Mail Index

• Thread Index

• [security bulletin] HPSBMU03401 rev.1 - HP Operations Manager for UNIX and Linux, Remote Unauthorized Modification, Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBGN03403 rev.1 - HP Virtualization Performance Viewer, Remote Unauthorized Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBMU03339 rev.1 - HP LoadRunner Controller, Local Execution of Arbitrary Code
  • From: security-alert
• [CORE-2015-0013] - FortiClient Antivirus Multiple Vulnerabilities
  • From: CORE Advisories Team
• KL-001-2015-003 : SiS Windows VGA Display Manager Multiple Privilege Escalation
  • From: KoreLogic Disclosures
• KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation
  • From: KoreLogic Disclosures
• CVE-2015-5603: JIRA and the HipChat For JIRA plugin - Velocity Template Injection
  • From: David Black
• [slackware-security] gdk-pixbuf2 (SSA:2015-244-01)
  • From: Slackware Security Team
• Cross-Site Request Forgery in Cerb
  • From: High-Tech Bridge Security Research
• ESA-2015-137: EMC Atmos XML External Entity Injection Vulnerability
  • From: Security Alert
• [SECURITY] [DSA 3347-1] pdns security update
  • From: Sébastien Delafond
• Cisco Security Advisory: Cisco Integrated Management Controller Supervisor and Cisco UCS Director Remote File Overwrite Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 3349-1] qemu-kvm security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3348-1] qemu security update
  • From: Salvatore Bonaccorso
• FreeBSD Security Advisory FreeBSD-SA-15:23.bind
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 3350-1] bind9 security update
  • From: Moritz Muehlenhoff
• [slackware-security] bind (SSA:2015-245-01)
  • From: Slackware Security Team
• [SYSS-2015-016] Avaya one-X® Agent - Hard-coded Cryptographic Key
  • From: sven . freund
• Checkmarx CxQL Sandbox bypass (CVE-2014-8778)
  • From: hdau
• Zhone ADSL2+ 4P Bridge & Router (Broadcom) - Multiple Vulnerabilities
  • From: Vulnerability Lab
• ESA-2015-144: EMC Documentum Content Server Privilege Escalation Vulnerability
  • From: Security Alert
• [CVE-2014-7216] Yahoo! Messenger emoticons.xml Multiple Key Value Handling Local Buffer Overflow
  • From: Julien Ahrens
• [SECURITY] [DSA 3351-1] chromium-browser security update
  • From: Michael Gilbert
• [slackware-security] seamonkey (SSA:2015-246-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 3352-1] screen security update
  • From: Laszlo Boszormenyi
• Oracle Hyperion password disclosure...
  • From: Jeff Kayser
• Defense in depth -- the Microsoft way (part 32): yet another (trivial) UAC bypass resp. privilege escalation
  • From: Stefan Kanthak
• Avira Mobile Security iOS Application - Cleartext Credentials Vulnerability
  • From: David Coomber
• Webroot SecureAnywhere Mobile Protection - MITM SSL Certificate Vulnerability
  • From: David Coomber
• JSPMySQL Administrador CSRF & XSS Vulnerabilities
  • From: apparitionsec
• [SECURITY] [DSA 3353-1] openslp-dfsg security update
  • From: Alessandro Ghedini
• NETGEAR Wireless Management System - Authentication Bypass and Privilege Escalation.
  • From: Elliott Lewis
• [CVE-2015-3623] Qlikview blind XXE Security Vulnerability
  • From: alex_haynes
• Re: Oracle Hyperion password disclosure...
  • From: jeff . kayser
• [SECURITY] [DSA 3354-1] spice security update
  • From: Salvatore Bonaccorso
• Defense in depth -- the Microsoft way (part 33): arbitrary code execution (and UAC bypass) via RegEdit.exe
  • From: Stefan Kanthak
• Re: Integer overflow in .NET Framework System.DirectoryServices.Protocols.Utility class
  • From: Securify B.V.
