bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2018/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 2	² 5	³	⁴
⁵	⁶ 13	⁷ 6	⁸ 3	⁹	¹⁰	¹¹
¹² 1	¹³ 3	¹⁴ 3	¹⁵ 4	¹⁶ 3	¹⁷	¹⁸
¹⁹ 10	²⁰ 2	²¹ 3	²² 8	²³ 2	²⁴	²⁵
²⁶ 3	²⁷ 6	²⁸ 3	²⁹ 3	³⁰ 12	³¹

Messages by day:

March 1 (2 messages)

Secunia Research: Linux Kernel "_sctp_make_chunk()" Denial of Service Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[security bulletin] MFSBGN03794 rev.2 - Micro Focus Operations Agent Multiple vulnerabilities (cyber-psrt@...rofocus.com)

March 2 (5 messages)

CVE-2017-12544 XSS on HPE System Management Homepage v7.6.0.11 and minor (spinfoo <spinfoo@...tonmail.com>)
[security bulletin] MFSBGN03801 rev.1 - Micro Focus Operations Orchestration, Remote Denial of Service (DoS) (cyber-psrt@...rofocus.com)
[SECURITY] [DSA 4127-1] simplesamlphp security update (Thijs Kinkhorst <thijs@...ian.org>)
[Newsletter/Marketing] [slackware-security] ntp (SSA:2018-060-02) (Slackware Security Team <security@...ckware.com>)
[Newsletter/Marketing] [slackware-security] dhcp (SSA:2018-060-01) (Slackware Security Team <security@...ckware.com>)

March 6 (13 messages)

[SECURITY] [DSA 4128-1] trafficserver security update (Sebastien Delafond <seb@...ian.org>)
KL-001-2018-007 : Sophos UTM 9 loginuser Privilege Escalation via confd Service (KoreLogic Disclosures <disclosures@...elogic.com>)
[SECURITY] [DSA 4132-1] libvpx security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4120-2] linux regression update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 4129-1] freexl security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4131-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4130-1] dovecot security update (Salvatore Bonaccorso <carnil@...ian.org>)
CVE-2017-12544 XSS on HPE System Management Homepage v7.6.0.11 and minor (spinfoo <spinfoo@...tonmail.com>)
[SECURITY] [DSA 4127-1] simplesamlphp security update (Thijs Kinkhorst <thijs@...ian.org>)
DefenseCode Security Advisory: Magento Backups Cross-Site Request Forgery (Defense Code <defensecode@...ensecode.com>)
DefenseCode Security Advisory: Magento Stored Cross-Site Scripting – Downloadable Products (Defense Code <defensecode@...ensecode.com>)
DefenseCode Security Advisory: Magento Stored Cross-Site Scripting – Product Attributes (Defense Code <defensecode@...ensecode.com>)
DefenseCode Security Advisory: Magento Multiple Stored Cross-Site Scripting Vulnerabilities (Defense Code <defensecode@...ensecode.com>)

March 7 (6 messages)

[SECURITY] [DSA 4129-1] freexl security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4131-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)
DefenseCode Security Advisory: Magento Backups Cross-Site Request Forgery (Defense Code <defensecode@...ensecode.com>)
KL-001-2018-007 : Sophos UTM 9 loginuser Privilege Escalation via confd Service (KoreLogic Disclosures <disclosures@...elogic.com>)
[SECURITY] [DSA 4128-1] trafficserver security update (Sebastien Delafond <seb@...ian.org>)
FreeBSD Security Advisory FreeBSD-SA-18:01.ipsec (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

March 8 (3 messages)

[SECURITY] [DSA 4133-1] isc-dhcp security update (Salvatore Bonaccorso <carnil@...ian.org>)
FreeBSD Security Advisory FreeBSD-SA-18:01.ipsec [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[RT-SA-2018-001] Arbitrary Redirect in Tuleap (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

March 12 (1 message)

[SECURITY] [DSA 4134-1] util-linux security update (Salvatore Bonaccorso <carnil@...ian.org>)

March 13 (3 messages)

SEC Consult SA-20180312-0 :: Multiple Critical Vulnerabilities in SecurEnvoy SecurMail (SEC Consult Vulnerability Lab <research@...-consult.com>)
[SECURITY] [DSA 4135-1] samba security update (Salvatore Bonaccorso <carnil@...ian.org>)
[RT-SA-2017-012] Shopware Cart Accessible by Third-Party Websites (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

March 14 (3 messages)

[slackware-security] samba (SSA:2018-072-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-firefox (SSA:2018-072-01) (Slackware Security Team <security@...ckware.com>)
FreeBSD Security Advisory FreeBSD-SA-18:03.speculative_execution (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

March 15 (4 messages)

SEC Consult SA-20180314-0 :: Arbitrary Shortcode Execution & Local File Inclusion in WooCommerce Products Filter (Plugi… (SEC Consult Vulnerability Lab <research…)
[SECURITY] [DSA 4136-1] curl security update (Alessandro Ghedini <ghedo@...ian.org>)
[SECURITY] [DSA 4137-1] libvirt security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4138-1] mbedtls security update (Sebastien Delafond <seb@...ian.org>)

March 16 (3 messages)

Secunia Research: LibRaw Multiple Denial of Service Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
[slackware-security] curl (SSA:2018-074-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4139-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)

