bugtraq mailing list - 2013/04

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2013/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 9	² 2	³ 10	⁴ 12	⁵ 2	⁶	⁷
⁸ 45	⁹ 31	¹⁰ 29	¹¹ 29	¹² 2	¹³	¹⁴
¹⁵	¹⁶ 3	¹⁷ 12	¹⁸ 10	¹⁹ 5	²⁰	²¹
²² 5	²³ 5	²⁴ 3	²⁵ 5	²⁶ 4	²⁷	²⁸
²⁹ 13	³⁰ 14

Messages by day:

April 1 (9 messages)

MailOrderWorks v5.907 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] HPSBUX02859 SSRT101144 rev.1 - HP-UX Running XNTP, Remote Denial of Service (DoS) and Execute Arbitrary Code (security-alert@...com)
[Suspected Spam] [slackware-security] libssh (SSA:2013-087-01) (Slackware Security Team <security@...ckware.com>)
[waraxe-2013-SA#100] - Update Spoofing Vulnerability in mRemote 1.50 (come2waraxe@...oo.com)
[waraxe-2013-SA#101] - Update Spoofing Vulnerability in Royal TS 2.1.5 (come2waraxe@...oo.com)
Authentication bypass on Netgear WNR1000 (roberto@...yhats.it)
[SECURITY] [DSA 2656-1] bind9 security update (Salvatore Bonaccorso <carnil@...ian.org>)
US-CERT Alert TA13-088A: DNS Amplification Attacks (US-CERT Alerts <technical-alerts@...cert.gov>)
[security bulletin] HPSBUX02860 SSRT101146 rev.1 - HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Rest… (security-alert@...com)

April 2 (2 messages)

Remote command execution in Ruby Gem ldoce 0.0.2 (larry0@...com)
NGS00248 Patch Notification: Virtual Access Monitor Multiple SQL Injection Vulnerabilities (NCC Group Research <research@...group.com>)

April 3 (10 messages)

FreeBSD Security Advisory FreeBSD-SA-13:03.openssl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-13:04.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
SEC Consult SA-20130403-0 :: Multiple vulnerabilities in Sophos Web Protection Appliance (SEC Consult Vulnerability Lab <research@...-consult.com>)
Google AD Sync Tool - Exposure of Sensitive Information Vulnerability - Security Advisory - SOS-13-001 ("Lists" <lists@...seofsecurity.com>)
[slackware-security] mozilla-thunderbird (SSA:2013-093-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-firefox (SSA:2013-093-01) (Slackware Security Team <security@...ckware.com>)
SQL Injection Vulnerability in Symphony (advisory@...ridge.com)
PHP Code Injection in FUDforum (advisory@...ridge.com)
TC-SA-2013-01: Reflected Cross-Site-Scripting (XSS) vulnerability in e107 CMS v1.0.2 ("Simon Bieber" <sbieber@...e-consulting.com>)
Novell GroupWise Multiple Remote Code Execution Vulnerabilities (advisory@...ridge.com)

April 4 (12 messages)

[SECURITY] [DSA 2654-1] libxslt security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 2657-1] postgresql-8.4 security update (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA 2658-1] postgresql-9.1 security update (Giuseppe Iuculano <iuculano@...ian.org>)
[ MDVSA-2013:015-1 ] apache (security@...driva.com)
[ MDVSA-2013:015-1 ] apache (security@...driva.com)
SEC Consult 20130404-0 :: Multiple Vulnerabilities in Censornet Professional v4 (2.1.7) (SEC Consult Vulnerability Lab <research@...-consult.com>)
GreHack 2013 - Call For Papers - November 15, Grenoble, France ("F. Duchene" <adm-fabien.duchene@...hack.org>)
Hackersh 0.1 Release Announcement (Itzik Kotler <xorninja@...il.com>)
Groovy Media Player buffer overflow Vulnerability (akshay.vaghela@...tecore.com)
[ MDVSA-2013:016 ] apache-mod_security (security@...driva.com)
[ MDVSA-2013:017 ] arpwatch (security@...driva.com)
[ MDVSA-2013:018 ] automake (security@...driva.com)

