bugtraq mailing list - 2014/03

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2014/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³ 17	⁴ 4	⁵ 17	⁶ 4	⁷ 3	⁸	⁹
¹⁰ 11	¹¹ 9	¹² 14	¹³ 13	¹⁴ 11	¹⁵	¹⁶
¹⁷ 9	¹⁸ 2	¹⁹ 5	²⁰ 6	²¹ 1	²²	²³
²⁴ 9	²⁵ 5	²⁶ 16	²⁷	²⁸ 18	²⁹	³⁰
³¹ 13

Messages by day:

March 3 (17 messages)

Microsoft Office 365 Outlook - Filter Bypass & Persistent Editor Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
CVE-2014-1216 - Remote Command Execution in Fitnesse Wiki (Portcullis Advisories <advisories@...tcullis-security.com>)
CVE-2014-5880 - Authentication Bypass in Oracle Demantra (Portcullis Advisories <advisories@...tcullis-security.com>)
Re: CVE-2014-5795 - Database Credentials Leak in Oracle Demantra (Arron Dowdeswell <acd@...35.com>)
Re: CVE-2014-5880 - Authentication Bypass in Oracle Demantra (Arron Dowdeswell <acd@...35.com>)
CVE-2014-0372 - SQL Injection in Oracle Demantra (Portcullis Advisories <advisories@...tcullis-security.com>)
CVE-2014-5795 - Database Credentials Leak in Oracle Demantra (Portcullis Advisories <advisories@...tcullis-security.com>)
[CVE-2013-6231] Remote Privilege Escalation in SpagoBI v4.0 (Christian Catalano <ch.catalano@...il.com>)
ESA-2014-003: RSA® Data Loss Prevention Improper Session Management Vulnerability (Security Alert <Security_Alert@....com>)
WordPress thecotton Themes Remote File Upload Vulnerability (iedb.team@...il.com)
[CVE-2013-6232] Persistent Cross-Site Scripting (XSS) in SpagoBI v4.0 (Christian Catalano <ch.catalano@...il.com>)
[CVE-2013-6233] Persistent HTML Script Insertion permits offsite-bound forms in SpagoBI v4.0 (Christian Catalano <ch.catalano@...il.com>)
[CVE-2013-6234] XSS File Upload in SpagoBI v4.0 (Christian Catalano <ch.catalano@...il.com>)
[CVE-2014-2206] GetGo Download Manager HTTP Response Header Buffer Overflow Remote Code Execution (Julien Ahrens <info@...security.com>)
[SECURITY] [DSA 2868-1] php5 security update (Salvatore Bonaccorso <carnil@...ian.org>)
CFP: Passwords^14, Las Vegas, August 5-6 (Per Thorsheim <per@...rsheim.net>)
[SECURITY] [DSA 2869-1] gnutls26 security update (Yves-Alexis Perez <corsac@...ian.org>)

March 4 (4 messages)

[slackware-security] gnutls (SSA:2014-062-01) (Slackware Security Team <security@...ckware.com>)
[CVE-2014-0073] Apache Cordova In-App-Browser privilege escalation (iclelland@...omium.org)
JOIDS (Java OpenID Server) multiple vulnerabilities (Bartlomiej Balcerek <Bartlomiej.Balcerek@....edu.pl>)
[CVE-2014-0072] Apache Cordova File-Transfer insecure defaults (iclelland@...omium.org)

March 5 (17 messages)

