Mail Index

• Thread Index

• [ MDVSA-2013:171 ] gnutls
  • From: security
• [SECURITY] [DSA 2699-1] iceweasel security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2700-1] wireshark security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2701-1] krb5 security update
  • From: Michael Gilbert
• Vulnerable Microsoft VC++ 2005 RTM runtime libraries installed with "Microsoft Security Essentials" (and numerous other Microsoft products)
  • From: Stefan Kanthak
• CVE-2013-3662 - Sketchup MAC Pict Material Palette Stack Corruption
  • From: Felipe Manzano
• CVE-2013-3663 - SketchUp BMP RLE8 Heap Overflow
  • From: Felipe Manzano
• CVE-2013-3664 - Sketchup Multiple Vulnerabilities
  • From: Felipe Manzano
• Unauthenticated command execution on Netgear DGN devices
  • From: roberto
• Imperva SecureSphere Operations Manager version 9.0.0.5 - Multiple issues
  • From: Pedro Andujar
• DS3 Authentication Server - Multiple Issues
  • From: Pedro Andujar
• Open-Xchange Security Advisory 2013-06-03
  • From: Martin Braun
• [ISecAuditors Security Advisories] Multiple Vulnerabilities in Telaen <= 1.3.0
  • From: ISecAuditors Security Advisories
• CVE-2013-3724 Monkey HTTPD 1.1.1 - Denial of Service Vulnerability
  • From: dougtko
• CVE-2013-3843 Monkey HTTPD 1.2.0 - Buffer Overflow DoS Vulnerability With Possible Arbitrary Code Execution
  • From: dougtko
• [SECURITY] [DSA 2702-1] telepathy-gabble security update
  • From: Salvatore Bonaccorso
• Re: Monkey HTTPD 1.1.1 - Denial of Service Vulnerability
  • From: dougtko
• [security bulletin] HPSBMU02883 SSRT101227 rev.1 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of Arbitrary Code
  • From: security-alert
• [CORE-2013-0103] Mac OSX Server DirectoryService buffer overflow
  • From: CORE Security Technologies Advisories
• CVE-2013-3734 - JBoss AS Administration Console - Password Returned in Later Response
  • From: amroot
• [ANN] Struts 2.3.14.3 GA (fast-track) release available
  • From: Lukasz Lenart
• SEC Consult SA-20130605-0 :: Multiple vulnerabilities in CTERA Portal
  • From: SEC Consult Vulnerability Lab
• CORE-2013-0517 - Xpient Cash Drawer Operation Vulnerability
  • From: CORE Security Technologies Advisories
• APPLE-SA-2013-06-04-2 Safari 6.0.5
  • From: Apple Product Security
• APPLE-SA-2013-06-04-1 OS X Mountain Lion v10.8.4 and Security Update 2013-002
  • From: Apple Product Security
• Re: [#1298868584] Copy&paste from web browser considered dangerous
  • From: Google Security
• DEFCON London - DC4420 - June CFP - Lightning talks!!! - Tuesday 25th June 2013
  • From: Major Malfunction
• WordPress 3.5.1, Denial of Service
  • From: Krzysztof Katowicz-Kowalewski
• Re: Netgear FVG318 is vunerable to DOS attack
  • From: No
• Re: Re: Netgear FVG318 is vunerable to DOS attack
  • From: no
• Fail2ban 0.8.9, Denial of Service (Apache rules only)
  • From: Krzysztof Katowicz-Kowalewski
• Bluetooth Chat Connect v1.0 iOS - Multiple Vulnerabilities
  • From: Vulnerability Lab
• [SECURITY] [DSA 2703-1] subversion security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 2704-1] mesa security update
  • From: Raphael Geissert
• CVE-2013-3739 Local File Inclusion in Weathermap <= 0.97C
  • From: Anthony Dubuissez
• [SECURITY] [DSA 2705-1] pymongo security update
  • From: Giuseppe Iuculano
• [SECURITY] [DSA 2706-1] chromium-browser security update
  • From: Giuseppe Iuculano
• [slackware-security] php (SSA:2013-161-01)
  • From: Slackware Security Team
• CFP: IEEE SafeConfig: 6th Symposium on Security Analytics and Automation
  • From: James Joshi
• [security bulletin] HPSBHF02885 rev.1 - HP Integrated Lights-Out iLO3 and iLO4 using Single-Sign-On (SSO), Remote Unauthorized Access
