bugtraq mailing list - 2016/03

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2016/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 7	² 8	³ 10	⁴ 9	⁵ 4	⁶
⁷ 9	⁸ 2	⁹ 28	¹⁰	¹¹	¹²	¹³
¹⁴ 33	¹⁵ 13	¹⁶ 8	¹⁷ 8	¹⁸ 8	¹⁹ 2	²⁰
²¹ 8	²² 9	²³ 13	²⁴ 5	²⁵ 5	²⁶	²⁷ 5
²⁸ 4	²⁹ 4	³⁰ 6	³¹ 12

Messages by day:

March 1 (7 messages)

[security bulletin] HPSBUX03552 SSRT102983 rev.1 - HP-UX BIND running Named, Remote Denial of Service (DoS) (security-alert@....com)
Microsoft PowerPointViewer Code Execution (hyp3rlinx@...os.com)
WordPress plugin GravityForms Cross-site Scripting vulnerability (Henri Salo <henri.salo@...u.com>)
[SYSS-2016-009] Sophos UTM 525 Web Application Firewall - Cross-Site Scripting in (adrian.vollmer@...s.de)
Executable installers are vulnerable^WEVIL (case 29): putty-0.66-installer.exe allowa arbitrary (remote) code execution … ("Stefan Kanthak" <stefan.kanthak@...go.…)
[SECURITY] [DSA 3500-1] openssl security update (Alessandro Ghedini <ghedo@...ian.org>)
[SECURITY] [DSA 3501-1] perl security update (Salvatore Bonaccorso <carnil@...ian.org>)

March 2 (8 messages)

Vivint Sky Control Panel Unauthenticated Access Vulnerability (jeremyscott@...utionary.com)
[security bulletin] HPSBGN03442 rev.1 - HP Helion OpenStack using glibc, Remote Denial of Service (DoS), Arbitrary Code Execution (security-alert@....com)
[security bulletin] HPSBHF03545 rev. 1 - HP EliteBook and Zbook Products with Windows NVidia Graphics Driver, Multiple … (HP Security Alert <hp-security-alert@hp…)
[REVIVE-SA-2016-001] Revive Adserver - Multiple vulnerabilities (Matteo Beccati <matteo@...cati.com>)
Cisco Security Advisory: Cisco NX-OS Software SNMP Packet Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.co…)
Cisco Security Advisory: Cisco Web Security Appliance HTTPS Packet Processing Denial of Service Vulnerability (Cisco Systems Product Security Incident Response…)
Cisco Security Advisory: Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability (Cisco Systems Product Security Incident …)
Cisco Security Advisory: Cisco NX-OS Software TCP Netstack Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)

March 3 (10 messages)

Cisco Security Advisory: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016 (Cisco Systems Product Security Incident Response Team <psirt@…)
Open-Xchange Security Advisory 2016-03-02 (Martin Heiland <martin.heiland.lists@...n-xchange.com>)
Panda SM Manager iOS Application - MITM SSL Certificate Vulnerability (David Coomber <davidcoomber.infosec@...il.com>)
[security bulletin] HPSBHF03436 rev.1 - HP Thin Client with ThinPro OS, running Linux, Local Elevated Privileges (HP Security Alert <hp-security-alert@...com>)
WordPress Bulk Delete Plugin [Privilege Escalation] (Panagiotis Vagenas <pan.vagenas@...il.com>)
[slackware-security] php (SSA:2016-062-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] openssl (SSA:2016-062-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mailx (SSA:2016-062-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 3502-1] roundup security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 3426-2] ctdb regression update (Salvatore Bonaccorso <carnil@...ian.org>)

March 4 (9 messages)

[SECURITY] [DSA 3503-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBGN03550 rev.2 - HP Operations Manager i and BSM using Apache Flex BlazeDS, Remote Disclosure of Information (security-alert@....com)
[security bulletin] HPSBHF03439 rev.1 - HP Commercial PCs with Sure Start, Local Denial of Service (HP Security Alert <hp-security-alert@...com>)
[security bulletin] HPSBPI03546 rev.1 - HP LaserJet Printers and MFPs, HP OfficeJet Enterprise Printers, Remote Disclos… (HP Security Alert <hp-security-alert@hp…)
[SYSS-2015-053] innovaphone IP222/IP232 - Denial of Service (disclosure@...s.de)
[SYSS-2015-064] Thru Managed File Transfer Portal 9.0.2 - Insecure Direct Object Reference (REVISED) (erlijn.vangenuchten@...s.de)
[SYSS-2015-060] Thru Managed File Transfer Portal 9.0.2 - Improperly Implemented Security Check for Standard (REVISED) (erlijn.vangenuchten@...s.de)
[SYSS-2015-059] Thru Managed File Transfer Portal 9.0.2 - Insecure Direct Object Reference (REVISED) (erlijn.vangenuchten@...s.de)
[SYSS-2015-058] Thru Managed File Transfer Portal 9.0.2 - Insecure Direct Object Reference (REVISED) (erlijn.vangenuchten@...s.de)

