Mail Thread Index

• Date Index

• [ MDVSA-2013:171 ] gnutls, security
• [SECURITY] [DSA 2699-1] iceweasel security update, Moritz Muehlenhoff
• [SECURITY] [DSA 2700-1] wireshark security update, Moritz Muehlenhoff
• [SECURITY] [DSA 2701-1] krb5 security update, Michael Gilbert
• Vulnerable Microsoft VC++ 2005 RTM runtime libraries installed with "Microsoft Security Essentials" (and numerous other Microsoft products), Stefan Kanthak
• CVE-2013-3662 - Sketchup MAC Pict Material Palette Stack Corruption, Felipe Manzano
• CVE-2013-3663 - SketchUp BMP RLE8 Heap Overflow, Felipe Manzano
• CVE-2013-3664 - Sketchup Multiple Vulnerabilities, Felipe Manzano
• Unauthenticated command execution on Netgear DGN devices, roberto
• Imperva SecureSphere Operations Manager version 9.0.0.5 - Multiple issues, Pedro Andujar
• DS3 Authentication Server - Multiple Issues, Pedro Andujar
• Open-Xchange Security Advisory 2013-06-03, Martin Braun
• [ISecAuditors Security Advisories] Multiple Vulnerabilities in Telaen <= 1.3.0, ISecAuditors Security Advisories
• CVE-2013-3724 Monkey HTTPD 1.1.1 - Denial of Service Vulnerability, dougtko
• CVE-2013-3843 Monkey HTTPD 1.2.0 - Buffer Overflow DoS Vulnerability With Possible Arbitrary Code Execution, dougtko
• [SECURITY] [DSA 2702-1] telepathy-gabble security update, Salvatore Bonaccorso
• Re: Monkey HTTPD 1.1.1 - Denial of Service Vulnerability, dougtko
• [security bulletin] HPSBMU02883 SSRT101227 rev.1 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of Arbitrary Code, security-alert
• [CORE-2013-0103] Mac OSX Server DirectoryService buffer overflow, CORE Security Technologies Advisories
• CVE-2013-3734 - JBoss AS Administration Console - Password Returned in Later Response, amroot
• [ANN] Struts 2.3.14.3 GA (fast-track) release available, Lukasz Lenart
• SEC Consult SA-20130605-0 :: Multiple vulnerabilities in CTERA Portal, SEC Consult Vulnerability Lab
• CORE-2013-0517 - Xpient Cash Drawer Operation Vulnerability, CORE Security Technologies Advisories
• APPLE-SA-2013-06-04-2 Safari 6.0.5, Apple Product Security
• APPLE-SA-2013-06-04-1 OS X Mountain Lion v10.8.4 and Security Update 2013-002, Apple Product Security
• Re: [#1298868584] Copy&paste from web browser considered dangerous, Google Security
• DEFCON London - DC4420 - June CFP - Lightning talks!!! - Tuesday 25th June 2013, Major Malfunction
• WordPress 3.5.1, Denial of Service, Krzysztof Katowicz-Kowalewski
  • Re: WordPress 3.5.1, Denial of Service, Peter Bex
    • Re: WordPress 3.5.1, Denial of Service, Solar Designer
  • Re: WordPress 3.5.1, Denial of Service, Henri Salo
• Re: Netgear FVG318 is vunerable to DOS attack, No
  • <Possible follow-ups>
  • Re: Re: Netgear FVG318 is vunerable to DOS attack, no
• Fail2ban 0.8.9, Denial of Service (Apache rules only), Krzysztof Katowicz-Kowalewski
• Bluetooth Chat Connect v1.0 iOS - Multiple Vulnerabilities, Vulnerability Lab
• [SECURITY] [DSA 2703-1] subversion security update, Salvatore Bonaccorso
• [SECURITY] [DSA 2704-1] mesa security update, Raphael Geissert
• CVE-2013-3739 Local File Inclusion in Weathermap <= 0.97C, Anthony Dubuissez
• [SECURITY] [DSA 2705-1] pymongo security update, Giuseppe Iuculano
• [SECURITY] [DSA 2706-1] chromium-browser security update, Giuseppe Iuculano
• [slackware-security] php (SSA:2013-161-01), Slackware Security Team