  • From: security-alert
• t2'13: Call for Papers 2013 (Helsinki / Finland)
  • From: Tomi Tuominen
• Re: WordPress 3.5.1, Denial of Service
  • From: Peter Bex
• [security bulletin] HPSBMU02884 rev.1 - HP Service Manager and HP ServiceCenter, Cross Site Scripting (XSS) and Disclosure of Information
  • From: security-alert
• CORE-2013-0430 - Buffer overflow in Ubiquiti airCam RTSP service
  • From: CORE Security Technologies Advisories
• Re: WordPress 3.5.1, Denial of Service
  • From: Solar Designer
• SQL Injection in Dolphin
  • From: advisory
• [ MDVSA-2013:172 ] wireshark
  • From: security
• Slideware of recent presentations about IPv6 security
  • From: Fernando Gont
• [SECURITY] [DSA 2707-1] dbus security update
  • From: Yves-Alexis Perez
• [ MDVSA-2013:173 ] subversion
  • From: security
• LSE Leading Security Experts GmbH - LSE-2013-06-13 - Avira AntiVir Engine
  • From: LSE Leading Security Experts GmbH (Security Advisories)
• Re: WordPress 3.5.1, Denial of Service
  • From: Henri Salo
• [security bulletin] HPSBHF02885 rev.2 - HP Integrated Lights-Out iLO3 and iLO4 using Single-Sign-On (SSO), Remote Unauthorized Access
  • From: security-alert
• CVE-2013-2153: Apache Santuario C++ signature bypass vulnerability
  • From: Cantor, Scott
• CVE-2013-2155: Apache Santuario C++ denial of service vulnerability
  • From: Cantor, Scott
• CVE-2013-2154: Apache Santuario C++ stack overflow vulnerability
  • From: Cantor, Scott
• Re: CVE-2013-2156: Apache Santuario C++ heap overflow vulnerability
  • From: Cantor, Scott
• FreeBSD Security Advisory FreeBSD-SA-13:06.mmap
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 2710-1] xml-security-c security update
  • From: Salvatore Bonaccorso
• Apple and Wifi Hotspot Credentials Management Vulnerability
  • From: Jeffrey Walton
• Re: Apple and Wifi Hotspot Credentials Management Vulnerability
  • From: Jeffrey Walton
• APPLE-SA-2013-06-18-1 Java for OS X 2013-004 and Mac OS X v10.6 Update 16
  • From: Apple Product Security
• [SECURITY] [DSA 2698-1] tiff security update
  • From: Michael Gilbert
• [SECURITY] [DSA 2628-2] nss-pam-ldapd update
  • From: Moritz Muehlenhoff
• ESA-2013-045: RSA BSAFE® SSL-C Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability
  • From: Security Alert
• ESA-2013-039: RSA BSAFE® SSL-J Multiple Vulnerabilities
  • From: Security Alert
• ESA-2013-032 RSA BSAFE® Micro Edition Suite Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability
  • From: Security Alert
• Remote code execution in Puppet
  • From: andreas . lindqvist
• Facebook critical design flaw
  • From: jjshoe
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence TC and TE Software
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 2711-1] haproxy security update
  • From: Moritz Muehlenhoff
• [CVE-2013-0523] IBM WebSphere Commerce: Encrypted URL Parameter Vulnerable to Padding Oracle Attacks
  • From: VSR Advisories
• Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :)
  • From: Hunger
• Re: Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :)
  • From: Emiel Kollof
• Joomla crypto vulnerability (all versions)
  • From: Marco Beierer
• [SECURITY] [DSA 2712-1] otrs2 security update
  • From: Florian Weimer
• Android ICS "adb restore" directory traversal vulnerability (resending after bounce)
  • From: Ariel Berkman
• [security bulletin] HPSBUX02876 SSRT101148 rev.2 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• DC4420 - London DEFCON - June meet - Lightning Talks!!! - Tuesday 25th June 2013
  • From: Tony Naggs
• FreeBSD Security Advisory FreeBSD-SA-13:06.mmap [REVISED]
