bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2018/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 3	² 4	³ 5	⁴ 2	⁵	⁶
⁷ 7	⁸ 3	⁹ 3	¹⁰ 6	¹¹ 5	¹²	¹³
¹⁴ 2	¹⁵ 5	¹⁶ 1	¹⁷ 5	¹⁸ 2	¹⁹	²⁰
²¹ 4	²² 1	²³ 8	²⁴ 1	²⁵ 4	²⁶	²⁷
²⁸	²⁹	³⁰	³¹

Messages by day:

May 1 (3 messages)

[slackware-security] libwmf (SSA:2018-120-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-firefox (SSA:2018-120-02) (Slackware Security Team <security@...ckware.com>)
CVE-2016-6811: Apache Hadoop Privilege escalation vulnerability (Akira Ajisaka <aajisaka@...che.org>)

May 2 (4 messages)

Trovebox <= 4.0.0-rc6 Authentication Bypass, SQLi, SSRF (robin.verton@...ekom.de)
[SECURITY] [DSA 4188-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)
CA20180501-01: Security Notice for CA Spectrum ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[SECURITY] [DSA 4187-1] linux security update (Ben Hutchings <benh@...ian.org>)

May 3 (5 messages)

[SECURITY] [DSA 4189-1] quassel security update (Moritz Muehlenhoff <jmm@...ian.org>)
Command injections via USB upgrade in MSTAR Set-Top box products (IM <ivanm@...urity-net.biz>)
SEC Consult SA-20180503-0 :: Authentication Bypass in Oracle Access Manager (OAM) (SEC Consult Vulnerability Lab <research@...-consult.com>)
[SECURITY] [DSA 4190-1] jackson-databind security update (Sebastien Delafond <seb@...ian.org>)
[SECURITY] [DSA 4191-1] redmine security update (Sebastien Delafond <seb@...ian.org>)

May 4 (2 messages)

Updated VMSA-2018-0007.3: VMware Virtual Appliance updates address side-channel analysis due to speculative execution (VMware Security Response Center <securit…)
[slackware-security] seamonkey (SSA:2018-123-01) (Slackware Security Team <security@...ckware.com>)

May 7 (7 messages)

APPLE-SA-2018-05-04-1 Security Update 2018-001 Swift 4.1.1 for Ubuntu 14.04 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[SECURITY] [DSA 4192-1] libmad security update (Moritz Muehlenhoff <jmm@...ian.org>)
[slackware-security] python (SSA:2018-124-01) (Slackware Security Team <security@...ckware.com>)
CANADIAN JOB VACANCY!!! (SUNCOR ENERGY <info@...cor-recruitments.com>)
[SECURITY] [DSA 4193-1] wordpress security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 4194-1] lucene-solr security update (Moritz Muehlenhoff <jmm@...ian.org>)
WebKitGTK+ Security Advisory WSA-2018-0004 (Michael Catanzaro <mcatanzaro@...lia.com>)

May 8 (3 messages)

[SECURITY] [DSA 4195-1] wget security update (Salvatore Bonaccorso <carnil@...ian.org>)
APPLE-SA-2018-05-08-1 Additional information for APPLE-SA-2018-04-24-2 Security Update 2018-001 (Apple Product Security <product-security-noreply@...ts.apple.c…)
FreeBSD Security Advisory FreeBSD-SA-18:06.debugreg (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

May 9 (3 messages)

[SECURITY] [DSA 4196-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)
[ADV170017] Defense in depth -- the Microsoft way (part 54): escalation of privilege during installation of Microsoft Of… ("Stefan Kanthak" <stefan.kanthak@...go.…)
t2'18: Call For Papers 2018 (Helsinki, Finland) ("Tomi Tuominen" <tomi.tuominen@...fi>)

May 10 (6 messages)

[security bulletin] MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerab… (cyber-psrt@...rofocus.com)
[SECURITY] [DSA 4197-1] wavpack security updaze (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4198-1] prosody security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] MFSBGN03804 - HP Service Manager Software, Remote Disclosure of Information (cyber-psrt@...rofocus.com)
[slackware-security] wget (SSA:2018-129-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-firefox (SSA:2018-129-01) (Slackware Security Team <security@...ckware.com>)

May 11 (5 messages)