• CFP: IEEE SafeConfig: 6th Symposium on Security Analytics and Automation, James Joshi
  • CFP: IEEE SafeConfig: 6th Symposium on Security Analytics and Automation (Deadline Extended), James Joshi
• [security bulletin] HPSBHF02885 rev.1 - HP Integrated Lights-Out iLO3 and iLO4 using Single-Sign-On (SSO), Remote Unauthorized Access, security-alert
• t2'13: Call for Papers 2013 (Helsinki / Finland), Tomi Tuominen
• [security bulletin] HPSBMU02884 rev.1 - HP Service Manager and HP ServiceCenter, Cross Site Scripting (XSS) and Disclosure of Information, security-alert
• CORE-2013-0430 - Buffer overflow in Ubiquiti airCam RTSP service, CORE Security Technologies Advisories
• SQL Injection in Dolphin, advisory
• [ MDVSA-2013:172 ] wireshark, security
• Slideware of recent presentations about IPv6 security, Fernando Gont
• [SECURITY] [DSA 2707-1] dbus security update, Yves-Alexis Perez
• [ MDVSA-2013:173 ] subversion, security
• LSE Leading Security Experts GmbH - LSE-2013-06-13 - Avira AntiVir Engine, LSE Leading Security Experts GmbH (Security Advisories)
• [security bulletin] HPSBHF02885 rev.2 - HP Integrated Lights-Out iLO3 and iLO4 using Single-Sign-On (SSO), Remote Unauthorized Access, security-alert
• CVE-2013-2153: Apache Santuario C++ signature bypass vulnerability, Cantor, Scott
  • CVE-2013-2155: Apache Santuario C++ denial of service vulnerability, Cantor, Scott
    • Re: CVE-2013-2156: Apache Santuario C++ heap overflow vulnerability, Cantor, Scott
  • CVE-2013-2154: Apache Santuario C++ stack overflow vulnerability, Cantor, Scott
• FreeBSD Security Advisory FreeBSD-SA-13:06.mmap, FreeBSD Security Advisories
• [SECURITY] [DSA 2710-1] xml-security-c security update, Salvatore Bonaccorso
• Apple and Wifi Hotspot Credentials Management Vulnerability, Jeffrey Walton
  • Re: Apple and Wifi Hotspot Credentials Management Vulnerability, Jeffrey Walton
• APPLE-SA-2013-06-18-1 Java for OS X 2013-004 and Mac OS X v10.6 Update 16, Apple Product Security
• [SECURITY] [DSA 2698-1] tiff security update, Michael Gilbert
• [SECURITY] [DSA 2628-2] nss-pam-ldapd update, Moritz Muehlenhoff
• ESA-2013-045: RSA BSAFE® SSL-C Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability, Security Alert
• ESA-2013-039: RSA BSAFE® SSL-J Multiple Vulnerabilities, Security Alert
• ESA-2013-032 RSA BSAFE® Micro Edition Suite Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability, Security Alert
• Remote code execution in Puppet, andreas . lindqvist
• Facebook critical design flaw, jjshoe
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence TC and TE Software, Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 2711-1] haproxy security update, Moritz Muehlenhoff
• [CVE-2013-0523] IBM WebSphere Commerce: Encrypted URL Parameter Vulnerable to Padding Oracle Attacks, VSR Advisories
• Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :), Hunger
  • Re: Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :), Emiel Kollof
• Joomla crypto vulnerability (all versions), Marco Beierer
• [SECURITY] [DSA 2712-1] otrs2 security update, Florian Weimer
• Android ICS "adb restore" directory traversal vulnerability (resending after bounce), Ariel Berkman
• [security bulletin] HPSBUX02876 SSRT101148 rev.2 - HP-UX Running BIND, Remote Denial of Service (DoS), security-alert
• DC4420 - London DEFCON - June meet - Lightning Talks!!! - Tuesday 25th June 2013, Tony Naggs
