ASUSの「Zenbook Pro 15 OLED UM535」は、15.6型ディスプレイを搭載した…
Vol.17 VIVE Flow実機レビュー。HTCから小型軽量なメガネ型VRグラスが登場[染瀬直人のVRカメラ最前線]
HTC（宏達国際電子股份有限公司）は、スマートフォンからVRヘッドセットまで手掛ける台湾を拠点とする…
[org.apache.logging.log4j:log4j] Deserialization of Untrusted Data in Apache Log4j
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
References
https://nvd.nist.gov/vuln/detail/CVE-2022-23307
https:/…
iPhone 14にはノッチの代わりにパンチホールが2つ？
iPhone 13で、AppleはiPhoneのノッチを小さくしました。存在感はありますが、より小さ…
[hermes-engine] Access of Resource Using Incompatible Type in Hermes
By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fau…
[org.jenkins-ci.plugins:mailer] Cross-Site Request Forgery in Jenkins Mailer Plugin
A cross-site request forgery (CSRF) vulnerability in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.
References
https://nvd.nist.gov/vuln/de…
[org.jenkins-ci.plugins:mailer] Incorrect Permission Assignment for Critical Resource in Jenkins Mailer Plugin
A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.
References
https://nvd.nist.gov/vuln/…
[org.jenkins-ci.plugins:credentials] Incorrect Permission Assignment for Critical Resource in Jenkins Credentials Binding Plugin
Jenkins Credentials Binding Plugin 1.27 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read access to validate if a credential ID refers to a secret file credential and whether …
[org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source] Incorrect Permission Assignment for Critical Resource in Jenkins Bitbucket Branch Source Plugin
A missing permission check in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins.
References
https://nvd.nist.gov/vuln/detail/CVE…
[org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source] Cross-Site Request Forgery in Jenkins Bitbucket Branch Source Plugin
A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method,…