March 5 (4 messages)

[SECURITY] [DSA 3506-1] libav security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3505-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3504-1] bsh security update (Sebastien Delafond <seb@...ian.org>)
McAfee VirusScan Enterprise security restrictions bypass (Agazzini Maurizio <inode@...iaservice.net>)

March 7 (9 messages)

Executable installers are vulnerable^WEVIL (case 31): MalwareBytes' installers allows arbitrary (remote) code execution … ("Stefan Kanthak" <stefan.kanthak@...go.…)
Executable installers are vulnerable^WEVIL (case 30): clamwin-0.99-setup.exe allows arbitrary (remote) code execution WI… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[SECURITY] [DSA 3507-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
Multiple vulnerabilities in Wordpress plugin SP Projects & Document Manager (mail@...haelhelwig.de)
[SECURITY] [DSA 3508-1] jasper security update (Salvatore Bonaccorso <carnil@...ian.org>)
Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities (App Store Link, Buy Tones Link & Weather Channel Link) (Vulnerability Lab <research@...nerability-…)
Re: Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities (App Store Link, Buy Tones Link & Weather Channel Link) (Dubbju@...il.com)
Re: Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities (App Store Link, Buy Tones Link & Weather Channel Link) (Edsel Adap <edsel@...p.org>)
ESA-2016-012: EMC Documentum xCP – User Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)

March 8 (2 messages)

[slackware-security] php (SSA:2016-067-01) (Slackware Security Team <security@...ckware.com>)
Re: Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities (App Store Link, Buy Tones Link & Weather Channel Link) (Michael Lima <mickael.m.lima@...il.com>)

March 9 (28 messages)

[security bulletin] HPSBHF03557 rev.1 - HPE Networking Products using Comware 7 (CW7) running NTP, Remote Denial of Service (DoS) (security-alert@....com)
Windows Mail Find People DLL side loading vulnerability ("Securify B.V." <lists@...urify.nl>)
[slackware-security] samba (SSA:2016-068-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-firefox (SSA:2016-068-01) (Slackware Security Team <security@...ckware.com>)
Thomson TWG850 Wireless Router Multiple Vulnerabilities (Sebastian Perez <s3bap3@...il.com>)
LSE Leading Security Experts GmbH - LSE-2016-01-01 - Wordpress ProjectTheme - Multiple Vulnerabilities (LSE-Advisories <advisories@...xperts.de>)
OS-S 2016-05 Linux aiptek Nullpointer Dereference CVE-2015-7515 (Ralf Spenneberg <info@...t.de>)
OS-S 2016-06 Linux cdc_acm Nullpointer Dereference (Ralf Spenneberg <ralf@...t.de>)
OS-S 2016-07 Linux cypress_m8 Nullpointer Dereference (Ralf Spenneberg <info@...t.de>)
Re: OS-S 2016-06 Linux cdc_acm Nullpointer Dereference (abdyfhie@...il.com)
OS-S 2016-08 Linux mct_u232 Nullpointer Dereference (Ralf Spenneberg <info@...t.de>)
OS-S 2016-09 Linux visor clie_5_attach Nullpointer Dereference CVE-2015-7566 (Ralf Spenneberg <ralf@...t.de>)
OS-S 2016-10 Linux visor (treo_attach) Nullpointer Dereference CVE-2016-2782 (Ralf Spenneberg <ralf@...t.de>)
OS-S 2016-11 Linux wacom multiple Nullpointer Dereferences (Ralf Spenneberg <ralf@...t.de>)
OS-S 2016-12 Linux digi_acceleport Nullpointer Dereference (Ralf Spenneberg <ralf@...t.de>)
Re: Windows Mail Find People DLL side loading vulnerability ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Cisco Security Advisory: Cisco Wireless Residential Gateway with EDVA Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <p…)
Cisco Security Advisory:Cisco Wireless Residential Gateway Information Disclosure Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@c…)
Cisco Security Advisory: Cisco Cable Modem with Digital Voice Remote Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt…)
Re: Windows Mail Find People DLL side loading vulnerability ("Securify B.V." <lists@...urify.nl>)
[SECURITY] [DSA 3509-1] rails security update (Luciano Bello <luciano@...ian.org>)
[SECURITY] [DSA 3509-1] rails security update (Luciano Bello <luciano@...ian.org>)
Advisory X41-2016-001: Memory Corruption Vulnerability in "libotr" (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[CORE-2016-0004] - SAP Download Manager Password Weak Encryption (CORE Advisories Team <advisories@...esecurity.com>)
Cisco Security Advisory: Cisco ASA Content Security and Control Security Services Module Denial of Service Vulnerability… (Cisco Systems Product Security Incident…)
[SECURITY] [DSA 3510-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3509-1] rails security update (Luciano Bello <luciano@...ian.org>)
[CORE-2016-0003] - Samsung SW Update Tool MiTM (CORE Advisories Team <advisories@...esecurity.com>)