March 19 (10 messages)

[CVE-2017-1205] IBM Spectrum LSF Privilege Escalation (john.fitzpatrick@...infosecurity.com)
[SECURITY] [DSA 4140-1] libvorbis security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 4141-1] libvorbisidec security update (Salvatore Bonaccorso <carnil@...ian.org>)
RedCoded ISR: Abine Blur Password Manager Insecure Permissions (CVE-2018-8213) ("\(RS\) Tyler Schroder" <redorhcs@...coded.com>)
[SECURITY] [DSA 4145-1] gitlab security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4143-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4142-1] uwsgi security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] mozilla-firefox (SSA:2018-075-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4144-1] openjdk-8 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[slackware-security] libvorbis (SSA:2018-076-01) (Slackware Security Team <security@...ckware.com>)

March 20 (2 messages)

ES2018-05 Kamailio heap overflow (Sandro Gauci <sandro@...blesecurity.com>)
CSNC-2017-026 Microsoft Intune - Preserved Keychain Entries (Advisories <advisories@...pass-security.com>)

March 21 (3 messages)

[SECURITY] [DSA 4146-1] plexus-utils security update (Moritz Muehlenhoff <jmm@...ian.org>)
Unsubscribe - Re: CSNC-2017-026 Microsoft Intune - Preserved Keychain Entries (Gary Frank <garoo7@...mail.com>)
Unsubscribe - Re: ES2018-05 Kamailio heap overflow (Gary Frank <garoo7@...mail.com>)

March 22 (8 messages)

[SECURITY] [DSA 4147-1] polarssl security update (Sebastien Delafond <seb@...ian.org>)
Secunia Research: Microsoft Windows Embedded OpenType Font Engine hdmx Table Information Disclosure Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Microsoft Windows Embedded OpenType Font Engine Font Glyphs Handling Information Disclosure Vulnerabi… (Secunia Research <remove-vuln@...unia.c…)
Secunia Research: Microsoft Windows Embedded OpenType Font Engine "MTX_IS_MTX_Data()" Information Disclosure Vulnerabili… (Secunia Research <remove-vuln@...unia.c…)
Advisory - Bitbucket Server - CVE-2018-5225 (Matthew Hart <mhart@...assian.com>)
Kaseya AgentMon.exe <= 9.3.0.11 - Local Privilege Escalation (x ksi <s3810@...stk.edu.pl>)
Bomgar Remote Support Portal JavaStart Applet <= 52970 - Path Traversal (x ksi <s3810@...stk.edu.pl>)
ModSecurity WAF 3.0 for Nginx - Denial of Service (x ksi <s3810@...stk.edu.pl>)

March 23 (2 messages)

[SECURITY] [DSA 4148-1] kamailio security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4149-1] plexus-utils2 security update (Moritz Muehlenhoff <jmm@...ian.org>)

March 26 (3 messages)

[SECURITY] [DSA 4150-1] icu security update (Moritz Muehlenhoff <jmm@...ian.org>)
[slackware-security] mozilla-thunderbird (SSA:2018-082-01) (Slackware Security Team <security@...ckware.com>)
Cross-Site Scripting vulnerability in Zimbra Collaboration Suite due to the way it handles attachment links ("Securify B.V." <lists@...urify.nl>)

March 27 (6 messages)

[SECURITY] [DSA 4151-1] librelp security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] mozilla-firefox (SSA:2018-085-01) (Slackware Security Team <security@...ckware.com>)
AEF CMS v1.0.9 - (PM) Persistent Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Weblication CMS Core & Grid v12.6.24 - Multiple Cross Site Scripting Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Sandoba CP:Shop CMS v2016.1 - Multiple Cross Site Scripting Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Microsoft Skype Mobile v81.2 & v8.13 - Remote Denial of Service Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

March 28 (3 messages)

[SECURITY] [DSA 4152-1] mupdf security update (Luciano Bello <luciano@...ian.org>)
[SECURITY] [DSA 4153-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4154-1] net-snmp security update (Salvatore Bonaccorso <carnil@...ian.org>)

March 29 (3 messages)

[SECURITY] [DSA 4155-1] thunderbird security update (Moritz Muehlenhoff <jmm@...ian.org>)
CA20180328-01: Security Notice for CA API Developer Portal ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[SECURITY] [DSA 4156-1] drupal7 security update (Salvatore Bonaccorso <carnil@...ian.org>)

March 30 (12 messages)

APPLE-SA-2018-3-29-1 iOS 11.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-3-29-6 Safari 11.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-3-29-3 tvOS 11.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-3-29-2 watchOS 4.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-3-29-7 iTunes 12.7.4 for Windows (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-3-29-5 macOS High Sierra 10.13.4, Security Update 2018-002 Sierra, and Security Update 2018-002 El Capita… (Apple Product Security <product-securit…)
APPLE-SA-2018-3-29-4 Xcode 9.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-3-29-8 iCloud for Windows 7.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
CA20180329-01: Security Notice for CA Workload Automation AE and CA Workload Control Center ("Williams, Ken" <Ken.Williams@...com>)
[slackware-security] ruby (SSA:2018-088-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4157-1] openssl security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 4158-1] openssl1.0 security update (Salvatore Bonaccorso <carnil@...ian.org>)

95 messages