Public disclosure of Buffer Overflow Dassault Systems (0xnanoquetz9l@...il.com)
(Added CVE) Dassault Systemes Catia Stack Buffer Overflow (0xnanoquetz9l@...il.com)
PHP: patch to make session handling with default config more secure against local attackers (Jann Horn <jann+bugtraq_20140304_phpsess@...jh.net>)
[security bulletin] HPSBUX02972 SSRT101454 rev.1 - HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other V… (security-alert@...com)
[security bulletin] HPSBUX02973 SSRT101455 rev.1 - HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other V… (security-alert@...com)
[security bulletin] HPSBHF02965 rev.1 - HP Security Management System, Remote Execution of Arbitrary Code (security-alert@...com)
[security bulletin] HPSBMU02933 rev.2 - HP SiteScope, issueSiebelCmd and loadFileContents SOAP Requests, Remote Code Execution, Arbitrary … (security-alert@...com)
[security bulletin] HPSBMU02933 rev.2 - HP SiteScope, issueSiebelCmd and loadFileContents SOAP Requests, Remote Code Execution, Arbitrary … (security-alert@...com)
[security bulletin] HPSBST02955 rev.2 - HP XP P9000 Performance Advisor Software, 3rd party Software Security - Apache Tomcat and Oracle U… (security-alert@...com)
CVE-2014-1599 - 39 Type-1 XSS in SFR DSL/Fiber Box ("alejandr0.w3b.p0wn3r" <alejandr0.w3b.p0wn3r@...il.com>)
Cross-Site Scripting (XSS) in Ilch CMS (High-Tech Bridge Security Research <advisory@...ridge.com>)
Multiple Vulnerabilities in OpenDocMan (High-Tech Bridge Security Research <advisory@...ridge.com>)
ESA-2014-012: EMC Documentum TaskSpace Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
[CVE-2014-0683]Router Cisco RV110W - RV215W - CVR100W - Bypass Login Page - Admin Password Disclosure (Gustavo Speranza <gustavosj.js@...il.com>)
Cisco Security Advisory: Cisco Small Business Router Password Disclosure Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[CVE-2014-0683]Router Cisco RV110W - RV215W - CVR100W - Bypass Login Page - Admin Password Disclosure (Gustavo Speranza <gustavosj.js@...il.com>)

March 6 (4 messages)

[slackware-security] sudo (SSA:2014-064-01) (Slackware Security Team <security@...ckware.com>)
[ANN] Struts 2.3.16.1 GA release available - security fix (Lukasz Lenart <lukaszlenart@...che.org>)
SonicWall Dashboard Backend Server - Client Side Cross Site Scripting Web Vulnerability (Vulnerability Lab <admin@...nerability-lab.com>)
CVE-2014-2044 - Remote Code Execution in ownCloud (Portcullis Advisories <advisories@...tcullis-security.com>)

March 7 (3 messages)

SEC Consult SA-20140307-0 :: Unauthenticated access & manipulation of settings in Huawei E5331 MiFi mobile hotspot (SEC Consult Vulnerability Lab <research@sec…)
[security bulletin] HPSBUX02963 SSRT101297 rev.1 - HP-UX m4(1), Local Unauthorized Access (security-alert@...com)
[HTTPCS] ClanSphere 'where' Cross Site Scripting Vulnerability (contact@...pcs.com)

March 10 (11 messages)

E-Store (1.0 & 2.0) <= SQL Injection Vulnerability (Alkeraithe@...il.com)
[SECURITY] [DSA 2870-1] libyaml-libyaml-perl security update (Salvatore Bonaccorso <carnil@...ian.org>)
[ MDVSA-2014:048 ] gnutls (security@...driva.com)
[ MDVSA-2014:049 ] subversion (security@...driva.com)
[SECURITY] [DSA 2871-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2872-1] udisks security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBGN02970 rev.1 - HP Rapid Deployment Pack (RDP) or HP Insight Control Server Deployment, Multiple Remote Vulnerabil… (security-alert@...com)
Android Vulnerability: Install App Without User Explicit Consent (Daniel Divricean <divricean@...il.com>)
APPLE-SA-2014-03-10-1 iOS 7.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[ MDVSA-2014:050 ] wireshark (security@...driva.com)
APPLE-SA-2014-03-10-2 Apple TV 6.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

March 11 (9 messages)

AST-2014-001: Stack Overflow in HTTP Processing of Cookie Headers. ("Asterisk Security Team" <security@...erisk.org>)
AST-2014-002: Denial of Service Through File Descriptor Exhaustion with chan_sip Session-Timers ("Asterisk Security Team" <security@...erisk.org>)
AST-2014-003: Remote Crash Vulnerability in PJSIP channel driver ("Asterisk Security Team" <security@...erisk.org>)
AST-2014-004: Remote Crash Vulnerability in PJSIP Channel Driver Subscription Handling ("Asterisk Security Team" <security@...erisk.org>)
[security bulletin] HPSBMU02948 rev.1 - HP Systems Insight Manager (SIM) Running on Linux and Windows, Remote Execution of Arbitrary Code,… (security-alert@...com)
[security bulletin] HPSBMU02947 rev.1 - HP System Management Homepage (SMH) Running on Linux and Windows, Remote Disclosure of Information… (security-alert@...com)
[security bulletin] HPSBUX02976 SSRT101236 rev.1 - HP-UX Running NFS rpc.lockd, Remote Denial of Service (DoS) (security-alert@...com)
[CVE-2013-6835] - iOS 7.0.6 Safari/Facetime-Audio Privacy issue (Guillaume Ross <guillaume@...aryfactory.ca>)
[slackware-security] udisks, udisks2 (SSA:2014-070-01) (Slackware Security Team <security@...ckware.com>)

