bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2017/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 6	³ 1	⁴ 1	⁵ 3	⁶ 1	⁷	⁸
⁹	¹⁰ 5	¹¹ 8	¹² 8	¹³ 1	¹⁴	¹⁵
¹⁶ 6	¹⁷	¹⁸ 2	¹⁹ 4	²⁰ 1	²¹	²²
²³ 13	²⁴ 6	²⁵ 4	²⁶ 7	²⁷ 11	²⁸	²⁹
³⁰ 7	³¹ 4

Messages by day:

January 2 (6 messages)

[slackware-security] libpng (SSA:2016-365-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-thunderbird (SSA:2016-365-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] seamonkey (SSA:2016-365-03) (Slackware Security Team <security@...ckware.com>)
Fwd: [ANNOUNCE] CVE-2016-6793 Apache Wicket deserialization vulnerability (Pedro Santos <pedrosans@...il.com>)
[SECURITY] [DSA 3750-1] libphp-phpmailer security update (Thijs Kinkhorst <thijs@...ian.org>)
0-day: QNAP NAS Devices suffer of heap overflow (bashis <mcw@...mail.eu>)

January 3 (1 message)

[SECURITY] [DSA 3750-2] libphp-phpmailer regression update (Thijs Kinkhorst <thijs@...ian.org>)

January 4 (1 message)

[security bulletin] HPSBGN03688 rev.1 - HPE Operations Orchestration, Remote Code Execution (security-alert@....com)

January 5 (3 messages)

ESA-2016-157: EMC ScaleIO Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)
[SECURITY][UPDATE] CVE-2016-8745 Apache Tomcat Information Disclosure (Mark Thomas <markt@...che.org>)
[SECURITY] [DSA 3753-1] libvncserver security update (Sebastien Delafond <seb@...ian.org>)

January 6 (1 message)

QuickBooks 2017 Admin Credentials Disclosure (info@...grideon.com)

January 10 (5 messages)

Directadmin ControlPanel 1.50.1 Cross-Site-Scripting Vulnerability (iedb.team@...il.com)
ESA-2016-096: EMC Celerra, VNX1, VNX2 and VNXe SMB NTLM Authentication Weak Nonce Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
ESA-2016-096: EMC Celerra, VNX1, VNX2 and VNXe SMB NTLM Authentication Weak Nonce Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
Directadmin ControlPanel 1.50.1 denial of service Vulnerability (iedb.team@...il.com)
ESA-2016-096: EMC Celerra, VNX1, VNX2 and VNXe SMB NTLM Authentication Weak Nonce Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)

January 11 (8 messages)

FreeBSD Security Advisory FreeBSD-SA-17:01.openssh (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Blackboard LMS 9.1 SP14 - (Profile) Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
BlackBoard LMS 9.1 SP14 - (Title) Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Bit Defender #39 - Auth Token Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Cobi Tools v1.0.8 iOS - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Re: [oss-security] Docker 1.12.6 - Security Advisory (Andreas Stieger <astieger@...e.com>)
[SECURITY] [DSA 3757-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
IKEv1 cipher suite configuration mismatch in Siemens SIMATIC CP 343-1 Advanced (Andrea Barisani <andrea@...ersepath.com>)

January 12 (8 messages)

Multiple Vulnerabilities in cPanel ("Open Security" <open@...nsecurity.ca>)
[SECURITY] [DSA 3758-1] bind9 security update (Florian Weimer <fw@...eb.enyo.de>)
CA20170109-01: Security Notice for CA Service Desk Manager ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[slackware-security] gnutls (SSA:2017-011-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] bind (SSA:2017-011-01) (Slackware Security Team <security@...ckware.com>)
CVE-2017-5350: Unexpected SystemUI FC driven by arbitrary application (unlimitsec@...il.com)
[SECURITY] [DSA 3760-1] ikiwiki security update (Moritz Muehlenhoff <jmm@...ian.org>)
ICMPv6 PTBs and IPv6 frag filtering (particularly at BGP peers) (Fernando Gont <fgont@...networks.com>)

