bugtraq mailing list - 2020/01

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2020/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 1	² 5	³	⁴	⁵
⁶ 2	⁷ 1	⁸ 2	⁹ 3	¹⁰ 3	¹¹	¹²
¹³ 3	¹⁴ 3	¹⁵	¹⁶	¹⁷ 2	¹⁸	¹⁹
²⁰ 4	²¹ 4	²² 3	²³ 1	²⁴ 2	²⁵	²⁶
²⁷ 2	²⁸	²⁹ 11	³⁰ 5	³¹ 1

Messages by day:

January 1 (1 message)

Microsoft Windows .Group File / URL Field Code Execution (apparitionsec@...il.com)

January 2 (5 messages)

[RT-SA-2019-016] IceWarp: Cross-Site Scripting in Notes (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[TZO-03-2020] ESET Generic Malformed Archive Bypass (ZIP Compression Information) (Thierry Zoller <thierry@...ler.lu>)
[TZO-02-2020] Kaspersyk Generic Malformed Archive Bypass (ZIP GFlag) (Thierry Zoller <thierry@...ler.lu>)
[TZO-01-2020] AVIRA Generic Malformed Container bypass (ISO) (Thierry Zoller <thierry@...ler.lu>)
[RT-SA-2019-015] IceWarp: Cross-Site Scripting in Notes for Contacts (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

January 6 (2 messages)

[TZO-04-2020] Bitdefender Generic Malformed Archive Bypass (BZ2) (Thierry Zoller <thierry@...ler.lu>)
[SECURITY] [DSA 4597-1] netty security update (Salvatore Bonaccorso <carnil@...ian.org>)

January 7 (1 message)

[slackware-security] mozilla-firefox (SSA:2020-006-01) (Slackware Security Team <security@...ckware.com>)

January 8 (2 messages)

[SECURITY] [DSA 4599-1] wordpress security update (Sebastien Delafond <seb@...ian.org>)
[SECURITY] [DSA 4598-1] python-django security update (Salvatore Bonaccorso <carnil@...ian.org>)

January 9 (3 messages)

[slackware-security] Slackware 14.2 kernel (SSA:2020-008-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-firefox (SSA:2020-009-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4600-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)

January 10 (3 messages)

[SECURITY] [DSA 4601-1] ldm security update (Moritz Muehlenhoff <jmm@...ian.org>)
[TZO-07-2020] Bitdefender Generic Malformed Archive Bypass (RAR HOST_OS) (Thierry Zoller <thierry@...ler.lu>)
[TZO-05-2020] Kaspersky Generic Malformed Archive Bypass (ZIP Compressed Size) (Thierry Zoller <thierry@...ler.lu>)

January 13 (3 messages)

[TZO-06-2020] - Kaspersky Generic Archive Bypass (ZIP FLNMLEN) (Thierry Zoller <thierry@...ler.lu>)
[TZO-08-2020] Bitdefender Generic Malformed Archive Bypass (ZIP GPFLAG) (Thierry Zoller <thierry@...ler.lu>)
[slackware-security] mozilla-thunderbird (SSA:2020-010-01) (Slackware Security Team <security@...ckware.com>)

January 14 (3 messages)

[TZO-10-2020] - Bitdefender Malformed Archive bypass (RAR Compression Information) (Thierry Zoller <thierry@...ler.lu>)
[TZO-09-2020] - Bitdefender Malformed Archive bypass (RAR Uncompressed Size) (Thierry Zoller <thierry@...ler.lu>)
[SECURITY] [DSA 4602-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)

January 17 (2 messages)

CVE-2020-2696 - Local privilege escalation via CDE dtsession (Marco Ivaldi <marco.ivaldi@...iaservice.net>)
CVE-2020-2656 - Low impact information disclosure via Solaris xlock (Marco Ivaldi <marco.ivaldi@...iaservice.net>)

January 20 (4 messages)

