bugtraq mailing list - 2017/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2017/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 2	²	³	⁴
⁵ 2	⁶ 2	⁷ 2	⁸ 4	⁹ 2	¹⁰	¹¹
¹² 7	¹³ 2	¹⁴ 3	¹⁵ 4	¹⁶ 4	¹⁷	¹⁸
¹⁹ 7	²⁰ 3	²¹	²² 5	²³	²⁴	²⁵
²⁶ 4	²⁷ 2	²⁸ 2	²⁹ 1	³⁰ 2

Messages by day:

June 1 (2 messages)

[SECURITY] [DSA 3869-1] tnef security update (Sebastien Delafond <seb@...ian.org>)
[SECURITY] [DSA 3870-1] wordpress security update (Sebastien Delafond <seb@...ian.org>)

June 5 (2 messages)

[SECURITY] [DSA 3873-1] perl security update (Salvatore Bonaccorso <carnil@...ian.org>)
X41-2017-005 - Multiple Vulnerabilities in peplink balance routers (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)

June 6 (2 messages)

[security bulletin] HPESBHF03756 rev.1 - HPE Network Products including Comware 7, iMC, and VCX running OpenSSL, Remote Denial of Servi… (security-alert@....com)
[security bulletin] HPESBGN03752 rev.1 - HPE IceWall using OpenSSL, remote Denial of Service (DoS) (security-alert@....com)

June 7 (2 messages)

Sophos Cyberoam Cross-site scripting (XSS) vulnerability (bhdresh@...il.com)
Xavier v2.4 PHP MP - SQL Injection Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

June 8 (4 messages)

[security bulletin] HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (… (security-alert@....com)
CVE update - fixed in Apache Ranger 0.7.1 (Velmurugan Periasamy <vel@...che.org>)
[security bulletin] HPESBGN03758 rev.1 - HPE UCMDB, Remote Code Execution (security-alert@....com)
[SYSS-2017-018] OTRS - Access to Installation Dialog (sebastian.auwaerter@...s.de)

June 9 (2 messages)

ESA-2017-064: RSA Identity Governance and Lifecycle Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)
[security bulletin] HPESBUX03747 rev.1 - HP-UX running BIND, Remote Denial of Service (security-alert@....com)

June 12 (7 messages)

[security bulletin] HPESBUX03759 rev.1 - HP-UX CIFS Sever using Samba, Multiple Remote Vulnerabilities (security-alert@....com)
[SECURITY] [DSA 3875-1] libmwaw security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3876-1] otrs2 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPESBHF03730 rev.2 - HPE Aruba ClearPass Policy Manager, Multiple Vulnerabilities (security-alert@....com)
[SECURITY] [DSA 3877-1] tor security update (Salvatore Bonaccorso <carnil@...ian.org>)
Evolution Script CMS v5.3 - Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Zenbership 1.0.8 CMS - Multiple SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

June 13 (2 messages)

SEC Consult SA-20170613-0 :: Access Restriction Bypass in Atlassian Confluence (SEC Consult Vulnerability Lab <research@...-consult.com>)
Secunia Research: libsndfile "aiff_read_chanmap()" Information Disclosure Vulnerability (Secunia Research <remove-vuln@...unia.com>)

June 14 (3 messages)

[SECURITY] [DSA 3880-1] libgcrypt20 security update (Salvatore Bonaccorso <carnil@...ian.org>)
ESA-2017-031: RSA BSAFE® Cert-C Improper Certificate Processing Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
ESA-2017-043: EMC ESRS Virtual Edition Authentication Bypass Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)

June 15 (4 messages)

[SECURITY] [DSA 3881-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)
[slackware-security] bind (SSA:2017-165-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-firefox (SSA:2017-165-02) (Slackware Security Team <security@...ckware.com>)
CVE-2017-9613: Stored Cross-Site Scripting in SAP successfactors (dunstan.pinto@...il.com)

June 16 (4 messages)

[SECURITY] [DSA 3882-1] request-tracker4 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of… (security-alert@....com)
June 2017 - Bamboo - Critical Security Advisory (Atlassian <security@...assian.com>)
ESA-2017-041: EMC VNX1 and VNX2 Family Multiple Vulnerabilities in VNX Control Station (EMC Product Security Response Center <Security_Alert@....com>)

June 19 (7 messages)

Ektron Version 9.10SP1(Build 9.1.0.184) Cross Site Scripting (ghasseminia@...il.com)
Ektron Version 9.10SP1(Build 9.1.0.184) Cross Site Scripting (ghasseminia@...il.com)
Ektron Version 9.10SP1(Build 9.1.0.184) Cross Site Scripting (ghasseminia@...il.com)
[security bulletin] HPESBGN03758 rev.2 - HPE UCMDB, Remote Code Execution (HPE Product Security Response Team <security-alert@....com>)
[SECURITY] [DSA 3887-1] glibc security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3886-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)
CVE-2017-7659: mod_http2 null pointer dereference (Jim Jagielski <jim@...che.org>)

June 20 (3 messages)

CVE-2017-3167: Apache httpd 2.x ap_get_basic_auth_pw authentication bypass (Jacob Champion <jchampion@...che.org>)
ESA-2017-054: EMC Avamar Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)
ESA-2017-053: EMC Isilon OneFS Privilege Escalation Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)

June 22 (5 messages)

[SECURITY] [DSA 3890-1] spip security update (Salvatore Bonaccorso <carnil@...ian.org>)
Sitecore 7.1-7.2 Cross Site Scripting Vulnerability (hamedizadi@...il.com)
[slackware-security] openvpn (SSA:2017-172-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 3893-1] jython security update (Salvatore Bonaccorso <carnil@...ian.org>)
[CVE-2017-8813] Double-Fetch Vulnerability in Linux-4.10.1/drivers/media/pci/saa7164/saa7164-bus.c (wpengfeinudt@...il.com)

June 26 (4 messages)

[CVE-2017-8831] Double-Fetch Vulnerability in Linux-4.10.1/drivers/media/pci/saa7164/saa7164-bus.c (wpengfeinudt@...il.com)
Microsoft Skype v7.2, v7.35 & v7.36 - Stack Buffer Overflow Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
DefenseCode Security Advisory: IBM DB2 Command Line Processor Buffer Overflow (DefenseCode <defensecode@...ensecode.com>)
[CVE-2017-8831] Double-Fetch Vulnerability in Linux-4.10.1/drivers/media/pci/saa7164/saa7164-bus.c (wpengfeinudt@...il.com)

June 27 (2 messages)

[slackware-security] kernel (SSA:2017-177-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 3899-1] vlc security update (Salvatore Bonaccorso <carnil@...ian.org>)

June 28 (2 messages)

[SECURITY] [DSA 3886-2] linux regression update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3900-1] openvpn security update (Sebastien Delafond <seb@...angle.com>)

June 29 (1 message)

ESA-2017-062: VASA Provider Virtual Appliance Remote Code Execution Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)

June 30 (2 messages)

SEC Consult SA-20170630-0 :: Multiple critical vulnerabilities in OSCI-Transport library 1.2 for German e-Government (SEC Consult Vulnerability Lab <research@s…)
Microsoft Dynamic CRM 2016 - Cross-Site Scripting vulnerability (gregory draperi <gregory.draperi@...il.com>)

60 messages

Powered by blists - more mailing lists