March 12 (14 messages)

CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities (CORE Advisories Team <advisories@...esecurity.com>)
Medium severity flaw in BlackBerry QNX Neutrino RTOS (Tim Brown <timb@...-dimension.org.uk>)
[SECURITY] [DSA 2873-1] file security update (Salvatore Bonaccorso <carnil@...ian.org>)
CVE-2014-0054 Spring MVC Incomplete fix for CVE-2013-4152 / CVE-2013-6429 (XXE) (Pivotal Security Team <security@...ivotal.com>)
CVE-2014-1904 XSS when using Spring MVC (Pivotal Security Team <security@...ivotal.com>)
CVE-2014-0097 Spring Security Blank password may bypass user authentication (Pivotal Security Team <security@...ivotal.com>)
NEW VMSA-2014-0002 VMware vSphere updates to third party libraries ("\"VMware Security Response Center\"" <security@...are.com>)
CVE-2014-1222 - Local File Inclusion in Vtiger CRM (Portcullis Advisories <advisories@...tcullis-security.com>)
CVE-2014-2043 - SQL Injection in Procentia IntelliPen (Portcullis Advisories <advisories@...tcullis-security.com>)
Remote Command Injection in Arabic Prawn 0.0.1 Ruby Gem ("Larry W. Cashdollar" <larry0@...com>)
Cross-Site Scripting (XSS) in Open Classifieds (High-Tech Bridge Security Research <advisory@...ridge.com>)
[SECURITY] [DSA 2876-1] cups security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2874-1] mutt security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2875-1] cups-filters security update (Moritz Muehlenhoff <jmm@...ian.org>)

March 13 (13 messages)

PowerArchiver: Uses insecure legacy PKZIP encryption when AES is selected (CVE-2014-2319) (Hanno Böck <hanno@...eck.de>)
Synology DSM4 Blind SQL Injection (Michael Wisniewski <wiz561@...il.com>)
[SECURITY] [DSA 2877-1] lighttpd security update (Michael Gilbert <mgilbert@...ian.org>)
[slackware-security] mutt (SSA:2014-071-01) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2014:051 ] file (security@...driva.com)
[ MDVSA-2014:052 ] net-snmp (security@...driva.com)
[ MDVSA-2014:053 ] libssh (security@...driva.com)
[ MDVSA-2014:055 ] owncloud (security@...driva.com)
[ MDVSA-2014:054 ] otrs (security@...driva.com)
Re: Medium severity flaw in BlackBerry QNX Neutrino RTOS (Tim Brown <timb@...-dimension.org.uk>)
[ MDVSA-2014:056 ] apache-commons-fileupload (security@...driva.com)
[ MDVSA-2014:057 ] mediawiki (security@...driva.com)
[security bulletin] HPSBMU02967 rev.1 - HP Unified Functional Testing Running on Windows, Remote Execution of Arbitrary Code (security-alert@...com)

March 14 (11 messages)

[SECURITY] [DSA 2878-1] virtualbox security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBMU02975 rev.1 - HP Smart Update Manager for Linux, Elevation of Privileges (security-alert@...com)
[ MDVSA-2014:058 ] freeradius (security@...driva.com)
ActiVPN launches its security bug bounty (Ninja ActiVPN <ninja.activpn@...il.com>)
[CVE-2014-2087] Free Download Manager CDownloads_Deleted::UpdateDownload() Buffer Overflow Remote Code Execution (Julien Ahrens <info@...security.com>)
[SECURITY] [DSA 2879-1] libssh security update (Raphael Geissert <geissert@...ian.org>)
[slackware-security] samba (SSA:2014-072-01) (Slackware Security Team <security@...ckware.com>)
NCC00596 Technical Advisory: iOS 7 arbitrary code execution in kernel mode (NCC Group Research <research@...group.com>)
Multiple Vulnerabilities in SeedDMS < = 4.3.3 (craig.arendt@...atumsecurity.com)
[ MDVSA-2014:059 ] php (security@...driva.com)
[ MDVSA-2014:060 ] imapsync (security@...driva.com)