April 5 (2 messages)

[ MDVSA-2013:019 ] bash (security@...driva.com)
[ MDVSA-2013:027-1 ] clamav (security@...driva.com)

April 8 (45 messages)

[slackware-security] subversion (SSA:2013-095-01) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2013:029 ] apache-mod_security (security@...driva.com)
[ MDVSA-2013:030 ] arpwatch (security@...driva.com)
[ MDVSA-2013:031 ] automake (security@...driva.com)
[ MDVSA-2013:032 ] bash (security@...driva.com)
[ MDVSA-2013:023-1 ] coreutils (security@...driva.com)
[ MDVSA-2013:033 ] cronie (security@...driva.com)
Aastra IP Telephone hardcoded telnet admin password (Timo Juhani Lindfors <timo.lindfors@....fi>)
[ MDVSA-2013:034 ] cups (security@...driva.com)
[ MDVSA-2013:035 ] libexif (security@...driva.com)
[ MDVSA-2013:036 ] exif (security@...driva.com)
[ MDVSA-2013:037 ] fetchmail (security@...driva.com)
[ MDVSA-2013:038 ] freeradius (security@...driva.com)
[ MDVSA-2013:039 ] freetype2 (security@...driva.com)
[ MDVSA-2013:001-1 ] gnupg (security@...driva.com)
[ MDVSA-2013:040 ] gnutls (security@...driva.com)
[ MDVSA-2013:041 ] html2ps (security@...driva.com)
[security bulletin] HPSBMU02785 SSRT100526 rev.2 - HP LoadRunner Running on Windows, Remote Execution of Arbitrary Code, Denial of Service… (security-alert@...com)
[ MDVSA-2013:042 ] krb5 (security@...driva.com)
[ MDVSA-2013:043 ] libgssglue (security@...driva.com)
[ MDVSA-2013:044 ] libjpeg (security@...driva.com)
[ MDVSA-2013:045 ] libssh (security@...driva.com)
[ MDVSA-2013:046 ] libtiff (security@...driva.com)
[ MDVSA-2013:047 ] libxslt (security@...driva.com)
[ MDVSA-2013:048 ] ncpfs (security@...driva.com)
[ MDVSA-2013:049 ] net-snmp (security@...driva.com)
[ MDVSA-2013:050 ] nss (security@...driva.com)
[ MDVSA-2013:051 ] openssh (security@...driva.com)
[ MDVSA-2013:052 ] openssl (security@...driva.com)
[ MDVSA-2013:053 ] proftpd (security@...driva.com)
[ MDVSA-2013:054 ] sudo (security@...driva.com)
[ MDVSA-2013:055 ] wireshark (security@...driva.com)
Vanilla Forums 2.0.18 / SQL-Injection / Insert arbitrary user & dump usertable (mschratt@...-enterprise.com)
Multiple Vulnerabilities in D-Link devices (devnull@...ur1ty.de)
[slackware-security] seamonkey (SSA:2013-097-01) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2013:056 ] libxml2 (security@...driva.com)
[ MDVSA-2013:057 ] xinetd (security@...driva.com)
[ MDVSA-2013:058 ] bind (security@...driva.com)
[ MDVSA-2013:059 ] dhcp (security@...driva.com)
[ MDVSA-2013:060 ] accountsservice (security@...driva.com)
[ MDVSA-2013:061 ] awstats (security@...driva.com)
[ MDVSA-2013:062 ] backuppc (security@...driva.com)
[ MDVSA-2013:063 ] bip (security@...driva.com)
[ MDVSA-2013:064 ] bogofilter (security@...driva.com)
[ MDVSA-2013:065 ] boost (security@...driva.com)

April 9 (31 messages)

