bugtraq mailing list - 2015/04

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2015/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 9	² 13	³ 7	⁴	⁵
⁶ 7	⁷ 8	⁸ 20	⁹ 3	¹⁰	¹¹	¹²
¹³ 23	¹⁴	¹⁵ 19	¹⁶ 6	¹⁷ 4	¹⁸	¹⁹
²⁰ 3	²¹ 19	²² 20	²³ 7	²⁴ 3	²⁵	²⁶
²⁷ 23	²⁸ 3	²⁹ 6	³⁰ 12

Messages by day:

April 1 (9 messages)

[SECURITY ANNOUNCEMENT] CVE-2015-0225 (Jake Luciani <jake@...che.org>)
ESA-2015-056: EMC PowerPath Virtual Appliance Undocumented User Accounts Vulnerability (Security Alert <Security_Alert@....com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unity Connection (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco Prime Data Center Network Manager File Information Disclosure Vulnerability (Cisco Systems Product Security Incident Response Tea…)
[SECURITY] [DSA 3211-1] iceweasel security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBMU03304 rev.1 - HP Insight Control server deployment on Linux and Windows, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBGN03307 rev.1 - HP Intelligent Provisioning, Disclosure of Information (security-alert@...com)
[security bulletin] HPSBST03298 rev.2 - HP XP Service Processor Software for Windows, Multiple Vulnerabilities (security-alert@...com)
SECUREDROP >= 0.3 - Possible Backdoor & Privileges Escalation by Unauth User ("~~~ Elliptic TAO Team ~~~" <elliptic-tao@...e-mail.net>)

April 2 (13 messages)

[ MDVSA-2015:187 ] graphviz (security@...driva.com)
Wordpress plugin Simple Ads Manager - SQL Injection ("ITAS Team" <itas.team@...s.vn>)
[ MDVSA-2015:188 ] flac (security@...driva.com)
Security Audit Notes - OpenSSL v1.0.2a (latest) Issues - Advanced Information Security Corporation ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
Wordpress plugin Simple Ads Manager - Multiple SQL Injection ("ITAS Team" <itas.team@...s.vn>)
Wordpress plugin Simple Ads Manager - Arbitrary File Upload ("ITAS Team" <itas.team@...s.vn>)
Wordpress plugin Simple Ads Manager - Information Disclosure ("ITAS Team" <itas.team@...s.vn>)
[ MDVSA-2015:189 ] tor (security@...driva.com)
[ MDVSA-2015:190 ] owncloud (security@...driva.com)
[ MDVSA-2015:191 ] owncloud (security@...driva.com)
[ MDVSA-2015:161-1 ] icu (security@...driva.com)
Security Audit Notes - OpenSSH 6.8 - Advanced Information Security Corp ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
[security bulletin] HPSBGN03302 rev.1 - HP IceWall Federation Agent, Remote Denial of Service (DoS) (security-alert@...com)

April 3 (7 messages)

[security bulletin] HPSBHF03300 rev.1 - HP Network Products running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access, Disclosu… (security-alert@...com)
[SECURITY] [DSA 3212-1] icedove security update (Yves-Alexis Perez <corsac@...ian.org>)
[security bulletin] HPSBST03195 rev.1 - HP 3PAR Service Processor (SP) running OpenSSL and Bash, Remote Code Execution, Unauthorized Acces… (security-alert@...com)
NEW : VMSA-2015-0003 VMware product updates address critical information disclosure issue in JRE (VMware Security Response Center <security@...are.com>)
Remote file upload vulnerability in videowhisper-video-conference-integration wordpress plugin v4.91.8 ("Larry W. Cashdollar" <larry0@...com>)
Remote file upload vulnerability in wordpress plugin videowhisper-video-presentation v3.31.17 ("Larry W. Cashdollar" <larry0@...com>)
[ MDVSA-2015:192 ] subversion (security@...driva.com)

April 6 (7 messages)

