shia's note

情報収集 20251014

CVE-2025-61884｜Oracle E-Business Suite
- https://www.oracle.com/security-alerts/alert-cve-2025-61884.html
- https://nvd.nist.gov/vuln/detail/CVE-2025-61884
- 機密リソースへのアクセス。
CVE-2025-59978｜Junos Space
CVE-2025-59957｜Junos OS
- https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-EX4600-Series-and-QFX5000-Series-An-attacker-with-physical-access-can-open-a-persistent-backdoor-CVE-2025-59957
- https://nvd.nist.gov/vuln/detail/CVE-2025-59957
- バックドア。物理アクセスのみ？
CVE-2025-59968｜Juniper Security Director
- https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Juniper-Security-Director-Insufficient-authorization-for-sensitive-resources-in-web-interface-CVE-2025-59968
- https://nvd.nist.gov/vuln/detail/CVE-2025-59968
- 認証不備によりメタデータの読み取り・変更が可能らしい。
CVE-2025-60006｜Junos OS Evolved
- https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-Evolved-Multiple-OS-command-injection-vulnerabilities-fixed-CVE-2025-60006
- https://nvd.nist.gov/vuln/detail/CVE-2025-60006
- OSコマンドインジェクション。CLI前提。
CVE-2025-37729｜Elastic Cloud Enterprise
- https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-3-8-2-and-4-0-2-security-update-esa-2025-21/382641
- https://nvd.nist.gov/vuln/detail/CVE-2025-37729
- コマンド実行？要管理者権限。
CVE-2025-11617｜FreeRTOS IPv6
- https://aws.amazon.com/jp/security/security-bulletins/rss/aws-2025-023/
- https://nvd.nist.gov/vuln/detail/CVE-2025-11617
- 境界外読み取り。
CVE-2025-23309｜NVIDIA Display Driver
- https://nvidia.custhelp.com/app/answers/detail/a_id/5703
- https://nvd.nist.gov/vuln/detail/CVE-2025-23309
- 権限昇格、コード実行、他。
CVE-2025-61919｜Rack
- https://nvd.nist.gov/vuln/detail/CVE-2025-61919
- DoS。他にもCVE-2025-61780など。
CVE-2025-61920｜Authlib(python)
- https://nvd.nist.gov/vuln/detail/CVE-2025-61920
- DoS。
CVE-2025-59530｜quic-go
- https://nvd.nist.gov/vuln/detail/CVE-2025-59530
- DoS。
CVE-2025-61871｜BUFFALO NAS Navigator2
- https://www.buffalo.jp/news/detail/20251009-01.html
- https://jvn.jp/en/jp/JVN69099112/
- https://nvd.nist.gov/vuln/detail/CVE-2025-61871
- コード実行。Windowsのみ。
CVE-2025-11449,CVE-2025-11450｜ServiceNow AI Platform
CVE-2025-11539｜Grafana Image Render Plugin
- https://grafana.com/security/security-advisories/cve-2025-11539/
- https://nvd.nist.gov/vuln/detail/CVE-2025-11539
- RCE。条件あり。
CVE-2025-42706｜CrowdStrike Falcon Sensor for Windows
- https://www.crowdstrike.com/en-us/security-advisories/issues-affecting-crowdstrike-falcon-sensor-for-windows/
- https://nvd.nist.gov/vuln/detail/CVE-2025-42706
- 任意のファイルを削除できたらしい。
CVE-2025-11445｜Kilo Code
- https://github.com/Kilo-Org/kilocode/pull/2244
- https://nvd.nist.gov/vuln/detail/CVE-2025-11445
- https://mcpsec.dev/advisories/2025-10-02-kilo-code-ai-agent-supply-chain-attack/
- プロンプトインジェクション。
CVE-2025-36636｜Tenable Security Center
- https://www.tenable.com/security/tns-2025-21
- https://nvd.nist.gov/vuln/detail/CVE-2025-36636
- アクセス制御不備。

その他