March 17 (9 messages)

[ MDVSA-2014:061 ] oath-toolkit (security@...driva.com)
[slackware-security] php (SSA:2014-074-01) (Slackware Security Team <security@...ckware.com>)
exploit for old rlpdaemon bug (Nomen Nescio <nobody@...um.com>)
MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service (submit@...ec.org)
Open-Xchange Security Advisory 2014-03-17 (Martin Braun <martin.braun@...n-xchange.com>)
[ MDVSA-2014:062 ] webmin (security@...driva.com)
[ MDVSA-2014:064 ] udisks (security@...driva.com)
[ MDVSA-2014:063 ] x2goserver (security@...driva.com)
[SECURITY] [DSA 2880-1] python2.7 security update (Moritz Muehlenhoff <jmm@...ian.org>)

March 18 (2 messages)

=?utf-7?Q?Microsoft Forefront Protection for Exchange Server detected a virus?= (<ForefrontServerProtection@...P05.server>)
2014 World Conference on IST - Madeira Island, April 15-17 ("ML" <marialemos72@...il.com>)

March 19 (5 messages)

ESA-2014-018: EMC Connectrix Manager Converged Network Edition Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)
(CFP) LACSEC 2014: Cancun, Mexico. May 7-8, 2014 (EXTENDED DEADLINE) (Fernando Gont <fgont@...networks.com>)
Cross-Site Scripting (XSS) in CMSimple (High-Tech Bridge Security Research <advisory@...ridge.com>)
[SECURITY] [DSA 2881-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
Cisco Security Advisory: Cisco AsyncOS Software Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)

March 20 (6 messages)

[SECURITY] [DSA 2859-2] pidgin security update (Raphael Geissert <geissert@...ian.org>)
Shakacon 2014: Call for Papers - Deadline April 11th ("Shakacon" <info@...kacon.org>)
Wireless Drive v1.1.0 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[ MDVSA-2014:065 ] apache (security@...driva.com)
[SECURITY] [DSA 2882-1] extplorer security update (Giuseppe Iuculano <iuculano@...ian.org>)
[ MDVSA-2014:066 ] nss (security@...driva.com)

March 21 (1 message)

NCC00643 Technical Advisory: Nessus Authenticated Scan Local Privilege Escalation (NCC Group Research <research@...group.com>)

March 24 (9 messages)

[SECURITY] [DSA 2883-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
c0c0n 2014 | The cy0ps c0n - Call For Papers & Call For Workshops (c0c0n International Information Security Conference <c0c0n@...ra.org>)
CVE-2014-2570 - php-font-lib 0.3 www/make_subset.php Reflected Cross Site Scripting (Daniel Marques <daniel@...alabs.net>)
ESA-2014-011: RSA BSAFE® Micro Edition Suite Server Crash Vulnerability (Security Alert <Security_Alert@....com>)
Deutsche Telekom CERT Advisory [DTC-A-20140324-001] vulnerabilities in cacti (<CERT@...ekom.de>)
Deutsche Telekom CERT Advisory [DTC-A-20140324-003] vulnerabilities in icinga (<CERT@...ekom.de>)
Deutsche Telekom CERT Advisory [DTC-A-20140324-002] vulnerabilities in check_mk (<CERT@...ekom.de>)
Deutsche Telekom CERT Advisory [DTC-A-20140324-004] nagios vulnerability (<CERT@...ekom.de>)
[SECURITY] [DSA 2873-2] file regression update (Salvatore Bonaccorso <carnil@...ian.org>)

March 25 (5 messages)

[oCERT-2014-002] Xalan-Java insufficient secure processing (Andrea Barisani <lcars@...rt.org>)
MS14-010 CVE-2014-0293 Technical Details and Code(I changed the web permanently) (Dieyu <dieyu@...yu.org>)
[CVE-2014-2531] SQL injection in InterWorx Web Control Panel <= 5.0.13 (Eric Flokstra <erp.flokstra@...il.com>)
CVE-2013-6955 Synology DSM remote code execution (tiamat451@...il.com)
[security bulletin] HPSBMU02967 rev.2 - HP Unified Functional Testing Running on Windows, Remote Execution of Arbitrary Code (security-alert@...com)

