bugtraq mailing list - 2014/04

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2014/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 7	² 6	³ 6	⁴ 1	⁵	⁶
⁷ 10	⁸ 7	⁹ 18	¹⁰ 7	¹¹ 10	¹²	¹³
¹⁴	¹⁵ 16	¹⁶ 11	¹⁷ 13	¹⁸	¹⁹	²⁰
²¹ 15	²² 9	²³ 12	²⁴ 9	²⁵ 9	²⁶	²⁷
²⁸ 11	²⁹ 2	³⁰ 19

Messages by day:

April 1 (7 messages)

[SECURITY] [DSA 2892-1] a2ps security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 2893-1] openswan security update (Yves-Alexis Perez <corsac@...ian.org>)
Regarding attacks and exploits of the physical body (stephen@....net)
[SE-2013-01] Security vulnerabilities in Oracle Java Cloud Service (details) (Security Explorations <contact@...urity-explorations.com>)
Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction (Bipin Gautam <bipin.gautam@...il.com>)
Re: [SE-2013-01] Security vulnerabilities in Oracle Java Cloud Service (details) (Security Explorations <contact@...urity-explorations.com>)
ESA-2014-020: RSA Adaptive Authentication (On-Premise) Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)

April 2 (6 messages)

[IMF 2014] Call for Participation (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
APPLE-SA-2014-04-01-1 Safari 6.1.3 and Safari 7.0.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
iShare Your Moving Library 1.0 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
SEC Consult SA-20140402-0 :: Multiple vulnerabilities in Rhythm File Manager (SEC Consult Vulnerability Lab <research@...-consult.com>)
Сross-Site Request Forgery (CSRF) in XCloner Wordpress Plugin (High-Tech Bridge Security Research <advisory@...ridge.com>)
[MATTA-2013-004] CVE-2014-1409; MobileIron authentication bypass vulnerability (Florent Daigniere <florent.daigniere@...stmatta.com>)

April 3 (6 messages)

0A29-14-1 : NCCGroup EasyDA privilege escalation & credential disclosure vulnerability [0day] (0a29 40 <0a2940@...il.com>)
Private Photo+Video v1.1 Pro iOS - Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[softScheck] Denial of Service in Microsoft Office 2007-2013 (Lubomir Stroetmann <lubomir.stroetmann@...tscheck.com>)
[security bulletin] HPSBHF02981 rev.1 - HP Integrated Lights-Out 2, 3, and 4 (iLO2, iLO3, iLO4), IPMI 2.0 RCMP+ Authentication Remote Pass… (security-alert@...com)
ESA-2012-029: RSA BSAFE® SSL-C Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
ESA-2013-039: RSA BSAFE® SSL-J Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)

April 4 (1 message)

CA20140403-01: Security Notice for CA Erwin Web Portal ("Kotas, Kevin J" <Kevin.Kotas@...com>)

April 7 (10 messages)

[security bulletin] HPSBGN02986 rev.1 - HP IceWall Identity Manager and HP IceWall SSO Password Reset Option Running Apache Commons FileUp… (security-alert@...com)
Phrack Security Advisory 2014-001 - Paper leak on release timeout (Phrack Staff <staff@...ack.org>)
[SECURITY] [DSA 2891-3] mediawiki regression update (Thijs Kinkhorst <thijs@...ian.org>)
Vulnerability in PHPFox v3.7.3, v3.7.4 and v3.7.5 all build [ CVE-2013-7195, CVE-2013-7196 ] (Wesley Henrique <wesleyhenrique@...il.com>)
Call for Papers (education@...wnjournal.org)
[SECURITY] [DSA 2894-1] openssh security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 2895-1] prosody security update (Luciano Bello <luciano@...ian.org>)
Pearson eSIS Enterprise Student Information System Stored XSS (tudor.enache@...pag.com)
Pearson eSIS Enterprise Student Information System SQL Injection (tudor.enache@...pag.com)
MacOSX/XNU HFS Multiple Vulnerabilities (submit@...ec.org)

April 8 (7 messages)