March 14 (33 messages)

[SECURITY] [DSA 3511-1] bind9 security update (Michael Gilbert <mgilbert@...ian.org>)
[SECURITY] [DSA 3512-1] libotr security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SE-2012-01] Broken security fix in Oracle Java SE 7/8/9 (Security Explorations <contact@...urity-explorations.com>)
[slackware-security] bind (SSA:2016-069-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-nss (SSA:2016-069-02) (Slackware Security Team <security@...ckware.com>)
FreeBSD Security Advisory FreeBSD-SA-16:13.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-16:12.openssl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[ANNOUNCE] CVE-2016-0782: ActiveMQ Web Console - Cross-Site Scripting (Christopher Shannon <christopher.l.shannon@...il.com>)
[ANNOUNCE] CVE-2016-0734: ActiveMQ Web Console - Clickjacking (Christopher Shannon <christopher.l.shannon@...il.com>)
[SECURITY] [DSA 3513-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
oss-2016-13: Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid USB device descriptors (powermate driver) (Ralf Spenneberg <info@...t.de>)
oss-2016-14: Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid USB device descriptors (gtco driver) (Ralf Spenneberg <info@...t.de>)
oss-2016-15: Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid USB device descriptors (iowarrior driver) (Ralf Spenneberg <info@...t.de>)
oss-2016-16: Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid USB device descriptors (snd-usb-audio drive… (Ralf Spenneberg <info@...t.de>)
oss-2016-17: Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes (multiple free) on invalid USB device descriptors (snd… (Ralf Spenneberg <info@...t.de>)
oss-2016-18: Multiple Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid USB device descriptors (ati_remote… (Ralf Spenneberg <info@...t.de>)
[slackware-security] openssh (SSA:2016-070-01) (Slackware Security Team <security@...ckware.com>)
DW Question Answer Stored XSS Vulnerability (Rahul Pratap Singh <techno.rps@...il.com>)
WebKitGTK+ Security Advisory WSA-2016-0002 (Carlos Alberto Lopez Perez <clopez@...lia.com>)
Microsoft Edge CDOMTextNode::get_data type confusion (Berend-Jan Wever <berendjanwever@...il.com>)
[SECURITY] [DSA 3514-1] samba security update (Salvatore Bonaccorso <carnil@...ian.org>)
Soundy Background Music XSS Vulnerability (Rahul Pratap Singh <techno.rps@...il.com>)
[SECURITY] [DSA 3515-1] graphite2 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3516-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: oss-2016-13: Local RedHat Enterprise Linux DoS �?? RHEL 7.1 Kernel crashes on invalid USB device descriptors (powermate driver) (amaris@...hat.com)
Re: oss-2016-15: Local RedHat Enterprise Linux DoS �?? RHEL 7.1 Kernel crashes on invalid USB device descriptors (iowarrior driver) (amaris@...hat.com)
Re: oss-2016-18: Multiple Local RedHat Enterprise Linux DoS �?? RHEL 7.1 Kernel crashes on invalid USB device descriptors (ati_remote2 drive… (amaris@...hat.com)
Re: oss-2016-17: Local RedHat Enterprise Linux DoS �?? RHEL 7.1 Kernel crashes (multiple free) on invalid USB device descriptors (snd-usb-au… (amaris@...hat.com)
ESA-2016-012: EMC Documentum xCP – User Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)
Reflected Cross-Site Scripiting in CuteEditor (adrmm@...look.com)
ChitaSoft (Web-Application) - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Chamlio LMS v1.10.2 - (Profile) Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Yahoo Bug Bounty #37 - Sender Spoofing Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

