security-bulletins

セキュリティ速報 以下は、Netflixオープンソースアプリケーションにおけるセキュリティおよびプライバシー関連の通知です。 Date| Type| Subject ---|---|--- Septeember 27, 2024| 高| E2Nest におけるパストラバーサル August 1, 2024| 重大| Dispatch メッセージテンプレートにおけるサーバーサイドテンプレートインジェクション May 16, 2024| 重大| 制限付き Git コマンド RCE を介した ConsoleMe の任意ファイル読み取りの脆弱性 May 09, 2024| 重大| Genie...

qubes-secpack

Qubes セキュリティパック qubes-secpack Qubes セキュリティパック qubes-secpack は、Qubes OS プロジェクトに関するセキュリティ関連情報を含む git リポジトリです。以下が含まれます: Qubes PGP 鍵 keys/ Qubes セキュリティ速報 QSBs/ Qubes カナリア canaries/ Qubes 資金情報 fund/ Qubes ISO ダイジェスト digests/ このリポジトリに含まれるファイルは、認証を次の 2 つの方法で行うことができます: git コミットタグの検証 git tag -v...

CVE-2026-76323

creationtimestamp| type| source ---|---|--- 2026-08-20 04:46:07+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

BELL-CVE-2026-74553

Bulletin has no description...

MINI-XVCV-7H7C-2R6V

Bulletin has no description...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow. Information about security vulnerabilities affecting IBM WebSphere Application Server Traditional have been published in security bulletins. Vulnerability Details Refer to the security bulletins...

MINI-9583-6HV2-GPFC

Bulletin has no description...

MINI-672P-7CQ5-XHW5

Bulletin has no description...

MINI-JX7V-49R6-2F6F

Bulletin has no description...

Security Bulletin: Multiple vulnerabilities have been identified in IBM HTTP Server used by IBM Rational ClearQuest

Summary IBM HTTP Server IHS is used by the IBM Rational ClearQuest server and web components. Information about security vulnerabilities affecting IHS have been published in multiple security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

MINI-842W-PPVF-JW5G

Bulletin has no description...

CVE-2026-47044

...

MINI-743V-79JJ-PF9X

Bulletin has no description...

CVE-2026-46005

creationtimestamp| type| source ---|---|--- 2026-07-02 06:45:47+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-02 07:17:41+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702...

MINI-G6RM-7VQ2-MH8C

Bulletin has no description...

CVE-2026-46160

creationtimestamp| type| source ---|---|--- 2026-07-01 02:34:38+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630 2026-07-02 07:17:55+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702...

MINI-GW6C-VX84-9PVP

Bulletin has no description...

DEBIAN-CVE-2026-52937

In the Linux kernel, the following vulnerability has been resolved: tap: fix stack info leak in tapioctl SIOCGIFHWADDR In the SIOCGIFHWADDR path, tapioctl copies 16 bytes of an uninitialised on-stack struct sockaddrstorage to userspace via ifrhwaddr, but netifgetmacaddress only writes safamily an...

CVE-2025-48640

creationtimestamp| type| source ---|---|--- 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1931 2026-08-01 18:07:06+00:00| seen|...

Security Bulletin: Multiple Security vulnerabilities have been identified in IBM WebSphere Application Server traditional, WebSphere Liberty profile, IBM HTTP Server its WebSphere plugins shipped with IBM Business Automation Workflow

Summary WebSphere Application Server traditional and WebSphere Application Server Liberty profile are shipped as a component of IBM Business Automation Workflow. Optional IBM HTTP Server and relating WebSphere plugins are included with WebSphere. Information about security vulnerabilities affecti...