Mail Index

• Thread Index

• Cisco Security Advisory: Cisco WebEx Meetings Player Arbitrary Code Execution
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Small Business 220 Series Smart Plus Switches SNMP Unauthorized Access Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Small Business SPA3x/5x Series Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• FormatFactory 3.9.0 - (.task) Stack Overflow Vulnerability
  • From: Vulnerability Lab
• Google Nexus 5X Bootloader Unauthorized Memory Dumping via USB
  • From: Roee Hay
• [SECURITY] [DSA 3659-1] linux security update
  • From: Salvatore Bonaccorso
• Unauthenticated Arbitrary Directory Dump in BMC BladeLogic Server Automation
  • From: ZeroDay
• [SECURITY] [DSA 3661-1] charybdis security update
  • From: Moritz Muehlenhoff
• [CVE-2016-6484] Infoblox Network Automation CRLF Injection/ HTTP splitting
  • From: alex_haynes
• Infoblox Cross-site scripting vulnerabilities
  • From: alex_haynes
• CVE-2016-6920 ffmpeg exr file Heap Overflow
  • From: unlimitsec
• CVE-2016-4264 Adobe ColdFusion <= 11 XXE Vulnerability
  • From: Dawid Golunski
• Picosmos Shows v1.6.0 - Stack Buffer Overflow Vulnerability
  • From: Vulnerability Lab
• PHPHolidays CMS v3.00.50 - Cross Site Scripting Web Vulnerability
  • From: Vulnerability Lab
• [slackware-security] php (SSA:2016-252-01)
  • From: Slackware Security Team
• AST-2016-007: RTP Resource Exhaustion
  • From: Asterisk Security Team
• Open-Xchange Security Advisory 2016-09-13
  • From: Martin Heiland
• Open-Xchange Security Advisory 2016-09-13 (2)
  • From: Martin Heiland
• Multiple DoS vulnerabilities in libosip2-4.1.0
  • From: bshastry
• [ANNOUNCE][CVE-2016-6802] Apache Shiro 1.3.2 released
  • From: Brian Demers
• ESA-2016-104: EMC ViPR SRM Multiple Vulnerabilities
  • From: EMC Product Security Response Center
• ESA-2016-108: EMC Documentum D2 Authentication Bypass Vulnerability
  • From: EMC Product Security Response Center
• [security bulletin] HPSBGN03572 rev.1 - HPE Performance Center, Remote User Validation Failure
  • From: security-alert
• [security bulletin] HPSBST03640 rev.1 - HP XP7 Command View Advance Edition Suite (CVAE) using Replication Manager (RepMgr) and Device Manager (DevMgr), Local Access Restriction Bypass
  • From: security-alert
• [SECURITY] [DSA 3666-1] mysql-5.5 security update
  • From: Salvatore Bonaccorso
• APPLE-SA-2016-09-14-1 iOS 10.0.1
  • From: Apple Product Security
• Insecure transmission of data in Android applications developed with Adobe AIR [CVE-2016-6936]
  • From: research
• Cisco EPC 3925 Multiple Vulnerabilities
  • From: msg
• ESA-2016-094: RSA BSAFE® Micro Edition Suite Multiple Vulnerabilities
  • From: EMC Product Security Response Center
• [SECURITY] [DSA 3669-1] tomcat7 security update
  • From: Moritz Muehlenhoff
• [slackware-security] curl (SSA:2016-259-01)
  • From: Slackware Security Team
• [SECURITY] CVE-2016-5017: Buffer overflow vulnerability in ZooKeeper C cli shell
  • From: Flavio Junqueira
• [SECURITY] CVE-2016-5017: Buffer overflow vulnerability in ZooKeeper C cli shell
  • From: Flavio Junqueira
• Call for Papers - WorldCIST'17 - 5th World Conference on Information Systems and Technologies (Published by Springer)
  • From: ML
• ESA-2016-065: EMC Avamar Data Store and Avamar Virtual Edition Multiple Vulnerabilities
  • From: EMC Product Security Response Center
• ESA-2016-096: EMC Celerra, VNX1, VNX2 and VNXe SMB NTLM Authentication Weak Nonce Vulnerability
  • From: EMC Product Security Response Center
• ESA-2016-093: RSA® Adaptive Authentication (On-Premise) Cross-Site Scripting Vulnerability
  • From: EMC Product Security Response Center
• APPLE-SA-2016-09-20-2 Safari 10
  • From: Apple Product Security
• APPLE-SA-2016-09-20-3 iOS 10
  • From: Apple Product Security
• APPLE-SA-2016-09-20-4 macOS Server 5.2
  • From: Apple Product Security
• APPLE-SA-2016-09-20-5 watchOS 3
  • From: Apple Product Security
• APPLE-SA-2016-09-20-6 tvOS 10
  • From: Apple Product Security