• [security bulletin] HPSBOV03506 rev.1 - TCP/IP Services for OpenVMS running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• ESA-2015-140: RSA® Identity Management & Governance Multiple Cross-Site Scripting Vulnerabilities
  • From: Security Alert
• ESA-2015-110: EMC Documentum Thumbnail Server Directory Traversal Vulnerability
  • From: Security Alert
• [ERPSCAN-15-014] SAP Mobile Platform 3 – XXE in Add Repository
  • From: ERPScan inc
• [ERPSCAN-15-015] SAP NetWeaver AS ABAP– Hardcoded Credentials
  • From: ERPScan inc
• [ERPSCAN-15-016] SAP NetWeaver – Hardcoded credentials
  • From: ERPScan inc
• [security bulletin] HPSBOV03505 rev.1 - TCP/IP Services for OpenVMS running NTP, Remote Code Execution, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBGN03504 rev.1 - HP UCMDB, Local Disclosure of Sensitive Information
  • From: security-alert
• Synology Video Station command injection and multiple SQL injection vulnerabilities
  • From: Securify B.V.
• Multiple Cross-Site Scripting vulnerabilities in Synology Download Station
  • From: Securify B.V.
• [SECURITY] [DSA 3355-1] libvdpau security update
  • From: Alessandro Ghedini
• DataTables Security Advisory - XSS Vulnerability - CVE-2015-6584
  • From: Onur Yilmaz
• Re: Defense in depth -- the Microsoft way (part 33): arbitrary code execution (and UAC bypass) via RegEdit.exe
  • From: Stefan Kanthak
• Security advisory for Bugzilla 5.0, 4.4.9, and 4.2.14
  • From: dkl
• Security Advisory for Bugzilla 5.0.1, 4.4.10 and 4.2.15
  • From: LpSolit
• Yahoo Bug Bounty #32 - Cross Site Request Forgery bulkImport Web Vulnerability
  • From: Vulnerability Lab
• Shopify Bug Bounty #8 - (FilePath) Persistent Vulnerability
  • From: Vulnerability Lab
• PayPal Inc - Security Approval & 2FA Session Auth Bypass (API) Vulnerability
  • From: Vulnerability Lab
• Magento Bug Bounty #19 - Persistent Filename Vulnerability
  • From: Vulnerability Lab
• [KIS-2015-04] Magento <= 1.9.2 (catalogProductCreate) Autoloaded File Inclusion Vulnerability
  • From: Egidio Romano
• [security bulletin] HPSBHF03408 rev.2 - HP PCs with HP lt4112 LTE/HSPA+ Gobi 4G Module, Remote Execution of Arbitrary Code
  • From: security-alert
• IKEView.exe Fox beta 1 Stack Buffer Overflow
  • From: apparitionsec
• [SECURITY] [DSA 3356-1] openldap security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3357-1] vzctl security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3359-1] virtualbox security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3358-1] php5 security update
  • From: Salvatore Bonaccorso
• [CVE-2015-5956] Typo3 Core sanitizeLocalUrl() Non-Persistent Cross-Site Scripting
  • From: Ahrens, Julien
• [security bulletin] HPSBMU03392 rev.2 - HP ArcSight Logger, Remote Authorization Bypass
  • From: security-alert
• IKEView.exe R60 Stack Buffer Overflow
  • From: apparitionsec
• Openfire 3.10.2 CSRF Vulnerabilities
  • From: apparitionsec
• Paypal Inc - Open Redirect Web Vulnerability
  • From: Vulnerability Lab
• [security bulletin] HPSBHF03509 rev.1 - HP ThinPro and Smart Zero Core, Remote Denial of Service, Unauthorized Access to Data
  • From: security-alert
• [SECURITY] [DSA 3360-1] icu security update
  • From: GCS
• Microsoft Exchange Information Disclosure
  • From: apparitionsec
• Fwd: [CVE-2015-6940] Pentaho GA PDI & GA BA - Improper authentication allows unauthenticated access to configuration files
  • From: gregory draperi
• [security bulletin] HPSBGN03393 rev.2 - HP Operations Manager i, Remote Code Execution
  • From: security-alert
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Prime Collaboration Assurance
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco TelePresence Server Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• APPLE-SA-2015-09-16-1 iOS 9
  • From: Apple Product Security
• APPLE-SA-2015-09-16-2 Xcode 7.0
  • From: Apple Product Security
• APPLE-SA-2015-09-16-3 iTunes 12.3
  • From: Apple Product Security
• Apple Safari FTP PASV manipulation vulnerability (CVE-2015-5912)
  • From: Amit Klein
• APPLE-SA-2015-09-16-4 OS X Server 5.0.3
  • From: Apple Product Security
• [security bulletin] HPSBST03418 rev.1 - HP P6000 Command View Software, Remote Disclosure of Information
  • From: security-alert
• KL-001-2015-005 : VBox Satellite Express Arbitrary Write Privilege Escalation
  • From: KoreLogic Disclosures
• [SECURITY] [DSA 3361-1] qemu security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3362-1] qemu-kvm security update
  • From: Salvatore Bonaccorso
• Defense in depth -- the Microsoft way (part 35): Windows Explorer ignores "Run as administrator" ...