March 15 (13 messages)

[security bulletin] HPSBGN03373 rev.2 - HP Release Control running TLS, Remote Disclosure of Information (security-alert@....com)
[security bulletin] HPSBMU03377 rev.2 - HP Release Control running RC4, Remote Disclosure of Information (security-alert@....com)
Re: OS-S 2016-06 Linux cdc_acm Nullpointer Dereference (vdronov@...hat.com)
Re: OS-S 2016-07 Linux cypress_m8 Nullpointer Dereference (vdronov@...hat.com)
Re: OS-S 2016-08 Linux mct_u232 Nullpointer Dereference (vdronov@...hat.com)
Re: OS-S 2016-12 Linux digi_acceleport Nullpointer Dereference (vdronov@...hat.com)
Re: OS-S 2016-11 Linux wacom multiple Nullpointer Dereferences (vdronov@...hat.com)
Re: oss-2016-17: Local RedHat Enterprise Linux DoS �?? RHEL 7.1 Kernel crashes (multiple free) on invalid USB device descriptors (snd-usb-a… (vdronov@...hat.com)
Re: oss-2016-18: Multiple Local RedHat Enterprise Linux DoS �?? RHEL 7.1 Kernel crashes on invalid USB device descriptors (ati_remote2 driv… (vdronov@...hat.com)
Re: oss-2016-13: Local RedHat Enterprise Linux DoS �?? RHEL 7.1 Kernel crashes on invalid USB device descriptors (powermate driver) (vdronov@...hat.com)
Re: oss-2016-15: Local RedHat Enterprise Linux DoS �?? RHEL 7.1 Kernel crashes on invalid USB device descriptors (iowarrior driver) (vdronov@...hat.com)
[security bulletin] HPSBGN03556 rev.1 - ArcSight ESM and ESM Express, Remote Arbitrary File Download, Local Arbitrary Command Execution (security-alert@....com)
Defense in depth -- the Microsoft way (part 39): vulnerabilities, please meet the bar for security servicing ("Stefan Kanthak" <stefan.kanthak@...go.de>)

March 16 (8 messages)

[ANNOUNCE][CVE-2016-0779] Apache TomEE 1.7.4 and 7.0.0-M3 releases (Romain Manni-Bucau <rmannibucau@...che.org>)
[slackware-security] git (SSA:2016-075-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] seamonkey (SSA:2016-075-02) (Slackware Security Team <security@...ckware.com>)
Reflected Cross-Site Scripting (XSS) Vulnerability in Litecart CMS (rsrathoreravi@...il.com)
[SECURITY] [DSA 3518-1] spip security update (Sebastien Delafond <seb@...ian.org>)
[security bulletin] HPSBGN03558 rev.1 - ArcSight ESM and ESM Express, Remote Disclosure of Sensitive Information (security-alert@....com)
[CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflow (CORE Advisories Team <advisories@...esecurity.com>)
Re: [FD] [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflow (jungle Boogie <jungleboogie0@...il.com>)

March 17 (8 messages)

FreeBSD Security Advisory FreeBSD-SA-16:14.openssh (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-16:15.sysarch (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Multiple (persistent) XSS in ProjectSend (mail@...haelhelwig.de)
CVE-2016-1518: GrandStream Android VoIP Phone / App Provisioning Vulnerability (Georg Lukas <lukas@...solutions.de>)
CVE-2016-1519: GrandStream Android VoIP App TLS MitM Vulnerability (Georg Lukas <lukas@...solutions.de>)
CVE-2016-1520: GrandStream Android VoIP App Update Redirection (Georg Lukas <lukas@...solutions.de>)
Re: [ANNOUNCE] CVE-2016-0782: ActiveMQ Web Console - Cross-Site Scripting (Derek Mahar <derek.mahar@...il.com>)
[CVE-2016-2345] Solarwinds Dameware Mini Remote Control Remote Code Execution Vulnerability (contact@...urifera.com)

