tmatsuuのブックマーク - はてなブックマーク

NVD - CVE-2012-0831

Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock () or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

tmatsuu 2012/02/14

PHPにmagic_quote_gpc周りにSQLインジェクションができる脆弱性。5.3.10にアップデート。まぁ今時magic_quote_gpcを使ってる時点で終わってるけど。

リンク

NVD - CVE-2011-2766

Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock () or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

tmatsuu 2011/09/24

FCGI.pmの0.70から0.73に脆弱性。HTTPヘッダに細工すると認証をパスできる。これはヤバイ

share

リンク

NVD - CVE-2011-2903

tmatsuu 2011/09/05

tcptrackを見つけたのは、CVEに脆弱性情報が上がってたからだけどな！最新の1.4.2で修正されてる。

リンク

NVD - CVE-2011-1775

Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock () or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

tmatsuu 2011/05/28

TigerVNCに脆弱性

share

リンク

NVD - CVE-2011-0761

Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock () or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.