[security bulletin] HPSBST02980 rev.1 - HP Array Configuration Utility, HP Array Diagnostics Utility, HP ProLiant Array Diagnostics and Sm… (security-alert@...com)
[SECURITY] [DSA 2896-1] openssl security update (Salvatore Bonaccorso <carnil@...ian.org>)
Open-Xchange Security Advisory 2014-04-08 (Martin Braun <martin.braun@...n-xchange.com>)
Bluetooth Text Chat v1.0 iOS - Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 2896-2] openssl security update (Salvatore Bonaccorso <carnil@...ian.org>)
BlackBerry Z 10 - Buffer Overflow in qconnDoor [MZ-13-05] (modzero security <security@...zero.ch>)
[SECURITY] [DSA 2897-1] tomcat7 security update (Moritz Muehlenhoff <jmm@...ian.org>)

April 9 (18 messages)

[slackware-security] openssl (SSA:2014-098-01) (Slackware Security Team <security@...ckware.com>)
Re: CVE-2014-2297(WordPress-videowhisper-live-streaming-integration 4.29.6-Xss) ("Ipstenu \(Mika Epstein\)" <plugins@...dpress.org>)
FreeBSD Security Advisory FreeBSD-SA-14:05.nfsserver (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-14:06.openssl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-14:06.openssl [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Cisco Security Advisory: OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products (Cisco Systems Product Security Incident Response Team <psirt@cis…)
[ MDVSA-2014:067 ] openssl (security@...driva.com)
CVE-2014-0160 mitigation using iptables (Fabien Bourdaire <lists@...c.co.uk>)
Сross-Site Request Forgery (CSRF) in XCloner Standalone (High-Tech Bridge Security Research <advisory@...ridge.com>)
SQL Injection in Orbit Open Ad Server (High-Tech Bridge Security Research <advisory@...ridge.com>)
[ MDVSA-2014:068 ] openssh (security@...driva.com)
[ MDVSA-2014:069 ] perl-YAML-LibYAML (security@...driva.com)
[ MDVSA-2014:071 ] yaml (security@...driva.com)
[ MDVSA-2014:072 ] php-ZendFramework (security@...driva.com)
[ MDVSA-2014:070 ] yaml (security@...driva.com)
[ MDVSA-2014:073 ] file (security@...driva.com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[SECURITY] [DSA 2898-1] imagemagick security update (Moritz Muehlenhoff <jmm@...ian.org>)

April 10 (7 messages)

[SECURITY] [DSA 2899-1] openafs security update (Thijs Kinkhorst <thijs@...ian.org>)
AppFish Offline Coder v2.2 iOS - Persistent Software Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
iVault Private P&V 1.1 iOS - Path Traversal Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
BlueMe Bluetooth v5.0 iOS - Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[ MDVSA-2014:075 ] php (security@...driva.com)
Sendy 1.1.9.1 - SQL Injection Vulnerability (marduk369@...il.com)
OWASP ZAP 2.3.0 (psiinon <psiinon@...il.com>)

April 11 (10 messages)

[ MDVSA-2014:076 ] a2ps (security@...driva.com)
[SECURITY] [DSA 2900-1] jbigkit security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBMU02995 rev.1 - HP Software HP Service Manager, Asset Manager, UCMDB Browser, Executive Scorecard, Server Automati… (security-alert@...com)
SEC Consult SA-20140411-0 :: Multiple vulnerabilities in Plex Media Server (SEC Consult Vulnerability Lab <research@...-consult.com>)
CVE-2014-2384 - Invalid Pointer Dereference in VMware Workstation and Player (Portcullis Advisories <advisories@...tcullis-security.com>)
Woltlab Burning Board 3.9.1 pl1 - Persistent Web Vulnerability & Editor Reverse Encoding Issue (Vulnerability Lab <research@...nerability-lab.com>)
ESA-2014-019: RSA BSAFE® Micro Edition Suite Certificate Chain Processing Vulnerability (Security Alert <Security_Alert@....com>)
ESA-2014-003: RSA® Data Loss Prevention Improper Session Management Vulnerability (Security Alert <Security_Alert@....com>)
ESA-2012-032: RSA BSAFE® Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks (Security Alert <Security_Alert@....com>)
ESA-2014-026: EMC Documentum Content Server Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)