[SECURITY] [DSA 4605-1] openjdk-11 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4604-1] cacti security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4603-1] thunderbird security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4606-1] chromium security update (Michael Gilbert <mgilbert@...ian.org>)

January 21 (4 messages)

Trend Micro Security (Consumer) Multiple Products Persistent Arbitrary Code Execution CVE-2019-20357 (apparitionsec@...il.com)
Trend Micro Security 2019 (Consumer) Multiple Products Security Bypass Protected Service Tampering CVE-2019-19697 (apparitionsec@...il.com)
Neowise CarbonFTP v1.4 Insecure Proprietary Password Encryption CVE-2020-6857 (apparitionsec@...il.com)
[SECURITY] [DSA 4607-1] openconnect security update (Salvatore Bonaccorso <carnil@...ian.org>)

January 22 (3 messages)

[SECURITY] [DSA 4608-1] tiff security update (Moritz Muehlenhoff <jmm@...ian.org>)
[REVIVE-SA-2020-001] Revive Adserver Vulnerability (Matteo Beccati <matteo@...cati.com>)
SEC Consult SA-20200122-0 :: Reflected XSS in ZOHO ManageEngine ServiceDeskPlus (SEC Consult Vulnerability Lab <research@...-consult.com>)

January 23 (1 message)

SEC Consult SA-20200123-0 :: Cross-Site Request Forgery (CSRF) in Umbraco CMS (SEC Consult Vulnerability Lab <research@...-consult.com>)

January 24 (2 messages)

[SECURITY] [DSA 4609-1] python-apt security update (Moritz Muehlenhoff <jmm@...ian.org>)
WebKitGTK and WPE WebKit Security Advisory WSA-2020-0001 (Carlos Alberto Lopez Perez <clopez@...lia.com>)

January 27 (2 messages)

[slackware-security] mozilla-thunderbird (SSA:2020-024-01) (Slackware Security Team <security@...ckware.com>)
CVE - CVE-2020-7799 - FusionAuth command execution via Apache Freemarker Template (Gianluca Baldi <gianluca.baldi@...iaservice.net>)

January 29 (11 messages)

LPE and RCE in OpenSMTPD (CVE-2020-7247) (Qualys Security Advisory <qsa@...lys.com>)
Defense in depth -- the Microsoft way (part 61): security features are built to fail (or documented wrong) ("Stefan Kanthak" <stefan.kanthak@...go.de>)
APPLE-SA-2020-1-28-5 Safari 13.0.5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2020-1-28-6 iTunes for Windows 12.10.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2020-1-28-2 macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra (Apple Product Security <product-security-no…)
FreeBSD Security Advisory FreeBSD-SA-20:03.thrmisc (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-20:02.ipsec (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
APPLE-SA-2020-1-28-4 tvOS 13.3.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2020-1-28-3 watchOS 6.1.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2020-1-28-1 iOS 13.3.1 and iPadOS 13.3.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
FreeBSD Security Advisory FreeBSD-SA-20:01.libfetch (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

January 30 (5 messages)

[SECURITY] [DSA 4611-1] opensmtpd security update (Moritz Muehlenhoff <jmm@...ian.org>)
APPLE-SA-2020-1-29-2 iCloud for Windows 10.9.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2020-1-29-1 iCloud for Windows 7.17 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[SECURITY] [DSA 4610-1] webkit2gtk security update (Moritz Muehlenhoff <jmm@...ian.org>)
[CVE-2019-20358] CVE-2019-9491 in Trend Micro Anti-Threat Toolkit (ATTK) was NOT properly FIXED ("Stefan Kanthak" <stefan.kanthak@...go.de>)

January 31 (1 message)

Executable installers are vulnerable^WEVIL (case 58): Intel® Processor Identification Utility - Windows* Version - arbi… ("Stefan Kanthak" <stefan.kanthak@...go.…)

58 messages

Powered by blists - more mailing lists