• FreeBSD Security Advisory FreeBSD-SA-13:06.mmap [REVISED], FreeBSD Security Advisories
• Facebook Information Disclosure, Packet Storm
  • Re: Facebook Information Disclosure, Jeffrey Walton
    • Re: Facebook Information Disclosure, terry white
• ASUS RT-N66U Router - HTTPS Directory traversal and full file access and credential disclosure vuln, kyle Lovett
• GreHack 2013 - CFP ends on June, 30 - Conf: Nov. 15, Grenoble, France, F. Duchene
• Linksys X3000 - Multiple Vulnerabilities, devnull
• [slackware-security] curl (SSA:2013-174-01), Slackware Security Team
• [ MDVSA-2013:176 ] kernel, security
• [security bulletin] HPSBHF02878 rev.1 - HP Smart Zero Client, Unauthorized Access, security-alert
• [SECURITY] [DSA 2713-1] curl security update, Salvatore Bonaccorso
• SEC Consult SA-20130625-0 :: Multiple vulnerabilities in IceWarp Mail Server, SEC Consult Vulnerability Lab
• Barnraiser Prairie OpenID idp: Directory traversal attack, prairie
• [ MDVSA-2013:177 ] dbus, security
• [ MDVSA-2013:178 ] nfs-utils, security
• [Full-disclosure] Magnolia CMS multiple access control vulnerabilities, Adrian Furtuna
• [SECURITY] [DSA 2714-1] kfreebsd-9 security update, Moritz Muehlenhoff
• Multiple XSS Vulnerabilities in Xaraya, advisory
• [SECURITY] [DSA 2716-1] iceweasel security update, Moritz Muehlenhoff
• Security focus, we need your help, Adnan Ahmad
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Email Security Appliance, Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Web Security Appliance, Cisco Systems Product Security Incident Response Team
• [ MDVSA-2013:179 ] firefox, security
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Content Security Management Appliance, Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco ASA Next-Generation Firewall Fragmented Traffic Denial of Service Vulnerability, Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 2715-1] puppet security update, Raphael Geissert
• [security bulletin] HPSBST02890 rev.1 - HP StoreOnce D2D Backup System, Unauthorized Remote Access and Modification, security-alert
• [security bulletin] HPSBUX02886 rev.1 - HP-UX Running HP Secure Shell, Remote Denial of Service (DoS), security-alert
• CVE-2013-2210, Cantor, Scott
• [ MDVSA-2013:180 ] curl, security
• [ MDVSA-2013:181 ] mesa, security
• [ MDVSA-2013:182 ] mesa, security
• [ MDVSA-2013:183 ] java-1.7.0-openjdk, security
• [ MDVSA-2013:184 ] perl-Dancer, security
• [ MDVSA-2013:185 ] perl-Module-Signature, security
• Re: Re: EMC Avamar: World writable cache files, security_alert
  • <Possible follow-ups>
  • Re: EMC Avamar: World writable cache files, security_alert
• eFile Wifi Transfer Manager 1.0 iOS - Multiple Vulnerabilities, Vulnerability Lab
• Mobile USB Drive HD 1.2 - Arbitrary File Upload Vulnerability, Vulnerability Lab
• Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities, Vulnerability Lab
• Barracuda CudaTel 2.6.02.04 - Persistent Web Vulnerability, Vulnerability Lab
  • Re: Barracuda CudaTel 2.6.02.04 - Persistent Web Vulnerability, Henri Salo
• [slackware-security] ruby (SSA:2013-178-01), Slackware Security Team
• [ MDVSA-2013:186 ] puppet, security
• [SECURITY] [DSA 2717-1] xml-security-c security update, Salvatore Bonaccorso
• Wordpress wp-private-messages Plugin Sql Injection vulnerability, iedb . team