  • From: Stefan Kanthak
• [SECURITY] [DSA 3363-1] owncloud-client security update
  • From: Luciano Bello
• SAP Netwaver - XML External Entity Injection
  • From: Lukasz Miedzinski
• CVE-2015-5372 SAML SP Authentication Bypass in nevisAuth
  • From: Antoine Neuenschwander
• Advisory: Insufficient Parameter Sanitization in login.live.com (Microsoft)
  • From: securityresearch
• Jasig CAS server vulnerabilities
  • From: Antoni Klajn
• APPLE-SA-2015-09-21-1 watchOS 2
  • From: Apple Product Security
• [SECURITY] [DSA 3364-1] linux security update
  • From: Ben Hutchings
• Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability
  • From: Vulnerability Lab
• UDID v1.0 iOS - Persistent Mail Encode Vulnerability
  • From: Vulnerability Lab
• [security bulletin] HPSBUX03511 SSRT102248 rev.1 - HP-UX BIND service running named, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBGN03391 rev.1 - HP Universal CMDB Foundation, Discovery, Configuration Manager, and CMDB Browser running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• Cisco AnyConnect elevation of privileges via DLL side loading
  • From: Securify B.V.
• [slackware-security] mozilla-firefox (SSA:2015-265-01)
  • From: Slackware Security Team
• Open-Xchange Security Advisory 2015-09-23
  • From: Martin Heiland
• Reflected Cross-Site Scripting (XSS) in iTop
  • From: High-Tech Bridge Security Research
• Flowdock API Bug Bounty #1 - (Description) Persistent Web Vulnerability
  • From: Vulnerability Lab
• WiFi Drive CR v1.0 iOS - Persistent Filename Dir List Vulnerability
  • From: Vulnerability Lab
• UltraEdit v22.20 - Buffer Overflow Vulnerability
  • From: Vulnerability Lab
• Cisco Security Advisory: Cisco IOS and IOS XE Software IPv6 First Hop Security Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS and IOS XE Software SSH Version 2 RSA-Based User Authentication Bypass Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS XE Software Network Address Translation Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• ESA-2015-142: RSA Archer® GRC Platform Multiple Vulnerabilities
  • From: Security Alert
• [SECURITY] [DSA 3365-1] iceweasel security update
  • From: Moritz Muehlenhoff
• Cisco AnyConnect elevation of privileges via DMG install script
  • From: Securify B.V.