[ MDVSA-2013:066 ] bugzilla (security@...driva.com)
[ MDVSA-2013:067 ] couchdb (security@...driva.com)
[ MDVSA-2013:068 ] courier-authlib (security@...driva.com)
[ MDVSA-2013:069 ] cups-pk-helper (security@...driva.com)
[ MDVSA-2013:070 ] dbus (security@...driva.com)
[ MDVSA-2013:071 ] dbus-glib (security@...driva.com)
[CVE-2012-5389] Null Pointer Derefence in Dart Webserver <= 1.9.2 (Ken <catatonicprime@...il.com>)
[CVE-REQUEST] Multiple CSRF vulnerabilities on Foscam IP cameras web UI (shekyan@...il.com)
[ISecAuditors Security Advisories] Multiple Full Path Disclosure Vulnerabilities in TinyWebGallery <= v1.8.9 (ISecAuditors Security Advisories <advisories@...c…)
[ MDVSA-2013:072 ] dnsmasq (security@...driva.com)
[ MDVSA-2013:073 ] dokuwiki (security@...driva.com)
[ MDVSA-2013:074 ] drupal (security@...driva.com)
[ MDVSA-2013:075 ] elinks (security@...driva.com)
[ MDVSA-2013:076 ] emacs (security@...driva.com)
[ MDVSA-2013:081 ] gegl (security@...driva.com)
[ MDVSA-2013:082 ] gimp (security@...driva.com)
[ MDVSA-2013:083 ] glib2.0 (security@...driva.com)
[ MDVSA-2013:084 ] gnome-keyring (security@...driva.com)
[ MDVSA-2013:085 ] groff (security@...driva.com)
[ MDVSA-2013:086 ] groff (security@...driva.com)
[ MDVSA-2013:087 ] firefox (security@...driva.com)
[ MDVSA-2013:088 ] hplip (security@...driva.com)
[ MDVSA-2013:089 ] icclib (security@...driva.com)
[ MDVSA-2013:090 ] argyllcms (security@...driva.com)
[ MDVSA-2013:091 ] icecast (security@...driva.com)
[ MDVSA-2013:092 ] imagemagick (security@...driva.com)
Hackito Ergo Sum 2013 Speaker Announcement! (Alexandre De Oliveira <alex@...ec.com>)
CVE-2013-0798 : World read and write access to app_tmp directory on Android (suzuki@...reenforty.jp)
[waraxe-2013-SA#102] - Reflected XSS in phpMyAdmin 3.5.7 (come2waraxe@...oo.com)
[ MDVSA-2013:078 ] fail2ban (security@...driva.com)
[ MDVSA-2013:077 ] ettercap (security@...driva.com)

April 10 (29 messages)

[ MDVSA-2013:093 ] ircd-hybrid (security@...driva.com)
[ MDVSA-2013:094 ] jakarta-poi (security@...driva.com)
[ MDVSA-2013:095 ] java-1.7.0-openjdk (security@...driva.com)
[ MDVSA-2013:096 ] keepalived (security@...driva.com)
[ MDVSA-2013:097 ] libotr (security@...driva.com)
[ MDVSA-2013:098 ] libupnp (security@...driva.com)
[ MDVSA-2013:099 ] libytnef (security@...driva.com)
[ MDVSA-2013:100 ] lighttpd (security@...driva.com)
[ MDVSA-2013:101 ] lynx (security@...driva.com)
[ MDVSA-2013:102 ] mariadb (security@...driva.com)
[ MDVSA-2013:103 ] mesa (security@...driva.com)
[ MDVSA-2013:104 ] mosh (security@...driva.com)
[ MDVSA-2013:105 ] munin (security@...driva.com)
[ MDVSA-2013:106 ] nss-pam-ldapd (security@...driva.com)
[ MDVSA-2013:107 ] ocaml-xml-light (security@...driva.com)
[ MDVSA-2013:108 ] openconnect (security@...driva.com)
[ MDVSA-2013:109 ] open-iscsi (security@...driva.com)
[ MDVSA-2013:110 ] openjpeg (security@...driva.com)
[ MDVSA-2013:111 ] openslp (security@...driva.com)
[ MDVSA-2013:112 ] otrs (security@...driva.com)
[ MDVSA-2013:113 ] perl (security@...driva.com)
[ MDVSA-2013:114 ] php (security@...driva.com)
[ MDVSA-2013:115 ] php-ZendFramework (security@...driva.com)
[ MDVSA-2013:116 ] pixman (security@...driva.com)
[ MDVSA-2013:117 ] python (security@...driva.com)
[ MDVSA-2013:118 ] python-feedparser (security@...driva.com)
[ MDVSA-2013:119 ] python-httplib2 (security@...driva.com)
[ MDVSA-2013:120 ] python-pycrypto (security@...driva.com)
DeepSec 2013 - Call for Papers (DeepSec Conference <deepsec@...psec.net>)

