSI) - Vulnerability Scanning - Secunia.com
Changelog - Personal (PSI) - Vulnerability Scanning - Secunia.com
Changelog - Personal (PSI) - Vulnerability Scanning - Secunia.com
About Secunia Research | Flexera
About Secunia Research | Flexera
Secunia PSI: US PCs Have 2,720,800,000 Vulnerable Programs Installed!
Secuniaのサイトにハッキングメッセージ、DNSがハイジャックされる 