April 15 (16 messages)

[ MDVSA-2014:077 ] jbigkit (security@...driva.com)
[SECURITY] [DSA 2901-1] wordpress security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 2902-1] curl security update (Salvatore Bonaccorso <carnil@...ian.org>)
Adobe Reader for Android exposes insecure Javascript interfaces ("Securify B.V." <lists@...urify.nl>)
[security bulletin] HPSBMU02995 rev.2 - HP Software HP Service Manager, Asset Manager, UCMDB Browser, UCMDB Configuration Manager, Executi… (security-alert@...com)
[security bulletin] HPSBMU02994 rev.1 - HP BladeSystem c-Class Onboard Administrator (OA) running OpenSSL, Remote Disclosure of Informatio… (security-alert@...com)
[security bulletin] HPSBMU02998 rev.1 - HP System Management Homepage (SMH) running OpenSSL on Linux and Windows, Remote Disclosure of Inf… (security-alert@...com)
[security bulletin] HPSBMU02997 rev.1 - HP Smart Update Manager (SUM) running OpenSSL, Remote Disclosure of Information (security-alert@...com)
CVE-2013-6216 - SetUID/SetGID Programs Allow Privilege Escalation Via Insecure RPATH in multiple HP products on Linux (Portcullis Advisories <advisories@...tcu…)
PDF Album v1.7 iOS - File Include Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 2903-1] strongswan security update (Moritz Muehlenhoff <jmm@...ian.org>)
VUPEN Security Research - Adobe Flash ExternalInterface Use-After-Free Code Execution (Pwn2Own) (VUPEN Security Research <advisories@...en.com>)
RUCKUS ADVISORY ID 041414: OpenSSL 1.0.1 library's "Heart bleed" vulnerability - CVE-2014-0160 (Ruckus Product Security Team <security@...kuswireless.com>)
[SECURITY] CVE-2014-0111 Apache Syncope (Francesco Chicchiriccò <ilgrosso@...che.org>)
[security bulletin] HPSBST03001 rev.1 - HP XP P9500 Disk Array running OpenSSL, Remote Disclosure of Information (security-alert@...com)
[SECURITY] [DSA 2904-1] virtualbox security update (Moritz Muehlenhoff <jmm@...ian.org>)

April 16 (11 messages)

[security bulletin] HPSBUX03001 SSRT101382 rev.1 - HP-UX Whitelisting (WLI), Local System Integrity Risk (security-alert@...com)
[SECURITY] [DSA 2905-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
CVE-2014-2735 - WinSCP: missing X.509 validation (Micha Borrmann <micha.borrmann@...s.de>)
SQL Injection in mAdserve (High-Tech Bridge Security Research <advisory@...ridge.com>)
[security bulletin] HPSBMU02999 rev.1 - HP Software Autonomy WorkSite Server (On-Premises Software), Running OpenSSL, Remote Disclosure of… (security-alert@...com)
ESA-2014-028: EMC Cloud Tiering Appliance XML External Entity (XXE) and Information Disclosure Vulnerabilities (Security Alert <Security_Alert@....com>)
[Security Advisory] Stored Cross Site Scripting in Ektron CMS 8.7 (webmaster@...ephzeng.com)
[SECURITY] Stored Cross Site Scripting in Ektron CMS 8.7 (webmaster@...ephzeng.com)
[CORE-2014-0003] - SAP Router Password Timing Attack (CORE Advisories Team <advisories@...esecurity.com>)
[ MDVSA-2014:078 ] asterisk (security@...driva.com)
[SECURITY] [DSA 2907-1] Announcement of long term support for Debian oldstable (Moritz Muehlenhoff <jmm@...ian.org>)

April 17 (13 messages)