March 18 (8 messages)

[SECURITY] [DSA 3519-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)
[slackware-security] mozilla-firefox (SSA:2016-077-01) (Slackware Security Team <security@...ckware.com>)
Xoops 2.5.7.2 CSRF - Arbitrary User Deletions (hyp3rlinx@...os.com)
Xoops 2.5.7.2 Directory Traversal Bypass (hyp3rlinx@...os.com)
Re: server and client side remote code execution through a buffer overflow in all git versions before 2.7.1 (unpublished… (Laël Cellier <lael.cellier@...oste.net…)
Remote Code Execution via CSRF in iTop (High-Tech Bridge Security Research <advisory@...ridge.ch>)
Admin Password Reset & RCE via CSRF in Dating Pro (High-Tech Bridge Security Research <advisory@...ridge.ch>)
SQL Injection and RCE in WebsiteBaker (High-Tech Bridge Security Research <advisory@...ridge.ch>)

March 19 (2 messages)

[SECURITY] [DSA 3520-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBGN03438 rev.1 - HP Support Assistant, Local Authentication Bypass (HP Security Alert <hp-security-alert@...com>)

March 21 (8 messages)

[SECURITY] [DSA 3521-1] git security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3522-1] squid3 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3523-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3524-1] activemq security update (Moritz Muehlenhoff <jmm@...ian.org>)
AbsoluteTelnet 10.14 DLL Hijack Code Exec (hyp3rlinx@...os.com)
[security bulletin] HPSBGN03551 rev.1 - HPE Helion Development Platform using glibc, Remote Denial of Service (DoS), Arbitrary Code Execu… (security-alert@....com)
[security bulletin] HPSBGN03560 rev.1 - HP Operations Orchestration using Java Deserialization, Remote Arbitrary Code Execution (security-alert@....com)
[security bulletin] HPSBMU03562 rev.1 - HPE Service Manager using Java Deserialization, Remote Arbitrary Code Execution (security-alert@....com)

March 22 (9 messages)

APPLE-SA-2016-03-21-1 iOS 9.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-03-21-2 watchOS 2.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-03-21-4 Xcode 7.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-03-21-7 OS X Server 5.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-03-21-3 tvOS 9.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-03-21-6 Safari 9.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-03-21-5 OS X El Capitan 10.11.4 and Security Update 2016-002 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[RT-SA-2016-002] Cross-site Scripting in Securimage 3.6.2 (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[SECURITY] [DSA 3525-1] pixman security update (Salvatore Bonaccorso <carnil@...ian.org>)

March 23 (13 messages)

Remote Code Execution in DVR affecting over 70 different vendors (rotem kerner <nullfield@...il.com>)
[SECURITY] [DSA 3526-1] libmatroska security update (Sebastien Delafond <seb@...ian.org>)
CVE-2016-2166: Apache Qpid Proton python binding silently ignores request for 'amqps' if SSL/TLS not supported (Ken Giusti <kgiusti@...hat.com>)
CA20160323-01: Security Notice for CA Single Sign-On Web Agents ("Kotas, Kevin J" <Kevin.Kotas@...com>)
Hardcoded root password in Zyxel MAX3XX series Wimax CPEs (Gianni Carabelli <giannicarabelli@...il.com>)
Cisco Security Advisory: Cisco IOS and IOS XE Software DHCPv6 Relay Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psi…)
Cisco Security Advisory: Cisco IOS and IOS XE and Cisco Unified Communications Manager Software Session Initiation Proto… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco IOS and IOS XE Software Internet Key Exchange Version 2 Fragmentation Denial of Service V… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco IOS and IOS XE Software Smart Install Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <ps…)
Cisco Security Advisory: Cisco IOS and NX-OS Software Locator/ID Separation Protocol Packet Denial of Service Vulnerabil… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco IOS Software Wide Area Application Services Express Denial of Service Vulnerability (Cisco Systems Product Security Incident Res…)
[SECURITY] [DSA 3528-1] pidgin-otr security update (Sebastien Delafond <seb@...ian.org>)
[SECURITY] [DSA 3529-1] redmine security update (Moritz Muehlenhoff <jmm@...ian.org>)

March 24 (5 messages)

