Mail Index

• Thread Index

• Advisory for Confluence Server Local File Disclosure Vulnerability (CVE-2019-3394)
  • From: Ming Chang
• [SECURITY] [DSA 4511-1] nghttp2 security update
  • From: Moritz Muehlenhoff
• Wolters Kluwer TeamMate+ Cross-Site Request Forgery (CSRF) vulnerability
  • From: bhdresh
• [SECURITY] [DSA 4512-1] qemu security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 4513-1] samba security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 4514-1] varnish security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 4515-1] webkit2gtk security update
  • From: Moritz Mühlenhoff
• SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X
  • From: SEC Consult Vulnerability Lab
• [slackware-security] seamonkey (SSA:2019-247-01)
  • From: Slackware Security Team
• AST-2019-004: Crash when negotiating for T.38 with a declined stream
  • From: Asterisk Security Team
• AST-2019-005: Remote Crash Vulnerability in audio transcoding
  • From: Asterisk Security Team
• [SECURITY] [DSA 4516-1] firefox-esr security update
  • From: Moritz Muehlenhoff
• Windows NTFS / Privileged File Access Enumeration
  • From: apparitionsec
• [SECURITY] [DSA 4517-1] exim4 security update
  • From: Moritz Muehlenhoff
• CA20190904-01: Security Notice for CA Common Services Distributed Intelligence Architecture (DIA)
  • From: Kevin Kotas
• [SECURITY] [DSA 4518-1] ghostscript security update
  • From: Salvatore Bonaccorso
• NtFileSins / Windows NTFS Privileged File Access Enumeration Tool
  • From: apparitionsec
• NtFileSins v2.1 Windows NTFS Privileged File Access Enumeration Tool
  • From: apparitionsec
• [SECURITY] [DSA 4519-1] libreoffice security update
  • From: Moritz Muehlenhoff
• Dabman & Imperial (i&d) Web Radio Devices - Undocumented Telnet Backdoor & Command Execution Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 4520-1] trafficserver security update
  • From: Moritz Muehlenhoff
• [CVE-2019-12516] SlickQuiz for Wordpress 1.3.7.1 "/wp-admin/admin.php?page=slickquiz-*" Multiple Authenticated SQL Injections
  • From: Info
• [SECURITY] [DSA 4521-1] docker.io security update
  • From: Moritz Muehlenhoff
• [CVE-2019-12517] SlickQuiz for Wordpress 1.3.7.1 "/wp-admin/admin.php?page=slickquiz" Multiple Stored XSS
  • From: Info
• [slackware-security] curl (SSA:2019-254-01)
  • From: Slackware Security Team
• [slackware-security] openssl (SSA:2019-254-03)
  • From: Slackware Security Team
• [slackware-security] mozilla-thunderbird (SSA:2019-254-02)
  • From: Slackware Security Team
• SEC Consult SA-20190912-0 :: Stored and reflected XSS vulnerabilities in LimeSurvey
  • From: SEC Consult Vulnerability Lab
• [SECURITY] [DSA 4522-1] faad2 security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 4523-1] thunderbird security update
  • From: Moritz Muehlenhoff
• [slackware-security] expat (SSA:2019-259-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 4524-1] dino-im security update
  • From: Moritz Muehlenhoff
• SEC Consult SA-20190918-0 :: Reflected Cross-Site Scripting (XSS) in Oracle Mojarra JSF
  • From: SEC Consult Vulnerability Lab
• [SECURITY] [DSA 4525-1] ibus security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 4528-1] bird security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 4527-1] php7.3 security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 4526-1] opendmarc security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 4530-1] expat security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 4529-1] php7.0 security update
  • From: Moritz Muehlenhoff
• Jira Service Desk Server and Jira Service Desk Data Center - URL path traversal allows information disclosure - CVE-2019-14994
  • From: Brian Adeloye
• [SECURITY] [DSA 4532-1] spip security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 4531-1] linux security update
  • From: Salvatore Bonaccorso
• Jira Security Advisory - 2019-09-18 - CVE-2019-15001
  • From: Atlassian
• Bitbucket Server security advisory 2019-09-18
  • From: Atlassian
• SEC Consult SA-20190926-0 :: Multiple SQL Injection vulnerabilities in eBrigade
  • From: SEC Consult Vulnerability Lab
• [slackware-security] mozilla-thunderbird (SSA:2019-268-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 4533-1] lemonldap-ng security update
  • From: Moritz Muehlenhoff
• APPLE-SA-2019-9-26-9 Safari 13.0.1
  • From: Apple Product Security
• APPLE-SA-2019-9-26-8 iOS 13.1 and iPadOS 13.1
  • From: Apple Product Security
• APPLE-SA-2019-9-26-7 Xcode 11.0
  • From: Apple Product Security
• APPLE-SA-2019-9-26-6 tvOS 13
  • From: Apple Product Security
• APPLE-SA-2019-9-26-3 iOS 13
  • From: Apple Product Security
• APPLE-SA-2019-9-26-2 macOS Mojave 10.14.6 Supplemental Update 2, Security Update 2019-005 High Sierra, Security Update 2019-005 Sierra
  • From: Apple Product Security
• APPLE-SA-2019-9-26-5 watchOS 6
  • From: Apple Product Security
• APPLE-SA-2019-9-26-1 iOS 12.4.2
  • From: Apple Product Security
• APPLE-SA-2019-9-26-4 Safari 13
  • From: Apple Product Security
• [SECURITY] [DSA 4538-1] wpa security update
  • From: Yves-Alexis Perez
• [SECURITY] [DSA 4537-1] file-roller security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 4536-1] exim4 security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 4535-1] e2fsprogs security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 4534-1] golang-1.11 security update
  • From: Moritz Muehlenhoff
• APPLE-SA-2019-9-27-1 iOS 13.1.1 and iPadOS 13.1.1
  • From: Apple Product Security