CVE-2014-2597 - Denial of Service in PCNetSoftware RAC Server (Portcullis Advisories <advisories@...tcullis-security.com>)
Buggy insecure "security" software executes rogue binary during installation and uninstallation ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[security bulletin] HPSBMU02996 rev.1 - HP Network Node Manager I (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Acces… (security-alert@...com)
[security bulletin] HPSBGN03008 rev.1 - HP Software Service Manager, "HeartBleed" OpenSSL Vulnerability, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBMU02982 rev.1 - HP Database and Middleware Automation, Disclosure of Information (security-alert@...com)
[security bulletin] HPSBMU02988 rev.1 - HP Universal Configuration Management Database, Disclosure of Information (security-alert@...com)
[security bulletin] HPSBMU02987 rev.1 - HP Universal Configuration Management Database Integration Service, Remote Code Execution (security-alert@...com)
[security bulletin] HPSBMU02935 rev.2 - HP LoadRunner Virtual User Generator, Remote Code Execution, Disclosure of information (security-alert@...com)
D-Link DAP-1320 Wireless Range Extender Directory Traversal and XSS Vulnerabilities (kyle Lovett <krlovett@...il.com>)
[ MDVSA-2014:079 ] json-c (security@...driva.com)
[security bulletin] HPSBGN03010 rev.1 - HP Software Server Automation, "HeartBleed" OpenSSL Vulnerability, Remote Disclosure of Informatio… (security-alert@...com)
[security bulletin] HPSBMU02998 rev.2 - HP System Management Homepage (SMH) running OpenSSL on Linux and Windows, Remote Disclosure of Inf… (security-alert@...com)
[security bulletin] HPSBMU02995 rev.3 - HP Software HP Service Manager, Asset Manager, UCMDB Browser, UCMDB Configuration Manager, Executi… (security-alert@...com)

April 21 (15 messages)

Security advisory for Bugzilla 4.5.3, 4.4.3, 4.2.8, and 4.0.12 (LpSolit@...il.com)
[SECURITY] [DSA 2908-1] openssl security update (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA 2909-1] qemu security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 2910-1] qemu-kvm security update (Salvatore Bonaccorso <carnil@...ian.org>)
Remote Command Injection in Ruby Gem sfpagent 0.4.14 ("Larry W. Cashdollar" <larry0@...com>)
[security bulletin] HPSBMU02995 rev.4 - HP Software HP Service Manager, Asset Manager, UCMDB Browser, UCMDB Configuration Manager, Executi… (security-alert@...com)
[security bulletin] HPSBMU03012 rev.1 - HP Insight Management VCEM Web Client SDK (VCEMSDK) running OpenSSL, Remote Disclosure of Informat… (security-alert@...com)
[SECURITY] [DSA 2901-2] wordpress regression update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] CVE-2013-2251: Apache Archiva Remote Command Execution (Brett Porter <brett@...che.org>)
[SECURITY] CVE-2013-2187: Apache Archiva Cross-Site Scripting vulnerability (Brett Porter <brett@...che.org>)
[security bulletin] HPSBMU02994 rev.2 - HP BladeSystem c-Class Onboard Administrator (OA) running OpenSSL, Remote Disclosure of Informatio… (security-alert@...com)
Blind SQL Injection Vulnerability in KnowledgeTree <= 3.7.0.2 (craig.arendt@...atumsecurity.com)
Multiple Vulnerabilities in MODX Revolution < = MODX 2.2.13-pl (craig.arendt@...atumsecurity.com)
[SECURITY] [DSA 2895-2] prosody regression update (Luciano Bello <luciano@...ian.org>)
[SECURITY] [DSA 2901-3] wordpress regression update (Salvatore Bonaccorso <carnil@...ian.org>)

April 22 (9 messages)

[slackware-security] libyaml (SSA:2014-111-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] php (SSA:2014-111-02) (Slackware Security Team <security@...ckware.com>)
[security bulletin] HPSBMU03019 rev.1 - HP Software UCMDB Browser and Configuration Manager running OpenSSL, Remote Disclosure of Informat… (security-alert@...com)
[security bulletin] HPSBMU03017 rev.1 - HP Software Connect-IT running OpenSSL, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBMU03018 rev.1 - HP Software Asset Manager running OpenSSL, Remote Disclosure of Information (security-alert@...com)
[SECURITY] [DSA 2911-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
APPLE-SA-2014-04-22-1 Security Update 2014-002 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2014-04-22-3 Apple TV 6.1.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2014-04-22-2 iOS 7.1.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