HotExBilling Manager Cross-site scripting (XSS) vulnerability (bhadresh.patel@...pag.com)
Security Audit Notes - Kerberos Security Issues (krb5-1.13 stable) - Advanced Information Security Corp. (lem.nikolas@...il.com)
Security Audit Notes = Kerberos (krb5-1.13) issues - Advanced Information Security Corp ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
[SECURITY] [DSA 3213-1] arj security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3214-1] mailman security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 3215-1] libgd2 security update (Alessandro Ghedini <ghedo@...ian.org>)
[security bulletin] HPSBMU03296 rev.1 - HP BladeSystem c-Class Onboard Administrator running OpenSSL, Remote Denial of Service (DoS) (security-alert@...com)

April 7 (8 messages)

[SECURITY] [DSA 3216-1] tor security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBGN03306 rev.1 - HP IceWall SSO MCRP, SSO Dfw, and SSO Agent running OpenSSL, Remote Denial of Service (DoS) (security-alert@...com)
[ MDVSA-2015:193 ] libtasn1 (security@...driva.com)
[ MDVSA-2015:195 ] python-django (security@...driva.com)
[ MDVSA-2015:196 ] cups-filters (security@...driva.com)
[CVE-2015-0779]: Novell ZenWorks Configuration Management remote code execution (Pedro Ribeiro <pedrib@...il.com>)
CVE-2015-1773 Apache Flex reflected XSS vulnerability (Tom Chiverton <tomc@...che.org>)
[SECURITY] [DSA 3057-2] libxml2 regression update (Salvatore Bonaccorso <carnil@...ian.org>)

April 8 (20 messages)

Reflected Cross-Site Scripting vulnerability in asdoc generated documentation ("Securify B.V." <lists@...urify.nl>)
CA20150407-01: Security Notice for CA Spectrum ("Kotas, Kevin J" <Kevin.Kotas@...com>)
FreeBSD Security Advisory FreeBSD-SA-15:08.bsdinstall (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-15:09.ipv6 (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-15:07.ntp (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD 10.x ZFS encryption.key disclosure (CVE-2015-1415) (Pierre Kim <pierre.kim.sec@...il.com>)
[security bulletin] HPSBHF03310 rev.1 - HP Thin Clients running Windows Embedded Standard 7 (WES7) or Windows Embedded Standard 2009 (WES0… (security-alert@...com)
FreeBSD Security Advisory FreeBSD-SA-15:04.igmp [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[CVE-2015-2926] XSS vuln in phpTrafficA (Daniël Geerts <dgeerts@...hef.nl>)
[HITB-Announce] HITB GSEC 2015 Singapore - Call for Papers (Hafez Kamal <aphesz@...kinthebox.org>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco ASA FirePOWER Services and Cisco ASA CX Services Crafted Packets Denial of Service Vulner… (Cisco Systems Product Security Incident…)
APPLE-SA-2015-04-08-1 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2015-04-08-2 OS X 10.10.3 and Security Update 2015-004 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2015-04-08-4 Apple TV 7.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2015-04-08-3 iOS 8.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2015-04-08-3 iOS 8.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[security bulletin] HPSBUX03240 SSRT101872 rev.2 - HP-UX Running NTP, Remote Execution of Code, Denial of Service (DoS), or Other Vulnerab… (security-alert@...com)
AST-2015-003: TLS Certificate Common name NULL byte exploit ("Asterisk Security Team" <security@...erisk.org>)
APPLE-SA-2015-04-08-5 Xcode 6.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)

April 9 (3 messages)

[ MDVSA-2015:198 ] java-1.8.0-openjdk (security@...driva.com)
SEC Consult SA-20150409-0 :: Multiple XSS & XSRF vulnerabilities in Comalatech Comala Workflows (SEC Consult Vulnerability Lab <research@...-consult.com>)
[SECURITY] [DSA 3217-1] dpkg security update (Salvatore Bonaccorso <carnil@...ian.org>)