• Cisco Security Advisory: Cisco Cloud Services Platform 2100 Command Injection Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Cloud Services Platform 2100 Remote Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 3672-1] irssi security update
  • From: Salvatore Bonaccorso
• [slackware-security] pidgin (SSA:2016-265-01)
  • From: Slackware Security Team
• [security bulletin] HPSBGN03645 rev.2 - HPE Helion OpenStack Glance, Remote Access Restriction Bypass, Unauthorized Access
  • From: security-alert
• Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla
  • From: Larry W. Cashdollar
• [security bulletin] HPSBHF03646 rev.1 - HPE Comware 7 (CW7) Network Products running NTP, Multiple Remote Vulnerabilities
  • From: security-alert
• [slackware-security] irssi (SSA:2016-265-03)
  • From: Slackware Security Team
• IE11 is not following CORS specification for local files
  • From: Ricardo Iramar dos Santos
• Fwd: BT Wifi Extenders - Cross Site Scripting leading to disclosure of PSK
  • From: Jamie R
• [SECURITY] [DSA 3673-1] openssl security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3674-1] firefox-esr security update
  • From: Moritz Muehlenhoff
• Recon Europe 2017 Call For Papers - January 27 - 29, 2017 - Brussels, Belgium
  • From: cfpbrussels2017
• ESA-2016-097: RSA Identity Governance and Lifecycle Information Disclosure Vulnerability
  • From: EMC Product Security Response Center
• [slackware-security] php (SSA:2016-267-01)
  • From: Slackware Security Team
• OS-S Security Advisory 2016-19: Epson WorkForce multi-function printers do not use signed firmware images and allow unauthorized malicious firmware-updates (CVSS 10)
  • From: Ralf Spenneberg
• [security bulletin] HPSBGN03648 rev.1 - HPE LoadRunner and Performance Center, Remote Denial of Service (DoS)
  • From: security-alert
• [slackware-security] openssl (SSA:2016-270-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 3678-1] python-django security update
  • From: Florian Weimer
• [security bulletin] HPSBHF03655 rev.1 - HPE iMC PLAT Network Products running Apache Axis2, Multiple Remote Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBHF03654 rev.1 - HPE iMC PLAT Network Products using SSL/TLS, Multiple Remote Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBHF03652 rev.1 - HPE iMC PLAT Network Products running Apache Commons FileUpload, Remote Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 3679-1] jackrabbit security update
  • From: Florian Weimer
• ESA-2016-127: EMC ViPR SRM Stored Cross-Site Scripting Vulnerability
  • From: EMC Product Security Response Center
• [SECURITY] [DSA 3680-1] bind9 security update
  • From: Florian Weimer
• [slackware-security] bind (SSA:2016-271-01)
  • From: Slackware Security Team
• Cisco Security Advisory: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016
  • From: Cisco Systems Product Security Incident Response Team
• Multiple vulnerabilities found in the Dlink DWR-932B (backdoor, backdoor accounts, weak WPS, RCE ...)
  • From: Pierre Kim
• [REVIVE-SA-2016-002] Revive Adserver - Multiple vulnerabilities
  • From: Matteo Beccati
• Cisco Security Advisory: Cisco IOS and IOS XE Software AAA Login Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Common Industrial Protocol Request Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS XE Software NAT Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Fragmentation Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS and IOS XE Software Multicast Routing Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS and IOS XE Software Smart Install Memory Leak Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [security bulletin] HPSBGN03650 rev.1 - HPE Network Automation Software, Local Arbitrary File Modification
  • From: security-alert
• Persistent XSS in Abus Security Center - CVSS 8.0
  • From: Tim Schughart
• Re: CVE-2016-5019: MyFaces Trinidad view state deserialization security vulnerability
  • From: Mike Kienenberger
• [SYSS-2016-060] Logitech M520 - Insufficient Verification of Data Authenticity (CWE-345)
  • From: matthias . deeg
• Multiple exposures in Sophos UTM
  • From: Tim Schughart