bugtraq mailing list - 2018/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2018/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 5	² 1	³	⁴
⁵ 6	⁶ 2	⁷	⁸ 1	⁹	¹⁰	¹¹
¹² 8	¹³ 4	¹⁴ 2	¹⁵ 2	¹⁶	¹⁷	¹⁸
¹⁹	²⁰ 10	²¹ 2	²² 4	²³ 1	²⁴	²⁵
²⁶ 2	²⁷	²⁸ 5	²⁹	³⁰ 2

Messages by day:

November 1 (5 messages)

Zoho ManageEngine OpManager 12.3 allows Stored XSS (Hakan Bayır <hakan.bayir@...net.com.tr>)
Zoho ManageEngine OpManager 12.3 allows Self XSS Vulnerability (Hakan Bayır <hakan.bayir@...net.com.tr>)
OpenText Brava! Enterprise and Brava! Server Components Sensitive Data Exposure (luke.bailiff@...rs.org)
October 2018 Sourcetree Advisory (Anton Black <ablack@...assian.com>)
[slackware-security] curl (SSA:2018-304-01) (Slackware Security Team <security@...ckware.com>)

November 2 (1 message)

Disclose Vulnerability (alphan yavaş <ayavasa94@...il.com>)

November 5 (6 messages)

[SECURITY] [DSA 4330-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
[SECURITY] [DSA 4331-1] curl security update (Alessandro Ghedini <ghedo@...ian.org>)
[SECURITY] [DSA 4332-1] ruby2.3 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 4334-1] mupdf security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4333-1] icecast2 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings. (Hakan Bayır <hakan.bayir@...net.com.tr>)

November 6 (2 messages)

KL-001-2018-009 : Dell OpenManage Network Manager Multiple Vulnerabilities (KoreLogic Disclosures <disclosures@...elogic.com>)
[slackware-security] mariadb (SSA:2018-309-01) (Slackware Security Team <security@...ckware.com>)

November 8 (1 message)

[security bulletin] MFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code Execution (cyber-psrt@...rofocus.com)

November 12 (8 messages)

[SECURITY] [DSA 4335-1] nginx security update (Moritz Muehlenhoff <jmm@...ian.org>)
WP User Manager v2.0.8 - Time-Based SQL Injection (Socket_0x03@...aexe.com)
NEW VMSA-2018-0027 VMware ESXi, Workstation, and Fusion updates address uninitialized stack memory usage (VMware Security Response Center <security@...are.com>)
PeepSo v1.11.2 - Time-Based SQL Injection (Socket_0x03@...aexe.com)
PeepSo v1.11.2 (WordPress Plugin) - XSS Vulnerability in Members (Socket_0x03@...aexe.com)
[SECURITY] [DSA 4336-1] ghostscript security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 4337-1] thunderbird security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4338-1] qemu security update (Moritz Muehlenhoff <jmm@...ian.org>)

November 13 (4 messages)

[slackware-security] libtiff (SSA:2018-316-01) (Slackware Security Team <security@...ckware.com>)
[security bulletin] MFSBGN03823 rev.1 - Micro Focus Service Manager, unauthorized disclosure of data (cyber-psrt@...rofocus.com)
[security bulletin] MFSBGN03831 rev. - Service Management Automation, remote disclosure of information (cyber-psrt@...rofocus.com)
[security bulletin] MFSBGN03830 rev.1 - Service Manager, unauthorized disclosure of information (cyber-psrt@...rofocus.com)

November 14 (2 messages)

[SECURITY] [DSA 4339-1] ceph security update (Moritz Muehlenhoff <jmm@...ian.org>)
Custom Frontend Login Registration Form (WP Plugin) - Multiple XSS Vulnerabilities (Socket_0x03@...aexe.com)

November 15 (2 messages)

AST-2018-010: ("Asterisk Security Team" <security@...erisk.org>)
AST-2018-010: Remote crash vulnerability DNS SRV and NAPTR lookups ("Asterisk Security Team" <security@...erisk.org>)

November 20 (10 messages)

Remote Code Execution Vulnerability in ELBA5 Electronic Banking (Florian Bogner <florian@...-itsecurity.at>)
[CVE-2018-3635] Executable installers are vulnerable^WEVIL (case 59): arbitrary code execution WITH escalation of privil… ("Stefan Kanthak" <stefan.kanthak@...go.…)
D-LINK Central WifiManager CWM-100 FTP Server PORT Bounce Scan CVE-2018-15516 (apparitionsec@...il.com)
D-LINK Central WifiManager CWM-100 Trojan File SYSTEM Privilege Escalation CVE-2018-15515 (apparitionsec@...il.com)
D-LINK Central WifiManager CWM-100 Server Side Request Forgery CVE-2018-15517 (apparitionsec@...il.com)
[SECURITY] [DSA 4340-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API. (Murat Aydemir <murat.aydemir@...net.com.tr>)
Escalation of privilege with Intel Rapid Storage User Interface ("Stefan Kanthak" <stefan.kanthak@...go.de>)
ACM CCS 2019 - Call for Papers (<m.manulis@...rey.ac.uk>)
[SECURITY] [DSA 4341-1] mariadb-10.1 security update (Salvatore Bonaccorso <carnil@...ian.org>)

November 21 (2 messages)

SEC Consult SA-20181114-0 :: Denial of Service in Microsoft Skype for Business (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20181116-0 :: Multiple critical vulnerabilities in Miss Marple Enterprise Edition (SEC Consult Vulnerability Lab <research@...-consult.com>)

November 22 (4 messages)

SEC Consult SA-20181121-0 :: Signature Bypass / Authentication Bypass in Governikus Autent SDK (SEC Consult Vulnerability Lab <research@...-consult.com>)
[SECURITY] [DSA 4339-2] ceph regression update (Salvatore Bonaccorso <carnil@...ian.org>)
WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0008 (Michael Catanzaro <mcatanzaro@...lia.com>)
[slackware-security] openssl (SSA:2018-325-01) (Slackware Security Team <security@...ckware.com>)

November 23 (1 message)

Cory Support v1.0 - Time-Based SQL Injection in Signin (Socket_0x03@...aexe.com)

November 26 (2 messages)

[SECURITY] [DSA 4343-1] liblivemedia security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4344-1] roundcube security update (Salvatore Bonaccorso <carnil@...ian.org>)

November 28 (5 messages)

[SECURITY] [DSA 4345-1] samba security update (Salvatore Bonaccorso <carnil@...ian.org>)
Avahi 0.7 missing link-local checks in Legacy Unicast Responses cause information disclosure and makes DDoS with mDNS t… (Krzysztof Burghardt <krzysztof@...ghard…)
[CORE-2018-0011] - Cisco WebEx Meetings Elevation of Privilege Vulnerability (advisories <advisories@...ureauth.com>)
[SECURITY] [DSA 4346-1] ghostscript security update (Salvatore Bonaccorso <carnil@...ian.org>)
FreeBSD Security Advisory FreeBSD-SA-18:13.nfs (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

November 30 (2 messages)

[slackware-security] samba (SSA:2018-333-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4347-1] perl security update (Salvatore Bonaccorso <carnil@...ian.org>)

57 messages

Powered by blists - more mailing lists