bugtraq mailing list - 2019/01

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2019/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 10	² 1	³	⁴	⁵	⁶
⁷	⁸	⁹ 2	¹⁰ 2	¹¹ 2	¹²	¹³
¹⁴ 7	¹⁵ 4	¹⁶	¹⁷ 3	¹⁸ 2	¹⁹	²⁰
²¹ 3	²² 2	²³ 8	²⁴ 3	²⁵ 2	²⁶	²⁷
²⁸ 5	²⁹ 1	³⁰ 2	³¹ 4

Messages by day:

January 1 (10 messages)

[security bulletin] MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple Vulnerabilities (<security-alert@...rofocus.com>)
Asserts considered harmful (or GMP spills its sensitive information) (Jeffrey Walton <noloader@...il.com>)
[KIS-2018-02] SugarCRM (WorkFlow module) PHP Code Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[KIS-2018-01] Oracle Application Express (AnyChart) Flash-based Cross-Site Scripting Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[KIS-2018-04] SugarCRM (ConnectorsController) Server-Side Request Forgery Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[KIS-2018-03] SugarCRM (portal_get_related_notes) SQL Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[KIS-2018-05] SugarCRM (SaveDropDown) PHP Code Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[KIS-2018-06] SugarCRM (addLabels) PHP Code Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[KIS-2018-07] SugarCRM (Web Logic Hooks module) PHP Code Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[KIS-2018-08] SugarCRM (Web Logic Hooks module) Path Traversal Vulnerability (Egidio Romano <research@...mainsecurity.com>)

January 2 (1 message)

[SECURITY] [DSA 4362-1] thunderbird security update (Moritz Muehlenhoff <jmm@...ian.org>)

January 9 (2 messages)

[SECURITY] [DSA 4363-1] python-django security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4364-1] ruby-loofah security update (Moritz Muehlenhoff <jmm@...ian.org>)

January 10 (2 messages)

System Down: A systemd-journald exploit (Qualys Security Advisory <qsa@...lys.com>)
SEC Consult SA-20190109-0 :: Multiple Vulnerabilities in Cisco VoIP Phones (88xx series) (SEC Consult Vulnerability Lab <research@...-consult.com>)

January 11 (2 messages)

X41 D-Sec GmbH Security Advisory X41-2018-009: ReDoS Vulnerability in UA-Parser (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[SECURITY] [DSA 4365-1] tmpreaper security update (Moritz Muehlenhoff <jmm@...ian.org>)

January 14 (7 messages)

[SYSS-2018-011] Portier - SQL Injection (christian.pappas@...s.de)
[SYSS-2018-011] Portier - Cryptographic Issues (christian.pappas@...s.de)
[SYSS-2018-042] XSS in HMS Netbiter WS100 - CVE-2018-19694 (Micha Borrmann <micha.borrmann@...s.de>)
[slackware-security] irssi (SSA:2019-011-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4366-1] vlc security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4367-1] systemd security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] zsh (SSA:2019-013-01) (Slackware Security Team <security@...ckware.com>)

January 15 (4 messages)

[SECURITY] [DSA 4368-1] zeromq3 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4369-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)
Microsoft Windows VCF File Insufficient UI Warning Remote Code Execution 0day ZDI-CAN-6920 (apparitionsec@...il.com)
Microsoft Windows VCF File Insufficient UI Warning Remote Code Execution 0day ZDI-CAN-6920 (apparitionsec@...il.com)

January 17 (3 messages)

CVE-2018-13798 Siemens - SICAM A8000 Series Webinterface XXE DoS (Advisories <advisories@...pass-security.com>)
[SECURITY] [DSA 4367-2] systemd regression update (Salvatore Bonaccorso <carnil@...ian.org>)
[SYSS-2018-041] Mozilla Firefox - Information Exposure (vladimir.bostanov@...s.de)

January 18 (2 messages)

[SYSS-2018-043] Authentication Bypass in Kentix MultiSensor LAN - CVE-2018-19783 (Micha Borrmann <micha.borrmann@...s.de>)
[SECURITY] [DSA 4370-1] drupal7 security update (Moritz Muehlenhoff <jmm@...ian.org>)

January 21 (3 messages)

Defense in depth -- the Microsoft way (part 59): we only fix every other vulnerability ("Stefan Kanthak" <stefan.kanthak@...go.de>)
CA20190117-01: Security Notice for CA Service Desk Manager (Kevin Kotas <kevin.kotas@...adcom.com>)
[Several CVE]: NUUO CMS - multiple vulnerabilities resulting in unauth RCE (Pedro Ribeiro <pedrib@...il.com>)

January 22 (2 messages)

[SRP-2018-02] Security of NC+ SAT TV platform and ST chipsets (Security Explorations <contact@...urity-explorations.com>)
[SECURITY] [DSA 4371-1] apt security update (Yves-Alexis Perez <corsac@...ian.org>)

January 23 (8 messages)

APPLE-SA-2019-1-22-1 iOS 12.1.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2019-1-22-6 iCloud for Windows 7.10 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2019-1-22-4 tvOS 12.1.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2019-1-22-5 Safari 12.0.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2019-1-22-2 macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra (Apple Product Security <product-security-nore…)
APPLE-SA-2019-1-22-3 watchOS 5.1.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
CVE-2018-13042 - 1Password Android < 7.0 - Denial Of Service (Valerio Brussani <valeriobrussani@...il.com>)
[slackware-security] httpd (SSA:2019-022-01) (Slackware Security Team <security@...ckware.com>)

January 24 (3 messages)

[RT-SA-2018-002] Cisco RV320 Unauthenticated Configuration Export (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2018-003] Cisco RV320 Unauthenticated Diagnostic Data Retrieval (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2018-004] Cisco RV320 Command Injection (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

January 25 (2 messages)

APPLE-SA-2019-1-24-1 iTunes 12.9.3 for Windows (Apple Product Security <product-security-noreply@...ts.apple.com>)
SEC Consult SA-20190124-0 :: Cross-site scripting in CA Automic Workload Automation Web Interface (AWI) (SEC Consult Vulnerability Lab <research@...-consult.co…)

January 28 (5 messages)

CVE-2019-6690: Improper Input Validation in python-gnupg (Stig Palmquist <stig@...g.io>)
[SECURITY] [DSA 4372-1] ghostscript security update (Salvatore Bonaccorso <carnil@...ian.org>)
Microsoft Windows ".contact" File HTML Injection Mailto: Link Remote Code Execution 0day ZDI-CAN-75 (apparitionsec@...il.com)
[SECURITY] [DSA 4373-1] coturn security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 4374-1] qtbase-opensource-src security update (Sebastien Delafond <seb@...ian.org>)

January 29 (1 message)

Fwd: CA20190124-01: Security Notice for CA Automic Workload Automation (James Williams <ken.williams@...adcom.com>)

January 30 (2 messages)

[SECURITY] [DSA 4375-1] spice security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] mozilla-firefox (SSA:2019-029-01) (Slackware Security Team <security@...ckware.com>)

January 31 (4 messages)

[SECURITY] [DSA 4376-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4377-1] rssh security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4378-1] php-pear security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] Slackware 14.2 kernel (SSA:2019-030-01) (Slackware Security Team <security@...ckware.com>)

63 messages

Powered by blists - more mailing lists