April 13 (23 messages)

[ MDVSA-2015:199 ] less (security@...driva.com)
[ MDVSA-2015:200 ] mediawiki (security@...driva.com)
[ MDVSA-2015:202 ] ntp (security@...driva.com)
[ MDVSA-2015:201 ] arj (security@...driva.com)
SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035) (SEC Consult Vulnerability Lab <research@...-co…)
Hidden backdoor API to root privileges in Apple OS X (Jeffrey Walton <noloader@...il.com>)
[SECURITY] [DSA 3218-1] wesnoth-1.10 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBGN03316 rev.1 - HP Support Solution Framework on Windows, Remote Execution of Code, Disclosure of Information (security-alert@...com)
[ MDVSA-2015:203 ] batik (security@...driva.com)
OrangeHRM Blind SQL Injection & XSS Vulnerabilities (Rehan Ahmed <knight_rehan@...mail.com>)
[SECURITY] [DSA 3219-1] libdbd-firebird-perl security update (Alessandro Ghedini <ghedo@...ian.org>)
Hijacking any Weebly Website [Insecure Direct Object Reference Vulnerability] (huehuehuehue10@...il.com)
[SECURITY] [DSA 3220-1] libtasn1-3 security update (Salvatore Bonaccorso <carnil@...ian.org>)
Safari iOS/OS X/Windows cookie access vulnerability (Jouko Pynnonen <jouko@....fi>)
[SECURITY] [DSA 3221-1] das-watchdog security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3222-1] chrony security update (Alessandro Ghedini <ghedo@...ian.org>)
[SECURITY] [DSA 3223-1] ntp security update (Alessandro Ghedini <ghedo@...ian.org>)
[SECURITY] [DSA 3224-1] libx11 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Ruxcon 2015 Call For Presentations (cfp@...con.org.au)
Apache HTTPD 2.4.12/ 2.2.29 Security Audit Notes - Advanced Information Security Corp ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
Apache HTTPD 2.4.12, 2.2.29 Security Audit - Advanced Information Security Corp (lem.nikolas@...il.com)
[security bulletin] HPSBHF03310 rev.2 - HP Thin Clients running Windows Embedded Standard 7 (WES7) or Windows Embedded Standard 2009 (WES0… (security-alert@...com)
[security bulletin] HPSBOV03318 rev.1 - HP SSL for OpenVMS, Remote Denial of Service (DoS) and other Vulnerabilities (security-alert@...com)

April 15 (19 messages)

[CVE-2015-2810] Integer Overflow leading to heap corruption when assigning a long paragraph size value to a HanWord doc… (Daniel Regalado <daniel.regalado@...eEy…)
Security Advisory - Apache HTTP Server 2.2.29 / 2.4.12 NULL Pointer dereference in protocol.c ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
Security Advisory - Apache HTTP Server 2.2.29 / 2.4.12 NULL Pointer dereference in protocol.c (lem.nikolas@...il.com)
[SYSS-2015-012] Panda Internet Security 2015 - Authentication Bypass (matthias.deeg@...s.de)
[SYSS-2015-013] Panda Antivirus Pro 2015 - Authentication Bypass (matthias.deeg@...s.de)
[SYSS-2015-014] Panda Global Protection 2015 - Authentication Bypass (matthias.deeg@...s.de)
[SYSS-2015-015] Panda Gold Protection 2015 - Authentication Bypass (matthias.deeg@...s.de)
whitepaper: Identifier based XSSI attacks (Takeshi Terada <mbsdtest01@...il.com>)
several issues in SQLite (+ catching up on several other bugs) (Michal Zalewski <lcamtuf@...edump.cx>)
Wordpress WP Statistics persistent cross site scripting (kingkaustubh@...com)
Secunia Research: Microsoft Windows GDI "MRSETDIBITSTODEVICE ::bPlay()" EMF Parsing Memory Corruption Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Security Advisory - Apache HTTP Server 2.2.29 / 2.4.12 NULL Pointer dereference in protocol.c ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
[IMF2015] Call for Participation (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
[SECURITY] [DSA 3225-1] gst-plugins-bad0.10 security update (Moritz Muehlenhoff <jmm@...ian.org>)
ESA-2015-069: EMC NetWorker Buffer Overflow Vulnerability (Security Alert <Security_Alert@....com>)
[SECURITY] [DSA 3226-1] inspircd security update (Sebastien Delafond <seb@...ian.org>)
Cisco Security Advisory: Cisco IOS XR Software BVI Routed Packet Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@…)
Cisco Security Advisory: Cisco Secure Desktop Cache Cleaner Command Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co…)
[SECURITY] [DSA 3227-1] movabletype-opensource security update (Salvatore Bonaccorso <carnil@...ian.org>)

