bugtraq mailing list - 2016/12

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2016/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 3	²	³	⁴
⁵ 3	⁶ 2	⁷ 1	⁸ 3	⁹ 4	¹⁰	¹¹
¹² 5	¹³ 3	¹⁴ 10	¹⁵ 2	¹⁶ 4	¹⁷	¹⁸
¹⁹ 3	²⁰ 1	²¹ 3	²² 2	²³ 1	²⁴	²⁵
²⁶ 5	²⁷ 1	²⁸ 2	²⁹	³⁰	³¹

Messages by day:

December 1 (3 messages)

[security bulletin] HPSBGN03680 rev.1 - HPE Propel, Local Denial of Service (DoS), Escalation of Privilege (security-alert@....com)
[security bulletin] HPSBUX03665 rev.3 - HP-UX Tomcat-based Servlet Engine, Remote Denial of Service (DoS), URL Redirection (security-alert@....com)
[slackware-security] mozilla-firefox (SSA:2016-336-01) (Slackware Security Team <security@...ckware.com>)

December 5 (3 messages)

Microsoft Windows Media Center "ehshell.exe" XML External Entity (apparitionsec@...il.com/hyp3rlinx)
Microsoft MSINFO32.EXE ".NFO" Files XML External Entity (apparitionsec@...il.com/hyp3rlinx)
CVE-2016-8740, Server memory can be exhausted and service denied when HTTP/2 is used (Eissing Stefan <stefan.eissing@...il.com>)

December 6 (2 messages)

Re: CVE-2016-3222: MS Edge CBaseScriptable::PrivateQueryInterface memory corruption (Berend-Jan Wever <berendj@...ver.nl>)
CVE-2015-1730: MSIE jscript9 JavaScriptStackWalker memory corruption details and PoC (Berend-Jan Wever <berendj@...ver.nl>)

December 7 (1 message)

[ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security (ESNC Security <secure@...c.de>)

December 8 (3 messages)

Microsoft Remote Desktop Client for Mac Remote Code Execution (Filippo Cavallarin <filippo.cavallarin@...resegment.com>)
[security bulletin] HPSBHF03674 rev.1 HPE Comware 5 and Comware 7 Network Products using SSL/TLS, Remote Disclosure of Information (security-alert@....com)
CVE-2013-1306: MSIE 9 MSHTML CDispNode::InsertSiblingNode use-after-free details (Berend-Jan Wever <berendj@...ver.nl>)

December 9 (4 messages)

AST-2016-008: Crash on SDP offer or answer from endpoint using Opus ("Asterisk Security Team" <security@...erisk.org>)
AST-2016-009: <br> ("Asterisk Security Team" <security@...erisk.org>)
Symantec VIP Access Desktop Arbitrary DLL Execution (apparitionsec@...il.com.-.hyp3rlinx)
MSIE 9 MSHTML CElement::HasFlag memory corruption (Berend-Jan Wever <berendj@...ver.nl>)

December 12 (5 messages)

[SECURITY] [DSA 3730-1] icedove security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] CVE-2016-8745 Apache Tomcat Information Disclosure (Mark Thomas <markt@...che.org>)
APPLE-SA-2016-12-12-1 iOS 10.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-12-12-3 tvOS 10.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-12-12-2 watchOS 3.1.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

December 13 (3 messages)

Apple iOS/tvOS/watchOS Remote memory corruption through certificate (submit@...ec.org)
[slackware-security] php (SSA:2016-347-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] kernel (SSA:2016-347-01) (Slackware Security Team <security@...ckware.com>)

December 14 (10 messages)