April 11 (29 messages)

[ MDVSA-2013:121 ] qemu (security@...driva.com)
[ MDVSA-2013:122 ] quagga (security@...driva.com)
[ MDVSA-2013:123 ] rpmdevtools (security@...driva.com)
[ MDVSA-2013:124 ] ruby (security@...driva.com)
[ MDVSA-2013:125 ] sleuthkit (security@...driva.com)
[ MDVSA-2013:126 ] snack (security@...driva.com)
[ MDVSA-2013:127 ] socat (security@...driva.com)
[ MDVSA-2013:128 ] squashfs-tools (security@...driva.com)
[ MDVSA-2013:129 ] squid (security@...driva.com)
[ MDVSA-2013:130 ] stunnel (security@...driva.com)
[ MDVSA-2013:131 ] taglib (security@...driva.com)
[ MDVSA-2013:132 ] tor (security@...driva.com)
[ MDVSA-2013:133 ] usbmuxd (security@...driva.com)
[ MDVSA-2013:134 ] viewvc (security@...driva.com)
[ MDVSA-2013:135 ] vte (security@...driva.com)
[ MDVSA-2013:136 ] weechat (security@...driva.com)
[ MDVSA-2013:137 ] wordpress (security@...driva.com)
[ MDVSA-2013:138 ] x11-driver-video-qxl (security@...driva.com)
[ MDVSA-2013:139 ] x11-server (security@...driva.com)
[security bulletin] HPSBUX02859 SSRT101144 rev.2 - HP-UX Running XNTP, Remote Denial of Service (DoS) and Execute Arbitrary Code (security-alert@...com)
[security bulletin] HPSBUX02864 SSRT101156 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vu… (security-alert@...com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module Software (Cisco Systems Product Security Incident Response Team <psirt@...co…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace Solution (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco Prime Network Control Systems Database Default Credentials Vulnerability (Cisco Systems Product Security Incident Response Team <…)
[SECURITY] [DSA 2659-1] libapache-mod-security security update (Salvatore Bonaccorso <carnil@...ian.org>)
[ MDVSA-2013:141 ] libxslt (security@...driva.com)
MacOSX 10.8.3 ftpd Remote Resource Exhaustion (submit@...ec.org)

April 12 (2 messages)

[ MDVSA-2013:142 ] postgresql (security@...driva.com)
Remote command injection in Ruby Gem kelredd-pruview 0.3.8 (larry0@...com)

April 16 (3 messages)

[ MDVSA-2013:143 ] poppler (security@...driva.com)
DDIVRT-2013-52 Dell EqualLogic PS6110X Directory Traversal (ddivulnalert@...frontline.com)
[security bulletin] HPSBUX02866 SSRT101139 rev.1 - HP-UX Running Apache, Remote Denial of Service (DoS), Execution of Arbitrary Code and o… (security-alert@...com)

April 17 (12 messages)