April 16 (6 messages)

[security bulletin] HPSBMU03264 rev.1 - HP Network Automation, Multiple Remote Vulnerabilities (security-alert@...com)
Secunia Research: Oracle Outside In ibpsd2.dll PSD File Processing Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[CVE-2014-5361][CVE-2014-5362]Landesk Management Suite RFI & CSRF Security Vulnerabilities (alex_haynes@...look.com)
[SECURITY] [DSA 3228-1] ppp security update (Sebastien Delafond <seb@...ian.org>)
Wolf CMS 0.8.2 Arbitrary File Upload Vulnerability (prathan.ptr@...il.com)
Lychee 2.7.1 remote code execution (Filippo Cavallarin <filippo.cavallarin@...ment.technology>)

April 17 (4 messages)

112 ipTIME Routers/WiFi APs/Modems/Firewalls models vulnerable with RCE with root privileges (Pierre Kim <pierre.kim.sec@...il.com>)
CVE-2014-7954 MTP path traversal vulnerability in Android (Imre RAD <imre.rad@...rch-lab.hu>)
CVE-2014-7951 adb backup archive path traversal file overwrite (Imre RAD <imre.rad@...rch-lab.hu>)
CVE-2014-7953 Android backup agent code execution (Imre RAD <imre.rad@...rch-lab.hu>)

April 20 (3 messages)

Security Audit Notes - OpenSSL v1.0.2a (latest) Issues - Advanced Information Security Corporation (lem.nikolas@...il.com)
[SECURITY] [DSA 3229-1] mysql-5.5 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3230-1] django-markupfield security update (Alessandro Ghedini <ghedo@...ian.org>)

April 21 (19 messages)

[security bulletin] HPSBMU03321 rev.1 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of Arbitrary C… (security-alert@...com)
Photo Manager Pro 4.4.0 iOS - Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Mobile Drive HD v1.8 - File Include Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Wifi Drive Pro v1.2 iOS - File Include Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Photo Manager Pro v4.4.0 iOS - File Include Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Ebay Inc Xcom #4 - (Item Preview) Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Ebay Inc Xcom #6 - Persistent POST Inject Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Ebay Inc Xcom #7 - (Policy) Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
PayPal Inc Bug Bounty #113 - Client Side Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Google Analytics by Yoast stored XSS #2 (Jouko Pynnonen <jouko@....fi>)
GoAutoDial 3.3 multiple vulnerabilities (root@...alhost.com)
[security bulletin] HPSBGN03305 rev.1 - HP Business Service Management (BSM) products running SSLv3, Remote Disclosure of Information (security-alert@...com)
Linux ASLR mmap weakness: Reducing entropy by half (Hector Marco-Gisbert <hecmargi@....es>)
AMD Bulldozer Linux ASLR weakness: Reducing entropy by 87.5% (Hector Marco-Gisbert <hecmargi@....es>)
[SECURITY] [DSA 3231-1] subversion security update (Salvatore Bonaccorso <carnil@...ian.org>)
Stored Cross Site Scripting Vulnerability in Add Link to Facebook WordPress Plugin (kumarrohit2255@...il.com)
Reflected XSS Vulnerability In Manage Engine Firewall Analyzer (kkulkarni@...trolcase.com)
Reflected XSS Vulnerability In Manage Engine Event Log Analyzer (kkulkarni@...trolcase.com)