January 13 (1 message)

[security bulletin] HPSBGN03694 rev.1 - HPE SiteScope, Remote Disclosure of Information (security-alert@....com)

January 16 (6 messages)

[SECURITY] [DSA 3764-1] pdns security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBST03671 rev.2 - HPE StoreEver MSL6480 Tape Library Management Interface, Multiple Remote Vulnerabilities (security-alert@....com)
[security bulletin] HPSBGN03689 rev.1 - HPE Diagnostics, Remote Cross-Site Scripting and Click Jacking (security-alert@....com)
[SECURITY] [DSA 3765-1] icoutils security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3743-2] python-bottle regression update (Sebastien Delafond <seb@...ian.org>)
[SECURITY] CVE-2016-8748: Apache NiFi XSS vulnerability in connection details dialogue (Joe Witt <joewitt@...che.org>)

January 18 (2 messages)

ESA-2016-143: EMC Documentum Webtop and Clients Stored Cross-Site Scripting Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
ESA-2016-161: EMC Isilon OneFS LDAP Injection Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)

January 19 (4 messages)

[security bulletin] HPSBMU03685 rev.1 - HPE Insight Control server provisioning (ICsp), Multiple Remote Vulnerabilities (security-alert@....com)
[RCESEC-2016-012] Mattermost <= 3.5.1 "/error" Unauthenticated Reflected Cross-Site Scripting / Content Injection (Julien Ahrens <info@...security.com>)
Novel Contributions to the Field - How I broke MySQL's codebase (Part 2) [CVE-2016-5541] MySQL Cluster 0day (lem.nikolas@...il.com)
Novel Contributions to the field - How I broke MySQL's code-base (Part 2) [CVE-2016-5541] MySQL cluster remote 0day ("Nicholas Lemonias." <lem.nikolas@...glema…)

January 20 (1 message)

[SECURITY] [DSA 3767-1] mysql-5.5 security update (Salvatore Bonaccorso <carnil@...ian.org>)

January 23 (13 messages)

NTOPNG Web Interface v2.4 CSRF Token Bypass (apparitionsec@...il.com (hyp3rlinx))
Executable installers are vulnerable^WEVIL (case 46): Pelles C allows arbitrary code execution ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[SECURITY] [DSA 3769-1] libphp-swiftmailer security update (Sebastien Delafond <seb@...ian.org>)
[SECURITY] [DSA 3770-1] mariadb-10.0 security update (Salvatore Bonaccorso <carnil@...ian.org>)
Microsoft Remote Desktop Client for Mac Remote Code Execution - Update (Filippo Cavallarin <filippo.cavallarin@...resegment.com>)
ESA-2016-146: EMC Avamar Data Store and Avamar Virtual Edition Privilege Escalation Vulnerability (EMC Product Security Response Center <Security_Alert@....com…)
ESA-2016-150: RSA® Security Analytics Reflected Cross-Site Scripting Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
APPLE-SA-2017-01-23-1 iOS 10.2.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2017-01-23-3 watchOS 3.1.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2017-01-23-4 tvOS 10.1.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2017-01-23-5 Safari 10.0.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2017-01-23-2 macOS 10.12.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2017-01-23-6 iCloud for Windows 6.1.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

January 24 (6 messages)

APPLE-SA-2017-01-23-7 iTunes for Windows 12.5.5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[slackware-security] mozilla-firefox (SSA:2017-023-01) (Slackware Security Team <security@...ckware.com>)
[ERPSCAN-17-005] Oracle PeopleSoft - XSS vulnerability CVE-2017-3300 (ERPScan inc <erpscan.online@...il.com>)
CVE-2017-3241 - [ERPSCAN-17-006] Oracle OpenJDK - Java Serialization DoS (ERPScan inc <erpscan.online@...il.com>)
[security bulletin] HPSBGN03690 rev.1 - HPE Real User Monitor (RUM), Remote Disclosure of Information (security-alert@....com)
Cisco Security Advisory: Cisco WebEx Browser Extension Remote Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)