[SE-2012-01] Details of issues fixed by Java SE 7 Update 21 (Security Explorations <contact@...urity-explorations.com>)
[ESNC-2013-001] Privilege Escalation in SAP Healthcare Industry Solution (ESNC Security <secure@...c.de>)
Sitecom WLM-3500 backdoor accounts (roberto.paleari@...ze.net)
[ESNC-2013-002] Privilege Escalation in SAP Production Planning and Control (ESNC Security <secure@...c.de>)
[ESNC-2013-003] Remote OS Command Execution in SAP BASIS Communication Services (ESNC Security <secure@...c.de>)
[ MDVSA-2013:144 ] phpmyadmin (security@...driva.com)
APPLE-SA-2013-04-16-1 Safari 6.0.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2013-04-16-2 Java for OS X 2013-003 and Mac OS X v10.6 Update 15 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Open-Xchange Security Advisory 2013-04-17 (Martin Braun <martin.braun@...n-xchange.com>)
Multiple Vulnerabilities in KrisonAV CMS (advisory@...ridge.com)
SI6 Networks' IPv6 Toolkit v1.3.4 released! (Fernando Gont <fgont@...networks.com>)
Re: [SE-2012-01] Details of issues fixed by Java SE 7 Update 21 (Security Explorations <contact@...urity-explorations.com>)

April 18 (10 messages)

SEC Consult 20130417-0 :: Multiple vulnerabilities in Sosci Survey (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20130417-1 :: Java ActiveX Control Memory Corruption (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20130417-2 :: HTTP header injection/Cache poisoning in Oracle WebCenter Sites Satellite Server (SEC Consult Vulnerability Lab <research@...-cons…)
Cisco Security Advisory: Cisco Network Admission Control Manager SQL Injection Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co…)
Cisco Security Advisory: Cisco TelePresence Infrastructure Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)
[SECURITY] [DSA 2661-1] xorg-server security update (Yves-Alexis Perez <corsac@...ian.org>)
DC4420 - London DEFCON - April meet - Tuesday 23rd April 2013 (Major Malfunction <majormal@...ate-radio.org>)
VUPEN Security Research - Oracle Java JavaFX Video Frame Decoding Remote Heap Overflow (Pwn2Own 2013) (VUPEN Security Research <advisories@...en.com>)
[SECURITY] [DSA 2662-1] xen security update (Florian Weimer <fw@...eb.enyo.de>)
CVE-2013-2504 : Matrix42 Service Desk XSS (43z sec <43zsec@...il.com>)

April 19 (5 messages)

VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555) (VUPEN Security Research <advisories@...en.com>)
TWSL2013-004: Group Name Enumeration Vulnerability in Cisco IKE Implementation (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Re: SEC Consult SA-20130417-1 :: Java ActiveX Control Memory Corruption (SEC Consult Vulnerability Lab <research@...-consult.com>)
[ MDVSA-2013:145 ] java-1.6.0-openjdk (security@...driva.com)
[ MDVSA-2013:146 ] icedtea-web (security@...driva.com)

April 22 (5 messages)

[ MDVSA-2013:147 ] libarchive (security@...driva.com)
[SECURITY] [DSA 2660-1] curl security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SE-2012-01] Yet another Reflection API flaw affecting Oracle's Java SE (Security Explorations <contact@...urity-explorations.com>)
44Café 23rd April details (Steve <steve@...on.com>)
[SQLi] vBilling for FreeSWITCH (Michał Błaszczak <blaszczakm@...il.com>)

April 23 (5 messages)

Multiple Vulnerabilities in D'Link DIR-615 - Hardware revision D3 / DIR-300 - Hardware revision A (devnull@...ur1ty.de)
[ MDVSA-2013:148 ] roundcubemail (security@...driva.com)
[ MDVSA-2013:149 ] roundcubemail (security@...driva.com)
[ MDVSA-2013:150 ] mysql (security@...driva.com)
[SECURITY] [DSA 2663-1] tinc security update (Yves-Alexis Perez <corsac@...ian.org>)

April 24 (3 messages)