April 22 (20 messages)

Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
iPassword Manager v2.6 iOS - Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 3232-1] curl security update (Alessandro Ghedini <ghedo@...ian.org>)
Netgear WNR2000v4 Multiple Vulnerabilities (endeavor <endeavor@...nbowsandpwnies.com>)
Multiple Cross-Site Scripting (XSS) in FreePBX (High-Tech Bridge Security Research <advisory@...ridge.ch>)
[security bulletin] HPSBGN03308 rev.1 - HP TippingPoint Security Management System (SMS) and TippingPoint Virtual Security Management Syst… (security-alert@...com)
[slackware-security] mozilla-firefox (SSA:2015-111-05) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-thunderbird (SSA:2015-111-06) (Slackware Security Team <security@...ckware.com>)
[slackware-security] qt (SSA:2015-111-13) (Slackware Security Team <security@...ckware.com>)
[slackware-security] libssh (SSA:2015-111-04) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mutt (SSA:2015-111-07) (Slackware Security Team <security@...ckware.com>)
[slackware-security] php (SSA:2015-111-10) (Slackware Security Team <security@...ckware.com>)
[slackware-security] ppp (SSA:2015-111-11) (Slackware Security Team <security@...ckware.com>)
[slackware-security] seamonkey (SSA:2015-111-14) (Slackware Security Team <security@...ckware.com>)
[slackware-security] proftpd (SSA:2015-111-12) (Slackware Security Team <security@...ckware.com>)
[slackware-security] gnupg (SSA:2015-111-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] ntp (SSA:2015-111-08) (Slackware Security Team <security@...ckware.com>)
[slackware-security] httpd (SSA:2015-111-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] bind (SSA:2015-111-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] openssl (SSA:2015-111-09) (Slackware Security Team <security@...ckware.com>)

April 23 (7 messages)

[ALICLOUDSEC-VUL2015-001]Android wpa_supplicant WLAN Direct remote buffer overflow (朱东海 <donghai_zhu@...nhunt.com>)
Dnsmasq 2.72 Unchecked returned value ("Nick Sampanis" <n.sampanis@...ela.com>)
Socrata Bug Bounty #1 - Persistent Encoding Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[ALICLOUDSEC-VUL2015-001]Android wpa_supplicant WLAN Direct remote buffer overflow (xing_fang@...nhunt.com)
Pligg CMS 2.0.2 - Stored XSS (joelvarghese7@...il.com)
Avsarsoft Matbaa Script - Multiple Vulnerabilities (ZoRLu Bugrahan <zorlu@...w00rm.com>)
4k ULTRA HIGH DEFINITION Satellite Security Research - DVB-S2X Security Evaluation Draft Notes ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)

April 24 (3 messages)

Zeppelin - SSH script - Advanced Information Security Corporation (lem.nikolas@...il.com)
SSH Network Security Assessment utility - Zeppelin - -=[Advanced Information Security Corp]=- (lem.nikolas@...il.com)
Incorrect handling of self signed certificates in OpenFire XMPP Server (Simon Waters <simon.waters@...evine.com>)

April 27 (23 messages)

