bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2018/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 1	² 3	³ 2	⁴	⁵
⁶ 2	⁷ 3	⁸ 5	⁹ 1	¹⁰	¹¹	¹²
¹³	¹⁴ 8	¹⁵ 8	¹⁶	¹⁷ 5	¹⁸	¹⁹
²⁰ 6	²¹	²² 4	²³ 3	²⁴ 2	²⁵ 1	²⁶
²⁷ 3	²⁸	²⁹ 4	³⁰ 10	³¹

Messages by day:

August 1 (1 message)

[SECURITY] [DSA 4259-1] ruby2.3 security update (Moritz Muehlenhoff <jmm@...ian.org>)

August 2 (3 messages)

CVE-2016-7085 NOT fixed in VMware-player-12.5.9-7535481.exe ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[slackware-security] blueman (SSA:2018-213-01) (Slackware Security Team <security@...ckware.com>)
Executable installers are vulnerable^WEVIL (case 55): escalation of privilege with VMware Player 12.5.9 ("Stefan Kanthak" <stefan.kanthak@...go.de>)

August 3 (2 messages)

[SECURITY] [DSA 4260-1] libmspack security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] lftp (SSA:2018-214-01) (Slackware Security Team <security@...ckware.com>)

August 6 (2 messages)

[SECURITY] [DSA 4265-1] xml-security-c security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4262-1] symfony security update (Moritz Muehlenhoff <jmm@...ian.org>)

August 7 (3 messages)

[SECURITY] [DSA 4266-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)
RE: [FD] Executable installers are vulnerable^WEVIL (case 56): arbitrary code execution WITH escalation of privilege via ruf… (Andrius Duksta <duk@...skebank.lt>)
FreeBSD Security Advisory FreeBSD-SA-18:08.tcp (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

August 8 (5 messages)

New VMSA-2018-0019 - Horizon 6, 7, and Horizon Client for Windows updates address an out-of-bounds read vulnerability (VMware Security Response Center <securit…)
WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0006 (Michael Catanzaro <mcatanzaro@...lia.com>)
CA20180802-01: Security Notice for CA API Developer Portal ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[CVE-2018-14429] man-cgi < 1.16 Local File Include (eL_Bart0 <eL_Bart0@...tonmail.ch>)
[CVE-2018-12584] Heap overflow vulnerability in reSIProcate through 1.10.2 (Joachim De Zutter <dezutterjoachim@...il.com>)

August 9 (1 message)

[SECURITY] [DSA 4267-1] kamailio security update (Salvatore Bonaccorso <carnil@...ian.org>)

August 14 (8 messages)

ASUSTOR NAS ADM - 3.1.0 Remote Command Execution, SQL Injections (kyle Lovett <krlovett@...il.com>)
[SECURITY] [DSA 4271-1] samba security update (Salvatore Bonaccorso <carnil@...ian.org>)
X41 D-Sec GmbH Security Advisory X41-2018-001: Multiple Vulnerabilities in Yubico Piv (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
X41 D-Sec GmbH Security Advisory X41-2018-003: Multiple Vulnerabilities in pam_pkcs11 (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
X41 D-Sec GmbH Security Advisory X41-2018-002: Multiple Vulnerabilities in OpenSC (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
X41 D-Sec GmbH Security Advisory X41-2018-004: Multiple Vulnerabilities in Yubico libykneomgr (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
X41 D-Sec GmbH Security Advisory X41-2018-005: Multiple Vulnerabilities in Apple smartcardservices (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
Defense in depth -- the Microsoft way (part 57): all the latest MSVCRT installers allow escalation of privilege ("Stefan Kanthak" <stefan.kanthak@...go.de>)

August 15 (8 messages)

[SECURITY] [DSA 4272-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] openssl (SSA:2018-226-01) (Slackware Security Team <security@...ckware.com>)
FreeBSD Security Advisory FreeBSD-SA-18:08.tcp (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-18:09.l1tf (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-18:10.ip (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-18:11.hostapd (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
CSNC-2018-023 - Atmosphere Framework - Reflected Cross-Site Scripting (XSS) (Advisories <advisories@...pass-security.com>)
CSNC-2018-016 - ownCloud iOS Application - Cross-Site Scripting (Advisories <advisories@...pass-security.com>)

August 17 (5 messages)