April 23 (12 messages)

[security bulletin] HPSBST03000 rev.1 - HP StoreEver ESL G3 Tape Library and Enterprise Library LTO-6 Tape Drives running OpenSSL, Remote … (security-alert@...com)
APPLE-SA-2014-04-22-4 AirPort Base Station Firmware Update 7.7.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[security bulletin] HPSBST03015 rev.1 - HP 3PAR OS running OpenSSL, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBMU03013 rev.1 - WMI Mapper for HP Systems Insight Manager running OpenSSL, Remote Disclosure of Information (security-alert@...com)
[SECURITY] [DSA 2808-2] openjpeg regression update (Raphael Geissert <geissert@...ian.org>)
SEC Consult SA-20140423-0 :: Path Traversal/Remote Code Execution in WD Arkeia Network Backup Appliances (SEC Consult Vulnerability Lab <research@...-consult.c…)
CVE-2014-1217 - Unauthenticated access to sensitive information and functionality in Livetecs Timelive (Portcullis Advisories <advisories@...tcullis-security.c…)
CVE-2014-2383 - Arbitrary file read in dompdf (Portcullis Advisories <advisories@...tcullis-security.com>)
AirPhoto WebDisk v4.1.0 iOS - Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
CVE-2014-2042 - Unrestricted file upload in Livetecs Timelive (Portcullis Advisories <advisories@...tcullis-security.com>)
[security bulletin] HPSBMU02995 rev.5 - HP Software HP Service Manager, Asset Manager, UCMDB Browser, UCMDB Configuration Manager, Executi… (security-alert@...com)
[security bulletin] HPSBMU02997 rev.2 - HP Smart Update Manager (SUM) running OpenSSL, Remote Disclosure of Information (security-alert@...com)

April 24 (9 messages)

[security bulletin] HPSBGN03011 rev.1 - HP IceWall MCRP running OpenSSL on Red Hat Enterprise Linux 6 (RHEL6), Remote Disclosure of Inform… (security-alert@...com)
[security bulletin] HPSBST03015 rev.2 - HP 3PAR OS running OpenSSL, Remote Disclosure of Information (security-alert@...com)
Weak firmware encryption and predictable WPA key on Sitecom routers (roberto.paleari@...ze.net)
Misli.com Android App SSL certificate validation weakness (harun.esur@...ptive.com)
Birebin.com Android App SSL certificate validation weakness (harun.esur@...ptive.com)
[security bulletin] HPSBHF03006 rev.1 - HP Integrated Lights-Out 2 (iLO 2) Denial of Service (security-alert@...com)
[security bulletin] HPSBHF03021 rev.1 - HP Thin Client with ThinPro OS or Smart Zero Core Services, Running OpenSSL, Remote Disclosure of … (security-alert@...com)
[security bulletin] HPSBPI03014 rev.1 - HP LaserJet Pro MFP Printers, HP Color LaserJet Pro MFP Printers, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBMU03020 rev.1 - HP Version Control Agent (VCA) and Version Control Repository Manager (VCRM) running OpenSSL on Li… (security-alert@...com)

April 25 (9 messages)

[security bulletin] HPSBMU02895 SSRT101253 rev.2 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of … (security-alert@...com)
[security bulletin] HPSBST03016 rev.1 - HP P2000 G3 MSA Array Systems, HP MSA 2040 Storage, and HP MSA 1040 Storage Remote Disclosure of I… (security-alert@...com)
[SECURITY] [DSA 2912-1] openjdk-6 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2906-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
Depot WiFi v1.0.0 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[CVE-2014-2715] Cross-site scripting (XSS) vulnerability in Videowhisper (mdgh9@...oo.com)
[security bulletin] HPSBMU03023 rev.1 - HP BladeSystem c-Class Virtual Connect Support Utility (VCSU) running OpenSSL on Linux and Windows… (security-alert@...com)
[security bulletin] HPSBMU03017 rev.2 - HP Software Connect-IT running OpenSSL, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBMU02994 rev.3 - HP BladeSystem c-Class Onboard Administrator (OA) running OpenSSL, Remote Disclosure of Informatio… (security-alert@...com)