Encaps PHP/Flash Gallery 2.3.22s Database Puffing Up Exploit (ZoRLu Bugrahan <zorlu@...w00rm.com>)
4k ULTRA HIGH DEFINITION Satellite Security Research - DVB-S2X Security Evaluation Draft Notes - Advanced Information S… ("Nicholas Lemonias." <lem.nikolas@...gl…)
[SECURITY] [DSA 3233-1] wpa security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBPI03315 rev.1 - HP Capture and Route Software, Remote Information Disclosure (security-alert@...com)
[security bulletin] HPSBHF03272 rev.1 - HP Servers with NVidia GPU Computing Driver running Windows Server 2008, Elevation of Privilege (security-alert@...com)
[SECURITY] [DSA 3234-1] openjdk-6 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3235-1] openjdk-7 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3236-1] libreoffice security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3237-1] linux security update (Ben Hutchings <benh@...ian.org>)
WordPress 4.2 stored XSS (Jouko Pynnonen <jouko@....fi>)
[SECURITY] [DSA 3238-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
[ MDVSA-2015:204 ] librsync (security@...driva.com)
[ MDVSA-2015:205 ] tor (security@...driva.com)
[ MDVSA-2015:206 ] asterisk (security@...driva.com)
[ MDVSA-2015:207 ] perl-Module-Signature (security@...driva.com)
[ MDVSA-2015:208 ] setup (security@...driva.com)
[ MDVSA-2015:209 ] php (security@...driva.com)
[ MDVSA-2015:210 ] qemu (security@...driva.com)
Elasticsearch vulnerability CVE-2015-3337 (Kevin Kluge <kevin@...stic.co>)
[ MDVSA-2015:211 ] glusterfs (security@...driva.com)
Open-Xchange Security Advisory 2015-04-27 (Martin Heiland <martin.heiland.lists@...n-xchange.com>)
[ MDVSA-2015:212 ] java-1.7.0-openjdk (security@...driva.com)
[CORE-2015-0008] - InFocus IN3128HD Projector Multiple Vulnerabilities (CORE Advisories Team <advisories@...esecurity.com>)

April 28 (3 messages)

SonicWall SonicOS 7.5.0.12 & 6.x - Client Side Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
PayPal Inc Bug Bounty #114 - JDWP Remote Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
CSRF & XSS Wing FTP Server Admin <= v4.4.5 (apparitionsec@...il.com)

April 29 (6 messages)

Multiple Vulnerabilities in TheCartPress WordPress plugin (High-Tech Bridge Security Research <advisory@...ridge.ch>)
[oCERT-2015-003] MySQL SSL/TLS downgrade (Andrea Barisani <lcars@...rt.org>)
[ MDVSA-2015:213 ] lftp (security@...driva.com)
[ MDVSA-2015:215 ] t1utils (security@...driva.com)
[ MDVSA-2015:214 ] libksba (security@...driva.com)
[ MDVSA-2015:216 ] ntop (security@...driva.com)

April 30 (12 messages)

[security bulletin] HPSBUX03320 SSRT101952 rev.1 - HP-UX CIFS Server (Samba), Remote Denial of Service (DoS), Execution of Arbitrary Code,… (security-alert@...com)
[security bulletin] HPSBMU03241 rev.1 - HP Network Automation running SSLv3, Remote Disclosure of Information (security-alert@...com)
ESA-2015-078: RSA® Identity Management and Governance (IMG) Insecure Password Reset Vulnerability (Security Alert <Security_Alert@....com>)
[SECURITY] [DSA 3240-1] curl security update (Alessandro Ghedini <ghedo@...ian.org>)
[SECURITY] [DSA 3239-1] icecast2 security update (Alessandro Ghedini <ghedo@...ian.org>)
[security bulletin] HPSBGN03323 rev.1 - HP Business Service Automation Essentials Core with JBOSS, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBGN03324 rev.1 - HP Business Service Automation Essentials Core, Remote Disclosure of Information (security-alert@...com)
[SECURITY] [DSA 3241-1] elasticsearch security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2015:217 ] sqlite3 (security@...driva.com)
[ MDVSA-2015:218 ] glibc (security@...driva.com)
[SYSS-2014-007] FrontRange DSM - Multiple Vulnerabilities (matthias.deeg@...s.de)
SevDesk v1.1 iOS - Persistent Dashboard Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

215 messages

Powered by blists - more mailing lists