bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2016/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹	² 1	³	⁴
⁵ 3	⁶	⁷ 4	⁸ 3	⁹ 2	¹⁰	¹¹
¹²	¹³ 8	¹⁴ 2	¹⁵ 3	¹⁶ 3	¹⁷	¹⁸
¹⁹ 4	²⁰ 6	²¹ 2	²² 9	²³ 3	²⁴	²⁵
²⁶ 3	²⁷ 8	²⁸ 10	²⁹ 3	³⁰ 2

Messages by day:

September 2 (1 message)

FormatFactory 3.9.0 - (.task) Stack Overflow Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

September 5 (3 messages)

Google Nexus 5X Bootloader Unauthorized Memory Dumping via USB (Roee Hay <roeehay@...il.com>)
[SECURITY] [DSA 3659-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)
Unauthenticated Arbitrary Directory Dump in BMC BladeLogic Server Automation (ZeroDay <zeroday@...textis.co.uk>)

September 7 (4 messages)

[SECURITY] [DSA 3661-1] charybdis security update (Moritz Muehlenhoff <jmm@...ian.org>)
[CVE-2016-6484] Infoblox Network Automation CRLF Injection/ HTTP splitting (alex_haynes@...look.com)
Infoblox Cross-site scripting vulnerabilities (alex_haynes@...look.com)
CVE-2016-6920 ffmpeg exr file Heap Overflow (unlimitsec@...il.com)

September 8 (3 messages)

CVE-2016-4264 Adobe ColdFusion <= 11 XXE Vulnerability (Dawid Golunski <dawid@...alhackers.com>)
Picosmos Shows v1.6.0 - Stack Buffer Overflow Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
PHPHolidays CMS v3.00.50 - Cross Site Scripting Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

September 9 (2 messages)

[slackware-security] php (SSA:2016-252-01) (Slackware Security Team <security@...ckware.com>)
AST-2016-007: RTP Resource Exhaustion ("Asterisk Security Team" <security@...erisk.org>)

September 13 (8 messages)

Open-Xchange Security Advisory 2016-09-13 (Martin Heiland <martin.heiland.lists@...n-xchange.com>)
Open-Xchange Security Advisory 2016-09-13 (2) (Martin Heiland <martin.heiland.lists@...n-xchange.com>)
Multiple DoS vulnerabilities in libosip2-4.1.0 (bshastry@....t-labs.tu-berlin.de)
[ANNOUNCE][CVE-2016-6802] Apache Shiro 1.3.2 released (Brian Demers <bdemers@...che.org>)
ESA-2016-104: EMC ViPR SRM Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)
ESA-2016-108: EMC Documentum D2 Authentication Bypass Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
[security bulletin] HPSBGN03572 rev.1 - HPE Performance Center, Remote User Validation Failure (security-alert@....com)
[security bulletin] HPSBST03640 rev.1 - HP XP7 Command View Advance Edition Suite (CVAE) using Replication Manager (RepMgr) and Device Ma… (security-alert@....com)

September 14 (2 messages)

[SECURITY] [DSA 3666-1] mysql-5.5 security update (Salvatore Bonaccorso <carnil@...ian.org>)
APPLE-SA-2016-09-14-1 iOS 10.0.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

September 15 (3 messages)

Insecure transmission of data in Android applications developed with Adobe AIR [CVE-2016-6936] (research@...htwatchcybersecurity.com)
Cisco EPC 3925 Multiple Vulnerabilities (msg@...rykbogdan.com)
ESA-2016-094: RSA BSAFE® Micro Edition Suite Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)

September 16 (3 messages)

[SECURITY] [DSA 3669-1] tomcat7 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[slackware-security] curl (SSA:2016-259-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] CVE-2016-5017: Buffer overflow vulnerability in ZooKeeper C cli shell (Flavio Junqueira <fpj@...che.org>)

September 19 (4 messages)

[SECURITY] CVE-2016-5017: Buffer overflow vulnerability in ZooKeeper C cli shell (Flavio Junqueira <fpj@...che.org>)
Call for Papers - WorldCIST'17 - 5th World Conference on Information Systems and Technologies (Published by Springer) ("ML" <marialemos72@...il.com>)
ESA-2016-065: EMC Avamar Data Store and Avamar Virtual Edition Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)
ESA-2016-096: EMC Celerra, VNX1, VNX2 and VNXe SMB NTLM Authentication Weak Nonce Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)

September 20 (6 messages)

ESA-2016-093: RSA® Adaptive Authentication (On-Premise) Cross-Site Scripting Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
APPLE-SA-2016-09-20-2 Safari 10 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-09-20-3 iOS 10 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-09-20-4 macOS Server 5.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-09-20-5 watchOS 3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-09-20-6 tvOS 10 (Apple Product Security <product-security-noreply@...ts.apple.com>)

September 21 (2 messages)