[security bulletin] MFSBGN03805 - HP Service Manager, Remote Disclosure of Information (cyber-psrt@...rofocus.com)
[slackware-security] mariadb (SSA:2018-130-01) (Slackware Security Team <security@...ckware.com>)
[security bulletin] MFSBGN03802 - Virtualization Performance Viewer (vPV) / Cloud Optimizer, Local Disclosure of Information (cyber-psrt@...rofocus.com)
[security bulletin] MFSBGN03807 rev.1 - HP Service Manager Software, SQL Injection (cyber-psrt@...rofocus.com)
[SECURITY] [DSA 4199-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)

May 14 (2 messages)

Vulnerabilities in IBMs Flashsystems and Storwize Products (Sebastian Neuner <sneuner@...gle.com>)
SEC Consult SA-20180514-0 :: Arbitrary File Upload & Cross-site scripting in MyBiz MyProcureNet (SEC Consult Vulnerability Lab <research@...-consult.com>)

May 15 (5 messages)

[SECURITY] [DSA 4200-1] kwallet-pam security update (Moritz Muehlenhoff <jmm@...ian.org>)
CVE-2018-10994: HTML tag injection in Signal-desktop (Alfredo Ortega <ortegaalfredo@...il.com>)
Re: SEC Consult SA-20180514-0 :: Arbitrary File Upload & Cross-site scripting in MyBiz MyProcureNet (SEC Consult Vulnerability Lab <research@...-consult.com>)
CSNC-2018-002 totemomail Encryption Gateway - JSONP hijacking (Advisories <advisories@...pass-security.com>)
CSNC-2018-003 totemomail Encryption Gateway - Cross-Site Request Forgery (Advisories <advisories@...pass-security.com>)

May 16 (1 message)

[SECURITY] [DSA 4201-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)

May 17 (5 messages)

SEC Consult SA-20180516-0 :: XXE & XSS vulnerabilities in RSA Authentication Manager (SEC Consult Vulnerability Lab <research@...-consult.com>)
CVE-2018-11101: Signal-desktop HTML tag injection variant 2 (Alfredo Ortega <ortegaalfredo@...il.com>)
[SECURITY] [DSA 4202-1] curl security update (Alessandro Ghedini <ghedo@...ian.org>)
[slackware-security] php (SSA:2018-136-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] curl (SSA:2018-136-01) (Slackware Security Team <security@...ckware.com>)

May 18 (2 messages)

[SECURITY] [DSA 4203-1] vlc security update (Moritz Muehlenhoff <jmm@...ian.org>)
MagniComp SysInfo Information Exposure [CVE-2018-7268] (Harry Sintonen <bugtraq@...er.fi>)

May 21 (4 messages)

[SYSS-2018-007] ILIAS e-Learning - Reflected Cross-Site-Scripting (Moritz Bechler <moritz.bechler@...s.de>)
[SECURITY] [DSA 4204-1] imagemagick security update (Sebastien Delafond <seb@...ian.org>)
[SECURITY] [DSA 4205-1] Advance notification for upcoming end-of-life for (Moritz Muehlenhoff <jmm@...ian.org>)
Qualys Security Advisory - Procps-ng Audit Report (Qualys Security Advisory <qsa@...lys.com>)

May 22 (1 message)

[SECURITY] [DSA 4206-1] gitlab security update (Moritz Muehlenhoff <jmm@...ian.org>)

May 23 (8 messages)

[SECURITY] [DSA 4207-1] packagekit security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] Slackware 14.2 kernel (SSA:2018-142-01) (Slackware Security Team <security@...ckware.com>)
K2 smartforms runtime application - 4.6.11 SSRF (fuming22@...il.com)
[SECURITY] [DSA 4208-1] procps security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] mozilla-thunderbird (SSA:2018-142-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] procps-ng (SSA:2018-142-03) (Slackware Security Team <security@...ckware.com>)
[CVE-2018-8013] Apache Batik information disclosure vulnerability ("Simon Steiner" <simonsteiner1984@...il.com>)
[security bulletin] MFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site Scripting (cyber-psrt@...rofocus.com)

May 24 (1 message)

PHP Login & User Management <= 4.1.0 - Arbitrary File Upload (CVE-2018-11392) (reggie.dodd30@...il.com)

May 25 (4 messages)

Ruckus (Brocade) ICX7450-48 Reflected Cross Site Scripting (Yavuz Atlas <yavuz.atlas@...net.com.tr>)
Android OS Didnt use FLAG_SECURE for Sensitive Settings [CVE-2017-13243] (research@...htwatchcybersecurity.com)
[SECURITY] [DSA 4210-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4209-1] thunderbird security update (Moritz Muehlenhoff <jmm@...ian.org>)

71 messages