  • From: FreeBSD Security Advisories
• Facebook Information Disclosure
  • From: Packet Storm
• ASUS RT-N66U Router - HTTPS Directory traversal and full file access and credential disclosure vuln
  • From: kyle Lovett
• GreHack 2013 - CFP ends on June, 30 - Conf: Nov. 15, Grenoble, France
  • From: F. Duchene
• Linksys X3000 - Multiple Vulnerabilities
  • From: devnull
• [slackware-security] curl (SSA:2013-174-01)
  • From: Slackware Security Team
• CFP: IEEE SafeConfig: 6th Symposium on Security Analytics and Automation (Deadline Extended)
  • From: James Joshi
• [ MDVSA-2013:176 ] kernel
  • From: security
• [security bulletin] HPSBHF02878 rev.1 - HP Smart Zero Client, Unauthorized Access
  • From: security-alert
• Re: Facebook Information Disclosure
  • From: Jeffrey Walton
• [SECURITY] [DSA 2713-1] curl security update
  • From: Salvatore Bonaccorso
• Re: Facebook Information Disclosure
  • From: terry white
• SEC Consult SA-20130625-0 :: Multiple vulnerabilities in IceWarp Mail Server
  • From: SEC Consult Vulnerability Lab
• Barnraiser Prairie OpenID idp: Directory traversal attack
  • From: prairie
• [ MDVSA-2013:177 ] dbus
  • From: security
• [ MDVSA-2013:178 ] nfs-utils
  • From: security
• [Full-disclosure] Magnolia CMS multiple access control vulnerabilities
  • From: Adrian Furtuna
• [SECURITY] [DSA 2714-1] kfreebsd-9 security update
  • From: Moritz Muehlenhoff
• Multiple XSS Vulnerabilities in Xaraya
  • From: advisory
• [SECURITY] [DSA 2716-1] iceweasel security update
  • From: Moritz Muehlenhoff
• Security focus, we need your help
  • From: Adnan Ahmad
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Email Security Appliance
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Web Security Appliance
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2013:179 ] firefox
  • From: security
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Content Security Management Appliance
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco ASA Next-Generation Firewall Fragmented Traffic Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 2715-1] puppet security update
  • From: Raphael Geissert
• [security bulletin] HPSBST02890 rev.1 - HP StoreOnce D2D Backup System, Unauthorized Remote Access and Modification
  • From: security-alert
• [security bulletin] HPSBUX02886 rev.1 - HP-UX Running HP Secure Shell, Remote Denial of Service (DoS)
  • From: security-alert
• CVE-2013-2210
  • From: Cantor, Scott
• [ MDVSA-2013:180 ] curl
  • From: security
• [ MDVSA-2013:181 ] mesa
  • From: security
• [ MDVSA-2013:182 ] mesa
  • From: security
• [ MDVSA-2013:183 ] java-1.7.0-openjdk
  • From: security
• [ MDVSA-2013:184 ] perl-Dancer
  • From: security
• [ MDVSA-2013:185 ] perl-Module-Signature
  • From: security
• Re: Re: EMC Avamar: World writable cache files
  • From: security_alert
• eFile Wifi Transfer Manager 1.0 iOS - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Mobile USB Drive HD 1.2 - Arbitrary File Upload Vulnerability
  • From: Vulnerability Lab
• Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Barracuda CudaTel 2.6.02.04 - Persistent Web Vulnerability
  • From: Vulnerability Lab
• [slackware-security] ruby (SSA:2013-178-01)
  • From: Slackware Security Team
• Re: Barracuda CudaTel 2.6.02.04 - Persistent Web Vulnerability
  • From: Henri Salo
• [ MDVSA-2013:186 ] puppet
  • From: security
• Re: EMC Avamar: World writable cache files
  • From: security_alert
• [SECURITY] [DSA 2717-1] xml-security-c security update
  • From: Salvatore Bonaccorso
• Wordpress wp-private-messages Plugin Sql Injection vulnerability
  • From: iedb . team