April 28 (11 messages)

[security bulletin] HPSBGN03010 rev.2 - HP Software Server Automation running OpenSSL, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBMU03025 rev.1 - HP Diagnostics running OpenSSL, Remote Disclosure of Information (security-alert@...com)
[SECURITY] [DSA 2914-1] drupal6 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 2913-1] drupal7 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBMU03022 rev.1 - HP Systems Insight Manager (SIM) Bundled Software running OpenSSL, Remote Disclosure of Informatio… (security-alert@...com)
[ANN] Struts 2.3.16.2 GA release available - security fix (Lukasz Lenart <lukaszlenart@...che.org>)
[SECURITY] [DSA 2915-1] dpkg security update (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA 2916-1] libmms security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2917-1] super security update (Florian Weimer <fw@...eb.enyo.de>)
[security bulletin] HPSBMU02995 rev.6 - HP Software HP Service Manager, Asset Manager, UCMDB Browser, UCMDB Configuration Manager, Executi… (security-alert@...com)
[security bulletin] HPSBUX02963 SSRT101297 rev.2 - HP-UX m4(1), Local Unauthorized Access (security-alert@...com)

April 29 (2 messages)

[ANN][SECURITY] ClassLoader manipulation issue confirmed for Struts 1 - CVE-2014-0114 (Rene Gielen <rgielen@...che.org>)
[security bulletin] HPSBMU03020 rev.2 - HP Version Control Agent (VCA) and Version Control Repository Manager (VCRM) running OpenSSL on Li… (security-alert@...com)

April 30 (19 messages)

FreeBSD Security Advisory FreeBSD-SA-14:07.devfs (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-14:08.tcp (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-14:09.openssl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[slackware-security] mozilla-firefox (SSA:2014-119-01) (Slackware Security Team <security@...ckware.com>)
SEC Consult SA-20140430-0 :: SQL injection and persistent XSS in the Typo3 3rd party extension si_bibtex (SEC Consult Vulnerability Lab <research@...-consult.c…)
Syhunt Advisory: CGILua session.lua Predictable Session ID Vulnerability (Felipe Daragon <felipe@...unt.com>)
[SECURITY] [DSA 2918-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBGN03010 rev.3 - HP Software Server Automation running OpenSSL, Remote Disclosure of Information (security-alert@...com)
[slackware-security] mozilla-thunderbird (SSA:2014-119-02) (Slackware Security Team <security@...ckware.com>)
LSE Leading Security Experts GmbH - LSE-2014-04-10 - Sitepark IES - Unauthenticated Access ("LSE Leading Security Experts GmbH \(Security Advisories\)" <adviso…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence System MXP Series (Cisco Systems Product Security Incident Response Team <psirt@...co.co…)
ESA-2014-029: RSA® Access Manager Sensitive Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence TC and TE Software (Cisco Systems Product Security Incident Response Team <psirt@...co.…)
FreeBSD Security Advisory FreeBSD-SA-14:09.openssl [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Heartbleed Testing Server ("Ivan Buetler" <ivan.buetler@...c.ch>)
[SECURITY] [DSA 2915-2] dpkg security update (Raphael Geissert <geissert@...ian.org>)
[security bulletin] HPSBPI03031 rev.1 - HP Officejet Pro X Printers, Certain Officejet Pro Printers, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBMU03024 rev.1 - HP Insight Control Server Deployment on Linux and Windows running OpenSSL with System Management H… (security-alert@...com)
[security bulletin] HPSBST03016 rev.2 - HP P2000 G3 MSA Array Systems, HP MSA 2040 Storage, and HP MSA 1040 Storage running OpenSSL, Remot… (security-alert@...com)

198 messages

Powered by blists - more mailing lists