Cisco Security Advisory: Cisco Cloud Services Platform 2100 Command Injection Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co…)
Cisco Security Advisory: Cisco Cloud Services Platform 2100 Remote Command Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt…)

September 22 (9 messages)

[SECURITY] [DSA 3672-1] irssi security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] pidgin (SSA:2016-265-01) (Slackware Security Team <security@...ckware.com>)
[security bulletin] HPSBGN03645 rev.2 - HPE Helion OpenStack Glance, Remote Access Restriction Bypass, Unauthorized Access (security-alert@....com)
Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla ("Larry W. Cashdollar" <larry0@...com>)
[security bulletin] HPSBHF03646 rev.1 - HPE Comware 7 (CW7) Network Products running NTP, Multiple Remote Vulnerabilities (security-alert@....com)
[slackware-security] irssi (SSA:2016-265-03) (Slackware Security Team <security@...ckware.com>)
IE11 is not following CORS specification for local files (Ricardo Iramar dos Santos <riramar@...il.com>)
Fwd: BT Wifi Extenders - Cross Site Scripting leading to disclosure of PSK (Jamie R <jamie.riden@...il.com>)
[SECURITY] [DSA 3673-1] openssl security update (Moritz Muehlenhoff <jmm@...ian.org>)

September 23 (3 messages)

[SECURITY] [DSA 3674-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)
Recon Europe 2017 Call For Papers - January 27 - 29, 2017 - Brussels, Belgium (cfpbrussels2017@...on.cx)
ESA-2016-097: RSA Identity Governance and Lifecycle Information Disclosure Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)

September 26 (3 messages)

[slackware-security] php (SSA:2016-267-01) (Slackware Security Team <security@...ckware.com>)
OS-S Security Advisory 2016-19: Epson WorkForce multi-function printers do not use signed firmware images and allow unauthorized… (Ralf Spenneberg <info@...t.de>)
[security bulletin] HPSBGN03648 rev.1 - HPE LoadRunner and Performance Center, Remote Denial of Service (DoS) (security-alert@....com)

September 27 (8 messages)

[slackware-security] openssl (SSA:2016-270-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 3678-1] python-django security update (Florian Weimer <fw@...eb.enyo.de>)
[security bulletin] HPSBHF03655 rev.1 - HPE iMC PLAT Network Products running Apache Axis2, Multiple Remote Vulnerabilities (security-alert@....com)
[security bulletin] HPSBHF03654 rev.1 - HPE iMC PLAT Network Products using SSL/TLS, Multiple Remote Vulnerabilities (security-alert@....com)
[security bulletin] HPSBHF03652 rev.1 - HPE iMC PLAT Network Products running Apache Commons FileUpload, Remote Denial of Service (DoS) (security-alert@....com)
[SECURITY] [DSA 3679-1] jackrabbit security update (Florian Weimer <fw@...eb.enyo.de>)
ESA-2016-127: EMC ViPR SRM Stored Cross-Site Scripting Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
[SECURITY] [DSA 3680-1] bind9 security update (Florian Weimer <fw@...eb.enyo.de>)

September 28 (10 messages)

[slackware-security] bind (SSA:2016-271-01) (Slackware Security Team <security@...ckware.com>)
Cisco Security Advisory: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016 (Cisco Systems Product Security Incident Response Team <p…)
Multiple vulnerabilities found in the Dlink DWR-932B (backdoor, backdoor accounts, weak WPS, RCE ...) (Pierre Kim <pierre.kim.sec@...il.com>)
[REVIVE-SA-2016-002] Revive Adserver - Multiple vulnerabilities (Matteo Beccati <matteo@...cati.com>)
Cisco Security Advisory: Cisco IOS and IOS XE Software AAA Login Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@c…)
Cisco Security Advisory: Cisco IOS Software Common Industrial Protocol Request Denial of Service Vulnerability (Cisco Systems Product Security Incident Response…)
Cisco Security Advisory: Cisco IOS XE Software NAT Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Fragmentation Denial of Service V… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco IOS and IOS XE Software Multicast Routing Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Tea…)
Cisco Security Advisory: Cisco IOS and IOS XE Software Smart Install Memory Leak Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@cis…)

September 29 (3 messages)

[security bulletin] HPSBGN03650 rev.1 - HPE Network Automation Software, Local Arbitrary File Modification (security-alert@....com)
Persistent XSS in Abus Security Center - CVSS 8.0 (Tim Schughart <t.schughart@...sec-networks.com>)
Re: CVE-2016-5019: MyFaces Trinidad view state deserialization security vulnerability (Mike Kienenberger <mkienenb@...il.com>)

September 30 (2 messages)

[SYSS-2016-060] Logitech M520 - Insufficient Verification of Data Authenticity (CWE-345) (matthias.deeg@...s.de)
Multiple exposures in Sophos UTM (Tim Schughart <t.schughart@...sec-networks.com>)

79 messages