January 25 (4 messages)

[security bulletin] HPSBHF03441 rev.2 - HPE iLO 3, iLO 4 and iLO 4 mRCA, Remote Multiple Vulnerabilities (security-alert@....com)
[security bulletin] HPSBHF03695 rev.1 - HPE Ethernet Adaptors, Remote Denial of Service (DoS) (security-alert@....com)
[security bulletin] HPSBST03642 rev.3 - HPE StoreVirtual Products running LeftHand OS using OpenSSL and OpenSSH, Remote Arbitrary Code … (security-alert@....com)
OpenCart 2.3.0.2 CSRF - User Account Takeover ("Open Security" <open@...nsecurity.ca>)

January 26 (7 messages)

ESA-2016-166: EMC Isilon OneFS Privilege Escalation Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
Cisco Security Advisory: Cisco Adaptive Security Appliance CX Context-Aware Security Denial of Service Vulnerability (Cisco Systems Product Security Incident R…)
Cisco Security Advisory: Cisco Expressway Series and TelePresence VCS Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <p…)
Cisco Security Advisory: Cisco TelePresence Multipoint Control Unit Remote Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team …)
Google Forms WordPress Plugin unauthenticated PHP Object injection vulnerability (Summer of Pwnage <lists@...urify.nl>)
[SECURITY] [DSA 3771-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)
PEAR HTTP_Upload v1.0.0b3 Arbitrary File Upload (apparitionsec@...il.com (hyp3rlinx))

January 27 (11 messages)

ESA-2016-092: RSA® Web Threat Detection Cross Site Scripting Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
ESA-2016-132: EMC RecoverPoint Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)
ESA-2016-160: EMC Data Domain DD OS Command Injection Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
ESA-2016-167: EMC Documentum D2 Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)
[SECURITY] [DSA 3772-1] libxpm security update (Salvatore Bonaccorso <carnil@...ian.org>)
CA20170126-01: Security Notice for CA Common Services casrvc ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[slackware-security] mozilla-thunderbird (SSA:2017-026-01) (Slackware Security Team <security@...ckware.com>)
Secunia Research: Oracle Outside In VSDX Use-After-Free Vulnerability (Secunia Research <remove-vuln@...unia.com>)
ESA-2016-037: EMC PowerPath Management Appliance Information Disclosure Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
ESA-2016-154: RSA BSAFE® Crypto-J Multiple Security Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)
ESA-2016-133: EMC Data Protection Advisor Path Traversal Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)

January 30 (7 messages)

[SECURITY] [DSA 3773-1] openssl security update (Moritz Muehlenhoff <jmm@...ian.org>)
CVE-2017-3160: Gradle Distribution URL used by Cordova-Android does not use https by default (bowserj@...il.com)
Multiple blind SQL injection vulnerabilities in FormBuilder WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Persistent Cross-Site Scripting vulnerability in User Access Manager WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
secuvera-SA-2017-01: Privilege escalation in an OPSI Managed Client environment ("rise of the machines") (sbieber@...uvera.de)
Secunia Research: libarchive "lha_read_file_header_1()" Out-Of-Bounds Memory Access Denial of Service Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[security bulletin] HPESBMU03701 rev.1 - HPE Smart Storage Administrator, Remote Arbitrary Code Execution (security-alert@....com)

January 31 (4 messages)

[REVIVE-SA-2017-001] Revive Adserver - Multiple vulnerabilities (Matteo Beccati <matteo@...cati.com>)
ESA-2016-094: RSA BSAFE Micro Edition Suite Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)
ESA-2017-007: EMC Documentum eRoom Unverified Password Change Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
[security bulletin] HPSBHF03693 rev.1 - HPE iMC PLAT Network Products running Microsoft SQL Server, Remote Elevation of Privilege (security-alert@....com)

99 messages