March 26 (16 messages)

Web Egg Hunting Game - Hacky Easter ("Ivan Buetler" <ivan.buetler@...c.ch>)
[security bulletin] HPSBST02968 rev.1 - HP StoreOnce, Remote Unauthorized Access (security-alert@...com)
VUPEN Security Research - Google Chrome "Clipboard::WriteData()" Function Sandbox Escape (Pwn2Own) (VUPEN Security Research <advisories@...en.com>)
VUPEN Security Research - Google Chrome Blink "locationAttributeSetter" Use-after-free (Pwn2Own) (VUPEN Security Research <advisories@...en.com>)
VUPEN Security Research - Mozilla Firefox "BumpChunk" Object Processing Use-after-free (Pwn2Own) (VUPEN Security Research <advisories@...en.com>)
ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability (Security Alert <Security_Alert@....com>)
Cisco Security Advisory: Cisco 7600 Series Route Switch Processor 720 with 10 Gigabit Ethernet Uplinks Denial of Service… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team …)
Cisco Security Advisory: Cisco IOS Software Internet Key Exchange Version 2 Denial of Service Vulnerability (Cisco Systems Product Security Incident Response T…)
Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Cisco Security Advisory: Cisco IOS Software SSL VPN Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software Crafted IPv6 Packet Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@c…)
Firefox for Android Profile Directory Derandomization and Data Exfiltration (CVE-2014-1484, CVE-2014-1506, CVE-2014-1515, CVE-2014-… (Roee Hay <roeeh@...ibm.com>)
[SECURITY] [DSA 2884-1] libyaml security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 2885-1] libyaml-libyaml-perl security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 2886-1] libxalan2-java security update (Florian Weimer <fw@...eb.enyo.de>)

March 28 (18 messages)

ESA-2014-016: EMC VPLEX Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
[oCERT-2014-003] LibYAML input sanitization errors (Andrea Barisani <lcars@...rt.org>)
Dell SonicWall EMail Security Appliance Application v7.4.5 - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Wireless Drive v1.1.0 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Lazybone Studios WiFi Music 1.0 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Easy FileManager 1.1 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
My Photo Wifi Share & PS 1.1 iOS - Local Command Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
ES746 DELL Support-Bulletin - EMS Vulnerability Resolved (Vulnerability Lab <research@...nerability-lab.com>)
ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] HPSBST02968 rev.2 - HP StoreOnce, Remote Unauthorized Access (security-alert@...com)
[SECURITY] [DSA 2887-1] ruby-actionmailer-3.2 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2888-1] ruby-actionpack-3.2 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[RT-SA-2014-002] rexx Recruitment: Cross-Site Scripting in User Registration (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[SECURITY] [DSA 2889-1] postfixadmin security update (Thijs Kinkhorst <thijs@...ian.org>)
SEC Consult SA-20140328-0 :: Multiple vulnerabilities in Symantec LiveUpdate Administrator (SEC Consult Vulnerability Lab <research@...-consult.com>)
iStArtApp FileXChange v6.2 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Deutsche Telekom CERT Advisory [DTC-A-20140324-002] update140328 - vulnerabilities in check_mk (<CERT@...ekom.de>)

March 31 (13 messages)

[slackware-security] mozilla-thunderbird (SSA:2014-086-05) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-nss (SSA:2014-086-04) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-firefox (SSA:2014-086-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] openssh (SSA:2014-086-06) (Slackware Security Team <security@...ckware.com>)
[slackware-security] curl (SSA:2014-086-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] seamonkey (SSA:2014-086-07) (Slackware Security Team <security@...ckware.com>)
[slackware-security] httpd (SSA:2014-086-02) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 2890-1] libspring-java security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2891-1] mediawiki security update (Thijs Kinkhorst <thijs@...ian.org>)
PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
PhonerLite 2.14 SIP Soft Phone - SIP Digest Leak Information Disclosure (CVE-2014-2560) ("Jason Ostrom" <jostrom@...rasec.net>)
[SECURITY] [DSA 2891-2] mediawiki regression update (Thijs Kinkhorst <thijs@...ian.org>)

187 messages

Powered by blists - more mailing lists