SEC Consult SA-20180813-0 :: SQL Injection, XSS & CSRF vulnerabilities in Pimcore (SEC Consult Vulnerability Lab <research@...-consult.com>)
[SECURITY] [DSA 4273-1] intel-microcode security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4274-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4275-1] keystone security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4276-1] php-horde-image security update (Sebastien Delafond <seb@...ian.org>)

August 20 (6 messages)

[SECURITY] [DSA 4277-1] mutt security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] samba (SSA:2018-229-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] ntp (SSA:2018-229-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4278-1] jetty9 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[CVE-2018-15528] Reflected XSS in Java System Solutions SSO Plugin 4.0.13.1 for BMC MyIT (mamurch@...oitte.de)
[SECURITY] [DSA 4279-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)

August 22 (4 messages)

[slackware-security] libX11 (SSA:2018-233-01) (Slackware Security Team <security@...ckware.com>)
Mutiny Monitoring Appliance < 6.1.0-5263 - Command Injection (CVE-2018-15529) (reggie.dodd30@...il.com)
[SECURITY] [DSA 4280-1] openssh security update (Sebastien Delafond <seb@...ian.org>)
[ANN] CVE-2018-11776 Apache Struts 2.3 to 2.3.34 and 2.5 to 2.5.16 (Yasser Zamani <yasserzamani@...che.org>)

August 23 (3 messages)

[SECURITY] [DSA 4279-2] linux regression update (Salvatore Bonaccorso <carnil@...ian.org>)
Seagate Media Server multiple SQL injection vulnerabilities (Summer of Pwnage <lists@...urify.nl>)
Couchbase Server - Remote Code Execution (x ksi <s3810@...stk.edu.pl>)

August 24 (2 messages)

Couchbase Server - Remote Code Execution (x ksi <s3810@...stk.edu.pl>)
Couchbase Server - Remote Code Execution (x ksi <s3810@...stk.edu.pl>)

August 25 (1 message)

ezmlm warning (bugtraq-help@...urityfocus.com)

August 27 (3 messages)

[SYSS-2018-010] Dojo Toolkit - dojox.grid.DataGrid editing XSS (Moritz Bechler <moritz.bechler@...s.de>)
[CVE-2018-15877] Plainview Activity Monitor RCE (Lydéric LEFEBVRE <lylefebvre.infosec@...il.com>)
[CVE-2018-15877] Plainview Activity Monitor RCE (Lydéric LEFEBVRE <lylefebvre.infosec@...il.com>)

August 29 (4 messages)

[HITB-Announce] Reminder: HITBSecConf2018 Dubai CFP (Hafez Kamal <aphesz@...kinthebox.org>)
[slackware-security] Slackware 14.2 kernel (SSA:2018-240-01) (Slackware Security Team <security@...ckware.com>)
Signal IOS Remote Memory Exhaustion and Restart (nick.m.mckenna@...il.com)
[SECURITY] [DSA 4281-1] tomcat8 security update (Sebastien Delafond <seb@...ian.org>)

August 30 (10 messages)

CSNC-2018-015 - ownCloud Impersonate - Authorization Bypass (Advisories <advisories@...pass-security.com>)
[security bulletin] MFSBGN03812 rev.1 - Application Performance Management, remote cross-site tracing (cyber-psrt@...rofocus.com)
Sensitive Data Exposure via WiFi Broadcasts in Android OS [CVE-2018-9489] (research@...htwatchcybersecurity.com)
[security bulletin] MFSBGN03813 rev.1 - Network Operations Management (NOM) Suite CDF, Remote Code Execution (cyber-psrt@...rofocus.com)
[security bulletin] MFSBGN03817 rev.1 - Operations Bridge containerized suite, Remote Code Execution (cyber-psrt@...rofocus.com)
[security bulletin] MFSBGN03814 rev.1 - Service Management Automation (SMA) containerized, Remote Code Execution (cyber-psrt@...rofocus.com)
[security bulletin] MFSBGN03815 rev.1 - Data Center Automation Containerized (DCA) suite, remote code execution (cyber-psrt@...rofocus.com)
[security bulletin] MFSBGN03818 rev.1 - Micro Focus Operations Bridge containerized suite, Remote Code Execution (cyber-psrt@...rofocus.com)
[security bulletin] MFSBGN03820 rev.1 - Micro Focus Hybrid Cloud Management (HCM) containerized suites, remote code execution (cyber-psrt@...rofocus.com)
[security bulletin] MFSBGN03821 rev.1 - Micro Focus Hybrid Cloud Management (HCM) containerized suite, Remote Code Execution (cyber-psrt@...rofocus.com)

71 messages