APPLE-SA-2016-12-13-3 iTunes 12.5.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-12-13-2 Safari 10.0.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-12-13-5 Additional information for APPLE-SA-2016-12-12-1 iOS 10.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-12-13-8 Transporter 1.9.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-12-13-7 Additional information for APPLE-SA-2016-12-12-2 watchOS 3.1.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
MSIE 9 MSHTML CMarkup::ReloadInCompatView use-after-free (Berend-Jan Wever <berendj@...ver.nl>)
[slackware-security] mozilla-firefox (SSA:2016-348-01) (Slackware Security Team <security@...ckware.com>)
CVE-2013-3143: MSIE 9 IEFRAME CMarkup..RemovePointerPos use-after-free (Berend-Jan Wever <berendj@...ver.nl>)
Secunia Research: Microsoft Windows Type 1 Font Processing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Adobe Animate <= v15.2.1.95 Memory Corruption Vulnerability (apparitionsec@...il.com (hyp3rlinx))

December 15 (2 messages)

Nagios Core < 4.2.2 Curl Command Injection leading to Remote Code Execution [CVE-2016-9565] (Dawid Golunski <dawid@...alhackers.com>)
MSIE 9 IEFRAME CMarkupPointer::MoveToGap use-after-free (Berend-Jan Wever <berendj@...ver.nl>)

December 16 (4 messages)

CVE-2013-0090: MSIE 9 IEFRAME CView::EnsureSize use-after-free (Berend-Jan Wever <berendj@...ver.nl>)
CVE-2016-9277,CVE-2016-9966,CVE-2016-9967: Possible Privilege Escalation in telecom (unlimitsec@...il.com)
[SECURITY] [DSA 3736-1] libupnp security update (Sebastien Delafond <seb@...ian.org>)
[security bulletin] HPSBMU03684 rev.1 - HPE Version Control Repository Manager (VCRM), Multiple Remote Vulnerabilities (security-alert@....com)

December 19 (3 messages)

Samsung DVR credentials encoded in base64 in cookie header (Jacobo Avariento <spinfoo.vuln@...il.com>)
[SECURITY] [DSA 3738-1] tomcat7 security update (Sebastien Delafond <seb@...ian.org>)
[SYSS-2016-115] Cisco Expressway: Security Bypass Vulnerability (CWE-20) (Micha Borrmann <micha.borrmann@...s.de>)

December 20 (1 message)

CVE-2014-1785: MSIE 11 MSHTML CSpliceTreeEngine::RemoveSplice use-after-free (Berend-Jan Wever <berendj@...ver.nl>)

December 21 (3 messages)

[SECURITY] [DSA 3743-1] python-bottle security update (Sebastien Delafond <seb@...ian.org>)
ASP.NET Core 5-RC1 HTTP Header Injection (Advisories <advisories@...pass-security.com>)
[SECURITY] [DSA 3732-2] php-ssh2 regression update (Sebastien Delafond <seb@...ian.org>)

December 22 (2 messages)

CVE-2014-4138: MSIE 11 MSHTML CPasteCommand::ConvertBitmaptoPng heap-based buffer overflow (Berend-Jan Wever <berendj@...ver.nl>)
FreeBSD Security Advisory FreeBSD-SA-16:39.ntp (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

December 23 (1 message)

[SECURITY] [DSA 3744-1] libxml2 security update (Salvatore Bonaccorso <carnil@...ian.org>)

December 26 (5 messages)

XAMPP Control Panel Memory Corruption Denial Of Service (apparitionsec@...il.com (HYP3RLINX))
[slackware-security] httpd (SSA:2016-358-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] openssh (SSA:2016-358-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] expat (SSA:2016-359-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 3746-1] graphicsmagick security update (Luciano Bello <luciano@...ian.org>)

December 27 (1 message)

PHPMailer < 5.2.18 Remote Code Execution [updated advisory] [CVE-2016-10033] (Dawid Golunski <dawid@...alhackers.com>)

December 28 (2 messages)

PHPMailer < 5.2.20 Remote Code Execution PoC 0day Exploit (CVE-2016-10045) (Bypass of the CVE-2016-1033 patch) (Dawid Golunski <dawid@...alhackers.com>)
[CVE-2016-8741] Apache Qpid Broker for Java - Information Leakage (Oleksandr Rudyy <orudyy@...il.com>)

58 messages

Powered by blists - more mailing lists