XSS (Cross Site Scripting) in Social CRM & Community Solutions powered by Lithium in Knowledge base section (netizen01k@...il.com)
[SECURITY] [DSA 3527-1] inspircd security update (Sebastien Delafond <seb@...ian.org>)
[SYSS-2016-017] innovaphone IP222 - Improper Input Validation (sven.freund@...s.de)
[SYSS-2016-018] innovaphone IP222 - Improper Restriction of Excessive Authentication Attempts (sven.freund@...s.de)
[SYSS-2016-016] innovaphone IP222 - Improper Input Validation (sven.freund@...s.de)

March 25 (5 messages)

[security bulletin] HPSBMU03562 rev.2 - HPE Service Manager using Java Deserialization, Remote Arbitrary Code Execution (security-alert@....com)
[security bulletin] HPSBGN03563 rev.1 - HPE IceWall Products using OpenSSL, Remote Denial of Service (DoS), Local Denial of Service (DoS)… (security-alert@....com)
[CVE-2016-0783] Predictable password reset token (Maxim Solodovnik <solomax@...che.org>)
[CVE-2016-2164] Arbitrary file read via SOAP API (Maxim Solodovnik <solomax@...che.org>)
[CVE-2016-2163] Stored Cross Site Scripting in Event description (Maxim Solodovnik <solomax@...che.org>)

March 27 (5 messages)

[SECURITY] [DSA 3530-1] tomcat6 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[slackware-security] libevent (SSA:2016-085-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-thunderbird (SSA:2016-085-02) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 3531-1] chromum-browser security update (Michael Gilbert <mgilbert@...ian.org>)
TrendMicro DDI Cross Site Request Forgerys (hyp3rlinx@...os.com)

March 28 (4 messages)

[SECURITY] [DSA 3532-1] quagga security update (Salvatore Bonaccorso <carnil@...ian.org>)
Validation Bypass in C2Box application : CVE - 2015-4626 (harish.ramadoss@...pag.com)
BMC-2015-0010: User enumeration vulnerability in BMC Server Automation (BSA) Unix/Linux RSCD Agent (CVE-2016-1542) (appsec <appsec@....com>)
BMC-2015-0011: Unauthorized password reset vulnerability in BMC Server Automation (BSA) (CVE-2016-1543) (appsec <appsec@....com>)

March 29 (4 messages)

[SECURITY] [DSA 3533-1] openvswitch security update (Salvatore Bonaccorso <carnil@...ian.org>)
Fireware XTM Web UI - Open Redirect (Manuel Mancera <mmancera@...ecure.com>)
[SECURITY] [DSA 3534-1] dhcpcd security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBGN03444 rev.2 - HPE Network Automation, Remote Code Execution, Disclosure of Sensitive Information (security-alert@....com)

March 30 (6 messages)

[SECURITY] [DSA 3535-1] kamailio security update (Moritz Muehlenhoff <jmm@...ian.org>)
Easy Hosting Control Panel (EHCP) - Multiple Vulnerabilities (kyle Lovett <krlovett@...il.com>)
CVE-2016-2385 Kamailio SEAS module heap buffer overflow (Stelios Tsampas <stelios@...sus-labs.com>)
Multiple Vulnerabilities in CubeCart (High-Tech Bridge Security Research <advisory@...ridge.ch>)
[CVE-2016-0784] Apache OpenMeetings ZIP file path traversal (Maxim Solodovnik <solomax666@...il.com>)
Cisco Security Advisory: Cisco Firepower Malware Block Bypass Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)

March 31 (12 messages)

RE: Cisco Security Advisory: Cisco Firepower Malware Block Bypass Vulnerability ("Murray, Mike" <MMurray@...chico.edu>)
[SECURITY] [DSA 3536-1] libstruts1.2-java security update (Sebastien Delafond <seb@...ian.org>)
[SECURITY] [DSA 3537-1] imlib2 security update (Sebastien Delafond <seb@...ian.org>)
[SECURITY] [DSA 3538-1] libebml security update (Sebastien Delafond <seb@...ian.org>)
Patron Info System - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Hi Technology & Services CMS - SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
WP External Links v1.80 - Cross Site Scripting Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Docker UI v0.10.0 - Multiple Client Side Cross Site Request Forgery Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Cades (2016Q1) - (id) Multiple SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Dorsa Web CMS - Multiple SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Docker UI v0.10.0 - Multiple Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Trend Micro (SSO) - (Backend) SSO Redirect & Session Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

220 messages

Powered by blists - more mailing lists