• [SECURITY] [DSA 3366-1] rpcbind security update
  • From: Salvatore Bonaccorso
• BMC-2015-0005: File inclusion vulnerability in "BIRT Viewer" servlet used in BMC Remedy AR Reporting
  • From: appsec
• BMC-2015-0006: File inclusion vulnerability in "BIRT Engine" servlet used in BMC Remedy AR Reporting
  • From: appsec
• [SECURITY] [DSA 3367-1] wireshark security update
  • From: Moritz Muehlenhoff
• Re: CVE-2015-5204: HTTP header injection vulnerability in Apache Cordova File Transfer Plugin for Android
  • From: Shazron
• FortiManager v5.2.2 Multiple XSS Vulnerabilities
  • From: apparitionsec
• Insecure application-coupling in Good Authentication Delegation [MZ-15-03]
  • From: modzero
• CVE-2015-5076 - Vulnerability title: Reflective XSS In X2Engine Inc. X2Engine
  • From: Portcullis Advisories
• CVE-2015-5074 - Arbitrary File Upload In X2Engine Inc. X2Engine
  • From: Portcullis Advisories
• CVE-2015-5075 - Cross-Site Request Forgery In X2Engine Inc. X2Engine
  • From: Portcullis Advisories
• [SECURITY] [DSA 3368-1] cyrus-sasl2 security update
  • From: Salvatore Bonaccorso
• [security bulletin] HPSBHF03513 rev.1 - HP PCs and Workstations running Windows and Linux with NVidia Graphics Driver, Local Denial of Service (DoS), Elevation of Privilege
  • From: security-alert
• Git-1.9.5 ssh-agent.exe Buffer Overflow
  • From: apparitionsec
• CVE-2015-7319 - SQL Injection in Appointment Booking Calendar 1.1.7 WordPress plugin
  • From: ibemed
• CVE-2015-7320 - Multiple Reflective XSS in Appointment Booking Calendar 1.1.7 WordPress plugin
  • From: ibemed
• Subject mail: CVE-2015-7320 - Multiple Reflective XSS in Appointment Booking Calendar 1.1.7 WordPress plugin
  • From: ibemed
• Git-1.9.5 ssh-agent.exe Buffer Overflow
  • From: apparitionsec
• My.WiFi USB Drive v1.0 iOS - File Include Vulnerability
  • From: Vulnerability Lab
• Flowdock API Bug Bounty #3 - (Invite) Persistent Web Vulnerability
  • From: Vulnerability Lab
• WinRAR SFX v5.21 - Remote Code Execution Vulnerability
  • From: Vulnerability Lab
• NodeBB v0.8.2 - Client Side Cross Site Web Vulnerability
  • From: Vulnerability Lab
• Photos in Wifi v1.0.1 iOS - Arbitrary File Upload Vulnerability
  • From: Vulnerability Lab
• IconLover v5.4.5 - Stack Buffer Overflow Vulnerability
  • From: Vulnerability Lab
• Vtiger CRM Authenticated Remote Code Execution (CVE-2015-6000)
  • From: Benjamin Daniel Mussler
• Remote privesc and RCE in Kaseya Virtual System Administrator
  • From: Pedro Ribeiro
• CVE-2015-3938 Remote Permanent LoV (Loss of View) in Mitsubishi Melsec FX3G-24M PLC
  • From: Ralf Spenneberg (OpenSource Security)
• ESA-2015-152: RSA Web Threat Detection Multiple Vulnerabilities
  • From: Security Alert
• ESA-2015-151: RSA® OneStep Path Traversal Vulnerability
  • From: Security Alert
• Re: CVE-2015-3938 Remote Permanent LoV (Loss of View) in Mitsubishi Melsec FX3G-24M PLC
  • From: Ralf Spenneberg
• CVE-2015-7392 Heap overflow in Freeswitch json parser < 1.6.2 & < 1.4.23
  • From: Marcello Duarte
• FreeBSD Security Advisory FreeBSD-SA-15:24.rpcbind
  • From: FreeBSD Security Advisories
• Re: WinRAR SFX v5.21 - Remote Code Execution Vulnerability
  • From: dev
• RE: WinRAR SFX v5.21 - Remote Code Execution Vulnerability
  • From: Popovici, Alejo (LATCO - Buenos Aires)
• Re: WinRAR SFX v5.21 - Remote Code Execution Vulnerability
  • From: Eugene Roshal
• Apache James Server 2.3.2 security vulnerability fixed
  • From: Eric Charles