본문 바로가기

IT 와 Social 이야기/Security419

[US-CERT: Bulletin (SB13-007)] 2012년 12월 31일까지 공개된 보안 취약점 요약 Vulnerability Symmary [Cisco Product Security Incident Response Process] High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info Back to top apache -- cxf Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted.. 2013. 1. 8.
[US-CERT: Bulletin (SB13-002)] 2012년 12월 24일까지 공개된 보안 취약점 요약 Vulnerability Symmary [eSecuritytogo: Risk & Vulnerability Assessment] High VulnerabilitiesPrimary Vendor -- ProductDescriptionPublishedCVSS ScoreSource & Patch InfoBack to topadobe -- shockwave_player Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a Shockwave Player 10.4.0.025 compatibility feature via a crafted HTML document that references Shockwave content with a cert.. 2013. 1. 3.
보안 취약점 관리 사이클 Vulnerability Management Life Cycle Diagrams [Ramblings of a Computer Engineer] [Accumuli Security] [Centers for Disease Control and Prevention] [ENO.COM] [CORE SECURITY] [Ascendsys] [Third Defense] [DNV MANAGING RISK] 2012. 12. 31.
[US-CERT] 12월 17일까지 공개된 보안 취약점 요약 Vulnerability Symmary [CDC : The Step in the vulnerability Management Life Cycle] High - Vulnerabilities will be labeled High severity if they have a CVSS base score of 7.0 - 10.0 Medium - Vulnerabilities will be labeled Medium severity if they have a CVSS base score of 4.0 - 6.9 Low - Vulnerabilities will be labeled Low severity if they have a CVSS base score of 0.0 - 3.9 Vulnerability Summary for the Week of Decemb.. 2012. 12. 30.