[security bulletin] HPSBHF02865 SSRT101158 rev.1 - HP ElitePad 900, Secure Boot Configuration Inconsistency (security-alert@...com)
Cisco/Linksys HTTP Service Remote DoS (Denial of Service) (Carl Benedict <theinfinitenigma@...il.com>)
[ESNC-2013-004] Remote ABAP Code Injection in OpenText/IXOS ECM for SAP NetWeaver (ESNC Security <secure@...c.de>)

April 25 (5 messages)

Cisco Security Advisory: Cisco Device Manager Command Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Computing System (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco NX-OS-Based Product (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[waraxe-2013-SA#103] - Multiple Vulnerabilities in phpMyAdmin (come2waraxe@...oo.com)
Nginx ngx_http_close_connection function integer overflow (safe3q@...il.com)

April 26 (4 messages)

Borland Caliber 11.0 Quiksoft EasyMail SMTP Object Buffer Overflows (nospam@...il.it)
Borland Silk Central 12.1 TeeChart Pro Activex control AddSeries Remote Code Execution (nospam@...il.it)
Multiple Vulnerabilities in D'Link DIR-635 (devnull@...ur1ty.de)
[security bulletin] HPSBMU02830 SSRT100889 rev.2 - HP Data Protector, Local Increase of Privilege (security-alert@...com)

April 29 (13 messages)

Re: Nginx ngx_http_close_connection function integer overflow (Maxim Konovalov <maxim.konovalov@...il.com>)
[security bulletin] HPSBPI02868 SSRT101017 rev.1 - HP Managed Printing Administration (MPA), Remote Cross Site Scripting (XSS) (security-alert@...com)
[security bulletin] HPSBPI02869 SSRT100936 rev.1 - HP LaserJet MFP Printers, HP Color LaserJet MFP Printers, Certain HP LaserJet Printers,… (security-alert@...com)
Hacking IPv6 networks training (slideware, upcoming trainings, etc.) (Fernando Gont <fgont@...networks.com>)
EDSC 2013 CFP Open (Michael Eddington <meddington@...il.com>)
[ MDVSA-2013:151 ] curl (security@...driva.com)
[ MDVSA-2013:152 ] subversion (security@...driva.com)
[ MDVSA-2013:153 ] subversion (security@...driva.com)
[KIS-2013-04] Joomla! <= 3.0.3 (remember.php) PHP Object Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
Cisco/Linksys E1200 N300 Reflected XSS (Carl Benedict <theinfinitenigma@...il.com>)
[ MDVSA-2013:154 ] util-linux (security@...driva.com)
[ MDVSA-2013:155 ] fuse (security@...driva.com)
Re: Nginx ngx_http_close_connection function integer overflow (Maxim Konovalov <maxim.konovalov@...il.com>)

April 30 (14 messages)

[security bulletin] HPSBMU02873 SSRT101182 rev.1 - HP Service Manager, Apache Tomcat Security Update (security-alert@...com)
[security bulletin] HPSBMU02874 SSRT101184 rev.1 - HP Service Manager, Java Runtime Environment (JRE) Security Update (security-alert@...com)
[ MDVSA-2013:156 ] apache-mod_security (security@...driva.com)
FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
CORE-2013-0303 - D-Link IP Cameras Multiple Vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Personal File Share HTTP Server Remote Overflow Vulnerability (demonalex@....com)
WowzaMediaServer StorageDir escape (regression) ("Michal J." <wejn@....cz>)
WowzaMediaServer SecureToken bypass (and worse) ("Michal J." <wejn@....cz>)
Syslog Watcher Pro 'Date' Parameter Cross Site Scripting Vulnerability (demonalex@....com)
[security bulletin] HPSBMU02872 SSRT101185 rev.1 - HP Service Manager, Remote Disclosure of Information, Cross Site Scripting(XSS) (security-alert@...com)
[ MDVSA-2013:157 ] krb5 (security@...driva.com)
[ MDVSA-2013:158 ] krb5 (security@...driva.com)
[SECURITY] [DSA 2665-1] strongswan security update (Yves-Alexis Perez <corsac@...ian.org>)

250 messages

Powered by blists - more mailing lists